Question 1

Why do attackers use multiple layers of encoding?

Accepted Answer

Attackers stack encoding layers to evade security filters like WAFs (Web Application Firewalls) and input validation. A payload might be URL-encoded, then Base64-encoded, then hex-encoded to bypass pattern-matching rules. Each layer must be decoded in the correct order to reveal the original malicious payload, making detection more difficult for automated tools.

Question 2

What are the most common encoding formats used in cybersecurity?

Accepted Answer

Common encodings include Base64 (used in email, JWTs, and data URIs), URL encoding (percent-encoding for web requests), hexadecimal (used in memory addresses and shellcode), HTML entities (for browser rendering), Unicode encoding, and ROT13. Understanding these formats is essential for analyzing obfuscated payloads and debugging web applications.

Encoding Chain

How to play

Frequently Asked Questions