CyberChef

Decode, encode, hash and extract IOCs from any text. Right-click a selection or open the side panel to run CyberChef recipes.

CyberChef turns confusing text into something you can read. Highlight a strange string on any web page (an encoded link, a hash, a token, a block of Base64), right-click, and CyberChef opens it in a side panel next to the page, already decoded. It's built on GCHQ's open-source CyberChef, so you get more than 470 operations for decoding, encoding, hashing and pulling useful details out of text, without leaving the page you're on. HOW TO USE IT 1. Highlight some text on any page. 2. Right-click, choose CyberChef, and pick what you want: open it in the panel, let Magic work out what it is, or run a common operation straight away. 3. The side panel shows the result. Copy it, or keep going and add more steps. You can also click the CyberChef icon in your toolbar to open the panel at any time, then paste text or drop in a file. WHAT IT'S GOOD FOR • Decoding in one click: Base64, hex, URL encoding and more. • Working out what something is: Magic guesses the encoding for you and shows the steps it used. • Peeling back layers: Peel unwraps text that has been encoded several times over and shows every path it found. • Finding the important details: Artifacts pulls IP addresses, domains, links, email addresses, hashes and tokens out of any text, and explains them, such as when a login token expires. • Checking a whole page: Scan this page reads the page you're on, or just your selection, into the panel. • Looking inside files: drop a file on the panel to see its type, size and contents. • Debugging web apps: a CyberChef tab in Chrome DevTools decodes the data a page sends and receives. WHO IT'S FOR • Security analysts and incident responders checking suspicious links, emails and logs. • Developers debugging tokens, API responses and encoded data. • Students and CTF players learning how encoding works. • Anyone who has looked at a jumble of characters and wondered what it says. BUILD YOUR OWN RECIPES Search the full list of operations from the bar at the top of the panel, chain them into a recipe, and adjust every setting. Recipes run with one click. YOUR DATA Decoding happens inside the extension on your computer. Nothing is sent anywhere unless you choose "Open in CyberChef web app", which opens the full CyberChef website with your text. If that text looks like a password, key or token, CyberChef warns you first. Anonymous usage statistics are off unless you turn them on, and never include your text. KEYBOARD SHORTCUTS • Ctrl/Cmd+Shift+K opens the panel. • Ctrl/Cmd+Shift+U runs Magic on the selected text. • Type "chef" and a space in the address bar, then any text, to run Magic on it. Built on GCHQ's CyberChef (Apache-2.0). Not affiliated with GCHQ.