常见Base编码总结

    为了自己在手机上也能看,所以就干脆把OneNote上总结的放到上面了。当然只是粗略的总结,看个乐子就行。(以下内容为全散装英文)

Base encode example: (example plain text: helloworldwouldyOul1keacuppaT?)

Base 16: 68656C6C6F776F726C64776F756C64794F756C316B65616375707061543F

Base 32: NBSWY3DPO5XXE3DEO5XXK3DEPFHXK3BRNNSWCY3VOBYGCVB7

Base 36: (only support integers) (encode: integer to string/ decode: string to integer, string can only include int & letters)

Base 45: +8D VD54E04ESVDK4F0%EQVC12AMUD/PD1EC4%EE9ECTA

Base 58-Bitcoin: MvFkp8LAtxbJUbwf5oQc84QxmFnck3TL1QrCXt9Rx

Base 62: 1S1blgSwJnRVZjRyUMfjPS6tGh4IETd1xaAZuHf6F

Base 64-Standard: aGVsbG93b3JsZHdvdWxkeU91bDFrZWFjdXBwYVQ/

Base 85-Standard: BOu!rDg-,?Ch.a.F_kT6:N^J.CLppaF`;;.<'L

Base 91: TPwJh>B|KUVzB_apoMR>t]AI>#}u58xnEE`:P

Base 92: Fc_$aOe!yuo7,OMNH,TA7fc%)|j=A8^>IQ0yb

Base 100: 👟👜👣👣👦👮👦👩👣👛👮👦👬👣👛👰👆👬👣🐨👢👜👘👚👬👧👧👘👋🐶

Characteristic:

Base 16: A string which only include hexadecimal numbers (all letters are uppercase), with numbers more than letters.

Base 32: Use only uppercase letters & numbers 2~7, encoded text is 8/5 times longer than plain text, adds up "=" at the end of encoded text if binary digit lower than 40. May contain 6/4/3/1/0 "="s. depending on plain text length. (length%5=1/2/3/4/0)

Base 36: Using all uppercase letters & numbers. Can be considered as a 36-decimal (Hexatrigesimal) calculation.

Base 45: Using all Base 36 and "[Space]" "$" "+" "-" "*" "/" "." "%". Separate every 2 bytes as a whole unsigned int, then convert to 3 digits in 45-decimal (Pentaquadragesimal) form, in the end convert them to the Base 45 alphabet in reverse order.

Base 58: Using the same as Base 64 except for "0" "O(upper o)" "l(lower L)" "I(upper i)" "+" "/" in order to avoid mistaking. Can be considered as a 58-decimal (Octoquinquagesimal) calculation.

Base 62: Using all letters & numbers. Can be considered as a 62-decimal (Duosexagesimal) calculation. Often used to make long URL shorter.

Base 64: Use upper/lowercase letters & numbers 0~9 & "+""/", turning 3 8-digit byte to 4 6-digit byte and add 2 "0"s in each 6-digit byte to make up a 8-digit byte, so encoded text is 4/3 times longer than plain text. May contain 0/1/2 "="s depending on text length. (length%3=0/2/1)

Base 85: Use upper/lowercase letters & numbers 0~9 & "!" "#" "$" "%" "&" "(" ")" "*" "+" "-" ";" "<" "=" ">" "?" "@" "^" "_" "`" "{" "|" "}" "~". Turning 4 bytes to 5 chars by transforming 4 continuous chars' ASCII into int then 85-decimal of 5 chars, then add up 33 of each new char as ASCII. Encoded text is 5/4 longer than plain text.

Base 91: Using all ASCII chars except for " - " "\" " ' ". Similar to UUencode & Base 64, but more efficient. Encoded text is about 114%~123% longer than plain text. Useful for uploading large files on unsafe binary links. One variant uses "\" in place of " " ".

Base 92: Using all ASCII chars except for " " " "`" due to confusability.

Base 100: Encoded by emojis, each emoji represents one char in string. (Similar to Wingdings fonts)

Conclusion

    All Base encoding can be considered as a **-decimal calculation while each of them has a specific alphabet for conversion (if the number is lower than 94, which refers to ASCII, of course.). Actually, there are more Base encoding than these shown above, but they are the most used ones.

    There may be variations of these Base encodings, e.g. Z85/IPv6 for Base 85, Atom128/Megan35/XML/(and much more) for Base 64 etc. These variations cannot be all shown here, so you'll have to trial-and-error.

  • 1
    点赞
  • 4
    收藏
    觉得还不错? 一键收藏
  • 1
    评论
文件包含(LFI)和远程文件包含(RFI)是一种常见的安全漏洞,允许攻击者在应用程序中包含恶意文件或代码。LFI漏洞是指应用程序中允许用户通过文件包含功能来读取本地文件的漏洞。而RFI漏洞则是指应用程序中允许用户通过远程URL来包含外部文件的漏洞。这两种漏洞都可能导致攻击者获取敏感信息或者执行恶意代码。 伪协议编码算法是一种常见的技术,用于绕过安全控制并执行特定的操作。在这里提到的伪协议包括"php://filter"和"convert.base64-encode/decode"。通过使用这些伪协议,攻击者可以对文件进行编码解码,从而绕过安全限制。 代码审计是一种评估应用程序源代码的过程,旨在发现潜在的安全漏洞和其他问题。通过仔细分析应用程序的代码,可以确定是否存在可能导致文件包含漏洞或其他安全问题的缺陷。 总结起来,文件包含漏洞和远程文件包含漏洞是一种常见的安全漏洞,可以通过伪协议编码算法来绕过安全限制。代码审计是一种评估应用程序源代码的方法,可以帮助发现和修复这些漏洞。<span class="em">1</span><span class="em">2</span><span class="em">3</span> #### 引用[.reference_title] - *1* [WEB攻防-通用漏洞&文件包含&LFI&RFI&伪协议编码算法&代码审计](https://blog.csdn.net/m0_65336233/article/details/127363413)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_common_search_pc_result","utm_medium":"distribute.pc_search_result.none-task-cask-2~all~insert_cask~default-1-null.142^v93^chatsearchT3_1"}}] [.reference_item style="max-width: 50%"] - *2* *3* [day42 文件包含&LFI&RFI&伪协议编码算法&代码审计](https://blog.csdn.net/hesysd/article/details/128248212)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_common_search_pc_result","utm_medium":"distribute.pc_search_result.none-task-cask-2~all~insert_cask~default-1-null.142^v93^chatsearchT3_1"}}] [.reference_item style="max-width: 50%"] [ .reference_list ]

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论 1
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值