A repository for tools and documentation for learning string encoding & unicode escaping. An effective obfuscation method for writing payloads for web applications.
Commonly used languages are JavaScript, HTML, & PHP for WAF bypass. However, encoding can also assist your efforts as a red team operator when attempting to bypass file upload restrictions.
CyberChef - A versatile web application used to obfuscate or deobfuscate strings. Can be ran offline and used for other scenarios as well.
Dencode - An online string encoder. quickly visualize various methods of encoding and unicode escaping inside the tool for a high-level overview.
Dencode - Unicode Escape - An online unicode escaping tool, quickly visualize escaped payloads for character memorization or use.
W3Schools - HTML URL Encoding Reference - A reference for standard HTML URL encoding and their cooresponding ASCII character values.
HTML URL Encoding - GeeksforGeeks - An alternate reference for HRML URL encoding
Gooogle Admin Toolbox - Encode/Decode - Offers endoding and decoding for SAML, as well as a few code beautifiers
OWASP XSS Filter Evasion Cheat Sheet - Contains working examples of encoded and escaped JavaScript payloads