Hey everybody.
Welcome to the next video.
So in this video we're going to be talking about you are all encoding.
So what is your oral encoding your old encoding is similar to hex in the aspect that it's not quite
a quote encoding.
It's more of a substitution.
So we're going to go over that in just a second.
What I want to hit on these some other points.
A Web site you URL is required to have an ASCII only based character passed through.
Now that's important to understand that you can't be throwing weird characters into your URL.
It'll try to convert it but ultimately the web server won't know what to do with it unless it's specifically
expecting it.
And most are not.
So for example a space cannot be interpreted as a space itself as in the the ASCII character space it
needs to be converted to its decimal based format.
Now what I want to take over is you know how on the hex table or the ascii table we looked up a digit
or or a character.
So in this case in this case a capital A We got 0 x forty one because 40 what was under the hex column.
However if you look at that table again you'll see more than just hex you'll see digit or Dec or decimal
or DTC.
This is important because this is the value that is represented for you are L encoding it's also important
to understand that the percent sign is pretended at the beginning to any conversion character that happens
in a year or else.
So let's take a look for example if we see HDP s Red Team nation dot com Mr. go in there.
I'll fix that Slash.
This is a test plus test.
So when you submit that you're not you're submitting the plus but the browser already has the specs
and regulations for each TTP.
So it already knows it needs to convert the plus side.
So what happens here is when you when you submit it the browser will convert the plus two to forty three
or percent forty three.
So if you look at the ascii table for plus you're going to see under the deck or decimal column the
number forty three.
So in turn you'll see Reggie mention dot coms This is the test percent forty three test so get familiar
with this process.
There's there's not too much more to go into it just understand that this is what happens.
So when you start messing around with sequel injection or things along that when you start seeing these
weird percentages pop up that's what it is.
It's converting a specific special character or some sort of character into its digit form so it can
represent it on the back end in a more formatted way without having to worry about some random straight
character that it might not understand.