{"id":52,"date":"2021-02-25T16:38:03","date_gmt":"2021-02-25T16:38:03","guid":{"rendered":"https:\/\/cas.cybercop-training.ch\/?page_id=52"},"modified":"2021-05-31T12:12:35","modified_gmt":"2021-05-31T12:12:35","slug":"cyberchef","status":"publish","type":"page","link":"https:\/\/cas.cybercop-training.ch\/index.php\/cyberchef\/","title":{"rendered":"Cyberchef"},"content":{"rendered":"<h1>The Cyber Swiss Army Knife<\/h1>\n<p><img decoding=\"async\" src=\"https:\/\/cas.cybercop-training.ch\/wp-content\/uploads\/2021\/02\/CyberChef768x512-300x200.jpg\" alt=\"\" \/><\/p>\n<h2>Introduction<\/h2>\n<p>CyberChef is a simple, intuitive web app for carrying out all manner of &quot;cyber&quot; operations within a web browser. These operations include simple encoding like XOR or Base64, more complex encryption like AES, DES and Blowfish, creating binary and hexdumps, compression and decompression of data, calculating hashes and checksums, IPv6 and X.509 parsing, changing character encodings, and much more.<\/p>\n<p>The tool is designed to enable both technical and non-technical analysts to manipulate data in complex ways without having to deal with complex tools or algorithms. It was conceived, designed, built and incrementally improved by an analyst in their 10% innovation time over several years.<\/p>\n<h2>How it works<\/h2>\n<p>There are four main areas in CyberChef:<\/p>\n<p>The input box in the top right, where you can paste, type or drag the text or file you want to operate on.<br \/>\nThe output box in the bottom right, where the outcome of your processing will be displayed.<br \/>\nThe operations list on the far left, where you can find all the operations that CyberChef is capable of in categorised lists, or by searching.<br \/>\nThe recipe area in the middle, where you can drag the operations that you want to use and specify arguments and options.<\/p>\n<p>You can use as many operations as you like in simple or complex ways. Some examples are as follows:<\/p>\n<ul>\n<li>Decode a Base64-encoded string<\/li>\n<li>Convert a date and time to a different time zone<\/li>\n<li>Parse a Teredo IPv6 address<\/li>\n<li>Convert data from a hexdump, then decompress<\/li>\n<li>Decrypt and disassemble shellcode<\/li>\n<li>Display multiple timestamps as full dates<\/li>\n<li>Carry out different operations on data of different types<\/li>\n<li>Use parts of the input as arguments to operations<\/li>\n<li>Perform AES decryption, extracting the IV from the beginning of the cipher stream<\/li>\n<li>Automagically detect several layers of nested encoding<\/li>\n<\/ul>\n<p>You can try it out here: <a href=\"https:\/\/gchq.github.io\/CyberChef\/\">https:\/\/gchq.github.io\/CyberChef\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Cyber Swiss Army Knife Introduction CyberChef is a simple, intuitive web app for carrying out all manner of &quot;cyber&quot; operations within a web browser. These operations include simple encoding like XOR or Base64, more complex encryption like AES, DES and Blowfish, creating binary and hexdumps, compression and decompression of data, calculating hashes and checksums, [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-52","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/cas.cybercop-training.ch\/index.php\/wp-json\/wp\/v2\/pages\/52","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cas.cybercop-training.ch\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/cas.cybercop-training.ch\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/cas.cybercop-training.ch\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cas.cybercop-training.ch\/index.php\/wp-json\/wp\/v2\/comments?post=52"}],"version-history":[{"count":4,"href":"https:\/\/cas.cybercop-training.ch\/index.php\/wp-json\/wp\/v2\/pages\/52\/revisions"}],"predecessor-version":[{"id":1284,"href":"https:\/\/cas.cybercop-training.ch\/index.php\/wp-json\/wp\/v2\/pages\/52\/revisions\/1284"}],"wp:attachment":[{"href":"https:\/\/cas.cybercop-training.ch\/index.php\/wp-json\/wp\/v2\/media?parent=52"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}