Match RegEx Base64

[koby]

Hello Guys ,
My base client language is Hebrew in my case ,

The word "testing" in plain English = "dGVzdGluZw==" in base64.
and the word "testing testing" in plain English = "dGVzdGluZyB0ZXN0aW5n" in bade64.

As you can see , there is no correlation between one word and two word ,
it seems that is language dependency which mean that may need to
be something called "language script" like here : https://www.regular-expressions.info/unicode.html

All the mail client (including gmail) does convert the subject into base64 (default utf-8 as standard).
if the above request will be given solution , than any string in any language (utf-8 supported)
can be used for matching regex rules , and not just English as it now.

Can any one please advice.

Best regards ,
Koby Peleg Hen

 

[Stoiko Ivanov]

The match field what object does decode the header with MIME::Words::decode_mimewords - see https://metacpan.org/pod/MIME::Words
and
https://git.proxmox.com/?p=pmg-api....c0a699a5d8066109c5252bb625648a94;hb=HEAD#l108

so you would need to create your regex for the decoded string (the one with the unicode code-points and Hebrew letters).

sadly this is currently a bit difficult due to :
https://bugzilla.proxmox.com/show_bug.cgi?id=2057

but we're planning to address that soon

I hope this helps!

 

[koby]

The match field what object does decode the header with MIME::Words::decode_mimewords - see https://metacpan.org/pod/MIME::Words
and
https://git.proxmox.com/?p=pmg-api....c0a699a5d8066109c5252bb625648a94;hb=HEAD#l108

so you would need to create your regex for the decoded string (the one with the unicode code-points and Hebrew letters).

sadly this is currently a bit difficult due to :
https://bugzilla.proxmox.com/show_bug.cgi?id=2057

but we're planning to address that soon

I hope this helps!

Thank you Stoiko ,
It would be grate to have it working since the Hebrew phishing Hackers are never sleeping...