Shellcode
2 operations. Call any of them with cyberchef_bake, or pre-load them
with CYBERCHEF_TOOL_SURFACE=all.
Disassemble ARM
Section titled “Disassemble ARM”Disassembles ARM machine code into assembly language.Supports ARM (32-bit), Thumb, and ARM64 (AArch64) architectures using the Capstone disassembly framework.Input should be in hexadecimal.
- Tool name:
cyberchef_disassemble_arm - Input / output:
string→string
| Argument | Type | Default |
|---|---|---|
architecture |
option | ARM (32-bit) |
mode |
option | ARM |
endianness |
option | Little Endian |
starting_address_hex |
number | 0 |
show_instruction_hex |
boolean | true |
show_instruction_position |
boolean | true |
Disassemble x86
Section titled “Disassemble x86”Disassembly is the process of translating machine language into assembly language.This operation supports 64-bit, 32-bit and 16-bit code written for Intel or AMD x86 processors. It is particularly useful for reverse engineering shellcode.Input should be in hexadecimal.
- Tool name:
cyberchef_disassemble_x86 - Input / output:
string→string
| Argument | Type | Default |
|---|---|---|
bit_mode |
option | 64 |
compatibility |
option | Full x86 architecture |
code_segment_cs |
number | 16 |
offset_ip |
number | 0 |
show_instruction_hex |
boolean | true |
show_instruction_position |
boolean | true |