CyberChef: the Swiss Army knife for data
CyberChef turns one kind of data into another. Paste or drop your input, add operations from the list (Base64, hex, URL, hashes, AES, gzip, regex, timestamps, IP and certificate parsing, and about 500 more), and the result updates as you go. It is the official, unmodified app from GCHQ, and it runs entirely in your browser.
About 58 MB on the first visit, then cached.
Open in a full pageCyberChef (GitHub)Source and licence: Apache-2.0 · v11.5.0
How to use it
- •Press Start below. The first load downloads about 58 MB and your browser keeps it for next time; after that it also works offline.
- •Search the operations on the left, double-click or drag them into the Recipe, and type or drop your data into Input. The Output updates as you type.
- •Not sure what an encoding is? Add the Magic operation: it tries common decodings and shows the likely ones.
- •The Recipe and Input are kept in the page address, so you can bookmark it. Careful: a shared link carries your input data too.
Good to know
- •This is the upstream project, version 11.5.0, unchanged. We only host it and describe it; the interface is in English.
- •It is large. Phones and slow connections will wait for the first download, and heavy operations on big files can take a while.
- •Everything is computed in your browser. Nothing you type is sent to obelisk.club or to GCHQ.
- •Licence: Apache-2.0. The licence text, the version and a checksum of the release we host are in the app's folder.
Questions
- Is this the real CyberChef?
- Yes. It is the official release v11.5.0 from github.com/gchq/CyberChef, unmodified. The SHA-256 of the release archive we used is listed in the notice file so you can compare it.
- Does it upload my data?
- No. CyberChef works offline: operations run in your browser, in background workers. You can turn the network off after the page has loaded and it still works.
- Why is the first load so big?
- The app contains the code for about 500 operations, encryption libraries and an OCR engine. Your browser caches it, so later visits are fast.
- Can I save or share my recipe?
- Yes. The recipe is in the page address, and the Save recipe button gives you a short text you can paste into another browser. A link also contains the input, so do not share links that hold private data.
- What can I do with it that the other tools here cannot?
- Chain many steps (for example decode Base64, then gunzip, then parse JSON), try unusual encodings and ciphers, read binary formats, and use the Magic operation to guess what a blob of data is.