Encode, decode, hash, encrypt, and transform data directly in your browser. DataForge is a lightweight CyberChef alternative: chain operations into recipes with no account, no upload, and no installation.
Drag and drop to reorder. Operations run top to bottom.
// useful for CTF decoding, triage and everyday security-engineering conversions
Security work often jumps between separate tools for Base64, hex, hashing, compression, and crypto. DataForge brings these operations together in one browser-side workflow - practical for SOC triage, threat-intel analysis, malware string decoding, and CTF labs.
Paste your input or sample data.
Select operations and order them as a recipe.
Run and review the transformed output instantly.
CyberChef, the open-source "Cyber Swiss Army Knife" published by GCHQ, is the reference for chained data transformations. DataForge follows the same recipe model - stack encode, decode, hash, and crypto operations and run them in one pass - but as an independent, lightweight web app focused on the operations analysts actually use every day.
Choose DataForge when you want an instant-loading CyberChef alternative for Base64, hex, hashing, AES/XOR, and compression work. Choose CyberChef when you need its long tail of specialised operations (file carving, network parsing, esoteric formats).
| Feature | DataForge | CyberChef |
|---|---|---|
| Runs 100% in the browser (no upload) | Yes | Yes |
| Chained operations (recipes) | Yes | Yes |
| Account or install required | No | No |
| Operations available | 120+ (the most-used ones) | 300+ (very broad) |
| Page weight & load time | Lightweight, instant | Heavier single-page app |
| Maintainer | CyberHunter (independent) | GCHQ (open source) |
The same recipes you would build in CyberChef work here: stack the operations below in the workspace and run them in one pass.
From Base64
The classic one-step CyberChef recipe: paste an encoded string and read it in clear text instantly.
From Hex (UTF-8) From Base64
Malware and CTF payloads are often hex-wrapped Base64. Chain both decoders to unwrap in one run.
Base64 → GUNZIP
Turn a gzip-compressed, Base64-encoded blob (PowerShell droppers, exfil data) back into readable content.
URL decode From Base64
Strip percent-encoding then decode the Base64 parameter to reveal the real redirect target.
SHA-256
Generate MD5, SHA-1, SHA-256 or HMAC digests for IOC matching and integrity checks.
From Hex (UTF-8) XOR (UTF-8)
Decode hex then XOR with a known key - the most common string obfuscation in malware samples.
Yes, for everyday encoding, decoding, hashing, and crypto work. Like CyberChef, DataForge chains operations into recipes that run entirely in your browser. CyberChef (an open-source project by GCHQ) offers more operations; DataForge is an independent, lightweight alternative that loads instantly and covers 120+ of the most-used transforms.
No. Processing runs in your browser. DataForge is designed so transforms execute locally like a CyberChef-style recipe workflow, without sending your input to a third-party encoding service.
120+ operations: Base64/Base32/Base58/Base85 and hex/binary/decimal/octal conversion, URL encoding, MD5/SHA-1/SHA-256/SHA-3 and HMAC hashing, AES/DES/Blowfish/RC4 encryption, XOR, ROT13, Caesar and Vigenère ciphers, GZIP/DEFLATE compression, JWT decoding, IOC defanging and extraction (URLs, IPs, emails, hashes), JSON formatting, QR codes, entropy analysis, and more.
CTF decoding, malware string deobfuscation, quick hex/Base64 work, hashing, compression, and small encryption experiments - all common blue-team and analyst tasks.
No account and no installation. Open the page and run recipes directly - it works like CyberChef's online version, with nothing to download.
