CyberChef icon indicating copy to clipboard operation
CyberChef copied to clipboard

Feature request: Base64-encoded string can be decoded and directly rendered as a PDF within the interface

Open Shailendra1703 opened this issue 6 months ago • 2 comments


Is your feature request related to a problem? Please describe. Currently, CyberChef allows decoding a Base64 string to a text output, but it does not provide a straightforward way to render or view the result directly as a PDF file it only supports the render functionality for images. This makes it difficult to quickly analyze PDF content encoded in Base64 without downloading and opening it separately.

Describe the solution you'd like I would like CyberChef to support a feature where a Base64-encoded string can be decoded and directly rendered as a PDF within the interface. This could be shown in a preview panel or as an embedded viewer, making it easier to inspect PDF content without leaving the tool.

Describe alternatives you've considered

  • Manually decoding the Base64 string in CyberChef and exporting the result as a .pdf file to view in an external PDF reader.
  • Using other tools or scripts to decode and render PDF files outside of CyberChef.

Additional context Adding a direct PDF rendering feature would enhance CyberChef’s usability for security researchers and analysts who frequently encounter Base64-encoded PDF files (e.g., in malware analysis, phishing email investigations, or forensic work). Please assign this to me, I would be happy to work on this issue Thanks!

Shailendra1703 avatar Aug 27 '25 14:08 Shailendra1703

I understand that part of your request is having a preview option but you can already pull PDFs out of Base64 pretty easily, for example but you don't even need the "Extract Files" function, you can just download using the floppy disk icon after you do "From Base64":

Image

https://gchq.github.io/CyberChef/#recipe=From_Base64('A-Za-z0-9%2B/%3D',true,false)Extract_Files(true,true,true,true,true,true,false,true,100)&input=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

mubix avatar Sep 02 '25 17:09 mubix

Thanks @mubix , I knew about this functionality and mentioned the same on my issue earlier, but as my daily work includes checking these pdfs and it's a little annoying to download and preview each of them or juggling between different tools, so I requested this feature.

Shailendra1703 avatar Sep 04 '25 17:09 Shailendra1703