gchq / gchq/CyberChef

Bug report: Encode_text('UTF-7 (65000)') causes a lot of false-positives in Magic

Open
#2,001 0 comments 1 reaction 0 assignees View on GitHub
bug
Dominant language
JavaScript
Stars
35.8k
Forks
4.1k
Avg merge
2d 26m
Merged PRs (30d)
33

Description

**Describe the bug**
I see the `Magic` operation list `Encode_text('UTF-7 (65000)')` results with low entropy (giving the if they're good).

I think the magic operation should skip UTF-7 encode operation unless "Extensive language support" is enabled.

Example:

![Image](https://github.com/user-attachments/assets/754fca87-be9f-4d0c-ba5d-c9c7fc53a7c3)

**To Reproduce**
Paste any random hexadecimal string in the input, use the `Magic` operation.

**Expected behaviour**
Operations that have high change of false positives should be avoided by default.

**Desktop:**
- CyberChef version: 10.19.0

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.