☠️

DNS Attack Patterns: Cache Poisoning & Amplification

Complex

Free preview · 2 of 5 steps

DNS attacks: the internet's address book under attack

DNS translates human-readable names to IP addresses — which makes it a high-value attack target. Poisoning a resolver's cache redirects all its clients to attacker-controlled servers. DDoS amplification weaponizes DNS's UDP response size imbalance.

Understanding these attacks explains why DNSSEC, source port randomization, DoH/DoT, and response rate limiting exist.

Packets in motion — click to inspect:

1 / 2

Space to play/pause · ← → to step