nerdexam
EC-Council

312-50V13 · Question #3

Session splicing is an IDS evasion technique in which an attacker delivers data in multiple, small sized packets to the target computer, making it very difficult for an IDS to detect the attack…

The correct answer is D. Whisker. Session splicing is an IDS evasion technique where data is fragmented into small packets to bypass detection, and Whisker is a known tool capable of performing such attacks.

Submitted by hassan_iq· Mar 6, 2026Network and Perimeter Hacking

Question

Session splicing is an IDS evasion technique in which an attacker delivers data in multiple, small sized packets to the target computer, making it very difficult for an IDS to detect the attack signatures. Which tool can be used to perform session splicing attacks?

Options

  • Atcpsplice
  • BBurp
  • CHydra
  • DWhisker

How the community answered

(30 responses)
  • A
    7% (2)
  • B
    3% (1)
  • D
    90% (27)

Why each option

Session splicing is an IDS evasion technique where data is fragmented into small packets to bypass detection, and Whisker is a known tool capable of performing such attacks.

Atcpsplice

tcpsplice is primarily used for splicing two TCP connections together, often for performance or network manipulation, not typically for IDS evasion through fragmentation.

BBurp

Burp Suite is a web vulnerability scanner and proxy, primarily used for intercepting, modifying, and replaying HTTP requests, but it does not natively perform session splicing for IDS evasion.

CHydra

Hydra is a brute-force password cracking tool that attempts to guess login credentials for various network services, which is unrelated to session splicing.

DWhiskerCorrect

Whisker is a well-known web server scanner and IDS evasion tool, specifically designed to perform techniques like session splicing to bypass intrusion detection systems. It fragments HTTP requests into multiple small packets to prevent signature-based IDS from reassembling and detecting malicious patterns.

Concept tested: IDS evasion techniques and tools

Topics

#IDS evasion#session splicing#Whisker#attack tools

Community Discussion

No community discussion yet for this question.

Full 312-50V13 Practice