AppScan and IDS evasion

Hello,

I've launched AppScan against a web application and I'm being
blocked/banned (since I have a dynamic IP I can reboot my router and
get another IP, which is shortly banned again, as long as the attack
persists). Since AppScan doesn't have any kind of IDS evasion (AFAIK),
what could I do?

Of course, I can perform a manual audit (which I was going to do
anyway, automatic scanners are only the first phase) but do you have
other ideas to bypass the locking mechanism? Perhaps I could put in
place some kind of proxy applying IDS-evasion techniques, so I could
configure AppScan to use that proxy, and this last one would be in
charge of manipulate/rewrite the requests to bypass IDS. Does such a
proxy exist?

It would be nice if you could point to some good and practical
anti-IDS paper, doc and tools.

Thank you.

PS: I don't know which kind of IDS is in use (perhaps it's not a
full-IDS but some anomaly detection as the one included in Checkpoint
FW-1 but I don't have that information).

Cheers,
-q

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes
in Securing Web Applications
Find out now! Get Webinar Recording and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------

Relevant Pages

  • Re: AppScan and IDS evasion
    ... You can always configure AppScan to use proxy. ... literally each time request is made, it will come from a new IP address. ... Depending on IDS setup and type, ...
    (Pen-Test)
  • [Full-disclosure] AppScan and IDS evasion
    ... I've launched AppScan against a web application and I'm being ... Since AppScan doesn't have any kind of IDS evasion, ... place some kind of proxy applying IDS-evasion techniques, ... charge of manipulate/rewrite the requests to bypass IDS. ...
    (Full-Disclosure)
  • Re: AppScan and IDS evasion
    ... Then the proxy would be banned and it would be a DoS for other users ... I've launched AppScan against a web application and I'm being ... Since AppScan doesn't have any kind of IDS evasion, ... in Securing Web Applications ...
    (Pen-Test)
  • RE: AppScan and IDS evasion
    ... You can always configure AppScan to use proxy. ... SecurityFocus has pretty good intro to IDS evasion techniques at ... in Securing Web Applications ...
    (Pen-Test)
  • Re: AppScan and IDS evasion
    ... can't give any configuration advice for AppScan - I've gotten the chance ... Attack on port 443 ... Use some sort of proxy and/or tor ... well to have a REAL chance against a decent IPS, ...
    (Pen-Test)