Turning today's date into this...

[Hartmann]

I am looking at an application and have found that the date is passed through the URL like so: EooG9Vgyu53Fja/uHsKOfg==

That's today's date but I don't understand what method they are using to obfuscate it. Any ideas? And is the == part of it or just extra?

[wwb_99]

Is the app deserializing the date, or are they just using it to look things up against known values?

In any case it is either encoded, encrypted or hashed. Trick is to figure out which one.

[Hartmann]

Is the app deserializing the date, or are they just using it to look things up against known values?

In any case it is either encoded, encrypted or hashed. Trick is to figure out which one.

I've checked CRC32, MD5, and SHA1 with no luck. From what I can tell the application uses the date in conjunction with other fields to look up a record in the database.

[puco]

It's BASE64 and the trailing == are just padding. You can encode/decode using Convert.To/FromBase64*

[Hartmann]

It's BASE64 and the trailing == are just padding. You can encode/decode using Convert.To/FromBase64*

Thanks for the reply. It does appear that Base64 is being used, however there seems to be more to it than I thought.

When I decode the string I get another weird result -

This: WNuyhrd01CMN04wozuky2A==
Becomes This: XÛ²†·tÔ# ÓŒ(Îé2Ø

So I fiddled with it and converted from binary to hexadecimal and received a 32bit string which appears to be an MD5 of the date. Now I just have to figure out the date format. ugh...

[wwb_99]

Is this being used as some sort of token? If so, there might well be more than just a date in there.

[Hartmann]

Is this being used as some sort of token? If so, there might well be more than just a date in there.

I don't think so. In other places where this particular parameter is used it's a date and only a date.

[wwb_99]

Gotcha, good luck. Nothing like playing "figure out what this parameter does." Even more fun when you have to do it on a live site.