full-disclosure - IDS Evasion

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <3FA04DC7.2050301@venom600.org>
From: lists at venom600.org (Ben Nelson)
Subject: IDS Evasion

Here's a good start:
fragroute -- http://www.monkey.org/~dugsong/fragroute/
snot -- http://www.stolenshoes.net/sniph/index.html
stick -- http://www.eurocompton.net/stick/projects8.html
whisker and a few IDS evasion papers -- http://www.wiretrip.net/rfp/

--Ben

simon wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> All,
>     I am interested in learning about IDS evasion tricks and tools for 
> both host based IDS systems and network based IDS systems. Is there a 
> place where I can find a list that either gives technoligical details or 
> tools that I could study to learn more about this? I already have a very 
> detailed understanding of the evasion theories, but I want to put some 
> of them to the test on my own product(s).  Pointers, advice?
> 
> 
> - --
> Regards,
>         -simon-
> 
> 
> "When a shepherd goes to kill a wolf, and takes his dog along to see the 
> sport, he should take care to avoid mistakes.  The dog has certain 
> relationships to the wolf the sheperd may have forgotten."
> 
> 
> - -------------------------------------------------------
> Secure Network Operations Strategic Reconnaissance Team
> http://www.secnetops.com || http://www.snosoft.com
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.1 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> 
> iD8DBQE/oDy/f3Elv1PhzXgRAq3FAKCtZOR9RgTT1CLcg34wfjV973UI4wCgzubm
> FpRxGZg8DSKHLwQHQqCunj0=
> =jHat
> -----END PGP SIGNATURE-----
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html