We have seen how countermeasures against web application attacks can be implemented. Sometimes, they are not sufficient and can easily be circumvented.
There are two solutions:
Attack vector optimization
Using obfuscation techniques
The last one has been used heavily in web attacks, in the last 10 years.