Exam 312-50v11 topic 1 question 165 discussion

Using Unicode is obfuscation of your attack.

IDS Evasion Techniques Obfuscating - Obfuscating is an IDS evasion technique used by attackers who encode the attack packet payload in such a way that the destination host can decode the packet but not the IDS. Encode attack patterns in unicode to bypass IDS filters, but be understood by an IIS web server. (P.1548/1532)

C is the correct answer.

obfus... Obfuscating is an IDS evasion technique used by attackers to encode the attack packet payload in such a way that the destination host can only decode the packet but not the IDS. An attacker manipulates the path referenced in the signature to fool the HIDS. Using Unicode characters, an attacker can encode attack packets that the IDS would not recognize but which an IIS web server can decode. Current CEHv11

C is the correct answer: Taking from EC Council book 312-50v11 page 1548, Obfuscating is an IDS evasion technique used by attackers to encode the attack packet payload in such a way that the destination host can only decode the packet but not the IDS. An attacker manipulates the path referenced in the signature to fool the HIDS. Using Unicode characters, an attacker can encode attack packets that the IDS would not recognize but which an IIS web server can decode.

correct

C: Obfuscating Pretty textbook example - he is obfuscating his input by using an unreadable encoding format which allows him to bypass any filters.