Re: RPC Evasion techniques

From: Nakul Aggarwal (nakula_at_gmail.com)
Date: 10/31/05

  • Next message: Pukhraj Singh: "Re: RPC Evasion techniques" 
    Date: Mon, 31 Oct 2005 16:15:00 +0530
To: tcp fin <inet_inaddr@yahoo.com>

    there is another one named..
    "Network Intrusion Detection: Evasion, Traffic Normalization, and
    End-to-end Protocol Semantics"

    ofcourse not RPC based techniques but good for study of evasion techniques.

    regards

    On 10/27/05, tcp fin <inet_inaddr@yahoo.com> wrote:
    > Hi Guys ,
    > Any tips and tricks or good article on IDS/IPS evasion
    > ?
    > I have beautiful paper "Insertion, Evasion and Denial
    > of Service:
    > Eluding Network Intrusion detection".
    > I need some pointers on RPC based evasion techniques.
    >
    > Regards,
    > TCP FIN .
    >
    >
    >
    >
    > __________________________________
    > Yahoo! Mail - PC Magazine Editors' Choice 2005
    > http://mail.yahoo.com
    >
    > ------------------------------------------------------------------------
    > Test Your IDS
    >
    > Is your IDS deployed correctly?
    > Find out quickly and easily by testing it
    > with real-world attacks from CORE IMPACT.
    > Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
    > to learn more.
    > ------------------------------------------------------------------------
    >
    > 

    --
regards
Nakul Aggarwal
------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
------------------------------------------------------------------------
  • Next message: Pukhraj Singh: "Re: RPC Evasion techniques"

    Relevant Pages

    • Re: sidestep
      ... Here is the hex dump of the packets created by the rpc request in evade ... > I looked at the RPC part of Sidestep for the Dragon IDS ... > the evasion is contained in the first four bytes of the RPC portion of the ... >>type of attack you want, for example RPC, DNS, FTP etc and then run it ...
      (Focus-IDS)
    • RPC Evasion techniques
      ... I have beautiful paper "Insertion, Evasion and Denial ... Eluding Network Intrusion detection". ...
      (Focus-IDS)