CyberChef

Details

ID	`CyberChef`
Provider	Open Source
Category	Utilities
From Version	6.0.0
Docker Image	`demisto/cyberchef:1.0.0.10133006`
Supported Modules	Agentix XSIAM

README

CyberChef is a web-application developed by GCHQ that’s been called the “Cyber Swiss Army Knife”.

Configure CyberChef in Cortex

Parameter	Description	Required
Server URL (e.g. https://prod.apifor.io/)	URL or your CyberChef server or https://prod.apifor.io/	True
API Key	API key if you use https://prod.apifor.io/	False
Trust any certificate (not secure)		False
Use system proxy settings		False
Local execution	Uses the cyberchef node package for local execution of your commands	False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

cyberchef-bake

Bake you recipe!

Base Command

cyberchef-bake

Input

Argument Name	Description	Required
input	input data to be used in baking.	Required
recipe	recipe how to bake. use JSON formatting. For example: { “op”: “to decimal”, “args”: { “delimiter”: “Colon” } }.	Required
outputType	Optional argument to define outputType. .	Optional

Context Output

Path	Type	Description
CyberChef.Bake	string	Output of the bake

Command Example

!cyberchef-bake input="One, two, three, four." recipe="{\"op\": \"to decimal\"}"

!cyberchef-bake input="79 110 101 44 32 116 119 111 44 32 116 104 114 101 101 44 32 102 111 117 114 46" recipe="{\"op\": \"from decimal\"}" outputType=string

Human Readable Output

cyberchef-magic

CyberChef Magic function

Base Command

cyberchef-magic

Input

Argument Name	Description	Required
input	The input data for the recipe. Currently accepts strings.	Required
args	Arguments for the magic operation.	Optional

Context Output

Path	Type	Description
CyberChef.Magic	string	Output of the Magic operation

Command Example

!cyberchef-magic input="79 110 101 44 32 116 119 111 44 32 116 104 114 101 101 44 32 102 111 117 114 46"

Human Readable Output

Configuration parameters

local_execution — Local execution
url — Server URL (e.g. https://prod.apifor.io/)
apikey — API Key
insecure — Trust any certificate (not secure)
proxy — Use system proxy settings

Commands (2)

cyberchef-bake
Bake you recipe!
cyberchef-magic
CyberChef Magic function.

Source

CyberChef.py CyberChef.yml CyberChef_description.md

Download History Raw

category: Utilities
provider: Open Source
commonfields:
  id: CyberChef
  version: -1
configuration:
- display: Local execution
  additionalinfo: Uses the [cyberchef node package](https://github.com/polarityio/cyberchef-node) for local execution of your commands
  name: local_execution
  required: false
  type: 8
- additionalinfo: URL or your CyberChef server or https://prod.apifor.io/
  display: Server URL (e.g. https://prod.apifor.io/)
  name: url
  type: 0
  required: false
- display: API Key
  name: apikey
  type: 4
  required: false
  additionalinfo: API key if you use https://prod.apifor.io/
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
description: 'CyberChef is a web-application developed by GCHQ that''s been called the “Cyber Swiss Army Knife”. '
display: CyberChef
name: CyberChef
script:
  commands:
  - arguments:
    - description: input data to be used in baking.
      name: input
      required: true
    - description: 'recipe how to bake. use JSON formatting. For example:  {         "op": "to decimal",         "args": {             "delimiter": "Colon"         }     }.'
      name: recipe
      required: true
    - description: 'Optional argument to define outputType. '
      name: outputType
    description: Bake you recipe!
    name: cyberchef-bake
    outputs:
    - contextPath: CyberChef.Bake
      description: Output of the bake.
      type: string
  - arguments:
    - description: The input data for the recipe. Currently accepts strings.
      name: input
      required: true
    - description: Arguments for the magic operation.
      name: args
    description: CyberChef Magic function.
    name: cyberchef-magic
    outputs:
    - contextPath: CyberChef.Magic
      description: Output of the Magic operation.
      type: string
  dockerimage: demisto/cyberchef:1.0.0.10133006
  runonce: false
  script: ''
  subtype: python3
  type: python
fromversion: 6.0.0
tests:
- No tests (auto formatted)