Skip to main content

Questions tagged [encodings]

A mapping of a given code to values or semantics. Guessing the meaning of an encoding requires a lot of trials but some encoding are standard and can be guessed quite easily.

Filter by
Sorted by
Tagged with
0 votes
1 answer
43 views

Is there any way to read the data in STC11F02E?

I need to read the data from the STC11F02E microcontroller. Is there a way to do this?
akifh's user avatar
  • 1
0 votes
0 answers
41 views

Decoding API headers of unknown encoding?

I'm using mitmproxy to monitor facebook messenger app traffic on my android. Firstly I had to enable whitehat settings to use it. After that I found some request headers has some unknown value in body....
Wojciech Wolski's user avatar
1 vote
0 answers
45 views

Unknown string encoding

I'm new to reverse, my question may be stupid. I am trying to reverse a function in the application that reads a string at the address and concatenate it to another char[250] v30; char[20] v31; ... ...
SHVED's user avatar
  • 11
0 votes
0 answers
60 views

How to replicate this encoding algorithm

I am writing a helper script at work for when new people start work and need help setting up respective applications - the application will write configuration files to be loaded into the various ...
Chokehold's user avatar
1 vote
0 answers
73 views

Reverse engineering from sets of data

I'm starting in the world of reverse engineering, for educational purpose, by studying a (supposed-to-be) relatively simple system as black-box. The system uses a NFC Mifare 1k badge to store ...
Jib's user avatar
  • 111
2 votes
1 answer
67 views

Keycode from a serial PDA keyboard (iPAQ G750)

I have a folding PDA keyboard (model number iPAQ G750). It is using a proprietary serial protocol, I want to adapt it to Bluetooth using a micro controllers. The keyboard sends out a 2-byte keycode ...
Xinming Chen's user avatar
0 votes
0 answers
40 views

Help on identifying encryption/encoding scheme

I am trying to find the encryption used in a legacy database. The db is from 2003, and it is stored on a dbf (FoxPro) file. The following are supposed to be ZIP numbers, more specifically, are ...
Grigoris L. 's user avatar
0 votes
0 answers
28 views

Why would unreadable data recovered from a drive be non-recoverable?

I ran Disk Drill on a drive that was a member in a failed software RAID mirror on macOS. The drive seemed to be fine, but was showing up as "uninitialised", so the drive didn't fail as such ...
Iain Dooley's user avatar
0 votes
0 answers
41 views

Agilent Gen5 files

Does anyone know how to decode these agilent gen5 files for detection (xpt), or know of a tool/script that can extract the information? They have some example files on their website. https://www....
A Simple Programmer's user avatar
1 vote
1 answer
69 views

Unsure how LZSS compression is assigning dictionary references

I am having trouble understanding how this LZSS compression assigns dictionary match references. This particular LZSS compression algorithm has a dictionary space of 4096 bytes that are assigned 0 to ...
fishygobyebye's user avatar
1 vote
0 answers
182 views

How can I extract the timestamp from this bytestring?

I am missing a piece of the puzzle that is the TCP protocol the Battlefield Bad Company games use to transfer dogtag records to/from the FESL backend. The general packet structure is quite clear and I ...
cetteup's user avatar
  • 11
1 vote
0 answers
151 views

How to identify encoding algorithm used

I'm using a calendar application, and each date is encoded. I would like to know which algorithm has been used to do this. Example: I have a date: 05-10-2023 ('mm-dd-yyyy') and it's encoded string is ...
JigolKa's user avatar
  • 19
2 votes
0 answers
102 views

Android game reverse http request body

I'm trying to reverse request that are made to an android game to learn more about how it works. I was able to find endpoints requests that are made with frida and mitmproxy but now I'm stuck because ...
Florent Trust's user avatar
3 votes
1 answer
61 views

GNU strings with --encoding=S

I have two binaries. Both contain the string "precondition failed" (without the quotes). The corresponding byte sequence 70 72 65 63 6C 65 64 00 is the same for both binaries. However, the ...
langlauf.io's user avatar
  • 1,560
1 vote
0 answers
175 views

Decode encoded XHR/Ajax response payload

I'm trying to access a site using it's API with Insomnia client, but some XHR responses are encoded, it seems. I don't know the exact algorithm that's being used (but it's not base64, I tried decoding)...
Suresh-Patil's user avatar
4 votes
0 answers
1k views

Reverse engineering and exactly re-creating a QR code

The Casio FX-991EX calculator has a QR code feature for accessing the current equation from another device. It supports version 3 QR codes for some menus and version 11 for most menus. For example, ...
hopperelec's user avatar
3 votes
1 answer
203 views

