DHCP Attacks and Defense Strategies

[@imrane9382]

Thanks for the interesting information. One thing to add is that the DHCP pool is not exhausted from DHCPDISCOVER messages, but from a complete DORA process that it is faked by Yersinia which means that for every DISCOVER, an OFFER will be sent from the router, then a REQUEST from Yersinia will be sent to finally recieve an ACK to create a binding in the DHCP server, which is the router in your example.

[@gupttura2766]

Great video...thank you Mr Wallace. One other thing I noticed was Switch actually can show you ip addresses attached to specific ports by using dhcp snooping. This is great.

[@darkreed3486]

Great job. You are so fluent and professional with the terms. By far the best on KZbin.

[@tahersadeghi6773]

Thank you, Kevin, for another classic video.

[@soroushsarkari9977]

Thank you Kevin. I really enjoy watching your videos and learning new stuff. Thanks a looooooooot

[@numansmail]

Thank you Kevin...another great recap as usual, looking forward to the DAI video

[@cihangirakyol4170]

Great video and one question. Since a NON trusted port will never accept any DHCP offers, why SEND OUT the DHCP request out of that port in the first place ? All DHCP messages can be blocked from being transmitted OUT from NON trusted ports hence reducing the traffic, say after something like a power outage ? Thanks

[@BeingCrazy-bv5im]

What should we do about wireless devices and wireless access point? which assign ip to multiple devices.

[@NeonNotch]

Kevin, you’re invaluable. Thank you!

[@CyberVoidW]

Great video and demonstration. Thankyou!

[@TheFancepants]

DORA DORA DHCP EXPLORER 🤟 - I giggled so much at this and I will now DEF remember lol

[@JapsSims]

Thanks for another great learning video Kevin!

[@ramik911]

What if the DHCP server is a virtual machine on ESXi and not connected directly to the switch, can we still use DHCP snooping? shall we configure it on the trunk port?

[@Wahinies]

Is there a hardening or IDS for DHCP Coerce?

[@matteo910]

Love your vid format

[@fabrice9848]

Thank you Kevin.

[@firosiam7786]

The ceh course is gona be packed

[@adir6375]

Thank You !

[@faris928]

Thanks for sharing

[@grandfatherm5774]

God bless you

[@ericluchman3874]

Very good video.

[@grandfatherm5774]

Rouge DHCP server 7:30

[@grandfatherm5774]

DHCP snooping

[@QuadDerrick]

your title could maybe be dhcp attacks and defence strategies IF YOU HAVE A CISCO ROUTER *"#¤%#"#¤