What is the difference between a volumetric, protocol, and application-layer DDoS attack, and how can Kali Linux tools be used to simulate each?

Volumetric attacks (e.g., UDP floods) overwhelm bandwidth. Protocol attacks (e.g., SYN floods) exploit protocol weaknesses. Application-layer attacks (e.g., HTTP floods) target specific application features. Kali's LOIC can simulate volumetric and protocol attacks. Tools like Slowloris and GoldenEye (also available in Kali) are designed for application-layer attacks by slowly establishing and maintaining connections.