DHCP Starvation
DHCP starvation exhausts available addresses in a DHCP scope by causing the server to see many apparently unique clients.
Mechanism
The attacker generates many client identities, consuming leases and preventing legitimate clients from obtaining addresses.
Indicators to watch
Rapid lease allocation, many short-lived client identifiers, scope exhaustion, and sudden DHCP request volume.
Concept diagram
Defensive controls
Use DHCP snooping, port security, rate limits, appropriately sized scopes, and monitoring of lease churn.
Recommended security control
DHCP snooping / SIEM
Use a lab DHCP server with a small test scope.
Defence practice lab
The administrator has not attached a tool link yet. This slot will show “Build Soon” until an external link is configured.
Defence techniques
Defence techniques for this attack will be added by the administrator.
All attack descriptions are for defensive education. Test scanning, traffic generation, interception, wireless testing, and vulnerable applications only on systems and networks you own or are explicitly authorized to assess.