CyberChef
Tool manual · Kali & common usage
More tools · Beginner · More tools lane
What is CyberChef?
CyberChef is a browser “Cyber Swiss Army Knife” for encoding, decoding, and transforms.
Quickly chain Base64, XOR, decompress, etc., during analysis.
Official website: CyberChef · Documentation
When do you use it?
- You need Browser-based encoding, decoding and data transformation.
- You are following a CYNARKS lab or authorized engagement that calls for CyberChef.
- You already tried simpler checks and need this tool’s deeper capability.
Who uses it?
- Security practitioners
- Students in authorized labs
- Engineers validating their own systems
How do you use it? (typical flow)
- Install CyberChef using the steps below (prefer Kali package or official installer).
- Confirm you have authorization for the target (lab VM, own system, or written scope).
- Run --help / man (or the Help section) to see current flags for your version.
- Start with a safe example from Basic commands against localhost or an authorized lab target.
- Record what you ran, what you observed, and any follow-up (filter, report, remediation).
Help & manual (like man / --help)
Every serious tool has a built-in way to look up flags. Learn these first so you are not stuck memorizing every option.
1. App
https://gchq.github.io/CyberChef/
Kali Linux
Use web app or offline build — no classic apt binary required.
1. Installation
| OS | Installation |
|---|---|
Kali Linux | Use web app or offline build — no classic apt binary required. |
Official | See official docs: https://gchq.github.io/CyberChef/ |
2. Basic commands
1. Safe example against your own lab data or localhost
From Base64 → To Hex
Safe example against your own lab data or localhost
2. Show help
From --help
List flags for your installed version (same habit as man/--help).
3. Short help
From -h
Alternate help flag when supported.
4. List all options
--help / -h
List all options
Options / flags
| Option | Purpose |
|---|---|
--help / -h | List all options |
5. Useful features
- Core workflow and interface
- Reading and interpreting output
- Key configuration options
- Integrating into a professional workflow
6. Practical examples
Example 1: Safe example against your own lab data or localhost
From Base64 → To Hex
Safe example against your own lab data or localhost
Example 2: Show help
From --help
List flags for your installed version (same habit as man/--help).
Example 3: Short help
From -h
Alternate help flag when supported.
Example 4: List all options
--help / -h
List all options
7. Important notes
- CyberChef is used by professionals for legitimate defense, testing and research.
- Authorized targets only — labs, systems you own, or written permission.
- Prefer reading --help / man / official docs for your installed version; flags change over time.
Related course: cybersecurity fundamentals · Commands: /commands