Decrypt Microsoft SecureString values that were encrypted using AES-CBC with UTF-16LE encoding.
Supported Tools:
Decode PowerShell SecureString outputs generated with ConvertFrom-SecureString. A lightweight, privacy-focused tool for analysts, developers, and security researchers working with encrypted or obfuscated PowerShell data.
This tool helps interpret and decode data produced by PowerShell's ConvertFrom-SecureString cmdlet, especially when a custom key is used. It is useful for understanding protected strings, reversing encoded payloads, and analyzing scripts that rely on SecureString for storing sensitive information or obfuscating commands. All processing is performed locally to ensure data privacy.
Input:
Plain Text: 76492d1116743f0423413b16050a5345MgB8AHMAVABXAHYAcgBxAGgARgBlAG8AeABtADEAOAB3AHoAZQAzAE0AWgBzAGcAPQA9AHwAZgBjAGUANwAzADUAZgBlAGYANgAwADEAMgAyAGEANwA4AGEAYgBmAGIAOQBlAGYANwAwADEAMwAyAGYANwBiADkAZAAzADIAZAAwADgAMQBjADcANAA2ADYAYgAxAGEANQAyADcAYQBlAGEAOQA0AGYAZAA0AGUANgBiADEAYQA5ADMAOABlAGQAMAA2AGIAZAA4AGEAYgAwAGUAYgA0AGIAMgBmADAAYwBlADkAMgBhADgAZgAyAGYAZgA3AGY With key: (12,45,78,23,56,89,34,67,90,123,210,111,45,67,89,10)
Output:
Tutorial - KeyDecryptor
What is a SecureString in PowerShell?
A SecureString is a data type used in PowerShell to store sensitive information in an encrypted form in memory, reducing exposure compared to plain text.
What does ConvertFrom-SecureString do?
It converts a SecureString into an encrypted standard string format. When a custom key is provided, the output can be decrypted across different systems using the same key.
Can this tool decode SecureStrings created with a key?
Yes. If the correct key is provided, the encoded data can be successfully decrypted and restored to its original value.
Why is this used in security research?
SecureString outputs are sometimes used to hide or obfuscate scripts and payloads. Decoding them helps analysts understand hidden behavior and investigate potential threats.
Is my data sent anywhere?
No. All decoding happens locally in your browser, ensuring that sensitive data remains private and never leaves your device.
