312-50V13 · Question #3
Session splicing is an IDS evasion technique in which an attacker delivers data in multiple, small sized packets to the target computer, making it very difficult for an IDS to detect the attack…
The correct answer is D. Whisker. Session splicing is an IDS evasion technique where data is fragmented into small packets to bypass detection, and Whisker is a known tool capable of performing such attacks.
Question
Options
- Atcpsplice
- BBurp
- CHydra
- DWhisker
How the community answered
(30 responses)- A7% (2)
- B3% (1)
- D90% (27)
Why each option
Session splicing is an IDS evasion technique where data is fragmented into small packets to bypass detection, and Whisker is a known tool capable of performing such attacks.
tcpsplice is primarily used for splicing two TCP connections together, often for performance or network manipulation, not typically for IDS evasion through fragmentation.
Burp Suite is a web vulnerability scanner and proxy, primarily used for intercepting, modifying, and replaying HTTP requests, but it does not natively perform session splicing for IDS evasion.
Hydra is a brute-force password cracking tool that attempts to guess login credentials for various network services, which is unrelated to session splicing.
Whisker is a well-known web server scanner and IDS evasion tool, specifically designed to perform techniques like session splicing to bypass intrusion detection systems. It fragments HTTP requests into multiple small packets to prevent signature-based IDS from reassembling and detecting malicious patterns.
Concept tested: IDS evasion techniques and tools
Topics
Community Discussion
No community discussion yet for this question.