Practical Security Tools. Built for Learning.

Password Strength Checker

Analyse password length, character variety and weak patterns locally in your browser.

Hash Generator

Generate SHA-256, SHA-384 and SHA-512 hashes from any text using the Web Crypto API.

Incident Response

File Hash Calculator

Compute SHA-256, SHA-384 and SHA-512 file hashes without uploading the file anywhere.

Encoding & Decoding

Base64 Encoder / Decoder

Encode and decode Base64 strings, a format you meet constantly in logs and payloads.

URL Encoder / Decoder

Percent-encode and decode URLs and query parameters used in web security work.

JWT Decoder

Inspect the header, payload, algorithm and claims of a JSON Web Token locally.

IP & Subnet Calculator

Work out network, broadcast, usable host range and host count for any IPv4 CIDR.

SOC & Blue Team

IOC Defanger / Refanger

Safely defang and refang URLs, domains, IPs and emails when sharing indicators.

JSON Formatter & Validator

Format, minify and validate JSON alerts, API responses and structured logs.

Regex Tester

Test regular expressions against sample text with live match highlighting.

SOC & Blue Team

Unix Timestamp Converter

Convert Unix timestamps to readable UTC dates and back, in seconds or milliseconds.

Incident Response

Security Log Analyzer

Paste sample logs and extract IPs, timestamps, users, URLs and severity indicators.

Password Generator

Create strong random passwords with adjustable length and character sets, generated locally.

HTTP Security Headers Checker

Check a site for CSP, HSTS, X-Frame-Options and other security headers, with honest CORS limits.

HMAC Generator

Generate HMAC-SHA256/384/512 signatures for webhook and API verification, entirely in-browser.

UUID & Token Generator

Generate cryptographically random UUID v4 values and hex/Base64 API tokens.

DNS Record Lookup

Query A, AAAA, MX, TXT, NS, CNAME and SPF/DMARC records over DNS-over-HTTPS.

Hash Identifier

Identify which algorithm most likely produced a hash from its length and character set.

CVSS 3.1 Calculator

Build a CVSS v3.1 base score and vector string to prioritise vulnerabilities.

Phishing URL Inspector

Break a suspicious URL into its parts and flag common phishing and obfuscation traits.

Incident Response

Email Header Analyzer

Paste raw email headers to review the delivery path plus SPF, DKIM and DMARC results.

Caesar / ROT13 Cipher

Encode and decode Caesar-shift and ROT13 text, with a brute-force view of all 25 shifts.

Passphrase Generator

Build memorable multi-word passphrases with real entropy, generated securely in your browser.

TOTP 2FA Code Generator

Turn a Base32 secret into live six-digit authenticator codes to test MFA enrolment.

String Entropy Analyzer

Measure Shannon entropy to spot encrypted, encoded or obfuscated data during triage.

Common Ports Reference

Searchable list of common TCP/UDP ports with the service behind each and its risk.

Text & Config Diff

Compare two versions of a config, policy or log excerpt line by line, locally.

User Agent Parser

Break a User-Agent into browser, OS and device, and flag bot or scanner signatures.

MAC Address Analyzer

Normalise MAC formats and read the OUI, multicast bit and randomised-address flag.

HTML Entity Encoder & Decoder

Encode or decode HTML entities to learn XSS output encoding and de-obfuscate payloads.

Number Base Converter

Convert between binary, octal, decimal and hex with byte and permission views.

Password Policy Tester

Configure a password policy and test candidate passwords against every rule locally.