Skip to content

CyberChef#

README

Cyberchef#

Cyberchef is a simple, intuitive web app for carrying out all manner of "cyber" operations within a web browser. These operations include simple encoding like XOR or Base64, more complex encryption like AES, DES and Blowfish, creating binary and hexdumps, compression and decompression of data, calculating hashes and checksums, IPv6 and X.509 parsing, changing character encodings, and much more.

The analyzer comes in three flavours to help you convert from base64, hex or CharCode.

Requirements#

You need to deploy Cyberchef-server on your infrastructure.

The url of the server must be used to configure the url parameter.

CyberChef_FromBase64#

Author: Wes Lambert
License: AGPL-V3
Version: 1.0
Supported observables types:
- other
Registration required: False
Subscription required: False
Free subscription: False
Third party service: https://github.com/gchq/CyberChef-server

Description#

Convert Base64 with CyberChef Server

Configuration#

url CyberChef Server URL
Default value if not configured http://192.168.1.178:3000/
Type of the configuration item string
The configuration item can contain multiple values False
Is required True

Templates samples for TheHive#

Cyberchef: long report

CyberChef_FromCharCode#

Author: Wes Lambert
License: AGPL-V3
Version: 1.0
Supported observables types:
- other
Registration required: False
Subscription required: False
Free subscription: False
Third party service: https://github.com/gchq/CyberChef-server

Description#

Convert Char Code with CyberChef Server

Configuration#

url CyberChef Server URL
Default value if not configured http://192.168.1.178:3000/
Type of the configuration item string
The configuration item can contain multiple values False
Is required True

Templates samples for TheHive#

Cyberchef: long report

CyberChef_FromHex#

Author: Wes Lambert
License: AGPL-V3
Version: 1.0
Supported observables types:
- other
Registration required: False
Subscription required: False
Free subscription: False
Third party service: https://github.com/gchq/CyberChef-server

Description#

Convert Hex with CyberChef Server

Configuration#

url CyberChef Server URL
Default value if not configured http://192.168.1.178:3000/
Type of the configuration item string
The configuration item can contain multiple values False
Is required True

Templates samples for TheHive#

Cyberchef: long report