Operation reference

PyChef registers 502 operation names from CyberChef 11.3.0. Every operation has an individual page with positional options, status, recipe usage, pipeline usage, and its dedicated Python module.

Browse by category

• Analysis (14)

• Arithmetic (14)

• Authentication (5)

• Bitwise (10)

• Bletchley (7)

• Ciphers (74)

• Code (12)

• Compression (19)

• Crypto (15)

• Data format (13)

• Date / Time (11)

• Default (1)

• Encoding (55)

• Encodings (5)

• Encryption (2)

• Extraction (4)

• Flow control (10)

• Forensics (4)

• Generators (6)

• Geography (2)

• Hashing (41)

• Image (28)

• KDF (6)

• Miscellaneous (1)

• Networking (25)

• OCR (1)

• Operating system (1)

• PGP (7)

• Public Key (19)

• Rendering (4)

• Serialisation (26)

• Serialise (3)

• Sets (6)

• Shellcode (2)

• Testing (1)

• Text (43)

• Visualisation (4)

• Yara (1)

All operations

• A1Z26 Cipher Decode

• A1Z26 Cipher Encode

• ADD

• Add line numbers

• Add Text To Image

• Adler-32 Checksum

• AES Decrypt

• AES Encrypt

• AES Key Unwrap

• AES Key Wrap

• Affine Cipher Decode

• Affine Cipher Encode

• Alternating Caps

• AMF Decode

• AMF Encode

• Analyse hash

• Analyse UUID

• AND

• Argon2

• Argon2 compare

• Ascon Decrypt

• Ascon Encrypt

• Ascon Hash

• Ascon MAC

• Atbash Cipher

• Automated Validation Test Op

• Avro to JSON

• Bacon Cipher Decode

• Bacon Cipher Encode

• Bcrypt

• Bcrypt compare

• Bcrypt parse

• Bifid Cipher Decode

• Bifid Cipher Encode

• Bit shift left

• Bit shift right

• BLAKE2b

• BLAKE2s

• BLAKE3

• Blowfish Decrypt

• Blowfish Encrypt

• Blur Image

• Bombe

• BSON deserialise

• BSON serialise

• Bzip2 Compress

• Bzip2 Decompress

• Caesar Box Cipher

• Caret/M-decode

• Cartesian Product

• CBOR Decode

• CBOR Encode

• Cetacean Cipher Decode

• Cetacean Cipher Encode

• ChaCha

• Change IP format

• Chi Square

• CipherSaber2 Decrypt

• CipherSaber2 Encrypt

• Citrix CTX1 Decode

• Citrix CTX1 Encode

• CMAC

• Colossus

• Comment

• Compare CTPH hashes

• Compare SSDEEP hashes

• Conditional Jump

• Contain Image

• Convert area

• Convert co-ordinate format

• Convert data units

• Convert distance

• Convert Image Format

• Convert Leet Speak

• Convert mass

• Convert speed

• Convert to NATO alphabet

• Count occurrences

• Cover Image

• CRC Checksum

• Crop Image

• CSS Beautify

• CSS Minify

• CSS selector

• CSV to JSON

• CTPH

• DateTime Delta

• Dechunk HTTP response

• Decode NetBIOS Name

• Decode text

• Defang IP Addresses

• Defang URL

• Derive EVP key

• Derive HKDF key

• Derive PBKDF2 key

• DES Decrypt

• DES Encrypt

• Detect File Type

• Diff

• Disassemble ARM

• Disassemble x86

• Dither Image

• Divide

• DNS over HTTPS

• Drop bytes

• Drop nth bytes

• ECDSA Sign

• ECDSA Signature Conversion

• ECDSA Verify

• ELF Info

• Encode NetBIOS Name

• Encode text

• Enigma

• Entropy

• Escape Smart Characters

• Escape string

• Escape Unicode Characters

• Expand alphabet range

• Extended GCD

• Extract Audio Metadata

• Extract dates

• Extract domains

• Extract email addresses

• Extract EXIF

• Extract file paths

• Extract Files

• Extract hashes

