DHCP Stravation Attack

DHCP STARVATION ATTACK

Hey guys,
Back again with another blog
Today we are going to learn an interesting topic DHCP Starvation Attack
Before getting into attack phase, lets learn a little about what is DHCP and DHCP server and all.
What is DHCP?
DHCP – Dynamic Host Configuration Protocol is the responsible protocol to assign IP addresses also known as Logical Addresses of the machines we use and other information like Subnet mask, Default gateway in a network.
What is DHCP Server?
DHCP Server takes the role of assigning the IP addresses of every network.
How it is Working?
Normally DHCP Server provides unique IP address to the machine that connects to the router. In commercial routers like home routers DHCP Server is in Router itself. In Enterprise Scenario, Organizations use individual computer as DHCP Server.
DHCP Operation:
When a new device is getting connected to the router(DHCP Client requests IP address ) DHCP server assigns IP to communicate on the network. This happens when DHCP Client sends DHCPDISCOVER request.
DHCP Starvation Attack:
A Modest attack vector DHCP Starvation attack happens when attacker sends large number of DHCP request packets with spoofed MAC Addresses. Multiple broadcast of Discover request allots the available IP addresses and exhausts the full range of IP addresses. So when a real user want to connect with the router, automatically the request will be denied because all the available IP addresses were exhausted by the attack. Simply we can say it leads to a DOS attack in router.
Live Attack Phase:
Requirements:
Kali Linux Operating System
Yersinia Tool
Yersinia tool is an inbuilt tool in kali linux, infact it is an hidden tool, we need to install it with apt install yersinia command
we Have to launch yersinia graphical launcher with the command yersinia -G
Click on Ok in the alpha version notice pop up
Click on the launch attack option in the tool bar
we have to choose DHCP tab in choose protocol attack dialogue box.

Next we need to choose sending DISCOVER packet option in DHCP tab then click ok
You can notice increase in packets in the left tab along the side of DHCP Protocol. I tried disconnecting mobile from the network and reconnecting again but I can’t.
At this situation an attacker can start his Rogue DHCP Server so every client will be connected to the network through his DHCP Server so he can use it for malicious activities.
In yersinia itself we can configure our Rogue DHCP Server.
We can list the running attacks by choosing the button List Attacks in tool bar. we can stop the sending of packets in there.
We can defend this DHCP Starvation attack by several methods such as
  1. The 802.11 association process prevents MAC address spoofing.
  2. Verify DHCP Proxy is enabled on WLCs to prevent DHCP chaddr spoofing
  3. Enabling of DHCP Snooping can avoid DHCP Starvation attacks.
We can also perform DHCP starvation attack by using another tools also using DHCPig also.
We will be planning to do with that tool in upcoming blog post, stay with us learn a lot.
Thank you
See you in another blog.

Comments

Post a Comment

Popular posts from this blog

Cyber Security

Cyber Security Technology is evolving from day to day. It has come across a great change with changing time. With the advancement in technology also comes the burden of securing the information from being stolen. As the people are connected to each other via network whether it is for sharing information, searching purpose or any other while using devices like computers, mobile phones, laptops or any other digital devices. Data is all that matters when it comes to security. It is difficult to maintain the security of data by offline methods. As it is difficult to maintain the data in papers and they get erased by themselves or get destroyed. As in now time, cloud is a big platform where users can store their data on it. The great advantage of using it is that the data can be accessed and used anywhere and anytime by the desired user. This information includes some important credentials like bank passwords, card details, login ids and many more details. Thus it becomes important to
Read more

Digital Marketing, a changing game

Digital Marketing Today is the era of technology and this is the best time when all the people in this world are connected by a single entity through a single network. People have come closer to each other as the time passed. In the beginning it was just letters, then telephones came, now we have pocket phones. Which is the single entity that can lead to solutions to your every problem. Whether it is about your health, study, food, place or any other thing. The way of doing has also changed with the changing time. Man has come across a great era as the way of doing work has also changed. At present if you have to do business or you want to sell something the first thing we pick up is our mobile phones to check for the procedure. You can also start an online business, you have the right platform. The first thing to do business online is to make a website so you can show others your work or on social media by sharing your relevant content. And if you want to hold up to a high positi
Read more

How Custom Android App Development Is Helpful To Your Business

Image
  Android app development has slowly become the big cheese in the modern tech-savvy era, and there is no denying that android program development has become an essential component of the technological world and will be the backbone of every business enterprise. With the increase from the demand of customized Android applications for individual company and organizations, it is also vital to not just comply with the trend. Before deciding to create a customized program for your organization, you must know what the rage is all about and just how valuable can a customized Android app really be for your company. And when you're well versed concerning the relevance and importance of an android development services for your business, you can certainly go ahead with your design and development requirements for a totally personalized app. Here we share with you a few advantages of customized Android program for your enterprise. 1) Hiking efficiency- as we are talking about customize
Read more