Simplifying and reversing an encryption/decryption algorithm in ASM X86 / Python

I'm trying to reverse a decoding function in order to produce the function for encoding (for the curious this is a save game for a legacy adventure game which use codes for saving). So far I have ...
Simon's user avatar
  • 31
1 vote
0 answers
80 views

Invalid "Variation" of a base64 encoding

I am starring at the following which looks like base64 but not quite: t=base64.b64decode('gAKrEgADAAFwEgACAAFwEgACAAhmYWlybmVzcxIACQAGcmVzdWx0B0ANMzMzMzMzAAZudW1iZXIHQHdO+...
montovaneli's user avatar
2 votes
0 answers
20 views

Encoding scheme identification of the following communication message

I'm trying to RE an app for educational purposes. So here is the behavior of the app. When the app starts, it communicate with a server in plain tcp and based on those tcp messages, it either work as ...
user41419's user avatar
0 votes
0 answers
103 views

Reverse engineering what seems to be a checksum used for RS232 packets

I will try to be as concise as possible: the issue is, I'm trying to develop a custom application for a dielectric tester. I have access to the original program, which was made some 20 years ago or ...
Davide's user avatar
  • 1
1 vote
1 answer
429 views

2-byte checksum

I cannot figure out what checksum is used for the following communication. As I understand, 450D is the “stop” part. It doesn't change no matter what. And the two bytes before 450D are the “checksum”. ...
kostinalex's user avatar
2 votes
1 answer
176 views

433MHz Protocol: Unknown Three-Symbol-Encoding within the OOK data

Reverse engineering the protocol of a remote-controlled wall socket (433MHz On-Off-Keying) revealed an embedded pattern which apparently uses three symbols (besides 0s). Symbol A = 000001 Symbol B = ...
Semnodime's user avatar
  • 143
1 vote
1 answer
697 views

Decoding API response of unknown encoding?

I'm using Proxyman to inspect the api requests of an app I use. Most of the data is returned in plain JSON blobs but there is one response which is returning data encoded/encrypted. How can I go ...
Nerdsie's user avatar
  • 11
0 votes
0 answers
250 views

QR-Codes of Temial-Teamachine

I have a tea-machine that reads QR-Codes and brews the tea accordingly. I want to generate my own codes. I have the following codes (and more): Copy/Paste of the C-Column L7UMQRQCQAZBD OYXPVAANAB4ZE ...
NDDT's user avatar
  • 101
0 votes
1 answer
85 views

Unknown binary format of a b64-encoded list of doubles

While reverse engineering a database middleware. This is presumably encoding a list of double or float values with Base64 encoding and then compressing it. Via zlib.decompress() I was able to ...
Stefan Wobbe's user avatar
0 votes
0 answers
297 views

Decoding Game data

I am very new to this whole business so please bear with me. Goal: Am trying to decode data from a post request from game to server starting with Q0. Most of the game data is encoded in Base64, but ...
Yods's user avatar
  • 1
0 votes
2 answers
1k views

Can you get the error-correction level of a QR code?

You can get the version number of a QR (1-40) by checking the dimensions of the QR, but is there a way to get the error-correction level that was used to generate the QR code? Trying to reverse ...
Nemo's user avatar
  • 101
1 vote
0 answers
330 views

How to retrieve the encryption key from a dll file?

I have a dll file that makes an http post request to a webserver , request looks something like this : UmdUsFrEB3wGMuuAz1Znywuedx6+...
Sanders's user avatar
  • 11
2 votes
1 answer
96 views

The Logic Of Incremental Data on Serial Communication Encoding

These are the serial communication reverse values. I am trying to understand the logic behind this. I am pretty sure that 2 bytes represent 1 byte(high byte and low byte), values are correct. I tried ...
ömer faruk Cebir's user avatar
1 vote
1 answer
139 views

What encoding is this?

This is a picture of the encoded code. I'm just wondering what is the encoding that it is using.
Guest's user avatar
  • 11
1 vote
1 answer
2k views

How to find encrypted strings in an executable?

I am trying to reverse engineer an executable. I am using Process explorer to dump all strings present in the exe image, and from the process's RAM when it is running. The two dumps return a ...
Sahil Singh's user avatar
-2 votes
2 answers
1k views

CyberChef Challenge #21

The challenge data/input is: ...
CtfLover's user avatar
1 vote
2 answers
2k views

How to convert hexadecimal values to 16-bit Unicode in IDA Pro 7.5?

The context: For a student project which goal is to make us learn reverse engineering and how to use IDA Pro, we have to reverse engineer the APT28 hospitality malware (as described in this blog post: ...
DisplayNeth's user avatar
0 votes
1 answer
63 views

Encoding of 64-bit double

I'm in the process of reverse engineering a USB driver, and I'm having problems finding a way to decode the binary representation of double values. The values don't seem to be encoded in IEEE-754 ...
Rune's user avatar
  • 3
0 votes
0 answers
1k views

Decoding messages sent/received by Python websocket client

I am using the websocket module for my client in python3, and I am trying to troubleshoot some errors I am getting that lead to the client disconnecting after seemingly random intervals. When I ...
FlackOverstow's user avatar
3 votes
3 answers
2k views

Reverse engineering a partially known binary format

I have files with binary data, the format description of them is very vague and incomplete. E.g., it states that records start with header byte, like (hex) FA, followed by datetime (accurate down to ...
S. Kalabukha's user avatar
2 votes
1 answer
455 views

Decode bitmaps from Director .dxr files

I'm trying to extract bitmaps from an old Macromedia Director protected .dxr file. I was able to find some information about the file structure from here (it turns out to be a XFIR container, the ...
Álvaro G. Tenorio's user avatar
0 votes
0 answers
77 views

Looking for encoding of SVG data

I have some SVG images stored in a database; but I am not able to find out which encoding is used. Unfortunately, I don't have the exact SVG plain text available. The given examples "probably&...
Dominik Lübbers's user avatar
0 votes
1 answer
81 views

Password evaluated from the sum of ASCII letters

After analyzing the code, I have been able to understand and recreate the algorithm used to check if the password the binary takes is correct, but don't know how to solve it (or at least can't think ...
M4l1s's user avatar
  • 3
6 votes
2 answers
24k views

Trying to decode the Ontario Driver's License #

**The Ontario Driver's License follows the below format:** LXxxx-FFFMY-YMMDD Where: L is the first letter of your last name X is a numeric encoding of the last name (See Chart 1 below) xxx is a ...
DTS's user avatar
  • 61
0 votes
0 answers
92 views

What kind of integer obfuscation is this?

I'm looking at the network traffic of a game submitting the user's score to the high-score server. The score value seems to be obfuscated in some way. The score is a non-negative integer, and not more ...
igk's user avatar
  • 1
1 vote
0 answers
177 views

What is the URL format for Google Trends?

When you search for the search term Tesla or AOL you get the following URLs: https://trends.google.com/trends/explore?geo=US&q=Tesla But, for the automobile maker, you get: https://trends.google....
pathikrit's user avatar
  • 111
1 vote
0 answers
293 views

Determining the encoding of an unknown image format [closed]

I'm trying to reverse engineer a REST API and there is an endpoint that delivers images. Some of them are jpegs but other ones look like they're base64 encoded, except they don't appear to be, as they ...
ground_head's user avatar
2 votes
1 answer
132 views

The questions about li instruction

When reversing a MIPS binary using IDA Pro, I have 2 questions. The source code is as follows. int main(int argc, char* argv[]) { int m = 1; int n = 5; printf("sum = %d\n", m+n); } ....
user6903's user avatar
  • 411
1 vote
1 answer
155 views

Which JSON object compact binary serialization is this?

I am trying to reverse engineer an unknown JSON binary serialization format found in a request-response pair between a mobile app, and a server. Does anyone recognize this? I've attached the first ...
Joe's user avatar
  • 11
1 vote
1 answer
187 views

Encoding method of float

I'm reversing this game and got stuck. To make it simple, You have some amount of coins in the game (float or double) and you can spend it on some things. I started sniffing network traffic and ...
Ojs's user avatar
  • 203
0 votes
2 answers
731 views

How to wire up a rotary encoder with a "0v" connection?

I have a servo motor with rotary encoder salvaged from an old scanner. I'm trying to figure out how to re-use it in a DIY CNC machine. By reading through the engineering manual from the original ...
111936's user avatar
  • 13
2 votes
2 answers
378 views

How to identify the encoding performed on this string

I have an old application that stores the username and password in plaintext but encoded by an unknown encoding algorithm to me, it seams like base64, but I think it's not, It seams that any word ...
ksr's user avatar
  • 23
0 votes
0 answers
293 views

Reverse Engineering a Vehicle Identification Number (VIN) encoding

Not sure if this is the right place so please point me to the right place if needed. I have an input of a VIN (Vehicle Identification Number) number with 17 characters, each character is either an ...
Andrew Xia's user avatar
1 vote
0 answers
803 views

Is there any way to change the encoding of an exe file?

I have an exe file and it will browse the xml, or txt files to display this exe file. And the characters only display the exact language of that country when I switch the language of the computer to ...
sycoi001's user avatar