Après les attaques par réflexion+amplification sur DNS, NTP, SNMP, CHARGEN, récupération du statut sur Call of Duty, voici venu ... le service "découverte" de Microsoft SQL Server ...

« so when SQL Server 2000 introduced support for multiple instances of SQL Server, SQL Server Resolution Protocol (SSRP) was developed to listen on UDP port 1434. This listener service responded to client requests with the names of the installed instances, and the ports or named pipes used by the instance. To resolve limitations of the SSRP system, SQL Server 2005 introduced the SQL Server Browser service as a replacement for SSRP. »

« By default, the SQL Server Browser service starts automatically: When upgrading an installation. [...] When installing on a cluster. [...] »

Bon, le facteur d'amplification est faible (~10x) mais quand même...