jspaint VS CyberChef

This is by the same person who made jspaint. https://github.com/1j01/jspaint Some of the other projects by the author are also very interesting https://github.com/1j01?tab=repositories&q=&type=&language=&...

There is this pipes screen saver for example https://1j01.github.io/pipes/

This was unreasonable hard to make in "ms paint"

First comic I actually drew with MS Paint (or rather https://jspaint.app).

"A hungry wolf stands outside a house made out of straw. You, a bad bad wolf Little pig, little pig, let me in! Me, the humble pig No, not by the hairs of my chinny chin chin! You, the wolf growing hungrier by the minute Then I'll huff, and I'll puff, and I'll blow your house in! Please solve possible solution for X to blow down straw house." For drawing the character: https://jspaint.app/

Have you tried one of the browser ones like https://jspaint.app/

I can confirm that the jspaint.app that you mentioned does not run on the Paperwhite browser. It tries to load an crashes rather quickly. The Kindle has what is sometimes described as an "experimental browser." It will run some JavaScript, but it seems that certain JavaScript syntax will not work. Also, to the extent that it does work, the browser is quite slow.

Also https://jspaint.app (MIT-licensed web remake)

i also edit it using https://jspaint.app since i have a macbook.

Then we take the encrypted text and use CyberChef to decrypt it.

Let's go to CyberChef and insert our pieces of evidence.

A parameter was changed from '2AMBCgIQBg' to 'CgIIAdgDAQ%3D%3D' which is just the correct base64 encoding they should have been using the entire time.

I don't think this was a hostile action by Google, I think someone just added better input validation for security reasons and it accidently broke the bad requests they were sending.

https://gchq.github.io/CyberChef/#recipe=URL_Decode()From_Ba...

❗This is indeed the flag, but the text is encrypted with Base64. Usually, the presence of padding character "=" indicates that's Base64 type of encoding (but that's only one of the hints). To decrypt it, we can use CyberChef. Copy-paste the text and we either:

It uses a combination of magic bytes (like the `file` command), entropy analysis and character frequency detection to determine whether an output is likely to be of interest to the user.

The file type mechanism is written here[0]. There's a list of all signatures we detect here[1].

[0] https://github.com/gchq/CyberChef/blob/master/src/core/lib/F...

I think this can be deciphered using CyberChef...