Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

CyberChef – The Cyber Swiss Army Knife

gchq.github.io

Post reply on HN
Print view View original

31–40 of 56 posts

Re: CyberChef – The Cyber Swiss Army Knife

#31

Post by imdsm »

dang wrote: post #18
softblush wrote: post #9

Past discussions https://news.ycombinator.com/item?id=20767183 https://news.ycombinator.com/item?id=13056254

Thanks! Macroexpanded: CyberChef – Cyber Swiss Army Knife - https://news.ycombinator.com/item?id=20767183 - Aug 2019 (59 comments) CyberChef - The Cyber Swiss Army Knife - https://news.ycombinator.com/item?id=20543810 - July 2019 (1 comment) CyberChef – The Cyber Swiss Army Knife - https://news.ycombinator.com/item?id=13099687 - Dec 2016 (1 comment) CyberChef – A Cyber Swiss Army Knife - https://news.ycombinator.com/…

This is perhaps the first repost where using "The" has been successful

Re: CyberChef – The Cyber Swiss Army Knife

#32

Post by tenken »

Not a fan, I have tried say formatting a large JSON API results (with no formatting) and it just runs out of memory because: 1) the string is huge like 64mb+ 2) it tries to do syntax highlighting and blows up big time on the resulting formatted value.

For a utility tool it's awful finnicky on real world data and I think tries to be pretty at times rather than useful, or perhaps a case where a browser makes a poor Editor.

Re: CyberChef – The Cyber Swiss Army Knife

#34

Post by gchq-7703 »

tenken wrote: post #32

Not a fan, I have tried say formatting a large JSON API results (with no formatting) and it just runs out of memory because: 1) the string is huge like 64mb+ 2) it tries to do syntax highlighting and blows up big time on the resulting formatted value. For a utility tool it's awful finnicky on real world data and I think tries to be pretty at times rather than useful, or perhaps a case where a browser makes a poor Edi…

We might need to try fine tuning some limits. If CyberChef thinks it will have an issue rendering some text, we'll stop trying to display it and offer the user the ability to render only a part of the result or download the file.

Here's an example of me trying to format a 100mb file.

[0] https://imgur.com/a/3DtqnuL

Re: CyberChef – The Cyber Swiss Army Knife

#35

Post by jinseokim »

DerekBickerton wrote: post #2

Love how the contributors all have what seems like dedicated accounts with no 'legal name'. Take for example this: https://github.com/gchq/CyberChef/commits?author=n1474335 n1474335 Great name. In typical GCHQ style they have good OPSEC. You can find more contributors here: https://github.com/gchq/CyberChef/graphs/contributors d98762625 s2224834 Among others :)

Interesting point: They just use Gmail.[1]

[1]: https://github.com/gchq/CyberChef/commit/c423de545fd0d27aabe...

Re: CyberChef – The Cyber Swiss Army Knife

#36

Post by kekebo »

Is anyone aware of cli tools with similar functionality (besides chepy[0])?

I appreciate the magnitude of cyberchefs operations, but having to switch to the browser for these tasks can be cumbersome at times.

[0] https://chepy.readthedocs.io/en/latest/

Edit: I had missed that cyberchef offers a node API exposing most of its operations: https://github.com/gchq/CyberChef/wiki/Node-API

Re: CyberChef – The Cyber Swiss Army Knife

#37

Post by motohagiography »

rileytg wrote: post #33

this tool is extremely useful to have in infosec CTFs!

It is very useful. I have issues with how both GCHQ and NSA operate, but I also really like the tools they provide like Cyberchef and Ghidra as they automate a lot of workflows.

The 'magic' command in cyberchef is pretty magic, especially for obscure (to me) utf and language encodings, though I have certainly run down more than a few rabbit holes because it detects the file magic for 'inflate' compression in pretty much everything, which would be perfect for hiding embedded files because of the number of false positives that appear when you're looking for them, and it's just the algorithm someone of a certain vintage who was serious about hiding something from everyone but someone else of that era would use.

The image analysis stuff is great. I use palette randomization for detecting embeds, and the entropy analyzer/visualizer is great fast method for detecting encrypted and zipped payloads. I like that it's fast, and it's there on the web so I can use it on anything.

Re: CyberChef – The Cyber Swiss Army Knife

#39

Post by pokernaming »

kekebo wrote: post #36

Is anyone aware of cli tools with similar functionality (besides chepy[0])? I appreciate the magnitude of cyberchefs operations, but having to switch to the browser for these tasks can be cumbersome at times. [0] https://chepy.readthedocs.io/en/latest/ Edit: I had missed that cyberchef offers a node API exposing most of its operations: https://github.com/gchq/CyberChef/wiki/Node-API

https://github.com/Ciphey/Ciphey
Post reply on HN