I've been learning about ethical hacking, and utilizing the wonderful resources that helpful organization like OWASP and OpenDNS have provided for learning and testing. However, I sometimes come up against challenges that I'm not sure are 'real world' examples. I recently found a challenge that required me to notice that the filename on a web application was converted from ASCII to HEX to obscure the file name.
My question is simply this: Is ASCII to HEX obscurity something relatively common real world? If I'm someday helping a company find vulnerabilities, would this be something I should keep high/mid/low my list of vulnerabilities to look for?
I've worked in I.T. for over 8 years, and I'm not sure I recall seeing HEXed versions of filenames used for obscurity before,so I'm just trying to get some context.