Exam 312-50v11 topic 1 question 28 discussion

session splicing is also packet fragmentation. Whisker is the correct answer.

Whisker is a tool that can be used to perform session splicing attacks. It is a security assessment tool that was designed to identify vulnerabilities in web applications. Whisker can manipulate the order of HTTP requests and responses to evade detection by intrusion detection systems (IDS) and web application firewalls (WAFs). This makes it an effective tool for carrying out session splicing attacks by fragmenting attack data and distributing it across different packets.

Intrusion detection system evasion techniques(WIKI) One basic technique is to split the attack payload into multiple small packets, so that the IDS must reassemble the packet stream to detect the attack. The 'whisker' evasion tool calls crafting packets with small payloads 'session splicing'. https://en.wikipedia.org/wiki/Intrusion_detection_system_evasion_techniques

A simple way of splitting packets is by fragmenting them, but an adversary can also simply craft packets with small payloads.[1] The 'whisker' evasion tool calls crafting packets with small payloads 'session splicing'. https://en.wikipedia.org/wiki/Intrusion_detection_system_evasion_techniques

D. Whisker - ... Many web vulnerability scanners, such as 'Nikto', 'whisker' and 'Sandcat', also incorporate IDS evasion techniques ...

No, answer is whisker. It was a tool back in the early 2000s, after that libwhisker became a core component in Nikto.

One basic technique is to split the attack payload into multiple small packets, so that the IDS must reassemble the packet stream to detect the attack. A simple way of splitting packets is by fragmenting them, but an adversary can also simply craft packets with small payloads. The ‘whisker’ evasion tool calls crafting packets with small payloads ‘session splicing’. References: https://en.wikipedia.org/wiki/Intrusion_detection_system_evasion_techniques#Fragmentation_and_small_packets

from OWASP Whisker’s Session Splicing  Network level attack  Not the same as IP fragmentation  Send parts of the request in different packets "GET / HTTP/1.0" may be split across multiple packets to be "GE", "T ", "/", " H", "T", "TP", "/1", ".0

D is correct

Explanation/Reference: One basic technique is to split the attack payload into multiple small packets, so that the IDS must reassemble the packet stream to detect the attack. A simple way of splitting packets is by fragmenting them, but an adversary can also simply craft packets with small payloads. The ‘whisker’ evasion tool calls crafting packets with small payloads ‘session splicing’. References: https://en.wikipedia.org/wiki/Intrusion_detection_system_evasion_techniques#Fragmentation_and_small_packets

I go with Answer A, Hydra is password cracker, burp suite vulnerability scanner , whisker is vulnerability scanner