39 tools. Zero uploads.

JS Deobfuscator

Decode hex, unicode, base64, String.fromCharCode, unpack arrays, unwrap eval(), all client-side in your browser.

Encoder / Decoder

Convert between Base64, Hex, URL encoding, HTML entities, Unicode escapes, and Octal. Auto-detect encoding format.

JWT Decoder

Decode and inspect JSON Web Tokens. View header, payload, claims, expiry status, and security warnings.

SAML Decoder

Decode base64-encoded SAML responses and assertions. View issuer, subject, attributes, conditions, and authentication context.

Base64 Image Viewer

Decode base64-encoded images and data URIs. Preview hidden images embedded in HTML, CSS, or JavaScript.

QR Code Reader/Generator

Generate QR codes from text or URLs with customizable error correction. Read and decode QR codes from uploaded images.

URL Analyzer

Break down suspicious URLs into components, detect phishing indicators, check for homoglyphs, and defang for safe sharing.

Email Headers

Parse email headers to trace message routes, check SPF/DKIM/DMARC authentication, and detect spoofing indicators.

CSP Analyzer

Analyze Content-Security-Policy headers for risks. Detect unsafe-inline, unsafe-eval, wildcards, grade your policy A-F, and get fix suggestions.

CORS Checker

Analyze CORS response headers for misconfigurations. Detect wildcard origins, exposed headers, credential leaks, and preflight issues.

Character Inspector

Inspect text for homoglyphs, zero-width characters, mixed scripts, and invisible Unicode. Detect phishing and text manipulation.

Cookie Analyzer

Parse Set-Cookie headers and cookie strings. Check Secure, HttpOnly, SameSite flags, expiry, domain scope, and spot common misconfigurations.

Entropy Analyzer

Calculate Shannon entropy of text or files. Detect encrypted, compressed, or obfuscated data with byte frequency histograms.

Hex Viewer

View binary data as hex + ASCII with automatic file signature detection. Identify file types by magic bytes and inspect headers.

EXIF Viewer

Upload an image to extract EXIF metadata. View camera model, exposure settings, GPS coordinates, timestamps, and lens info. Flags privacy-sensitive location data.

HTTP Response Inspector

Paste raw HTTP responses to parse status, headers, and body. Flags missing security headers, info leaks, and misconfigurations.

Certificate Decoder

Decode PEM certificates to view subject, issuer, SANs, validity, key algorithm, and extensions. Check expiry and signature strength.

CSR Decoder

Decode PEM-encoded Certificate Signing Requests. View subject, key algorithm, key size, SANs, and requested extensions.

DNS Lookup

Resolve DNS records for any domain. Query A, AAAA, MX, TXT, NS, CNAME, SOA, and more. Detect mail provider, SPF, DMARC, and DKIM status.

SSH Key Analyzer

Parse SSH public and private keys. View key type, bit strength, fingerprints, encryption status, and security assessment.

JSON Formatter

Format, validate, and inspect JSON with a collapsible tree view. Copy JSON paths, minify, and load security-focused example payloads.

YAML/TOML Formatter

Validate and pretty-print YAML and TOML config files. Auto-detects format, converts to JSON, and counts keys.

Code Diff

Compare two code snippets side-by-side. Spot differences between original and modified files with line-by-line highlighting.

Regex Tester

Test regular expressions with real-time match highlighting. Built-in security patterns for IPs, hashes, JWTs, AWS keys, and more.

Timestamps

Convert between Unix timestamps, ISO 8601, and human-readable dates. Auto-detect format, date math, relative time, and epoch references.

Cron Parser

Parse cron expressions into plain English. Validate syntax, see next run times, and use quick presets for common schedules.

XML Formatter

Format, minify, and validate XML. Counts elements and attributes, detects mismatched tags and structural errors.

SQL Formatter

Format, minify, and analyze SQL queries. Auto-indents keywords, reports table usage, joins, subqueries, and statement count.

HTML Prettifier

Format, minify, and analyze HTML. Auto-indents tags, reports element counts, IDs, classes, and structure.

Hash Generator

Compute MD5, SHA-1, SHA-256, and SHA-512 hashes from text or files. Compare against known hashes for integrity checks.

Password Generator

Generate cryptographically secure passwords and passphrases. Check entropy, estimate crack time, and customize length, character sets, and word count.

RSA/EC Key Generator

Generate RSA, ECDSA, ECDH, and Ed25519 keypairs in PEM format. Uses the Web Crypto API, all keys stay in your browser.

HMAC Generator

Compute HMAC signatures for webhook verification and API auth. Supports SHA-256, SHA-512, SHA-1 with hex and base64 output.

UUID Generator

Generate random v4 UUIDs in bulk or parse existing UUIDs to extract version, variant, and timestamps for v1/v7.

TOTP Generator

Generate time-based one-time passwords from a base32 secret. Live countdown, adjacent codes for clock-skew debugging.

IP/CIDR Calculator

Parse IP addresses, calculate subnet masks, expand CIDR ranges, detect private/reserved networks, and check subnet membership.

Keccak-256 Hasher

Compute Keccak-256 hashes from text or hex input. Generate Ethereum function selectors, event topics, and storage slots.

ABI Decoder

Decode Ethereum transaction calldata into human-readable function calls and parameters. Detect token transfers, approvals, and swaps.

Transaction Decoder

Parse raw RLP-encoded Ethereum transactions. Inspect nonce, gas, value, chain ID, and signature fields for Legacy, EIP-2930, and EIP-1559 types.