Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Security Infrastructure

UK’s GCHQ Spy Agency Launches Open Source Data Analysis Tool

The U.K. Government Communications Headquarters (GCHQ) on Monday announced the launch of a new open source web tool designed for analyzing and decoding data.

The U.K. Government Communications Headquarters (GCHQ) on Monday announced the launch of a new open source web tool designed for analyzing and decoding data.

Named CyberChef, the tool is advertised by the intelligence agency as a “Cyber Swiss Army Knife.” It uses a simple interface with a drag-and-drop feature to allow both technical and non-technical people to analyze encryption, compression and decompression, and data formats.

The organization expects it to be useful not only to professionals in the cybersecurity industry, but to anyone involved in data analysis, including mathematicians, analysts, software developers and even casual puzzle solvers.

Users can, for example, convert data from a hexdump, display timestamps as a full date, decode Base64 strings, parse Teredo IPv6 addresses, and manipulate different types of data.

For the time being, CyberChef runs in Chrome and Firefox, but GCHQ hopes contributors will make the app compatible with Microsoft Edge as well. There is no intention of making it compatible with Internet Explorer.CyberChef tool launched by GCHQ

The source code and a demo have been made available on GitHub. The agency pointed out that the tool is not complete and has encouraged developers to contribute as much as possible.

“It is hoped that by releasing CyberChef through Github, contributions can be added which can be rolled out into future versions of the tool, and is an excellent example of GCHQ providing a platform on which to base cybersecurity operations,” GCHQ said.

Advertisement. Scroll to continue reading.

CyberChef is the latest of several cyber security initiatives announced recently by the British spy agency, including the launch of a new National Cyber Security Center (NCSC), and the certification of Master’s and Bachelor’s degrees in cyber security.

Several other interesting open source security tools have been released in the past period, including by Pwnie Express, Google, Facebook, Yahoo, Netflix and Twitter.

Related Reading: Britain’s GCHQ Spies Are on Twitter, Officially

Related Reading: Attackers Increasingly Abuse Open Source Security Tools

Related Reading: Running in Front of the Open Source Parade

Written By

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.

Register

In this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.

Register

People on the Move

Frank Verdecanna has been appointed Chief Financial Officer at Armadin.

Keeper Security has named Jessica Krowel and Bill Grabner as SVPs of sales for North America.

Skyhigh Security has named Anthony Palladino as Chief Operating Officer.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.