Free · Client-side · No sign-up

Security./Encoding./Toolbox.

Open-access tools built for analysts, researchers and developers.
Everything runs in your browser, nothing touches our servers.

Most used

JS & URL Deobfuscator

Popular

Decode obfuscated JavaScript and malicious URLs. 14+ techniques including Base64, hex, Unicode, eval, ROT13, and defanged IOCs.

Base64Hexeval()

IOC Extractor

Extract IPs, domains, URLs, hashes, and emails from threat reports and logs. Auto-refang defanged IOCs. CSV export.

IPv4/v6DomainsHashes

CVE Search

Search the National Vulnerability Database. CVE ID, keyword, product or vendor · powered by vuln.mlab.sh.

NVDCVE IDKeyword

MITRE ATT&CK Map

Interactive matrix navigator. Select techniques, visualize coverage, export as JSON, YARA tags, or plain lists.

ATT&CK v15Coverage mapJSON export

Security & Malware 5

JS & URL DeobfuscatorPopular Decode obfuscated JavaScript and malicious URLs. 14+ techniques including Base64, hex, Unicode, eval, ROT13, and defanged IOCs. Base64Hexeval() IOC Extractor Extract IPs, domains, URLs, hashes, and emails from threat reports and logs. Auto-refang defanged IOCs. CSV export. IPv4/v6DomainsHashes MITRE ATT&CK Map Interactive matrix navigator. Select techniques, visualize coverage, export as JSON, YARA tags, or plain lists. ATT&CK v15Coverage mapJSON export Punycode & Homoglyph Detector Decode xn-- punycode and reveal deceptive Unicode lookalike characters. Catch IDN homograph phishing domains like аpple.com. PunycodeHomoglyphsIDN spoofing QR Code Decoder Upload a QR image to extract its URL or text and inspect it for quishing (QR phishing) before opening · then scan the link on mlab. QuishingQR → URLImage decode

Vulnerability 2

CVE Search Search the National Vulnerability Database. CVE ID, keyword, product or vendor · powered by vuln.mlab.sh. NVDCVE IDKeyword CVSS Calculator Compute CVSS v3.1 and v4.0 base scores, severity ratings and vector strings. Built for vulnerability triage alongside CVE Search. v3.1v4.0Base score

Crypto & Certs 4

Hash Generator Compute MD5, SHA-1, SHA-256, and SHA-512 hashes from text or files. Look up hashes on mlab. MD5SHA-256File hashing Hash Identifier Identify the type of any hash · MD5, SHA family, NTLM, bcrypt, crypt, MySQL · from its length and format. Pairs with the Hash Generator. MD5/NTLMbcryptSHA-256 JWT Decoder Decode JSON Web Tokens. Inspect header, payload, claims, and check expiration status. HeaderPayloadClaims X.509 Certificate Decoder Paste a PEM certificate to parse subject, issuer, validity, Subject Alternative Names, serial and public key · all locally. PEMSANValidity

Forensics 4

Image Metadata Analyzer View and remove EXIF, GPS, camera metadata from photos. Detect tracking data, strip metadata for privacy, and re-download clean images. EXIFGPSMetadata XLSX Deep Inspector Reveal what a "clean" Excel file hides: VBA macros, pivot-cache data snapshots, connection strings, external file paths, author metadata, hidden sheets. Purge and re-download. VBA extractPivot cacheConnections EML Parser Upload and analyze suspicious email files (.eml). Extract headers, attachments, URLs, and sender authentication (SPF, DKIM, DMARC) results. HeadersAttachmentsSPF/DKIM File Signature Identifier Drag a file to read its magic bytes, identify the true file type and flag spoofed extensions. Only the header is read · no upload. Magic bytesDFIRSpoofed ext

Encoding 2

Base64 Encoder & Decoder Encode text to Base64 or decode Base64 strings. UTF-8 and Base64URL support. UTF-8Base64URL URL Encoder & Decoder Encode or decode percent-encoded URLs. encodeURI, encodeURIComponent, and full encoding. PercentencodeURI

Network 1

CIDR / Subnet Calculator Compute network, broadcast, host range, subnet & wildcard masks and host counts for any IPv4 or IPv6 CIDR. IPv4/IPv6NetmaskHost range

Developer 5

JSON Formatter & Validator Format, beautify, validate, or minify JSON. Auto-fix common errors. Stats and structure analysis. BeautifyValidateMinify Regex Tester Test regular expressions with real-time matching, capture groups, highlighted preview, and quick patterns. Live matchGroups Timestamp Converter Convert Unix/epoch timestamps to dates and dates to timestamps. Live clock, auto-detect ms vs s. UnixEpoch User-Agent Parser Detect browser, version, OS, device and bot/crawler signatures from any User-Agent string. BrowserOSBot Crontab Parser & Explainer Translate a cron expression into plain English and preview the next scheduled run times. CronNext runs

No tools match your search

Try a different keyword, or clear the search.

More than tools

Need a full investigation platform?

Scan IPs, domains and files. Get structured threat intelligence.
Build YARA & Sigma rules. All in one platform.

Create free account Try a search

Navigation