Identifying obfuscation/encription method

Viewed 39

I have following string:

soqDi22c2_A-eY4ahWKJV6GAYgmuJBZ3poNNEixha1lOhXxxoucRuuzmcyDD_9ZYp_ECXRPbrBf6issNn23CUDJrh_A5L3Y5dHhB0o_U5Oq_j4rDCXOJ4Q==

It's a query parameter generated by form on a page. (This is done server-side in ASP.net) We are able to submit this form programatically and get the string we need (it just leads to a detail page of an object [realworld parcel/building, publicly accessible]) and redirect our user to it. However I would like to know, if there is a way to decrypt/deobfuscate this string to know what it contains and if we could possibly just generate these without going through the form (it's a multi step form).

The string also has some sort of expiration, so I sadly cannot provide a link to the result page, as it would stop working after like 10 minutes or so.

It feels a bit like it's base64, but after trying to run it through base64 -d, it says it's invalid.

1 Answers

It's likely base64 with + and / replaced with - and _ to make it more browser-friendly. Though even if it's base64-encoded, it may just be a completely random key. You won't nessesarily be able to decode it to something readable.

Related