Back to today’s briefing

Story perspectives

New Win-DDoS Technique Turns Windows Domain Controllers into Botnets

8/11/2025

28 5

Summary

Story summary

At DEF CON 33, researchers Or Yair and Shahak Morag from SafeBreach introduced Win-DDoS, a groundbreaking technique that turns public domain controllers into a malicious botnet by exploiting Windows LDAP vulnerabilities. This alarming discovery highlights critical security gaps in Windows systems, enabling attackers to launch DDoS assaults without the need for costly infrastructure or authentication.

1 of 1

Story summary

At DEF CON 33, researchers Or Yair and Shahak Morag from SafeBreach introduced Win-DDoS, a groundbreaking technique that turns public domain controllers into a malicious botnet by exploiting Windows LDAP vulnerabilities. This alarming discovery highlights critical security gaps in Windows systems, enabling attackers to launch DDoS assaults without the need for costly infrastructure or authentication.