nerdexam
EC-Council

312-50V12 · Question #236

An ethical hacker is testing the security of a website's database system against SQL Injection attacks. They discover that the IDS has a strong signature detection mechanism to detect typical SQL inje

The correct answer is D. Use Hex encoding to represent the SQL query string. To bypass an IDS with strong signature detection during a SQL Injection attack, hex encoding is the most effective evasion technique as it transforms recognizable SQL keywords into a format that does not match typical textual signatures. This allows the malicious payload to evade

Submitted by thandi_sa· Mar 4, 2026Web Application Hacking

Question

An ethical hacker is testing the security of a website's database system against SQL Injection attacks. They discover that the IDS has a strong signature detection mechanism to detect typical SQL injection patterns. Which evasion technique can be most effectively used to bypass the IDS signature detection while performing a SQL Injection attack?

Options

  • AEmploy IP fragmentation to obscure the attack payload
  • BImplement case variation by altering the case of SQL statements
  • CLeverage string concatenation to break identifiable keywords
  • DUse Hex encoding to represent the SQL query string

How the community answered

(24 responses)
  • A
    13% (3)
  • B
    4% (1)
  • C
    4% (1)
  • D
    79% (19)

Why each option

To bypass an IDS with strong signature detection during a SQL Injection attack, hex encoding is the most effective evasion technique as it transforms recognizable SQL keywords into a format that does not match typical textual signatures. This allows the malicious payload to evade detection while still being interpretable by the target database.

AEmploy IP fragmentation to obscure the attack payload

IP fragmentation operates at the network layer to split packets, but a strong signature detection mechanism typically reassembles packets before applying application-layer signatures, rendering fragmentation ineffective for obscuring the SQL query itself.

BImplement case variation by altering the case of SQL statements

Implementing case variation is often insufficient against strong signature detection because many modern IDSs normalize input or are configured with case-insensitive signatures for common SQL keywords.

CLeverage string concatenation to break identifiable keywords

While string concatenation can break simple keyword matches, strong signature detection mechanisms may still identify the underlying malicious intent through more advanced parsing, regular expressions, or known concatenation patterns.

DUse Hex encoding to represent the SQL query stringCorrect

Using Hex encoding to represent SQL query strings is highly effective because it transforms recognizable SQL keywords (e.g., 'SELECT', 'UNION', 'WHERE') into an entirely different hexadecimal format. This transformation allows the malicious payload to bypass signature-based Intrusion Detection Systems (IDS) that are configured to look for specific textual patterns of common SQL injection attacks, as the encoded string will not match the predefined signatures. The target database server, however, can often decode and execute these hex-encoded strings as part of a valid query, allowing the SQL injection to succeed.

Concept tested: SQL injection evasion via encoding

Topics

#SQL Injection#IDS evasion#Hex encoding#Signature detection bypass

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 312-50V12 Practice