Back to Arkime

CyberChef

viewer/public/cyberchef.html

6.3.110.2 KB
Original Source

star

Download CyberChef file_download

Options settings About / Support help

Operations

Recipe keyboard_arrow_up save folder delete

Step Bake!

Auto Bake

Input

add folder_open input delete view_compact

< ··· Go to tab Find tab Close all tabs >

Output

archive save content_copy open_in_browser fullscreen access_time

< ··· Go to tab Find tab >

Save recipe

Recipe name Save your recipe to local storage using this name, or copy it to load later

Save Done

Deep link

Include recipe Include input

Load recipe

Recipe name Load your recipe from local storage by selecting its name from the drop-down

Recipe Load your recipe by pasting it into this box

Load Delete Cancel

Options

Please note that these options will persist between sessions.

Theme (only supported in modern browsers) ClassicDarkGeoCitiesSolarized DarkSolarized Light

Console logging level SilentErrorWarnInfoDebugTrace

Update the URL when the input or recipe changes

Highlight selected bytes in output and input (when possible)

Word wrap the input and output

Show errors from operations (recommended)

Operation error timeout in ms (0 for never)

Use meta key for keybindings (Windows ⊞/Command ⌘)

Attempt to detect encoded data automagically

Render a preview of the input if it's detected to be an image

Keep the current tab in sync between the input and output

Show the number of operations in each category

Reset options to default Close

Edit Favourites
  • To add: drag the operation over the favourites category and drop it
  • To reorder: drag up and down in the list below
  • To remove: hit the delete button or drag out of the list below

Reset favourites to default Save Cancel

CyberChef - The Cyber Swiss Army Knife

Version 10.23.0
Compile time: 07/04/2026 08:35:52 UTC

© Crown Copyright 2016-2026.

Released under the Apache Licence, Version 2.0.

How does X feature work?

CyberChef has a contextual help feature. Just hover your cursor over a feature that you want to learn more about and press F1 on your keyboard to get some information about it. Give it a try by hovering over this text and pressing F1 now!

What sort of things can I do with CyberChef?

There are hundreds of operations in CyberChef allowing you to carry out simple and complex tasks easily. Here are some examples:

Can I load input directly from files?

Yes! Just drag your file over the input box and drop it.

CyberChef can handle files up to around 2GB (depending on your browser), however some of the operations may take a very long time to run over this much data.

If the output is larger than a certain threshold (default 1MiB), it will be presented to you as a file available for download. Slices of the file can be viewed in the output if you need to inspect them.

How do I run operation X over multiple inputs at once?

Maybe you have 10 timestamps that you want to parse or 16 encoded strings that all have the same key.

The 'Fork' operation (found in the 'Flow control' category) splits up the input line by line and runs all subsequent operations on each line separately. Each output is then displayed on a separate line. These delimiters can be changed, so if your inputs are separated by commas, you can change the split delimiter to a comma instead.

Click here for an example.

How does the 'Magic' operation work?

The 'Magic' operation uses a number of methods to detect encoded data and the operations which can be used to make sense of it. A technical description of these methods can be found here.

If you find a bug in CyberChef, please raise an issue in our GitHub repository explaining it in as much detail as possible. Copy and include the following information if relevant.

Raise issue on GitHub

What

A simple, intuitive web app for analysing and decoding data without having to deal with complex tools or programming languages. CyberChef encourages both technical and non-technical people to explore data formats, encryption and compression.

Why

Digital data comes in all shapes, sizes and formats in the modern world – CyberChef helps to make sense of this data all on one easy-to-use platform.

How

The interface is designed with simplicity at its heart. Complex techniques are now as trivial as drag-and-drop. Simple functions can be combined to build up a "recipe", potentially resulting in complex analysis, which can be shared with other users and used with their input.

For those comfortable writing code, CyberChef is a quick and efficient way to prototype solutions to a problem which can then be scripted once proven to work.

Who

It is expected that CyberChef will be useful for cybersecurity and antivirus companies. It should also appeal to the academic world and any individuals or companies involved in the analysis of digital data, be that software developers, analysts, mathematicians or casual puzzle solvers.

Aim

It is hoped that by releasing CyberChef through GitHub, contributions can be added which can be rolled out into future versions of the tool.

There are hundreds of useful operations in CyberChef for anyone working on anything vaguely Internet-related, whether you just want to convert a timestamp to a different format, decompress gzipped data, create a SHA3 hash, or parse an X.509 certificate to find out who issued it.

It’s the Cyber Swiss Army Knife.

Close

Yes No

Find Input Tab
Load Status
  • Pending
  • Loading
  • Loaded

Filter (regex)

CONTENT Content Filename

Number of results

Results

Refresh Close

Find Output Tab
Bake Status
  • Pending
  • Baking
  • Baked
  • Stale
  • Errored

Content filter (regex)

Number of results

Results

Refresh Close

Download CyberChef

CyberChef runs entirely within your browser with no server-side component, meaning that your Input data and Recipe configuration are not sent anywhere, whether you use the live, official version of CyberChef or a downloaded, standalone version (assuming it is unmodified).

There are three operations that make calls to external services, those being the 'Show on map' operation which downloads map tiles from wikimedia.org, the 'DNS over HTTPS' operation which resolves DNS requests using either Google or Cloudflare services, and the 'HTTP request' operation that calls out to the configured URL you enter. You can confirm what network requests are made using your browser's developer console (F12) and viewing the Network tab.

If you would like to download your own standalone copy of CyberChef to run in a segregated network or where there is limited or no Internet connectivity, you can get a ZIP file containing the whole web app below. This can be run locally or hosted on a web server with no configuration required.

Be aware that the standalone version will never update itself, meaning it will not receive bug fixes or new features until you re-download newer versions manually.

CyberChef v10.23.0
  • Build time: 07/04/2026 08:35:52 UTC
  • The changelog for this version can be viewed here
  • © Crown Copyright 2016-2026
  • Released under the Apache Licence, Version 2.0
  • SHA256 hash: DOWNLOAD_HASH_PLACEHOLDER

Download ZIP file

Ok

info_outline

Ok