0

I was browsing this website and tried to look at the network calls from the API which retrieves the data.

enter image description here

As you can see, the response payload is encrypted but the browser still shows the necessary data correctly. I am assuming that there is a key that is somehow derived over at the client to decrypt the payload. Does anyone know the general mechanics of encrypting/decrypting data like this? Thanks.

EDIT: I should add that base64 decode doesn't help (or I am doing it wrong?)

Improve this question
6
  • Might be doing the b64 decode wrong. Has the tell-tale "==" ending that makes me think it's base 64.
    – foreverska
    May 25, 2022 at 21:19
  • I tried all sorts of formats (utf-8/16,ISO-*). How can I be sure that I am doing it wrong? I just copy pasted the encoded payload in one of the online base64 decoders.
    – sandyp
    May 25, 2022 at 21:36
  • It's quite possible that this site uses the web crypto api or a similar library to do client-side in-browser cryptography in javascript.
    – mti2935
    May 25, 2022 at 22:39
  • Why are you looking at the response to the GET and not the response to the POST?
    – John Wu
    May 26, 2022 at 6:36
  • @JohnWu How does that matter?
    – sandyp
    May 26, 2022 at 17:52

0

Reset to default

You must log in to answer this question.

Browse other questions tagged .