← Back to Attack / Defense Lab
OSI LAYER 3 // Network Layer

Smurf Attack

A Smurf attack historically used spoofed ICMP requests directed at broadcast networks so many hosts replied to the victim.

01 // HOW IT WORKS

Mechanism

The attack amplifies a small request through a broadcast-capable network. Modern network configurations commonly disable the behaviors that enabled classic Smurf attacks.

02 // DETECTION

Indicators to watch

Unexpected ICMP amplification, broadcast traffic anomalies, and replies concentrated on one victim address.

03 // ATTACK FLOW

Concept diagram

01Spoofed ICMP request↓
02Broadcast-capable network↓
03Many replies generated↓
04Victim receives amplification↓
05Disable directed broadcast
04 // PREVENTION

Defensive controls

Disable directed broadcasts, apply anti-spoofing controls, segment networks, and rate-limit broadcast/ICMP traffic.

05 // SECURITY TOOL

Recommended security control

Network IDS / NetFlow

Use a simulated topology instead of real broadcast abuse.

06 // DEFENCE PRACTICE LAB

Defence practice lab

The administrator has not attached a tool link yet. This slot will show “Build Soon” until an external link is configured.

Build Soon
◈
DEFENCE PRACTICE LAB // BUILD SOONThe administrator can add or edit an external defence practice lab link from the private admin portal.
07 // DEFENCE TECHNIQUES

Defence techniques

Defence techniques for this attack will be added by the administrator.

AUTHORIZED LEARNING

All attack descriptions are for defensive education. Test scanning, traffic generation, interception, wireless testing, and vulnerable applications only on systems and networks you own or are explicitly authorized to assess.