RE: IPS Testing

[Jeremiah Brott <jeremiah () access2networks com>]

If you are looking at testing the specific IPS, look into the Tomahawk testing tool. This will allow you to replay pcap 
captures of attack traffic on the wire re-writing the source IP if needed. 

http://www.tomahawktesttool.org/

Do you know what IPS product it is?

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of pentestr
Sent: Thursday, January 03, 2008 3:56 AM
To: Pentest Mailinglist
Subject: IPS Testing

Hi,

I am doing a PT for a customer and found that after running nessus 
against the target our IP is getting blocked permanently. I want to show 
this issue to the customer.
1. Is there any specific tool that can generate nessus traffic by 
spoofing IPs?
2. Is there any tool that can change IP on the fly? While running nessus 
that should change source IP?

The server have only port 80 Open.

Thank you.
Regards.
PenTestr.

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------




------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------