{
  "added_at": "2026-11-06",
  "additional_evidence_urls": [
    "https://github.com/gchq/CyberChef/blob/d4d96c6c3d2597fef836d81bfc04617d97c681a5/src/core/config/Categories.json",
    "https://github.com/gchq/CyberChef/blob/d4d96c6c3d2597fef836d81bfc04617d97c681a5/LICENSE",
    "https://github.com/gchq/CyberChef/releases/tag/v11.5.0",
    "https://gchq.github.io/CyberChef/"
  ],
  "category": "native-analysis",
  "description_en": "GCHQ's browser-based workbench for decoding, decrypting, decompressing, parsing and carving data by chaining operations into a recipe, with all processing done client-side. The pinned operation catalogue lists 506 operations, among them XOR brute force, AES, DES and Blowfish decryption, x86 and ARM disassembly, ELF info, file-type detection, file extraction, entropy and strings, YARA rules, Protobuf decoding and Ethernet, IPv4, TCP and UDP header parsing. The Magic operation tries to detect nested encodings automatically, and breakpoints step through a recipe one operation at a time to show the data at each stage.",
  "description_zh": "GCHQ 开发的浏览器端数据处理工具，把多个操作串成“配方”（recipe），对数据进行解码、解密、解压、解析和提取，所有处理都在本地浏览器中完成。所固定版本的操作目录列出 506 个操作，包括 XOR 暴力破解、AES/DES/Blowfish 解密、x86 与 ARM 反汇编、ELF 信息解析、文件类型识别、文件提取、熵与字符串分析、YARA 规则匹配、Protobuf 解码，以及以太网帧和 IPv4、TCP、UDP 报头解析。Magic 操作会尝试自动识别多层嵌套编码；在配方中设置断点后，可逐个操作执行，查看数据在每一步的变化。",
  "entry_url": "https://awesomerea.org/resources/cyberchef/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/cyberchef/",
  "evidence_url": "https://github.com/gchq/CyberChef/blob/d4d96c6c3d2597fef836d81bfc04617d97c681a5/README.md",
  "group": "tools",
  "id": "cyberchef",
  "json_url": "https://awesomerea.org/resources/cyberchef/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/cyberchef/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/cyberchef/index.md",
  "name": "CyberChef",
  "name_zh": "CyberChef 数据解码与分析工具",
  "record_type": "resource",
  "relationship": "foundation",
  "requirement_facets": [
    "prerequisites",
    "limits",
    "license"
  ],
  "requirements": [
    "Use the hosted app at gchq.github.io/CyberChef, a full copy downloaded from the app, the ghcr.io/gchq/cyberchef Docker image or a Node.js v24 build (npm install, then npm start or npm run build); the README lists Chrome 50+ and Firefox 38+ as supported browsers. Release at review: v11.5.0, published 2026-09-18; the reviewed master commit is newer.",
    "Inputs and recipes stay in the browser and are not sent to the web server. Files of up to about 2 GB load, depending on the browser, and some operations can take a very long time on that much data; Auto Bake can be turned off for large inputs.",
    "Apache-2.0, under Crown Copyright; contributions require signing the GCHQ Contributor Licence Agreement."
  ],
  "requirements_zh": [
    "可直接使用托管在 gchq.github.io/CyberChef 的网页版、从应用中下载的完整副本、ghcr.io/gchq/cyberchef Docker 镜像，或用 Node.js v24 自行构建（先 npm install，再 npm start 或 npm run build）；README 列出支持的浏览器为 Chrome 50+ 和 Firefox 38+。审阅时的版本为 v11.5.0，于 2026-09-18 发布；所审阅的 master 分支提交比它更新。",
    "输入数据和配方都留在浏览器中，不会发送到网站服务器。可加载约 2 GB 以内的文件（视浏览器而定），但部分操作处理这么大的数据可能非常耗时；输入较大时可关闭 Auto Bake 自动执行。",
    "采用 Apache-2.0 许可，受英国皇家版权（Crown Copyright）保护；提交贡献须签署 GCHQ 贡献者许可协议。"
  ],
  "targets": [
    "binary",
    "protocol"
  ],
  "url": "https://github.com/gchq/CyberChef",
  "verification": "source-reviewed",
  "verified_at": "2026-11-05"
}