Shulou(Shulou.com)05/31 Report--

This article mainly shows you "what is the principle of SYN attacking SYN Attack". The content is simple and clear. I hope it can help you solve your doubts. Let me lead you to study and learn this article "what is the principle of SYN attacking SYN Attack?"

SYN attacks SYN Attack

SYN Attack is a DOS attack. It takes advantage of the loophole in the TCP protocol to attack the target so that it no longer responds to network requests. In the TCP protocol, a three-way handshake is required to establish an TCP connection. During the handshake, the client sends a TCP packet with the SYN flag to the server. The server then returns the SYN+ACK packet to the client. Finally, the client sends a packet of ACK to establish a connection.

After the server sends the SYN+ACK message, it puts the user's request in a queue and waits for the client's ACK packet. On the other hand, there is an upper limit on the number of requests saved in the queue, and if the upper limit is reached, the server stops accepting new TCP connection requests. If the client sends a SYN message and no longer responds, the server will wait 30-120 seconds to abandon the request.

There is a security breach here. If the client keeps sending SYN packets and does not send response ACK packets, it is easy to cause the server's request queue to reach the upper limit, thus unable to respond to other client requests, resulting in a denial of service. Many of the tools provided by Kali Linux implement this feature, such as hping3.

Prevent errors: raise the upper limit of the queue; shorten the server wait time; restrict IP access.

The above is all the contents of the article "what is the principle of SYN attacking SYN Attack?" Thank you for reading! I believe we all have a certain understanding, hope to share the content to help you, if you want to learn more knowledge, welcome to follow the industry information channel!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.