Re: AppScan and IDS evasion

[Todd Haverkos <fsbo () haverkos com>]

> Pen Testing wrote:
> > Hello,
> >
> > I've launched AppScan against a web application and I'm being
> > blocked/banned (since I have a dynamic IP I can reboot my router and
> > get another IP, which is shortly banned again, as long as the attack
> > persists). Since AppScan doesn't have any kind of IDS evasion (AFAIK),
> > what could I do?

In addition to the other good suggestions, I'm not sure I saw anyone
mention use of SSL, if the application/site listens on both 80 and
443, use of 443 can make your activities opaque to network IPS.... 

By their nature web automatic application scanners are far from
stealthy.  The things they try are very easy to detect with IPS.  In
order to evade IDS, leveraging encryption would be your best hope,
pruning down the scan rate dramatically is something to try while
keeping your expectations low, as well as pruning the heck out of the
test set.

Good luck! 

Best Regards, 
--
Todd Haverkos  
http://www.linkedin.com/in/toddhaverkos





------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes 
in Securing Web Applications  
Find out now! Get Webinar Recording and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------