Base64 checking

[Ekultek]

Hi, I really like the idea of this tool. I also noticed that the base64 encoding is broken so I had a couple ideas for you;

This regex will be able to tell; ([A-Za-z0-9+/]{4})*([A-Za-z0-9+/]{4}|[A-Za-z0-9+/]{3}=|[A-Za-z0-9+/]{2}==) of course there are issues with this because a string that looks like base64 will be returned as true.

You can check the length of the string and see if it’s divisible by 4;

def is_64(string):
    if len(string) % 4 == 0:
        try:
            base64.b64decode(string)
        except:
            return False
    return False;

You could also do a mixture of both if you wanted. Good luck and good job!

[Ekultek]

Hi, I have an update for you in reference to this. I have a tool that parses burp files as well, and this is the most successful and elegant way I’ve come up with on how to successfully test for base64 encoding https://github.com/Ekultek/WhatWaf/blob/master/lib/settings.py#L443