Bypassing IDS/IPS/firewall
In this recipe, we will at a few the switches by nmap that can be used to bypass IDS/IPS/firewalls. Many a time, when we are performing a scan, we come across a firewall. In case the firewall is not configured correctly, we will be able to execute the following firewall-evasion commands of nmap.
Getting ready
We will nmap for this activity. Let's with the we have detected to run a few evasion switches.
How to do it...
For this recipe, we will perform the following steps:
- We will use the fragment packet switch to perform the discovery:
Fragment packet switch splits up the TCP header over several packets to make it harder for packet filters, intrusion detection systems, and other annoyances to detect an ongoing active scan. There could be occurrences where this could fail as some programs might not be able to handle tiny packets. For a more detailed understanding visit https://nmap.org/book/man-bypass-firewalls-ids.html.
We will enter the following command:
nmap...
