Skip to content

Instantly share code, notes, and snippets.

@raresteak
Created August 18, 2023 13:15
Show Gist options
  • Save raresteak/4b8729b90b04c1ab47b02cc36cc06f3e to your computer and use it in GitHub Desktop.
Save raresteak/4b8729b90b04c1ab47b02cc36cc06f3e to your computer and use it in GitHub Desktop.
CyberChef Recipe for two base64 decodes with xor bit manipulation
From_Base64('A-Za-z0-9+/=',true,false)
Decode_text('UTF-16LE (1200)')
Regular_expression('User defined','[a-zA-Z0-9/+=]{30,}',true,true,false,false,false,false,'List matches')
From_Base64('A-Za-z0-9+/=',true,false)
Gunzip()
Regular_expression('User defined','[a-zA-Z0-9/+=]{30,}',true,true,false,false,false,false,'List matches')
From_Base64('A-Za-z0-9+/=',true,false)
XOR({'option':'Decimal','string':'35'},'Standard',false)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment