ECSA v10: EC-Council Certified Security Analyst v10Demo

By ECCouncil · Question Mode

QuestionQ94

Network Penetration Testing Methodology – External

During the reconnaissance phase of a penetration test, you determined that the client has deployed a firewall that checks only TCP header information.

Which of the following techniques would you use to bypass the firewall?

  • A Bypassing the firewall using tiny fragments
  • B Bypassing the firewall by manipulating the IPID sequence number
  • C Bypassing the firewall source routing
  • D Bypassing the firewall using the IP address in place of an URL
Explanation

Tiny-fragment evasion divides a packet so that the complete TCP header is not available in a single fragment for a non-reassembling, header-only firewall to inspect. Packet fragments require reassembly for complete transport-layer processing; only the first fragment contains the TCP/UDP port information.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!