3 ms·

For developer tools, I noticed that CyberChef [1] wasn't on the list so I submitted it. I regularly use it for - URL encoding/decoding - QR code generation -

For developer tools, I noticed that CyberChef [1] wasn't on the list so I submitted it. I regularly use it for - URL encoding/decoding - QR code generation - JSON and XML pretty-printing - Base64 encoding/decoding but it does way more than that. [1] https://gchq.github.io/CyberChef/ https://gchq.github.io/CyberChef/

TazeTSchnitzel 4y ago
I feel like I shouldn't trust an encryption website by the British NSA not to steal my data, but given a million other people must have had the same thought, and that it's open source, maybe someone would have noticed by now.
- justin_oaks 4y ago
  Those are valid concerns and it's smart to think about those things. I had the same thoughts initially. Using your browser developer tools, you can see what HTTP requests it makes. It's all just loading code. Also, you can use a local copy of it to ensure you're not getting a hacked/targeted version that's different between times that you use it. I use a local copy. You can find a downloadable zip file in the releases section: https://github.com/gchq/CyberChef/releases https://github.com/gchq/CyberChef/releases You could also build it from the source, but I haven't bothered to set that up.
- rozab 4y ago
  All the software crackers and hackers of the world seem to be happy using the NSA's Ghidra, the industry standard reverse engineering tool
franga2000 4y ago
For anyone who isn't convinced yet: it can not just do all those things, it can chain them. You can build a pipeline jist by dragging and dropping blocks, with live results and even recommendations when some formats are detected . During a reverse engineering project I built this to extract some audio data from a very strange API: string replace | json parse + query | base64 decode | gunzip | add wav header. Switching to zstd and a different bitrate took 2 clicks. Really helped me stay "in the zone" while working - having to open up a code editor and Python docs to write this from scratch would've taken me completely out of it and wasted a significant amount of time.

TazeTSchnitzel 4y ago

I feel like I shouldn't trust an encryption website by the British NSA not to steal my data, but given a million other people must have had the same thought, and that it's open source, maybe someone would have noticed by now.

justin_oaks 4y ago
Those are valid concerns and it's smart to think about those things. I had the same thoughts initially. Using your browser developer tools, you can see what HTTP requests it makes. It's all just loading code. Also, you can use a local copy of it to ensure you're not getting a hacked/targeted version that's different between times that you use it. I use a local copy. You can find a downloadable zip file in the releases section: https://github.com/gchq/CyberChef/releases https://github.com/gchq/CyberChef/releases You could also build it from the source, but I haven't bothered to set that up.
rozab 4y ago
All the software crackers and hackers of the world seem to be happy using the NSA's Ghidra, the industry standard reverse engineering tool

franga2000 4y ago

For anyone who isn't convinced yet: it can not just do all those things, it can chain them. You can build a pipeline jist by dragging and dropping blocks, with live results and even recommendations when some formats are detected . During a reverse engineering project I built this to extract some audio data from a very strange API: string replace | json parse + query | base64 decode | gunzip | add wav header. Switching to zstd and a different bitrate took 2 clicks. Really helped me stay "in the zone" while working - having to open up a code editor and Python docs to write this from scratch would've taken me completely out of it and wasted a significant amount of time.