GSLC · Question #384
John works as a professional Ethical Hacker. He is assigned a project to test the security of server. To accomplish this, he takes the following steps: - Instead of directly attacking the target…
The correct answer is A. Stacheldraht B. Trin00 C. TFN. Stacheldraht, Trin00, and TFN are classic DDoS attack frameworks that use a master-agent architecture to coordinate flood attacks across networks of compromised zombie machines.
Question
John works as a professional Ethical Hacker. He is assigned a project to test the security of server. To accomplish this, he takes the following steps:
- Instead of directly attacking the target computer, he first
identifies a less secure network named Infosecure that contains a network of 100 computers.
- He breaks this less secure network and takes control of all its
computers. After completing this step, he installs a DDoS attack tool on each computer of the Infosecure network.
- Finally, he uses all the computers of the less secure network to
carry out the DDoS attack on the we-are-secure server. Which of the following tools can John use to accomplish the task? Each correct answer represents a complete solution. Choose all that apply.
Options
- AStacheldraht
- BTrin00
- CTFN
- DBackOfficer Friendly
How the community answered
(67 responses)- A90% (60)
- D10% (7)
Why each option
Stacheldraht, Trin00, and TFN are classic DDoS attack frameworks that use a master-agent architecture to coordinate flood attacks across networks of compromised zombie machines.
Stacheldraht uses encrypted communications between its master controller and distributed agents and supports ICMP flood, UDP flood, TCP SYN flood, and Smurf attacks launched simultaneously from a botnet of compromised hosts.
Trin00 is one of the earliest DDoS frameworks, using a three-tier master-daemon architecture to coordinate UDP flood attacks across many compromised zombie hosts directed by a single attacker.
TFN (Tribe Flood Network) enables a single master to coordinate multiple DDoS attack vectors - including UDP flood, TCP SYN flood, ICMP echo flood, and Smurf attacks - across a large distributed network of agent-infected machines.
BackOfficer Friendly is a honeypot and intrusion detection tool designed to simulate vulnerable services and log unauthorized access attempts, making it a defensive tool rather than a DDoS attack framework.
Concept tested: DDoS attack tools and botnet handler-zombie architecture
Source: https://www.cisa.gov/sites/default/files/publications/DDoS%20Quick%20Guide.pdf
Topics
Community Discussion
No community discussion yet for this question.