https://github.com/thomasleplus/cyberchef-recipes
A few useful CyberChef recipes.
https://github.com/thomasleplus/cyberchef-recipes
bookmarks cyberchef cyberchef-recipes cybersecurity links
Last synced: 3 months ago
JSON representation
A few useful CyberChef recipes.
- Host: GitHub
- URL: https://github.com/thomasleplus/cyberchef-recipes
- Owner: thomasleplus
- License: apache-2.0
- Created: 2023-10-06T19:15:39.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2024-09-22T04:21:02.000Z (over 1 year ago)
- Last Synced: 2024-12-30T05:44:01.802Z (over 1 year ago)
- Topics: bookmarks, cyberchef, cyberchef-recipes, cybersecurity, links
- Homepage: https://gchq.github.io/CyberChef/
- Size: 23.4 KB
- Stars: 2
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# cyberchef-recipes
A few useful CyberChef recipes.
## JWT Decode
This is the recipe to decode a JWT token. The steps are:
1. URL decoding
2. Base64 decoding (for each section)
3. Remove the signature blob
4. JSON formating (easier to read)
[Try it!]()
[jwt.io](https://jwt.io/) is probably a better alternative but the
above recipe can be a starting point if you're going to do further
operations on the decoded JWT.
## SAML Decode
This is the recipe to decode a SAML assertion. The steps are:
1. URL decoding
2. Base64 decoding
3. Decompression
4. XML formating (easier to read)
[Try it!]()
## AWS Log Event
This is the recipe to decode a raw AWS Log Event. The steps are:
1. Base64 decoding
2. Decompression
3. JSON formating (easier to read)
[Try it!]()
## ROT8000
This one is not really a recipe but more of a fun operation that I
contributed to the CyberChef project. ROT8000 is a [Caesar
cipher](https://en.wikipedia.org/wiki/Caesar_cipher) shifting
characters by 8000 in the Unicode charset, the same way
[ROT13](https://en.wikipedia.org/wiki/ROT13) shifts latin characters
by 13 in the latin alphabet. Also similarly to ROT13, ROT8000 is an
involution meaning that if you apply it twice, you end up with the
original plaintext message (in other words the ciphering and
deciphering functions are the same). A more detailed description of
the ROT8000 function can be found on its inventor's
[page](https://rot8000.com/info). **This is not encryption nor secure
in any way, shape or form! Use it just for fun.**
Coincidently, with ROT8000 latin characters typically end up in the
Chinese symbol section of the Unicode charset. So latin text ciphered
with ROT8000 looks like Chinese text to a casual observer (unless you
can read Chinese and then it's pretty obvious that the text is
gibberish). In this recipe you can see an example and if you enable
the second ROT8000 function in the recipe you can see how the text
gets deciphered back to its original plaintext:
[Try it!]()
## Contributing
Please read [CONTRIBUTING.md](CONTRIBUTING.md) for details on our code of conduct and the process for submitting pull requests.
## Security
Please read [SECURITY.md](SECURITY.md) for details on our security policy and how to report security vulnerabilities.
## Code of Conduct
Please read [CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md) for details on our code of conduct.
## License
This project is licensed under the terms of the [LICENSE](LICENSE) file.