Encoder / Decoder
Convert between Base64, Hex, URL encoding, HTML entities, Unicode escapes, and Octal. Auto-detect encoding format.
Encoding
Base64
Hex
URL
This tool runs entirely in your browser. No data is sent to any server.
How this works
- Base64 Decoding How to decode Base64-encoded payloads found in malware, phishing kits, and obfuscated scripts. Detect hidden URLs, credentials, and executable code.
- URL Encoding and Decoding Decode percent-encoded URLs to reveal hidden paths, parameters, and payloads. Detect double-encoding attacks and URL-based injection attempts.
- HTML Entity Encoding in XSS and Phishing Decode HTML entities used to obfuscate XSS payloads, phishing page content, and malicious scripts embedded in web pages.
- PHP eval(base64_decode()) Malware Patterns Identify and decode PHP webshells and backdoors that use eval(base64_decode()). Common patterns in WordPress hacks, file upload exploits, and server compromises.