https://netacoding.com/tags/l2-broadcast/ Recent content in L2-Broadcast on Netacoding | Cybersecurity, Assembly & Network Research https://netacoding.com/img/logo-netacoding.png https://netacoding.com/img/logo-netacoding.png Hugo en-us Fri, 05 Jun 2026 00:00:00 +0000 https://netacoding.com/posts/smurf-amplification/ Fri, 05 Jun 2026 00:00:00 +0000 https://netacoding.com/posts/smurf-amplification/ RFC 2644 disabled directed broadcast at router level — not L2 broadcast domains. Missing uRPF (CWE-290) + broadcast ICMP reply (CWE-406) enables Smurf amplification from same-VLAN adjacency with no authentication. 100-host broadcast domain = 100x amplification at 100 req/s → 7.2 Mbps victim flood. Two-machine Scapy PoC, Suricata rules, and enterprise wireless infrastructure confirmation.