Skip to content

kingaling/custombase64

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 
 
 
 
 

Repository files navigation

custombase64

Custom Base64 encoder/decoder

A lot of malware use base64 encoding for C2 communication or just to simply obfuscate their code. Most of the time, the bad guys use a custom charset. This is a problem since there really is no way that I know of to efficiently brute force the charset that was used. But if you can peek into the executable that is performing the encoding, you may find the charset used.

There are tools out there from people like Kahu Security that can decode using custom charsets. For decoding a couple hundred bytes of encoded data, that tool is great. But for large files >= 1 MB I have witnessed extreme slowness. So another excuse to code up some python. :)

About

Custom Base64 encoder/decoder

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages