ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ94

VerifiedNetwork Penetration Testing Methodology – External

During the reconnaissance phase of a penetration test, you determined that the client has deployed a firewall that checks only TCP header information.

Which of the following techniques would you use to bypass the firewall?

Explanation

Tiny-fragment evasion divides a packet so that the complete TCP header is not available in a single fragment for a non-reassembling, header-only firewall to inspect. Packet fragments require reassembly for complete transport-layer processing; only the first fragment contains the TCP/UDP port information.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!