Penetration Testing mailing list archives

Re: Are Fragmentation Attacks Still Used for IDS/IPS Evasion?


From: seclt yuri <secltyuri () yahoo com>
Date: Sun, 30 Sep 2007 07:30:28 -0700 (PDT)

Hi,
  I'd just like to thank everyone that replied to this
thread.  You're input has been a great help.  Thanks a
lot :)

--- seclt yuri <secltyuri () yahoo com> wrote:

Hi,
  I was just reading up on fragmentation attacks
using
fragrouter and fragrouter as a mean of IDS/IPS
evasion.  However, since almost all firewalls both
commercial and free (iptables for examples) now have
support for fragment reassembly, are fragmentation
attacks still effective?  Thanks.


       

____________________________________________________________________________________
Need a vacation? Get great deals
to amazing places on Yahoo! Travel.
http://travel.yahoo.com/




       
____________________________________________________________________________________
Yahoo! oneSearch: Finally, mobile search 
that gives answers, not web links. 
http://mobile.yahoo.com/mobileweb/onesearch?refer=1ONXIC


------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------


Current thread: