Question

An attacker is disguising a signature by encoding the attack payload and placing a decoder in front of the payload. Every time the payload is sent, the code is rewritten so the signature changes.

Which of the following obfuscation techniques is the attacker using?

answer

Insertion attack


Unicode evasion


Encryption


Polymorphic shellcode

Answer 1

Polymorphic shellcode

Explanation: the attacker encodes the payload and prepends a decoder that mutates the code on each send so the signature changes — classic polymorphic shellcode.