← All Providers

GhostKit

online Free

ghostkit.net

πŸ‡©πŸ‡ͺ Germany

Quick Facts

Open Source
Yes
Platforms
web
API Available
no
Account
Required
Skill Level
beginner
Offline Capable
Yes
Output Formats
textjsonhex
Max Input Size
Browser memory limit

What it does

GhostKit is two things in one: a curated directory of security tools for inspecting suspicious web code, and a growing suite of browser-based Kit tools that run entirely on your machine. The Kit tools handle JavaScript deobfuscation, Base64/hex/URL encoding and decoding, URL structure analysis, email header parsing (SPF/DKIM/DMARC), cryptographic hash generation, JWT and SAML token decoding, SSL certificate inspection, Content Security Policy analysis, code diffing, entropy measurement, character inspection for Unicode attacks, hex viewing, regex testing, ABI decoding, transaction decoding, and Keccak-256 hashing. No data ever leaves your browser β€” everything is processed client-side. The directory catalogs 30+ external tools across categories like code deobfuscation, PHP security, web analysis, browser extension analysis, HTTP traffic interception, email forensics, and Web3 security.

When to use it

  • You need to analyze suspicious code
  • URLs
  • or emails without sending data to external services
  • You want a single starting point for security investigations with client-side tools
  • You need to deobfuscate JavaScript
  • decode Base64/hex
  • or inspect encoded payloads
  • You want to parse email headers and check SPF/DKIM/DMARC authentication locally
  • You need to decode JWT tokens
  • SAML assertions
  • or inspect SSL certificates
  • You want to find the right external security tool for a specific task

When not to use it

  • Active penetration testing or exploitation (use Burp Suite
  • Metasploit)
  • Real-time network traffic interception (use mitmproxy
  • HTTP Toolkit)
  • Sandboxed malware execution (use Hybrid Analysis
  • ANY.RUN)
  • Automated vulnerability scanning at scale

Limitations

  • Kit tools run client-side only β€” no server-side processing for large files
  • JS Deobfuscator handles common patterns but not advanced control-flow flattening
  • No file upload scanning β€” use VirusTotal for that
  • Directory tools are third-party and may change availability or pricing

Frequently Asked Questions

Is GhostKit free to use?
Yes, GhostKit is completely free to use with no subscription required.
What is the file size limit for GhostKit?
The maximum file size for GhostKit is Browser memory limit. This limit applies to the free version.
What platforms does GhostKit support?
GhostKit is available on Web (browser).
Does GhostKit require an account?
Yes, GhostKit requires an account to use.
Is GhostKit open source?
Yes, GhostKit is open source.
What are the limitations of GhostKit?
Kit tools run client-side only β€” no server-side processing for large files JS Deobfuscator handles common patterns but not advanced control-flow flattening No file upload scanning β€” use VirusTotal for that
What does GhostKit do?
GhostKit is a web-based tool for code deobfuscation, email & phishing analysis, web code analysis, web3 security. GhostKit is two things in one: a curated directory of security tools for inspecting suspicious web code, and a growing suite of browser-based Kit tools that run entirely on your machine. The Kit tools
Comparing (/4):

Tool Comparison

Feature
Type
Pricing
Platforms
Description