Name the Attack From What You See

About this interactive

The lesson's attacks, and how each shows itself: - **DDoS:** many machines, often a botnet of zombie hosts, flood one target at once until it cannot serve anyone. - **Deauthentication:** forged frames tell wireless clients to disconnect from the access point, again and again: a denial of service on Wi-Fi. - **DNS poisoning:** a falsified DNS answer sends a correct name to the wrong address. - **Rogue DHCP server:** an unauthorized server hands out addresses, and with them the attacker's gateway or DNS server, putting it on the path. - **Evil twin:** an access point copies a real network's name so clients join it instead. - **ARP spoofing:** forged ARP replies tie someone else's IP address to the attacker's MAC address, so traffic meant for that IP goes to the attacker. The last three are common ways to start an on-path (man-in-the-middle) attack.

What you'll learn

Identify a network attack from what users and admins see: a DDoS, a deauthentication attack, DNS poisoning, a rogue DHCP server, an evil twin or ARP spoofing
Explain how each one works on the network: many machines flooding one target, forged disconnect frames, a falsified name lookup, false addressing handed out, a copied network name, or a forged IP-to-MAC mapping

Aligned to

CompTIA Network+

4.2 Summarize various types of attacks and their impact to the network.

Cisco CCST Cybersecurity

2.1 Describe TCP/IP protocol vulnerabilities

Cisco CCNA

5.7 Configure and verify Layer 2 security features

Key terms

Distributed Denial of Service: An attack that uses multiple systems to flood a target with traffic, making it unavailable to legitimate users.
Deauthentication Attack: A wireless denial-of-service attack in which an attacker spoofs a client's MAC address to send forged deauthentication frames to an access point, forcibly disconnecting the client.
DNS Poisoning: An attack that corrupts the DNS cache to redirect users to malicious websites.
Rogue DHCP Server: An unauthorized DHCP server connected to a network that assigns invalid IP configuration to clients, causing a denial-of-service condition or enabling adversary-in-the-middle attacks.
Evil Twin: A wireless attack in which an attacker sets up a rogue access point that broadcasts the same SSID as a legitimate network, tricking clients into connecting so the attacker can intercept or manipulate their traffic.
ARP Spoofing: An attack technique in which a threat actor sends forged ARP reply messages to associate their MAC address with a legitimate IP address, redirecting traffic to their device.
On-Path Attack: An attack in which the adversary positions themselves between two communicating devices to intercept, relay, or alter traffic; also called a man-in-the-middle attack.
Botnet: A network of compromised computers controlled by an attacker, often used to conduct distributed attacks.

Topics

Network Attacks Ddos Deauthentication Dns Poisoning Rogue Dhcp Evil Twin Arp Spoofing Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →