Security & Responsible Use
Revealr is a tool designed for authorized network assessments. It includes built-in features for minimizing network disruption and IDS/IPS triggering during legitimate engagements.
Revealr is strictly for authorized use. Using Revealr to scan networks, systems, or IP ranges without explicit written permission from the network owner is illegal in most jurisdictions and may constitute unauthorized computer access under laws such as the Computer Fraud and Abuse Act (CFAA) or similar regional legislation. Always obtain proper written authorization before performing any scanning activity.
--profile paranoidMaximum IDS evasion in monitored production environments.
--profile stealthyAuthorized assessments where alerting should be minimized.
--profile polite (default)Standard authorized internal network audits.
--profile aggressiveInternal LAN audits where speed is the priority and IDS evasion is not required.
Token-Bucket Rate Limiting
The packet dispatch engine uses a token-bucket algorithm to enforce a strict upper bound on outgoing packet rate. This prevents accidental bandwidth saturation and avoids triggering rate-based IDS rules even at high throughput settings.
Randomized Scan Order (Stealthy/Paranoid)
In Stealthy and Paranoid profiles, port probing order is randomized instead of sequential. Sequential port scans from 1–65535 are a classic IDS signature. Randomization disrupts this pattern.
Inter-Packet Jitter
Paranoid and Stealthy profiles inject random delay between packets, mimicking organic traffic patterns. This reduces the statistical confidence of IDS correlation engines that look for probe bursts.
Source Port Randomization
Revealr randomizes the source port on outgoing SYN packets to prevent trivial stateful firewall fingerprinting based on source port patterns.