
Whisker
¨Scanning
tool that looks for vulnerable CGI scripts on Web servers
¨Evades
network-based IDS detection at Application Level by subtly changing the format of the CGI
requests
¨Manipulates
the request so that they do not match the IDS signatures exactly