CyberChef is a simple, intuitive web app for carrying out all manner of "cyber" operations within a web browser. The tool is designed to enable both technical and non-technical analysts to manipulate data in complex ways without having to deal with complex tools or algorithms.
This is the Gaijin.at version with additional operations not included in the original version.
Get the source code for Gaijin.at CyberChef on GitHub or get the original GCHQ CyberChef on GitHub.
Gaijin.at version of CyberChef - have fun!
A brief overview of CyberChef and a description of its main features
Analyses the bytes in the input and displays statistics about them. A histogram shows the distribution of the individual bytes.
This operation is similar to the operation "Frequency distribution".
The main differences are:
"ASCII character range for regular expressions" can be used in regular epressions to match the text or to see the character encoding used. Example: A hexadecimal string written in lower case with all possible digits and letters results in the character range [0-9a-f]
and a Base32 encoded text produce [2-7A-Z=]
.
Converts one or more bytes to a decimal number.
The bytes at the specified offset are converted to an unsigned integer depending on their length (Byte, Word or DWord). QWords are converted to a signed integer.
Outputs the entered text. This is useful to output text with stored registers.
Example: Assuming $R0
is 12
and $R1
is Test
, the string "$R1" was found $R0 times.
will output "Test" was found 12 times.
.
Fills the input with one or more characters until the specified length is reached. This is useful to align text left or right, or to center a text.
In contrast, the original operation "Pad lines" adds a certain number of characters to the input.
Example: Assuming Position
is set to Start
, Length
is 3
and String
is 0
, the input 5
will be output as 005
.
Adds the specified text to the beginning and/or end of each line, character or the entire input.
Includes support for simple strings and extended strings (which support \n, \r, \t, \b, \f and escaped hex bytes using \x notation, e.g. \x00 for a null byte).
Takes a defanged Universal Resource Locator (URL) or IP address and 'Refangs' it. This is the counterpart to the 'Defang URL' and 'Defang IP Addresses' operations.
Additionally, [DOT]
and [AT]
can be replaced and spaces can be removed.
Stores the input value and restores it later as output.
Store stores the input under the given name. Restore restores the input with the given name as output. Clear removes the stored input with the given name. Without a name, all stored inputs will be removed.
You should deactivate 'Auto Bake' for this operation.
This operation can be useful if you need to process the original input - or any other value - with different operations. The inputs can be stored and restored inside and outside of a Fork
or Subsection
.
Takes a slice of the specified number of bytes from the data. Negative values are allowed.
The start position (offset) is taken from a position in the data. The position must be a Byte, Word, DWord or QWord integer value. QWords are converted to a signed integer.
Example: A file header contains the position of a UNIX timestamp at offset 40 as a 16-bit integer. With 40
as Position Start
, 2 (Word)
as Position Length
and the Length
4
, the timestamp is output.
Removes all white-spaces and line breaks from the beginning, end or both of the input data.
The Gaijin.at version of CyberChef is released under the Apache 2.0 Licence.