EC-Council
312-50V12 · Question #58
Daniel is a professional hacker who is attempting to perform an SQL injection attack on a target injection attempts based on predefined signatures. To evade any comparison statement, he attempted…
The correct answer is C. Variation. Evasion Technique: Variation Variation is an evasion technique whereby the attacker can easily evade any comparison statement. The attacker does this by placing characters such as "' or '1'='1'" in any basic injection statement such as "or 1=1" or with other accepted SQL…
Submitted by tunde_lagos· Mar 4, 2026Web Application Hacking
Question
Daniel is a professional hacker who is attempting to perform an SQL injection attack on a target injection attempts based on predefined signatures. To evade any comparison statement, he attempted placing characters such as "' or '1'='1'" in any basic injection statement such as "or 1=1." Identify the evasion technique used by Daniel in the above scenario.
Options
- AChar encoding
- BIP fragmentation
- CVariation
- DNull byte
How the community answered
(53 responses)- A6% (3)
- B4% (2)
- C79% (42)
- D11% (6)
Explanation
Evasion Technique: Variation Variation is an evasion technique whereby the attacker can easily evade any comparison statement. The attacker does this by placing characters such as "' or '1'='1'" in any basic injection statement such as "or 1=1" or with other accepted SQL comments. The SQL interprets this as a comparison between two strings or characters instead of two
Topics
#SQL injection#Evasion techniques#Web application security#WAF evasion
Community Discussion
No community discussion yet for this question.