Decoder
Last updated
Last updated
This is a useful tool for performing manual or intelligent decoding and encoding of application data.
In Burp, go to "Proxy" > "HTTP history" tab.
Open the display filter by clicking on the filter tab.
Enter the search text ==
in the search box under the "Filter by search term" section.
Select the POST request to /login
page.
In the request body, select the base64 encoded text value for the parameter "JSESSIONID3".
Right-click and select "Send to Decoder" option.
Switch to the "Decoder" tab.
In Burp > "Decoder" tab, click on the "Decode as ..." dropdown menu, and select "Base64" option from the dropdown list.
You should see the decoded text in a new box.
In "Decoder" tab, overwrite the value in the first input box with following value:
Click on "Encode as ..." > "URL".
The URL encoded value should appear in a new table.
Click on "Encode as ..." > "HTML".
The HTML encoded value should appear in a new table.
Click on "Smart decode" button, against the box that holds (URL + HTML) encoded value, to see the original URL being retrieved automatically by Burp Decoder.