| View previous topic :: View next topic |
| Author |
Message |
webdaddy Contributor


Joined: 14 Nov 2004 Posts: 151 Location: Raleigh NC
|
Posted: Fri Oct 28, 2005 8:44 pm Post subject: Oh Wow. A topic in my area of expertise |
|
|
There is a utility that can bypass about 90% of commercial firewalls by mangling the packets or fragmenting them in such as way that the firewall cannot inspect them properly. Another method is to use static source ports. I have actually written something in VDS to test firewall security and will be releasing that on my site soon enough. It can bypass most commercial firewalls rather easily if you know what you are doing and realize that firewalls cannot check certain types of traffic (encrypted traffic for instance as only certain TCP flags can be checked). If anybody want to play with firewall bypass utilities let me know. I have a complete toolkit that I use to do network vulnerability assessments that has gotten me past about 90% of the firewalls out there. The best firewalls on the market are active firewalls and some IPS type products. These tend to block the fragmented and sourced attacks much easier. _________________ K Wetzel
Programming - Technology - Communications
"The Home of the SLC Security Console"
SLC now available for Linux... |
|
| Back to top |
|
 |
webdaddy Contributor


Joined: 14 Nov 2004 Posts: 151 Location: Raleigh NC
|
Posted: Fri Oct 28, 2005 8:45 pm Post subject: Firewalling |
|
|
I did not post the name of the utilities for a reason as I don't want to invite you to do anything illegal but if you want them I can email them to you if you request such. _________________ K Wetzel
Programming - Technology - Communications
"The Home of the SLC Security Console"
SLC now available for Linux... |
|
| Back to top |
|
 |
|