Repolode
Submit
gchq

gchq/CyberChef

A browser-based web app for encryption, encoding, compression, hashing and data analysis, often called the Cyber Swiss Army Knife.

Open-source alternative to:Cyberchef Online ToolsBrowserling EncoderHash Calculator

View on GitHubWebsite
Stars
36,197
Forks
4,181
Open issues
601
Last commit
2 days ago

What is it?

CyberChef is a web app for carrying out common "cyber" data operations inside a browser. It covers simple encodings such as XOR and Base64, encryption such as AES, DES and Blowfish, binary and hexdump output, compression and decompression, hashes and checksums, IPv6 and X.509 parsing, and character encoding conversion.

Users build a recipe by dragging operations into a list, feeding them input, and reading the output. Auto Bake re-runs the recipe whenever the input or recipe changes, and breakpoints let you step through each stage. A magic detection feature tries to identify nested encodings automatically.

All processing happens locally in the browser, so input and recipes are not sent to a server. The app can also be run locally with Docker or built from source with Node.js.

Key features

  • 01Drag-and-drop recipe builder with reorderable operations
  • 02Auto Bake re-runs the recipe as input or steps change
  • 03Magic detection tries to decode nested encodings automatically
  • 04Breakpoints and step-through execution for inspecting intermediate data
  • 05Recipes and inputs can be encoded in a shareable URL
  • 06Runs entirely client-side with no data sent to a server

Use cases

  • Decoding and analyzing suspicious encoded strings or payloads during security investigations
  • Converting hexdumps, timestamps or character encodings during debugging
  • Testing encryption or hashing operations without writing code
  • Sharing a reproducible data transformation with a colleague via a link

Quick start

  1. 1

    Install Docker Desktop and make sure it is running

  2. 2

    Run the pre-built Docker image

    docker run -it -p 8080:8080 ghcr.io/gchq/cyberchef:latest
  3. 3

    Open http://localhost:8080 in your browser

Things to know

  • Running from source requires Node.js v24.

In collections

Privacy & local-first toolsData science courses & tools

Topics

#encoding#encryption#hashing#data-analysis#cryptography#web-app#compression#data-manipulation#parsing

FAQ

What is CyberChef?
A browser-based web app for encryption, encoding, compression, hashing and data analysis, often called the Cyber Swiss Army Knife. CyberChef is a web app for carrying out common "cyber" data operations inside a browser. It covers simple encodings such as XOR and Base64, encryption such as AES, DES and Blowfish, binary and hexdump output, compression and decompression, hashes and checksums, IPv6 and X.509 parsing, and character encoding conversion.
Is CyberChef free to use? What license does it have?
CyberChef is open source under the Apache-2.0 license. Check the license terms before using it in commercial products.
Is CyberChef still maintained?
Actively maintained. The last commit to CyberChef was on Oct 23, 2026.
What can I use CyberChef for?
Decoding and analyzing suspicious encoded strings or payloads during security investigations Converting hexdumps, timestamps or character encodings during debugging Testing encryption or hashing operations without writing code Sharing a reproducible data transformation with a colleague via a link
How do I install CyberChef?
Install Docker Desktop and make sure it is running Run the pre-built Docker image: docker run -it -p 8080:8080 ghcr.io/gchq/cyberchef:latest Open http://localhost:8080 in your browser
Where can I get CyberChef?
The source code and installation instructions are on GitHub: https://github.com/gchq/CyberChef

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects