Bases

Description

Solution

1. Step 1Decode the Base64 string
   The string looks like Base64 -- it uses only letters, digits, +, /, and = for padding. Pipe it through base64 -d to decode it directly in the terminal.
   echo "bDNhcm5fdGgzX3IwcDM1" | base64 -dCopied!
   Learn more

   Base64 is an encoding scheme that represents arbitrary binary data using only 64 printable ASCII characters: uppercase A–Z, lowercase a–z, digits 0–9, plus + and /. An = character is used for padding when the input length is not a multiple of 3 bytes. Because it produces only printable characters, Base64 is widely used wherever binary data must travel through text-only channels such as email, JSON APIs, and HTML data URIs.

   The encoding works by taking 3 input bytes (24 bits) at a time and splitting them into four 6-bit groups. Each 6-bit value (0–63) maps to one of the 64 characters. The result is always 4 characters per 3 bytes of input -- a 33% size overhead. Decoding simply reverses this process.

   Identifying Base64 in CTF challenges is a core skill. Key indicators include:

   • Length is a multiple of 4 (possibly with trailing = padding)
   • Only uses the characters A-Za-z0-9+/=
   • Length is roughly 4/3 of the original data size

   Base64 is not encryption -- it provides zero confidentiality. Anyone who recognizes the encoding can decode it instantly. Do not confuse encoding (a reversible representation change) with encryption (which requires a secret key). In real-world security, Base64 appears in JWTs, X.509 certificates (PEM format), and HTTP Basic Authentication headers.

Flag

picoCTF{...}

Base64 encodes binary data using 64 printable ASCII characters. The trailing = padding is optional when the input length is a multiple of 3 bytes.