GhostKit
online Freeghostkit.net
π©πͺ Germany
Quick Facts
What it does
GhostKit is two things in one: a curated directory of security tools for inspecting suspicious web code, and a growing suite of browser-based Kit tools that run entirely on your machine. The Kit tools handle JavaScript deobfuscation, Base64/hex/URL encoding and decoding, URL structure analysis, email header parsing (SPF/DKIM/DMARC), cryptographic hash generation, JWT and SAML token decoding, SSL certificate inspection, Content Security Policy analysis, code diffing, entropy measurement, character inspection for Unicode attacks, hex viewing, regex testing, ABI decoding, transaction decoding, and Keccak-256 hashing. No data ever leaves your browser β everything is processed client-side. The directory catalogs 30+ external tools across categories like code deobfuscation, PHP security, web analysis, browser extension analysis, HTTP traffic interception, email forensics, and Web3 security.
When to use it
- You need to analyze suspicious code
- URLs
- or emails without sending data to external services
- You want a single starting point for security investigations with client-side tools
- You need to deobfuscate JavaScript
- decode Base64/hex
- or inspect encoded payloads
- You want to parse email headers and check SPF/DKIM/DMARC authentication locally
- You need to decode JWT tokens
- SAML assertions
- or inspect SSL certificates
- You want to find the right external security tool for a specific task
When not to use it
- Active penetration testing or exploitation (use Burp Suite
- Metasploit)
- Real-time network traffic interception (use mitmproxy
- HTTP Toolkit)
- Sandboxed malware execution (use Hybrid Analysis
- ANY.RUN)
- Automated vulnerability scanning at scale
Limitations
- Kit tools run client-side only β no server-side processing for large files
- JS Deobfuscator handles common patterns but not advanced control-flow flattening
- No file upload scanning β use VirusTotal for that
- Directory tools are third-party and may change availability or pricing
Frequently Asked Questions
Is GhostKit free to use?
What is the file size limit for GhostKit?
What platforms does GhostKit support?
Does GhostKit require an account?
Is GhostKit open source?
What are the limitations of GhostKit?
What does GhostKit do?
Related Tools
The cyber Swiss Army knife. Drag-and-drop operations into recipes for encoding, decoding, encryption, and data analysisβall in your browser.
Professional IonCube decoder supporting versions 10 through 15 with PHP 7.1 to 8.4. Upload encrypted PHP files and get readable source code back.
Browser-based JavaScript deobfuscator supporting 15+ formats including JSFuck, obfuscator.io, and packed code.
Free malware sandbox powered by CrowdStrike Falcon. Upload files up to 250MB for behavioral analysis and threat detection.