module

NTP Mode 7 PEER_LIST_SUM DoS Scanner

Disclosed
Aug 25, 2014
Created
May 30, 2018

Description

This module identifies NTP servers which permit "PEER_LIST_SUM" queries and
return responses that are larger in size or greater in quantity than
the request, allowing remote attackers to cause a distributed, reflected
denial of service (aka, "DRDoS" or traffic amplification) via spoofed
requests.

Author

Jon Hart jon_hart@rapid7.com

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':


msf > use auxiliary/scanner/ntp/ntp_peer_list_sum_dos
msf auxiliary(ntp_peer_list_sum_dos) > show actions
...actions...
msf auxiliary(ntp_peer_list_sum_dos) > set ACTION < action-name >
msf auxiliary(ntp_peer_list_sum_dos) > show options
...show and set options...
msf auxiliary(ntp_peer_list_sum_dos) > run

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.