CyberChef
CyberChef is a free open-source web app from GCHQ for encoding, decoding, hashing and transforming data during security analysis and investigations.
0 upvotes · 0 downvotes
No ratings yet
- Pricing
- Free
- Platforms
- Web
- License
- Open source
- Reviewed
- Last reviewed 2 October 2026
What it is
CyberChef is a free open-source “cyber Swiss Army knife” originally released by GCHQ (github.com/gchq/CyberChef, live demo at gchq.github.io/CyberChef). Analysts chain browser-based operations to encode, decode, encrypt, compress, hash and parse data without writing one-off scripts for every transformation.
What it helps with
- Decoding obfuscated payloads, encodings and common crypto formats during malware and phishing triage.
- Building reproducible operation recipes for recurring analyst tasks.
- Hashing, compressing and converting timestamps, certificates and structured blobs in one UI.
- Supporting SOC, CTI and reverse-engineering workflows where quick data transforms matter.
- Running fully in the browser from the official demo or a self-hosted build.
- Teaching juniors safe, inspectable data manipulation without opaque helper binaries.
Who it's for
SOC analysts, malware analysts and investigators who need a free, approachable data-transformation workbench beside heavier RE and sandbox tools.
Worth knowing
CyberChef is free and open source (Apache-2.0). Official demo: gchq.github.io/CyberChef; repository: github.com/gchq/CyberChef. Treat untrusted samples carefully even in a browser tool; prefer isolated analysis environments for hostile content.
Discussion & reviews
0 comments
No contributions yet. Be the first to review or comment.