1

Is it possible nowadays to perform a Ping Flood, Ping Of Death, and Teardrop on local network?

According to this article, these three attack are useless and out of date. I'd like to test this on my local network.

I'm planning to create a VM with the latest Ubuntu release and low RAM resource (512 MB) to be running on my laptop.

So this will be a one-to-one attack; my host laptop will attack the victim VM (in the same laptop, but with low resources). I could even try multiple laptops attacking my victim VM.

How can I test these attacks?

1

These are all very old attacks. With the exception of a simple ping flood, you cannot even try to perform them using the latest version of Ubuntu, since it is not affected. You would need to download an old, unpatched copy of a vulnerable operating system such as Windows 95.

The Ping-of-Death involves sending a malformed ICMP request to a computer which crashes as a result. It is an actual DoS vulnerability leading to a crash, not a traditional bandwidth-based attack. It only affects very old systems that are vulnerable to it. In fact, the original was from 1997 and affected Windows 95 and several other contemporary systems. Any vulnerability in a system's networking stack that allows an ICMP request to crash the system could be categorized here.

A teardrop attack involves abusing IP fragmentation with oversized and overlapping payloads. When IP data is fragmented (usually in order to support routers that cannot handle large IP payloads), it contains information telling the destination system how to reassemble it. If this information is corrupt so that it specifies impossible overlap, it can cause old systems not designed to handle that to crash. Old operating systems such as, again, Windows 95 and very old Linux systems were vulnerable to this. Since then, such fragmentation-based attacks have stopped being relevant. Modern systems will gracefully handle improperly-delivered or corrupt IP fragments.

The only attack here which you can actually pull off is the ping flood (ICMP flood). This is a very simple attack involving nothing more than sending a flood of ICMP requests to the target. It only works if the attacking system has significantly more bandwidth than the victim, in which case it does nothing more than saturate the network and degrade service. This attack can be simulated using tools such as hping3. If you are performing this attack over a local network in a VM, you may need to artificially throttle the maximum network speed, since VM networking is so fast that you are unlikely to be able to generate ICMP requests at a high enough rate to cause denial of service.

  • How I can "artificially throttle the maximum network speed" ? Thank you. – Dark Cyber Aug 22 '18 at 1:47
  • @DarkCyber You will have to look for a tool that can do that. I am not aware of one for Windows in particular. They are usually called network QoS (Quality of Service) applications. – forest Aug 29 '18 at 0:57

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.