Question

In which type of DoS attack, the attacker send a forged packet with the same source IP address and destination IP address to drive the target system crazy ?

• A. PoD attack
• B. ICMP flood attack
• C. Smurf IP attack
• D. Land attack

Answer 1

Answer:

D. Land attack

Teardrop Attack Overview

• A Teardrop attack is a type of Denial-of-Service (DoS) attack that exploits the way the internet protocol (IP) reassembles fragmented packets.

• The attacker sends a series of overlapping or misaligned IP fragments with sequential offset values to the target machine.

• When the victim's operating system attempts to reassemble these corrupted fragments, the system may crash, hang, or reboot because it cannot correctly calculate the packet length or handle the overlapping memory segments.

Technical Mechanics

• Fragmentation: Large data packets are broken into smaller fragments by routers to fit the Maximum Transmission Unit (MTU) of network paths.

• Reassembly: The destination device uses the Identification field and Fragment Offset in the IP header to put the pieces back together in the correct order.

• The Exploit: By intentionally crafting fragments that overlap (where the end of one fragment overlaps the start of another), the attacker forces the victim's TCP/IP stack to handle impossible buffer conditions.