## Advanced Obfuscation

Attackers hide their payloads to bypass WAFs (Web Application Firewalls).

### Techniques
1.  **URL Encoding**: `select` -> `%73%65%6C%65%63%74`.
2.  **Double URL Encoding**: `%252E` (Encodes the % sign).
3.  **Case Variation**: `SeLeCt * FrOm`.
4.  **Whitespace**: `SELECT/**/Password/**/FROM` (SQL ignores comments, WAF might get confused).

### De-obfuscation
The Analyst's job is to decode the string back to plaintext to understand the intent via tools like CyberChef.