DDoS Attack Encyclopedia
Every attack type, and how we stop it
96 attack types, each with the mitigation capabilities that apply and our assessment of how well WEDOS Protection handles it. Filter by the network layer the attack targets, or by how far our coverage goes.
Attack layer
Can WEDOS Protection help?
ACK and PUSH ACK Flood
✅
This attack involves sending large amounts of ACK packets with PUSH flags to overwhelm the...
Layer 4 · Transport
ACK Flood
✅
Floods the target with TCP ACK packets to exhaust server resources.
Layer 4 · Transport
Amplification DDOS Attack
✅
Attack leverages open servers like DNS, NTP, or Memcached to amplify attack traffic...
Layer 4 · Transport
Apache Killer
✅
Exploits weaknesses in Apache servers by sending malicious HTTP range headers, leading to...
Layer 7 · Application
APDOS (Advanced Persistent DoS)
✅
A sophisticated, long-lasting DDoS attack targeting both application and infrastructure...
Multi-layer
ARP Poisoning
✅
Man-in-the-middle attack where the attacker spoofs ARP messages to intercept or manipulate...
Layer 2 · Data link
BlackNurse Attack
✅
A low-bandwidth ICMP flood attack that targets firewalls and routers, causing high CPU...
Layer 3 · Network
Clear channel assessment attack
⚠
Targets wireless communication channels by overloading their capacity, causing denial of...
Layer 2 · Data link
Crypcurrency attacks
✅
Exploits computing resources for unauthorized cryptocurrency mining, degrading server...
Layer 7 · Application
DNS Amplification
✅
An amplification attack using DNS servers to increase the volume of traffic directed at...
Layer 4 · Transport
DNS Query Flood
✅
A flood of DNS queries aimed at overloading DNS servers and disrupting service.
Layer 7 · Application
Encrypted Attack
✅
Uses encrypted packets to bypass detection, making it harder to identify and mitigate.
Layer 7 · Application
Encrypted DDoS Attack
✅
Floods the target with encrypted traffic, exhausting decryption resources.
Layer 7 · Application
Excessive VERB
✅
Exploits unusual HTTP verbs to confuse or overload servers.
Layer 7 · Application
Excessive VERB Single Session
✅
Floods the server with a single session using uncommon HTTP verbs, targeting...
Layer 7 · Application
Fake Session
✅
Generates fake application sessions to overwhelm server resources.
Layer 7 · Application
Faulty Application Attack
✅
Exploits vulnerabilities in applications to cause resource exhaustion or crashes.
Layer 7 · Application
Fork Bomb
❌
A malicious script that continuously spawns processes to exhaust system resources.
Host & other
Fraggle Attack
✅
An amplification attack using UDP packets to target specific ports and flood the victim's...
Layer 4 · Transport
Fragmentation Attack
✅
Sends fragmented packets to overwhelm the server's ability to reassemble them, leading to...
Layer 3 · Network
Fragmented HTTP Flood
✅
Sends fragmented HTTP requests to exhaust server resources by forcing reassembly.
Layer 7 · Application
Fragmented UDP Flood
✅
Uses fragmented UDP packets to overwhelm the server's reassembly processes.
Layer 4 · Transport
Hit and Run DDOS
✅
Launches short, intense bursts of traffic to evade detection and overwhelm the target.
Multi-layer
HOIC (High Orbit Ion Cannon)
✅
A popular DDoS tool generating high volumes of HTTP requests to overwhelm the target.
Layer 7 · Application
Host TCP Traffic
✅
A DDoS attack targeting TCP services by exhausting resources with massive connection...
Layer 4 · Transport
HTTP Flood
✅
Overloads web servers with HTTP requests, making legitimate traffic unserviceable.
Layer 7 · Application
HTTP GET Flood
✅
Targets web servers by sending repeated GET requests to exhaust server resources.
Layer 7 · Application
HTTP POST Flood
✅
Floods web servers with HTTP POST requests, overwhelming processing capabilities.
Layer 7 · Application
Challenge Collapsar (CC) attack
✅
Floods servers with HTTP/HTTPS requests that resemble legitimate traffic, exhausting...
Layer 7 · Application
CharGEN Flood
✅
An amplification attack leveraging the CharGEN protocol to generate massive traffic.
