What techniques can attackers use to obfuscate their traffic?

Hex Encoding (IIS and Apache) Hex encoding is the simplest of the URL obfuscation techniques. The attacker simply replaces a character with its ASCII equivalent in hexadecimal, prefaced by a percent sign.