Don't Use CyberChef. Use This Instead.
Source: YouTube · John Hammond · published Mar 14, 2024 · 35:30
Sheppy is a Python library and CLI tool that mirrors CyberChef's data manipulation capabilities, providing a reusable scripting alternative to the web-based tool for malware analysis and other data processing tasks.
Key Takeaways:
• Sheppy offers a Pythonic implementation of CyberChef's functionality, enabling data manipulation through scripts rather than browser sessions 0:57-1:17
• The tool can be used to analyze malware by extracting values, performing mathematical operations, and decrypting data using regular expressions and built-in functions 7:30-9:50
• When encountering issues with AES decryption padding, the presenter demonstrates patching the Sheppy library code to remove unnecessary unpadding functionality 26:00-27:57
• Sheppy allows mixing CyberChef-like operations with native Python code, providing flexibility for complex data manipulation tasks 32:23-32:33
• Unlike CyberChef's browser-based approach, Sheppy enables creating reusable, shareable scripts for data processing tasks 34:40-35:06
This approach provides security researchers and analysts with a powerful, scriptable tool for malware analysis and other data manipulation tasks that can be easily shared and reused.
Sources:
- 0:57-1:17 Introduction to Sheppy as a Python alternative to CyberChef
- 7:30-9:50 Demonstrating malware analysis with Sheppy
- 26:00-27:57 Patching Sheppy's AES decryption functionality
- 32:23-32:33 Mixing Sheppy operations with Python code
- 34:40-35:06(https://www.youtube.com/watch?v=e_
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Malware Analysis. Commonly maps to: Security Operations, Security Architecture and Engineering. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
cyers Chef is one awesome web-based application where you can do a ton of data manipulations hey altering the format doing whatever operations you might like for whatever purpose whether it's Capture the Flag whether it's just general research maybe cutting up some malware and malware analysis it could be anything and it is all client side it just runs JavaScript in your browser but I'll be the first to admit and I'll be honest I have usually poo pooed the use of cyers Chef because it's not a saved sort of Standalone solution that you could reuse or share with anyone else unless it's some long disgusting URL that you just sort of copy and paste around I have just always preferred maybe putting together a script in some language like python or bash or whatever so that you have a captured so…