Tools

Explore our complete collection of free cybersecurity tools.

Hash Generator

Generate cryptographic hashes using MD5, SHA-1, SHA-256, SHA-512, and SHA-3 algorithms. All processing happens in your browser.

Cryptography

Hash Type Identifier

Paste any hash and automatically identify its type. Supports MD5, SHA-1, SHA-256, bcrypt, and many more formats.

Cryptography

HMAC Signature Generator

Generate Hash-based Message Authentication Codes using SHA-256, SHA-512, and other algorithms with a secret key.

Cryptography

Password Strength Checker

Test your password strength with entropy analysis, crack time estimates, and actionable security suggestions.

Cryptography

Secure Password Generator

Generate cryptographically secure random passwords with customizable length, character types, and strength requirements.

Encoding

Base64 Encoder / Decoder

Encode text to Base64 or decode Base64 strings back to plain text. Supports UTF-8 and binary data.

Encoding

JWT Token Decoder

Decode JSON Web Tokens to inspect their header, payload, and signature. Verify token expiration and claims.

Encoding

URL Encoder / Decoder

Encode special characters in URLs or decode percent-encoded URL strings. Handle query parameters safely.

Encoding

HTML Entity Encoder / Decoder

Convert special characters to HTML entities for XSS prevention, or decode HTML entities back to readable text.

Encoding

Hex / ASCII / Binary Converter

Convert between hexadecimal, ASCII, and binary representations. Useful for debugging and data analysis.

Network

HTTP Security Headers Analyzer

Analyze the security headers of any website. Detect missing headers and get recommendations for hardening.

Network

SSL/TLS Certificate Analyzer

Analyze SSL/TLS certificates for any domain. Check validity, certificate chain, protocol support, and security grade.

Network

DNS Record Lookup

Query DNS records for any domain including A, AAAA, MX, TXT, NS, CNAME, and SOA record types.

Network

IP Subnet Calculator

Calculate subnet masks, network ranges, broadcast addresses, and usable hosts from CIDR notation or IP ranges.

Network

Subdomain Finder

Discover subdomains for any domain using public Certificate Transparency logs via crt.sh. Pure passive — the target never sees your query.

Network

Wayback URL Miner

Pull every URL the Wayback Machine has ever archived for a domain. Plus the full set of unique query parameters, sorted by frequency — ready to feed into Arjun or Param Miner.

Web Security

Content Security Policy (CSP) Generator

Build Content Security Policy headers with an interactive visual builder. Protect your site from XSS and injection attacks.

Web Security

CORS Configuration Generator

Generate Cross-Origin Resource Sharing configurations for Express, Nginx, Apache, and other platforms.

Web Security

Robots.txt File Generator

Create robots.txt files with a visual builder. Control how search engines crawl and index your website.

Web Security

.htaccess Configuration Generator

Generate .htaccess rules for Apache servers including redirects, security headers, caching, and access control.

Web Security

JS Library Vulnerability Scanner

Find outdated JavaScript libraries with known CVEs on any public website. Detects 18 libraries (jQuery, Lodash, AngularJS, Next.js, Axios, …) against a curated CVE database — same engine as the /report section.

Web Security

WordPress Scanner

Find common WordPress misconfigurations in seconds: exposed version, REST API user enumeration, xmlrpc.php reachability, and more. Passive — no payloads, no bruteforce.

Web Security

Nuclei-Lite Scanner

Template-based passive web reconnaissance, inspired by ProjectDiscovery's Nuclei. 30+ curated checks across API docs, dev dashboards, observability stacks, debug endpoints, and cloud infrastructure — with zero payloads.

Web Security

Phishing Detector (Text & Image)

Two-mode phishing detector. Paste a suspicious message and get a phishing score with explanations, or upload an image (screenshot, poster) to decode the QR code and analyze the destination URL — all in your browser.

Web Security

Fraud & Social Engineering Analyzer

Paste a suspicious message, conversation, or offer. The analyzer scans for social-engineering principles (authority, scarcity, reciprocity), known scam playbooks (419, romance, pig butchering, tech support, money muling), manipulation markers (love-bombing, isolation, secrecy), and irreversible-payment red flags.

Web Security

URL Scanner

Paste any URL and get a heuristic risk score. Detects typosquatting against 40+ major brands, Cyrillic/Greek homoglyphs, abused TLDs, IP-as-host, URL shorteners, credentials embedded in the URL, excessive subdomains, and brand impersonation in subdomains or paths — without ever fetching the URL.

Developer

Regular Expression Tester

Test regular expressions with real-time matching, capture group highlighting, and match explanations.

Developer

JSON Formatter & Validator

Format, validate, and beautify JSON data with syntax highlighting. Minify or pretty-print with one click.

Developer

Unix Timestamp Converter

Convert between Unix timestamps and human-readable dates. Supports seconds, milliseconds, and ISO 8601 formats.

Developer

Text Diff Checker

Compare two texts and visualize differences with highlighted additions, deletions, and modifications.

Developer

QR Code Generator

Generate customizable QR codes for URLs, text, WiFi, and more. Download in PNG or SVG format.

Privacy

Browser Fingerprint Test

Discover what data your browser reveals. View your canvas fingerprint, WebGL info, fonts, plugins, and uniqueness score.

Privacy

WebRTC IP Leak Test

Check if your browser leaks your real IP address through WebRTC connections, even when using a VPN.

Privacy

User Agent Parser

Parse user agent strings to identify browser, OS, device type, and rendering engine. Automatically detects your current browser on load.

