原 PPT 日期： 2025-10-15
此文为codex改编往年课件而成
先把地图点亮
如果你是第一次接触这个主题，不用先背一堆名词。先抓住一个小问题：它解决什么麻烦？输入从哪里来？最后能留下什么证据？
数据转换基础课解决一个常见困惑：安全题目中的字符串为什么会变成二进制、十六进制、Base64 或 JSON。理解编码不是炫技，而是为了还原数据本来的含义。
下面按“概念 -> 例子 -> 可操作的小任务”的顺序拆开。读完不一定立刻变成高手，但至少能知道下一步该点亮哪块地图。
你会学到
- 区分编码、加密和哈希
- 理解常见进制与字符集
- 能在 CTF 或日志中还原数据
1. 为什么要做数据转换
计算机底层处理的是字节，人看到的是文本、图片或协议字段。编码就是在人类可读形式和机器可处理形式之间建立约定。
看到一串奇怪字符时，先判断它像编码、加密还是压缩，不要直接套所有工具暴力尝试。
小提示：报错不是敌人，它通常是在很诚实地告诉你哪一层没对上。
2. 进制与字符集
二进制、十六进制和 ASCII/Unicode 经常一起出现。十六进制适合表示字节，字符集负责解释这些字节对应什么文字。
乱码通常不是“文字坏了”，而是用错了解码方式。记录原始字节比复制乱码更可靠。
小提示：工具是技能栏，不是自动胜利按钮；真正的主角仍然是你的判断链。
3. Base64、JSON 与实战还原
Base64 常用于把二进制数据放进文本环境，JSON 常用于结构化传输。安全分析中，我们经常需要把多层编码逐层拆开。
每还原一层都要保存中间结果，并说明判断依据。这样即使方向错了，也能退回上一层重新分析。
小提示：先别急着开大招，把输入、处理、输出连成一条线，很多问题会自己露头。
动手小任务
- 把一段文本转换为十六进制再还原
- 判断一段 Base64 文本解码后是什么格式
- 解释编码、加密、哈希三者区别
Original PPT date: 2025-10-15
This article was adapted by Codex from previous course slides.
Overview
If this topic is new to you, do not start by memorizing every term. First ask a smaller question: what problem does it solve, where does input enter, and what evidence can we observe?
Data conversion explains why strings appear as binary, hex, Base64, Unicode, or JSON in security tasks.
The article follows a simple path: idea, example, and a small task you can reproduce safely.
Learning Goals
- Explain the main workflow behind Data Conversion Basics.
- Use Data Encoding, Binary, Hex to read commands, traffic, logs, or code with evidence.
- Stay inside authorized lab environments and document each step clearly.
1. Why conversion matters
Encoding is a convention between bytes and human-readable data.
Read it as a small investigation: what enters the system, what changes inside it, and what evidence proves the result?
Side note: Errors are not the villain; they usually point at the layer that does not match.
2. Bases and character sets
Hex represents bytes; character sets explain what those bytes mean.
Read it as a small investigation: what enters the system, what changes inside it, and what evidence proves the result?
Side note: Tools are skill slots, not an auto-win button. The real protagonist is your reasoning chain.
3. Base64, JSON, and recovery
Decode step by step and keep intermediate results for review.
Read it as a small investigation: what enters the system, what changes inside it, and what evidence proves the result?
Side note: Do not rush the special move: draw input, processing, and output first.
Practice
- Summarize the main workflow of Data Conversion Basics in your own words.
- Reproduce one safe observation step and record the evidence.
- Explain one likely risk and one matching defense.