Practical IDS Evasion

[Dave Aitel <dave () immunitysec com>]

The May CANVAS release included some code that nicely avoids a large 
part of Snort's signatures. The full paper on this is still only 
available to "Immunity Partners" 
(http://www.immunitysec.com/partners.shtml) but you can read a 
summarized version here, which I presented at CANSEC as a sort of 
"Lightning talk".

http://www.immunitysec.com/resources-papers.shtml

In terms of the name: Setting up fragrouter isn't necessarally 
practical, but learning how to use MSRPC is. :>

-dave

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
https://lists.immunitysec.com/mailman/listinfo/dailydave