NTP DDOS

Converting a DNS DDOS program to a NTP DDOS program by changing a few lines of code… Mark Osborne shows us how!

just finished my new book: “Cyber Attack, CyberCrime, CyberWarfare – CyberComplacency”. In the book I covered the latest DDOS attacks including DNS amplification and reflection attacks, how to create them and the methods to defend against them. The most famous of these was the Spamhaus 300G attack, late in 2013.

One of the things that I clearly underline in my tome is that any protocol which may produce significantly more output from a relatively small unauthenticated input, could be a candidate for such an attack. As luck would have it, the universe conspired to prove me right and a new attack emerged just as my book went to print, the NTP amplification attack.