Developer

UUID Generator

Generate cryptographically secure UUID v4 identifiers. Create single or multiple UUIDs with formatting options, all processed in your browser.

Developer

Color Converter

Convert colors between HEX, RGB, and HSL formats in real time. Includes a live color preview swatch and native color picker for easy selection.

Developer

Cron Expression Parser

Parse cron expressions into human-readable descriptions. View next execution times and use preset schedules for common patterns.

Developer

Markdown Preview

Write Markdown and see it rendered as HTML in real time. Supports headings, formatting, code blocks, links, lists, blockquotes, and images.

Developer

Lorem Ipsum Generator

Generate Lorem Ipsum placeholder text in paragraphs, sentences, or words. Customize the amount and choose whether to start with the classic opening.

Developer

Chmod Calculator

Calculate Unix file permissions interactively. Convert between numeric (755) and symbolic (rwxr-xr-x) notation with a visual checkbox grid.

Network

WHOIS Lookup

Query WHOIS data for any domain name. View registrar information, registration dates, name servers, and domain status using RDAP and DNS lookups.

Network

IP Geolocation

Look up geographic location data for any IP address. Automatically detects your IP and shows country, city, ISP, timezone, and coordinates.

Network

HTTP Status Codes

Complete reference of HTTP status codes from 1xx to 5xx. Search and filter by code number or description, with detailed explanations for each.

Network

Port Reference

Searchable database of common network ports. Find port numbers, service names, protocols, descriptions, and security recommendations.

Cryptography

Bcrypt Hash Generator

Generate bcrypt password hashes with configurable salt rounds (4-16). Verify existing passwords against bcrypt hashes using secure server-side processing.

Cryptography

TOTP Generator

Generate time-based one-time passwords (TOTP) from a Base32 secret key. Features real-time countdown and auto-refresh every 30 seconds.

Cryptography

Certificate Decoder

Decode PEM-encoded X.509 certificates to view subject, issuer, validity dates, signature algorithm, and extensions. All parsing happens in your browser.

Encoding

Text Case Converter

Convert text between 10 different case formats in real time. Includes UPPERCASE, lowercase, camelCase, snake_case, kebab-case, and more.

Network

Reverse IP Lookup

Enter a domain to find other domains hosted on the same IP address. Useful for web reconnaissance and identifying shared hosting environments.

Network

HTTP Request Tester

Send HTTP requests with custom methods, headers, and body. A lightweight online API testing tool like Postman, with response timing and header inspection.

Network

Ping / Response Time Checker

Measure website response time with multiple attempts. See minimum, maximum, and average latency for any domain or URL.

Network

Meta Tag Analyzer

Fetch and analyze all meta tags from any URL. Check OG tags, Twitter cards, SEO tags, and get a completeness score for your meta tag implementation.

Network

Link Extractor

Extract all links from any webpage. Filter by internal and external links, and export results as CSV or JSON for further analysis.

Encoding

Morse Code Translator

Convert text to Morse code and Morse code to text. Includes audio playback using Web Audio API and a complete Morse code reference table.

Cryptography

ROT13 / Caesar Cipher

Encrypt and decrypt text using the Caesar cipher with an adjustable shift amount. Includes ROT13 quick button and brute-force display of all 26 rotations.

Encoding

Encoding Detector

Paste any encoded string to automatically detect its encoding type. Supports Base64, URL encoding, HTML entities, Hex, Binary, JWT, and Morse code.

Cryptography

Checksum Calculator

Upload a file to calculate its checksum using SHA-256, SHA-512, SHA-1, and CRC32. Compare against expected hashes to verify file integrity.

Cryptography

AES Encrypt / Decrypt

Encrypt and decrypt data using AES-GCM or AES-CBC with configurable key sizes (128, 192, 256-bit). Generate keys and IVs, all client-side via Web Crypto API.

Web Security

XSS Payload Generator

A searchable library of 50+ XSS test payloads organized by injection context. Filter by bypass type, encoding, and WAF evasion techniques.

Web Security

SQL Injection Cheat Sheet

Interactive SQLi payload reference organized by database (MySQL, PostgreSQL, MSSQL, Oracle, SQLite) and attack type (detection, UNION, error-based, blind, time-based).

Web Security

Reverse Shell Generator

Generate reverse shell one-liners for 15+ languages including Bash, Python, PHP, Perl, Ruby, Netcat, PowerShell, Java, and Node.js.

Web Security

Exploit Payload Encoder

Encode payloads using URL, Double URL, HTML entities, Unicode, Hex, Base64, and UTF-7 encoding. Chain multiple encodings for WAF bypass testing.

Cryptography

JWT Generator

Generate signed JWT tokens with HMAC algorithms (HS256, HS384, HS512). Edit header and payload JSON, auto-fill common claims, all processed client-side.

Developer

YAML / JSON Converter

Convert between YAML and JSON formats instantly. Supports nested objects, arrays, strings, numbers, and booleans with real-time conversion.

Developer

cURL to Code Converter

Paste a cURL command and convert it to Python (requests), JavaScript (fetch), PHP (curl), Go (net/http), or Java (HttpURLConnection) code.

Developer

Regex Pattern Library

A searchable library of 50+ common regex patterns. Browse by category, test against sample input, and copy patterns for email, URL, IP, dates, passwords, and more.

Network

Favicon Grabber

Enter a URL to fetch and display all favicons from a website. View available sizes and download individual icons.

Network

Open Graph Preview

See how your URL looks when shared on Google, Twitter, and Facebook/LinkedIn. Analyze Open Graph implementation and get a score with improvement recommendations.