Many security solutions like firewalls, IPSs and Proxies are fully prepared for TCP and sometimes UDP, but what about non-standard protocol types like IGMP, CAOS, VISA and others. The whole https://en.wikipedia.org/wiki/List_of_IP_protocol_numbers is a potential vector.

What is the best way to test those solutions for protection of evasion over those non-standard protocols? I would take any response with a commercial product but specially any tools that I can build my own.

  • Anything unknown can just be dropped... – deviantfan Aug 11 '16 at 5:06

Sounds like a job for nmap (IP Protocol scan) or scapy. Older tools such as isic or ip6sic are in the same class, as are point-commercial solutions such as Codenomicon or Beyond Security and big players like Spirent and Ixia.

Probably my favorite tool for working with non-HTTP/TLS traffic (for those protocols, I'd use Burp Suite Professional) is Canape. Canape is a pluggable proxy, so I can record packets and frames in order to play with them. If I really wanted to hire a firm to help with testing security appliances, I'd look at Deja vu Security for their Peach Fuzzing Framework intellectual property, instructional capital, and thought leadership.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.