• Extract ID3

• Extract IP addresses

• Extract LSB

• Extract MAC addresses

• Extract RGBA

• Extract URLs

• Fang URL

• Fernet Decrypt

• Fernet Encrypt

• File Tree

• Filter

• Find / Replace

• Flask Session Decode

• Flask Session Sign

• Flask Session Verify

• Fletcher-16 Checksum

• Fletcher-32 Checksum

• Fletcher-64 Checksum

• Fletcher-8 Checksum

• Flip Image

• Fork

• Format MAC addresses

• Frequency distribution

• From Base

• From Base32

• From Base45

• From Base58

• From Base62

• From Base64

• From Base85

• From Base92

• From BCD

• From Bech32

• From Binary

• From Braille

• From Case Insensitive Regex

• From Charcode

• From COBS

• From Decimal

• From Float

• From Hex

• From Hex Content

• From Hexdump

• From HTML Entity

• From MessagePack

• From Modhex

• From Morse Code

• From Octal

• From Punycode

• From Quoted Printable

• From UNIX Timestamp

• Fuzzy Match

• Generate all checksums

• Generate all hashes

• Generate De Bruijn Sequence

• Generate ECDSA Key Pair

• Generate HOTP

• Generate Image

• Generate Lorem Ipsum

• Generate PGP Key Pair

• Generate QR Code

• Generate RSA Key Pair

• Generate TOTP

• Generate UUID

• Generic Code Beautify

• Get All Casings

• Get Time

• GOST Decrypt

• GOST Encrypt

• GOST Hash

• GOST Key Unwrap

• GOST Key Wrap

• GOST Sign

• GOST Verify

• Group IP addresses

• Gunzip

• Gzip

• Hamming Distance

• HAS-160

• HASSH Client Fingerprint

• HASSH Server Fingerprint

• Haversine distance

• Head

• Heatmap chart

• Hex Density chart

• Hex to Object Identifier

• Hex to PEM

• HMAC

• HTML To Text

• HTTP request

• Image Brightness / Contrast

• Image Filter

• Image Hue/Saturation/Lightness

• Image Opacity

• Index of Coincidence

• Invert Image

• IPv6 Transition Addresses

• JA3 Fingerprint

• JA3S Fingerprint

• JA4 Fingerprint

• JA4Server Fingerprint

• JavaScript Beautify

• JavaScript Minify

• JavaScript Parser

• JPath expression

• Jq

• JSON Beautify

• JSON Minify

• JSON to CSV

• JSON to YAML

• Jsonata Query

• Jump

• JWK to PEM

• JWT Decode

• JWT Sign

• JWT Verify

• Keccak

• Label

• Levenshtein Distance

• LM Hash

• Lorenz

• LS47 Decrypt

• LS47 Encrypt

• Luhn Checksum

• LZ4 Compress

• LZ4 Decompress

• LZMA Compress

• LZMA Decompress

• LZNT1 Decompress

• LZString Compress

• LZString Decompress

• Magic

• MD2

• MD4

• MD5

• MD6

• Mean

• Median

• Merge

• Microsoft Script Decoder

• MIME Decoding

• MOD

• Modular Exponentiation

• Modular Inverse

• Multiple Bombe

• Multiply

• MurmurHash3

• Normalise Image

• Normalise Unicode

• NOT

• NT Hash

• Numberwang

• Object Identifier to Hex

• Offset checker

• Optical Character Recognition

• OR

• P-list Viewer

• Pad lines

• Parity Bit

• Parse ASN.1 hex string

• Parse colour code

• Parse CSR

• Parse DateTime

• Parse Ethernet frame

• Parse IP range

• Parse IPv4 header

• Parse IPv6 address

• Parse ObjectID timestamp

• Parse QR Code

• Parse SSH Host Key

• Parse TCP

• Parse TLS record

• Parse TLV

• Parse UDP

• Parse UNIX file permissions

• Parse URI

• Parse User Agent

• Parse X.509 certificate

• Parse X.509 CRL

