Ethical Hacking: Evading Ids, Firewalls, And Honeypots [author] Videos [best] -

Alex uses fragmentation and decoy scans :

Setting: A red-team engagement for a financial firm. Goal: reach the internal database server without triggering alerts. Alex uses fragmentation and decoy scans : Setting:

But the firewall logs spikes. Alex pivots: . Alex pivots:

The IDS sees base64 data but doesn't decode context. Alex finds an open SMB share named HR_Confidential . Too easy. A glance at file metadata shows creation time = 2 AM (odd). Also, the server responds with Server: Honeyd 1.5c (a telltale). Too easy

Alex notices port 443 allows ICMP tunneling (misconfigured firewall rule allowing ICMP echo replies). Uses ptunnel to encapsulate TCP over ICMP. Firewall sees ping packets – no alert. 2. IDS/IPS Evasion – The Web App Gateway Inside the DMZ, an IDS sniffs traffic. Alex’s ICMP tunnel reaches a vulnerable web server. A simple curl request for /cgi-bin/test.cgi?cmd=ls triggers a signature (known attack pattern).