Open Information Security Foundation

11/07/2019

08:25 PM Suricata Bug #3328 (Closed): bad ip option evasion

Suricata is vulnerable to bad ip option evasions.
Here are the pcaps of issue number 3286 with a bad ipv4 option.
... Nicolas Adba

11/06/2019

10:12 PM Suricata Security #3324 (Closed): TCP evasion technique by overlapping a TCP segment with a fake packet

It's possible to bypass/evade any tcp based signature by overlapping a TCP segment with a fake FIN packet.
The fak... Nicolas Adba

10/29/2019

07:50 PM Suricata Bug #3286 (Closed): TCP evasion technique by faking a closed TCP session

It is possible to bypass/evade any tcp based signature by faking a closed TCP session using an evil server.
After th... Nicolas Adba