Burp Suite - Fundamentals

BurpSuite - Decoder

Easy
30 min

What is the Decoder tool?

Decoder - a tool that enables easily performing multiple data transformations. You can transfer data in different formats to the Decoder and manipulate it. This is a highly useful tool that is often needed.

Data compression / Encoding

Let's start by first moving to the tool.

Let's try to perform a simple data transformation, which means first writing some string in the first field. Then select Encode -> Base64. The tool converts the data in the first field to Base64 format and displays it in the second field.

We can continue by selecting one of the options in another field, for example Encode -> Ascii Hex. Now the string is in hexadecimal format.

Data extraction / decoding

Continue by decomposing the data. You can continue in the same way or copy the hexadecimal from the bottom field and move it to the first field. Perform the Decode operations in the correct order and finally you will get the original character string.

The Decoder tool also includes the Smart decode functionality, which attempts to identify the data format and automatically decode it until it no longer recognizes the format.

Test your learning

Objective

You will find an encoded string on the home page. Decode the string so that it forms a secret word and use it as a URL parameter in the HTTP request as follows:

  • /?token=[SECRET WORD]

You will find the ticket from the headings, if the word was correct.

Tip: The string is encoded multiple times.

Exercises

Flag

Find the flag from the lab environment and enter it below.

hakatemia pro

Ready to become an ethical hacker?
Start today.

As a member of Hakatemia you get unlimited access to Hakatemia modules, exercises and tools, and you get access to the Hakatemia Discord channel where you can ask for help from both instructors and other Hakatemia members.