Which obfuscation method is used to hide the true content of a credential harvesting script by converting it into a different representation that can be decoded at runtime?

Encryption with a hardcoded key

Removing whitespace from the code

You are conducting a credential attack against a web application that uses a web application firewall (WAF) to block requests containing SQL injection patterns. You need to submit a login form with a SQL injection payload in the username field. Which technique is most likely to bypass the WAF?

Use a SQL injection payload encoded with a combination of URL encoding and case variation

Use a boolean-based blind SQL injection payload

Use a time-based blind SQL injection payload

Use a UNION-based SQL injection payload

You are developing a credential harvesting tool that will be deployed in a penetration test. The tool must evade antivirus detection on the target's workstation. Which obfuscation approach is most effective for hiding the tool's malicious components from signature-based antivirus?

Encode the payload in Base64 and decode it at runtime.

Use a polymorphic engine that changes the payload's code each time it is executed.

Encrypt the payload with a hardcoded key and decrypt it at runtime.

Compress the payload with a custom compression algorithm.

GIAC Cloud Penetration Tester

Domain 6Objective 2

Redirection and Attack Obfuscation GCPN Practice Questions (Page 5)

Part of the Credential Attacks and Evasion domain, which makes up ~15% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 4–6 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

8concepts

Questions 21–23

21foundation · easy
Which obfuscation method is used to hide the true content of a credential harvesting script by converting it into a different representation that can be decoded at runtime?
Select an answer first
22application · medium
You are conducting a credential attack against a web application that uses a web application firewall (WAF) to block requests containing SQL injection patterns. You need to submit a login form with a SQL injection payload in the username field. Which technique is most likely to bypass the WAF?
Select an answer first
23application · medium
You are developing a credential harvesting tool that will be deployed in a penetration test. The tool must evade antivirus detection on the target's workstation. Which obfuscation approach is most effective for hiding the tool's malicious components from signature-based antivirus?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCPN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCPN” is a trademark of its owner, used for identification only.

Redirection and Attack Obfuscation GCPN Practice Questions (Page 5)

Questions 21–23

Which obfuscation method is used to hide the true content of a credential harvesting script by converting it into a different representation that can be decoded at runtime?

You are conducting a credential attack against a web application that uses a web application firewall (WAF) to block requests containing SQL injection patterns. You need to submit a login form with a SQL injection payload in the username field. Which technique is most likely to bypass the WAF?

You are developing a credential harvesting tool that will be deployed in a penetration test. The tool must evade antivirus detection on the target's workstation. Which obfuscation approach is most effective for hiding the tool's malicious components from signature-based antivirus?

Keep studying — Credential Attacks and Evasion