Isn't this obvious to anyone who has seen a few base64 encoded json strings or certificates? ey and LS are a staple.
Spotting base64 encoded JSON, certificates, and private keys
11–20 of 135 posts
Re: Spotting base64 encoded JSON, certificates, and private keys
#12I don't really love this. It just feels so wasteful. JWT does it as well. Even in this example, they are double base64 encoding strings (the salt). It's really too bad that there's really nothing quite like json. Everything speaks it and can write it. It'd be nice if something like protobuf was easier to write and read in a schemeless fashion.
We just need to sacrifice n*field_count to a header describing the structure. We also need to define allowed types.
Re: Spotting base64 encoded JSON, certificates, and private keys
#13Base64 encoded yaml files will also be LS-prefixed if they have the document marker (---)
Re: Spotting base64 encoded JSON, certificates, and private keys
#14You can spot Base64 encoded JSON.
The PEM format (that begins with `-----BEGIN [CERTIFICATE|CERTIFICATE REQUEST|PRIVATE KEY|X509 CRL|PUBLIC KEY]-----`) is already Base64 within the body.. the header and footer are ASCII, and shouldn't be encoded[0] (there's no link to the claim so perhaps there's another format similar to PEM?)
You can't spot private keys, unless they start with a repeating text sequence (or use the PEM format with header also encoded).
Re: Spotting base64 encoded JSON, certificates, and private keys
#15Isn't this obvious to anyone who has seen a few base64 encoded json strings or certificates? ey and LS are a staple.
`MII` for RSA private keys.
Re: Spotting base64 encoded JSON, certificates, and private keys
#16I built a JWT support library at work ( https://github.com/geldata/gel-rust/tree/master/gel-jwt ) and I can confirm that JWTs all sound like "eyyyyyy" in my head.
eyy lmao
Re: Spotting base64 encoded JSON, certificates, and private keys
#17babby's first base64
Re: Spotting base64 encoded JSON, certificates, and private keys
#18Isn't this obvious to anyone who has seen a few base64 encoded json strings or certificates? ey and LS are a staple.
I thought so too, but xkcd 1053 / lucky 10000, I guess! I knew about ey but not LS
Re: Spotting base64 encoded JSON, certificates, and private keys
#19Isn't this obvious to anyone who has seen a few base64 encoded json strings or certificates? ey and LS are a staple.
IMO depends on your career. I did a lot of pentesting with Burp Suite so I was able to (forced to) pick it up.
Re: Spotting base64 encoded JSON, certificates, and private keys
#20On mobile, the long rows in the code blocks blow up the layout.