Comments (5)

I hope you enjoy this discussion. In any case, I ask you to join it.

• Faizul, 18 june 2020 at 18:27 #

  I want to decode some string that I received from app sniffing.
  
  I will be pleased if you help me to decode such following code:
  
  abG9nb191cmw=, maHR0cDovLzUxLjE1LjIwOS45MDo4ODAwL2RhdGEvaW1nL2ZpbGVzLzU2NjU5X2FzcG9yLmpwZw==
  
  Please let me know how to decode the above-mentioned characters.
  
  Thanks

  reply
  • Zaidan, 22 july 2020 at 13:03 #↑

    Found one kinda look like that while reversing android apk, thought it was Base64 but turns out it was AES256 encryption.
    So that might be AES256

    reply
• DavidSpector, 9 june 2021 at 13:19 #

  This is a great standard, and one that is overdue. But those responsible for JavaScript and PHP (at least), need to add it to their languages so programmers can learn about this and use it directly.

  reply
  • cs32, 16 july 2022 at 22:03 #↑

    @DavidSpector, it would be convenient to have built-in base64url methods in PHP / JS, but, frankly, implementing them is very trivial:
    
    PHP:
    php
function base64url($str) {
    return str_replace(['+','/','='], ['-','_',''], base64_encode($str));
}
// decode base64url encoded data
function unbase64url($str) {
    return base64_decode(str_replace(['-','_'], ['+','/'], $str));
}

    
    JS:
    js
function base64url(str) {
    return btoa(str).replace(/=+$/,'').replace(/\+/g,'-').replace(/\//g,'_');
}
function unbase64url(str) {
    return atob(str.replace(/-/g,'+').replace(/_/g,'/'));
}


    reply
    • Slay, 3 august 2022 at 06:31 #↑

      @cs32,
      it's was wrong:
      
// decode base64url encoded data
function unbase64url($str) {
    return base64_decode(str_replace(['-','_'], ['+','/'], $str));
} 

      
      so is correct:
      
function unbase64url($str) {
    return base64_decode(str_replace(['-','_'], ['+','/'], base64_decode($str));
}


      reply