Network intrusion detection evasion tool fragrouter

Network intrusion detection evasion tool fragrouter

The network intrusion detection system can intercept the data packet, obtain the content and then judge whether it is a malicious data packet. For the transmission of large data packets, it is usually used to split the large packets into small packets for transmission. If the intrusion detection system does not have the function of packet reorganization, it will not be able to detect fragmented malicious packets.

The fragrouter provided by Kali Linux is an evasion tool developed based on this vulnerability. The tool can intercept the data sent to the network card, refragment it, and then send it. It supports 22 slicing methods. These slicing methods adopt measures such as disorder, repeated slicing, empty packets, cross packets and so on, in order to avoid the detection system. After using this tool, and then using other tools for scanning and detection, we can reduce the probability of being found by the intrusion detection system.