Layer 4 · Transport
ICMP Flood
✅
Overwhelms a target with ICMP echo requests, consuming bandwidth and resources.
Layer 3 · Network
ICMP Fragmented Flood
✅
Uses fragmented ICMP packets to overwhelm the target's reassembly processes.
Layer 3 · Network
ICMP Misuse
✅
Exploits ICMP messages for reconnaissance or overwhelming the target with traffic.
Layer 3 · Network
IGMP Flood
✅
Floods the target with IGMP packets, exhausting network resources.
Layer 3 · Network
IP Fragmentation Attack
✅
Overwhelms the server with fragmented IP packets, consuming processing resources.
Layer 3 · Network
IP Null Attack
✅
Sends packets with no set protocol field, bypassing some security measures.
Layer 3 · Network
Layer 3 Attacks
✅
Targets the network layer by overwhelming routing capabilities with massive traffic.
Layer 3 · Network
LOIC (Low Orbit Ion Cannon)
✅
A tool used to generate high volumes of traffic to flood a target server.
Multi-layer
Loop DDOS
⚠
Creates a feedback loop by exploiting vulnerabilities, causing a system to attack itself.
Layer 4 · Transport
Low and Slow Attack
✅
Sends very slow traffic to hold server connections open, exhausting resources.
Layer 7 · Application
MAC Flooding
✅
Overloads a network switch with MAC addresses, causing it to act as a hub and degrade...
Layer 2 · Data link
Markov-Modulated DDoS
✅
Uses a stochastic model to vary attack traffic, making detection difficult.
Multi-layer
Media Data Flood
✅
Floods a server with multimedia data requests, consuming bandwidth and processing power.
Layer 7 · Application
Memcached DDoS Attack
✅
Leverages Memcached servers to amplify traffic directed at the target.
Layer 4 · Transport
Mirai Botnet
✅
Uses a botnet of IoT devices to generate massive traffic and overwhelm the target.
Multi-layer
MITM Attack
✅
Intercepts communication between two parties, allowing the attacker to eavesdrop or...
Host & other
Miuse Application Attack
✅
Exploits application-level weaknesses to degrade or disrupt services.
Layer 7 · Application
MS SQL Attack
✅
Targets Microsoft SQL servers to exploit vulnerabilities or overload the service.
Layer 7 · Application
Multi-vector Attack
✅
Combines multiple DDoS attack types to overwhelm the target.
Multi-layer
Multiple VERB Single Request
✅
Uses multiple HTTP methods in a single request to confuse or exploit servers.
Layer 7 · Application
MyDOOM
✅
A worm-like attack targeting email servers to spread malicious payloads.
Layer 7 · Application
Naptha Attacks
✅
Holds open multiple TCP connections, exhausting server resources.
Layer 4 · Transport
Non-Spoofed UDP Flood
✅
Overwhelms a target server with non-spoofed UDP packets, consuming bandwidth and...
Layer 4 · Transport
NTP Amplification
✅
Leverages NTP servers to amplify traffic and overwhelm the target.
Layer 4 · Transport
Peer-to-Peer Attack
✅
Exploits peer-to-peer networks to direct traffic at a target.
Layer 7 · Application
Permanent DoS Attack
⚠
Targets hardware or software vulnerabilities to cause irreversible damage.
Host & other
Ping Flood
✅
Floods the target with ICMP Echo Request packets, exhausting resources.
Layer 3 · Network
Ping of Death
✅
Sends oversized ping packets to crash or freeze the target system.
Layer 3 · Network
Pulse Wave DDoS Attack
✅
Combines bursts of traffic with low intervals to bypass detection and overwhelm the...
Multi-layer
QUIC Flood Attack
✅
Floods the target using QUIC protocol packets to exhaust resources.
Layer 4 · Transport
Random Recursive GET Flood
✅
Generates random recursive GET requests to exhaust server processing power.
Layer 7 · Application
Ransom DDoS Attack
✅
Combines a ransom note with DDoS attacks to extort money from the victim.
Multi-layer
Recursive HTTP GET Flood
✅
Overwhelms the target with recursive HTTP GET requests, exhausting server resources.
