SRLabs Black Basta Buster
SRLabs Black Basta Buster: A command-line recovery toolkit for files affected by a specific Black Basta strain. Ranked #18 of 21 in Ransomware Decryption Tools by our editors (7.3/10); pricing: Free plan; best for technical users recovering eligible Black Basta files.
At a glance
- Editor score7.3 / 10
- PricingFree plan
- Best forTechnical users recovering eligible Black Basta files
- Free planYes
- Paid fromFree
- Supported strainsBlack Basta strain used around April 2023
- Facts checked5 Oct 2026
Where it wins
- Inspects encrypted ranges, file blocks, magic bytes and XOR operations.
- Supports recovery with known keys and XOR at known file locations.
- Free and open source, with Linux and Windows listed as platforms.
Where it doesn't
- Targets only a vulnerable Black Basta strain used around April 2023.
- Files under 5,000 bytes cannot be recovered, according to the README.
- Larger files may be only partly recoverable and can require manual review.
Our verdict on SRLabs Black Basta Buster
SRLabs Black Basta Buster is an open-source, self-hosted command-line toolkit for analyzing and attempting to recover files encrypted by a vulnerable Black Basta strain. Its intended users are technical people who can inspect files and work with known plaintext bytes at an encrypted location. It is not a general-purpose ransomware decryptor: the documented weakness applies to the strain used around April 2023, so it is relevant only when files match that case.
Recovery depends on file size and whether known plaintext is available at the right location. The tools can identify encrypted byte ranges, extract 64-byte chunks, search for a small chunk in a larger file, and inspect or adjust an encrypted-file footer progress pointer. Recovery methods include automatic attempts using encrypted zero-byte blocks and XOR-based decryption using a known key at known locations. The toolkit also includes utilities for inspecting magic bytes and XORing a chunk at an offset. The README says files under 5,000 bytes cannot be recovered; larger files may be only partially recoverable, and some cases need manual review.
The software is free and open source, with Linux and Windows listed as platforms. It is a fit for technically capable users who can evaluate whether their files match the supported strain and provide useful known plaintext; anyone seeking a broadly applicable or guided recovery tool should look elsewhere. Because success varies with file size and available known plaintext, treat it as a targeted recovery option rather than a promise that affected files can be restored.
Your product? Our editors can test SRLabs Black Basta Buster in depth and publish a review, labelled as paid · from $149/mo →
SRLabs Black Basta Buster pricing
SRLabs Black Basta Buster fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| Supported strains | Black Basta strain used around April 2023 |
| Offline use | Not verified |
| Recovery method | Both |
| Supported operating systems | Not verified |
| Command-line operation | Yes |
| Deployment | Self-hosted |
| Platforms | Linux, Windows |
| Support | |
| Pricing | Free plan |
| Website | github.com |
| Facts checked | 5 Oct 2026 |
Alternatives to SRLabs Black Basta Buster
- Avast Decryption ToolsA free collection of strain-specific Windows tools, with coverage limited to supported variants.9.3
- Trend Micro Ransomware File DecryptorA free Windows decryptor with broad family coverage, but recovery depends on the infection.9.1
- Kaspersky RakhniDecryptorA broad free decryptor with drive scanning and command-line recovery controls.9.0
See all SRLabs Black Basta Buster alternatives →
Used SRLabs Black Basta Buster? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used SRLabs Black Basta Buster for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
SRLabs Black Basta Buster is listed in our Ransomware Decryption Tools directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/srlabs-black-basta-buster/"><img src="https://www.itechguides.com/best/badge/srlabs-black-basta-buster.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update