To perform a DNS amplification attack, follow the given steps:
- In order to understand how DNS amplification works, one can use a basic DNS query utility such as host, dig, or nslookup:
- By performing a request for all record types associated with a well-established domain, you will notice that some return a fairly sizable response:
- In the example provided, a request for all record types associated with the yahoo.com domain returns a response that includes seven A records, three AAAA records, five NS records, and three MX records. A DNS amplification attack's effectiveness is directly correlated to the size of the response. ...
