Evasion test procedure for PoC Stage.

[Mike_Wu1]

• HTTP Evader is located here: http://noxxi.de/research/http-evader.html
• Testing is simple enough:
• 1. select your browser of choice, we recommend Firefox (turn off any scriptblockers you may have enabled)
• 2. deploy your security solution in-line or configure your browser to connect via the proxy of your choice
• 3. Ensure no other security solutions are in your path that can affect your results
• 4. Go to http://noxxi.de/research/http-evader.html
• 5. Navigate to “the HTTP Evader Test site.”
• 6. Select the Main site (http): http://http-evader.semantic-gap.de (Available)
• 7. Click “Firewall evasion test - Bulk test with virus payload using XMLHttpRequest”.
• 8. click “Run Test with EICAR test virus payload” and let it run

[Danny_Yang]

Cool!

Mike大神來實地驗證一下Evasion rest!

Youtube有四家廠牌執行best practice後檢測結果：

HTTP EVADER - CISCO vs. Fortinet vs. Palo Alto vs. Check Point - YouTube 

留待Mike來發表專家建議。