Code Deobfuscation
Tools for base64, eval chains, nested encoding, and string mangling.
DecodePHP
onlinedecodephp.io
Professional IonCube decoder supporting versions 10 through 15 with PHP 7.1 to 8.4. Upload encrypted PHP files and get readable source code back.
GhostKit
onlineghostkit.net
A curated directory and browser-based toolkit for security researchers. GhostKit combines 14+ client-side tools — JS deobfuscation, encoding/decoding, URL analysis, email header parsing, hash generation, JWT/SAML decoding, and more — with a comprehensive directory of external security tools.
Tools
CyberChef
The cyber Swiss Army knife. Drag-and-drop operations into recipes for encoding, decoding, encryption, and data analysis—all in your browser.
UnPHP
Automated PHP decoder for nested eval/base64 obfuscation. Handles 80+ layers of encoding automatically.
de4js
Browser-based JavaScript deobfuscator supporting 15+ formats including JSFuck, obfuscator.io, and packed code.
JS NICE
Statistical renaming and type inference for JavaScript.
Obfuscator.io Deobfuscator
Specialized reverser for obfuscator.io encoded JavaScript. Handles string arrays, control flow, and dead code.
Restringer
Automatic JavaScript deobfuscation with 40+ modules. Handles obfuscator.io, Caesar Plus, and custom patterns.