Mlab.sh Mlab.sh
v1.9.0
Platform
Free Tools Blog Glossary Ecosystem Pricing Developer API MCP Integration Academy
Cheat Sheets
Regex HTTP Status Codes Network Ports ASCII Table CIDR / Subnets MIME Types HTML Entities
Learn
MD5 vs SHA-256 YARA vs Sigma SIEM vs SOAR Base64 vs Hex
Support
Help Center Partners
Terms · Privacy · Sales
tprm.mlab.sh
Third-party risk management
Pricing · Docs · Changelog
policy.mlab.sh SOON
Security policy management
pra.mlab.sh SOON
Business continuity & recovery
aware.mlab.sh SOON
Phishing simulation & awareness
ir.mlab.sh
Self-hosted incident response
Pricing · Docs · Changelog
siem.mlab.sh SOON
Log correlation & alerting
intel.mlab.sh SOON
Threat intel feeds & IOC enrichment
hunt.mlab.sh SOON
Threat hunting with Sigma & YARA
vuln.mlab.sh
Attack surface & CVE tracking
sandbox.mlab.sh SOON
Malware analysis & sandboxing
watch.mlab.sh SOON
Dark web monitoring
Deception & Endpoint
honey.mlab.sh SOON
Honeypots & canary tokens
edr.mlab.sh SOON
Endpoint detection & response
Sign up
Navigation
Terms Privacy Contact
Free · Client-side · No sign-up

Security toolbox

Open-access tools built for analysts, researchers and developers.
Everything runs in your browser — nothing touches our servers.

100% client-side No data sent to servers No account required

Security & Analysis

JS & URL Deobfuscator

Popular

Decode obfuscated JavaScript and malicious URLs. 14+ techniques including Base64, hex, Unicode, eval, ROT13, and defanged IOCs.

Base64 Hex eval() ROT13 IOC defang
Open tool

IOC Extractor

New

Extract IPs, domains, URLs, hashes, and emails from threat reports and logs. Auto-refang defanged IOCs. CSV export.

IPv4/v6 Domains Hashes URLs Emails
Open tool

MITRE ATT&CK Map

Interactive matrix navigator. Select techniques, visualize coverage, export as JSON, YARA tags, or plain lists.

ATT&CK v15 Coverage map JSON export
Open tool

Hash Generator

Compute MD5, SHA-1, SHA-256, and SHA-512 hashes from text or files. Look up hashes on mlab.

MD5 SHA-256 File hashing
Open tool

Image Metadata Analyzer

New

View and remove EXIF, GPS, camera metadata from photos. Detect tracking data, strip metadata for privacy, and re-download clean images.

EXIF GPS Metadata Privacy Cleanup
Open tool

EML Parser

Free account

Upload and analyze suspicious email files (.eml). Extract headers, attachments, URLs, and sender authentication (SPF, DKIM, DMARC) results.

Headers Attachments SPF/DKIM URLs IOC extraction
Open tool Free account required

Encoding & Data

CVE Search

Search the National Vulnerability Database. CVE ID, keyword, product or vendor — powered by vuln.mlab.sh.

Open tool

Base64 Encoder & Decoder

Encode text to Base64 or decode Base64 strings. UTF-8 and Base64URL support.

Open tool

URL Encoder & Decoder

Encode or decode percent-encoded URLs. encodeURI, encodeURIComponent, and full encoding.

Open tool

JWT Decoder

Decode JSON Web Tokens. Inspect header, payload, claims, and check expiration status.

Open tool

Timestamp Converter

Convert Unix/epoch timestamps to dates and dates to timestamps. Live clock, auto-detect ms vs s.

Open tool

JSON Formatter & Validator

Format, beautify, validate, or minify JSON. Auto-fix common errors. Stats and structure analysis.

Open tool

Regex Tester

Test regular expressions with real-time matching, capture groups, highlighted preview, and quick patterns.

Open tool

Need more than tools?

Scan IPs, domains and files. Get structured threat intelligence. Build YARA & Sigma rules. All in one platform.

Create free account Try a search