Layer 7 · Application
RST Flood
✅
Floods the target with TCP RST packets to terminate legitimate connections.
Layer 4 · Transport
RUDY (R-U-Dead-Yet?)
✅
Targets web servers by holding open HTTP POST connections to exhaust resources.
Layer 7 · Application
SACK Panic
⚠
Exploits TCP Selective Acknowledgment (SACK) vulnerabilities to crash the target.
Layer 4 · Transport
Shrew Attack
✅
Exploits TCP retransmission timeouts to create short bursts of traffic, disrupting...
Layer 4 · Transport
Single Request HTTP Flood
✅
Overwhelms servers with repeated single HTTP requests, depleting server resources.
Layer 7 · Application
Single Session HTTP Flood
✅
Uses a single session to send repeated HTTP requests, overwhelming the server.
Layer 7 · Application
SIP Flood
✅
Overwhelms SIP servers with excessive requests, disrupting VoIP services.
Layer 7 · Application
SIP Register Flood
✅
Floods SIP registration requests, overloading VoIP servers.
Layer 7 · Application
Slow Read Attack
✅
Reads server responses very slowly to hold connections open, exhausting resources.
Layer 7 · Application
Slowdroid
✅
Targets servers by slowly sending data packets, keeping connections open and consuming...
Layer 7 · Application
Slowloris
✅
Holds server connections open by sending partial HTTP requests to exhaust server...
Layer 7 · Application
Smurf Attack
✅
An amplification attack using ICMP to broadcast traffic to all devices on a network,...
Layer 3 · Network
SNMP Amplification
✅
Leverages SNMP servers to amplify attack traffic directed at the target.
Layer 4 · Transport
SNMP Reflection
✅
Exploits SNMP servers to reflect and amplify traffic towards the target.
Layer 4 · Transport
Sophisticated Web Attack Tools
✅
Uses advanced tools to generate web-based attacks like flooding, scraping, or abuse of...
Layer 7 · Application
SQL Injection Attack
✅
Injects malicious SQL statements to manipulate or exploit databases.
Layer 7 · Application
SSDP Amplification
✅
Leverages SSDP devices to amplify traffic and overwhelm the target.
Layer 4 · Transport
SSL Flood
✅
Floods the target with SSL/TLS handshake requests, consuming server resources.
Layer 7 · Application
SYN Flood
✅
Sends a large number of SYN packets to exhaust server resources.
Layer 4 · Transport
Synonymous IP Attack
✅
Floods the target with packets from multiple IPs appearing as one, overwhelming the...
Layer 3 · Network
TCP Null Attack
✅
Sends packets with no flags set in the TCP header, bypassing some firewalls and IDS...
Layer 4 · Transport
TCP RST Flood
✅
Floods the target with TCP RST packets to disrupt active connections.
Layer 4 · Transport
Teardrop Attack
✅
Sends fragmented packets that cannot be reassembled properly, causing crashes.
Layer 3 · Network
TOS Flood
✅
Exploits Type of Service (TOS) fields in packets to overload network devices.
Layer 3 · Network
TTL Expiry Attack
✅
Sends packets with low TTL values to overload routers with processing requests.
Layer 3 · Network
Typosquatting
✅
Exploits domain typos by redirecting users to malicious websites, potentially causing data...
Host & other
UDP Flood
✅
Overwhelms the target with high volumes of UDP packets, exhausting bandwidth and server...
Layer 4 · Transport
UPnP Attack
✅
Exploits UPnP vulnerabilities to gain unauthorized access or reflect amplified traffic.
Layer 4 · Transport
VOIP Flood
✅
Floods SIP/VoIP servers with excessive requests, causing call disruptions and server...
Layer 7 · Application
Web DDoS Tsunami Attack
✅
Floods web servers with massive waves of HTTP requests to exhaust server resources.
Layer 7 · Application
XML-RPC Flood
✅
Exploits the XML-RPC interface on web servers to send excessive requests, causing resource...
Layer 7 · Application
Xor DDoS
✅
A botnet-based attack that uses XOR encryption to send malicious traffic to overwhelm the...
Multi-layer
Zero Day DDoS Attack
✅
Targets unknown vulnerabilities, making detection and mitigation challenging.
Multi-layer
No attack type matches those filters.