• PEM to Hex

• PEM to JWK

• PGP Decrypt

• PGP Decrypt and Verify

• PGP Encrypt

• PGP Encrypt and Sign

• PGP Sign

• PGP Verify

• PHP Deserialize

• PHP Serialize

• Play Media

• Power Set

• PRESENT Decrypt

• PRESENT Encrypt

• Protobuf Decode

• Protobuf Encode

• Pseudo-Random Integer Generator

• Pseudo-Random Number Generator

• Pseudo-Random Prime Generator

• Public Key from Certificate

• Public Key from Private Key

• Rabbit

• Rail Fence Cipher Decode

• Rail Fence Cipher Encode

• RAKE

• Randomize Colour Palette

• Raw Deflate

• Raw Inflate

• RC2 Decrypt

• RC2 Encrypt

• RC4

• RC4 Drop

• RC6 Decrypt

• RC6 Encrypt

• Register

• Regular expression

• Remove ANSI Escape Codes

• Remove Diacritics

• Remove EXIF

• Remove line numbers

• Remove null bytes

• Remove whitespace

• Render Image

• Render Markdown

• Render PDF

• Resize Image

• Return

• Reverse

• RIPEMD

• Rison Decode

• Rison Encode

• ROR13

• ROT13

• ROT13 Brute Force

• ROT47

• ROT47 Brute Force

• ROT8000

• Rotate Image

• Rotate left

• Rotate right

• RSA Decrypt

• RSA Encrypt

• RSA Sign

• RSA Verify

• Salsa20

• Scan for Embedded Files

• Scatter chart

• Scrypt

• Series chart

• Set Difference

• Set Intersection

• Set Union

• SHA0

• SHA1

• SHA2

• SHA3

• Shake

• Sharpen Image

• Show Base64 offsets

• Show on map

• Shuffle

• SIGABA

• Sleep

• SM2 Decrypt

• SM2 Encrypt

• SM3

• SM4 Decrypt

• SM4 Encrypt

• Snefru

• Sort

• Split

• Split Colour Channels

• SQL Beautify

• SQL Minify

• SSDEEP

• Standard Deviation

• Streebog

• Strings

• Strip HTML tags

• Strip HTTP headers

• Strip IPv4 header

• Strip TCP header

• Strip UDP header

• SUB

• Subsection

• Substitute

• Subtract

• Sum

• Swap case

• Swap endianness

• Symmetric Difference

• Syntax highlighter

• Tail

• Take bytes

• Take nth bytes

• Tar

• TCP/IP Checksum

• TEA Decrypt

• TEA Encrypt

• Template

• Text Encoding Brute Force

• Text-Integer Conversion

• To Base

• To Base32

• To Base45

• To Base58

• To Base62

• To Base64

• To Base85

• To Base92

• To BCD

• To Bech32

• To Binary

• To Braille

• To Camel case

• To Case Insensitive Regex

• To Charcode

• To COBS

• To Decimal

• To Float

• To Hex

• To Hex Content

• To Hexdump

• To HTML Entity

• To Kebab case

• To Lower case

• To MessagePack

• To Modhex

• To Morse Code

• To Octal

• To Punycode

• To Quoted Printable

• To Snake case

• To Table

• To UNIX Timestamp

• To Upper case

• Translate DateTime Format

• Triple DES Decrypt

• Triple DES Encrypt

• Twofish Decrypt

• Twofish Encrypt

• Typex

• Unescape string

• Unescape Unicode Characters

• Unicode Text Format

• Unique

• UNIX Timestamp to Windows Filetime

• Untar

• Unzip

• URL Decode

• URL Encode

• VarInt Decode

• VarInt Encode

• View Bit Plane

• Vigenère Decode

• Vigenère Encode

• Whirlpool

• Windows Filetime to UNIX Timestamp

• Wrap

• XKCD Random Number

• XML Beautify

• XML Minify

• XOR

• XOR Brute Force

• XOR Checksum

• XPath expression

• XSalsa20

• XTEA Decrypt

• XTEA Encrypt

• XXTEA Decrypt

• XXTEA Encrypt

• YAML to JSON

• YARA Rules

• Zip

• Zlib Deflate

• Zlib Inflate