Free tools

Security and developer toolbox

Open-access tools built for analysts, researchers and developers. Free, no sign-up, and most of them run entirely in your browser.

Tools

Threat analysis & phishing

Deobfuscate payloads, pull indicators out of reports, map techniques to ATT&CK and check lookalike domains or QR codes before anyone clicks.

JS & URL Deobfuscator

Decode obfuscated JavaScript and malicious URLs. 14+ techniques including Base64, hex, Unicode, eval, ROT13, and defanged IOCs.

PopularBase64Hexeval()

IOC Extractor

Extract IPs, domains, URLs, hashes, and emails from threat reports and logs. Auto-refang defanged IOCs. CSV export.

IPv4/v6DomainsHashes

MITRE ATT&CK Map

Interactive matrix navigator. Select techniques, visualize coverage, export as JSON, YARA tags, or plain lists.

ATT&CK v15Coverage mapJSON export

Punycode & Homoglyph Detector

Decode xn-- punycode and reveal deceptive Unicode lookalike characters. Catch IDN homograph phishing domains like аpple.com.

PunycodeHomoglyphsIDN spoofing

QR Code Decoder

Upload a QR image to extract its URL or text and inspect it for quishing (QR phishing) before opening · then scan the link on mlab.

QuishingQR → URLImage decode

Vulnerabilities

Look up a CVE and score it, the two steps of every vulnerability triage.

CVE Search

Search the National Vulnerability Database. CVE ID, keyword, product or vendor · powered by vuln.mlab.sh.

NVDCVE IDKeyword

CVSS Calculator

Compute CVSS v3.1 and v4.0 base scores, severity ratings and vector strings. Built for vulnerability triage alongside CVE Search.

v3.1v4.0Base score

Hashing, tokens & certificates

Generate and identify hashes, read JWTs and parse X.509 certificates.

Hash Generator

Compute MD5, SHA-1, SHA-256, and SHA-512 hashes from text or files. Look up hashes on mlab.

MD5SHA-256File hashing

Hash Identifier

Identify the type of any hash · MD5, SHA family, NTLM, bcrypt, crypt, MySQL · from its length and format. Pairs with the Hash Generator.

MD5/NTLMbcryptSHA-256

JWT Decoder

Decode JSON Web Tokens. Inspect header, payload, claims, and check expiration status.

HeaderPayloadClaims

X.509 Certificate Decoder

Paste a PEM certificate to parse subject, issuer, validity, Subject Alternative Names, serial and public key · all locally.

PEMSANValidity

Files & forensics

See what a photo, a spreadsheet, an email or any file really contains before you trust or share it.

Image Metadata Analyzer

View and remove EXIF, GPS, camera metadata from photos. Detect tracking data, strip metadata for privacy, and re-download clean images.

EXIFGPSMetadata

XLSX Deep Inspector

Reveal what a "clean" Excel file hides: VBA macros, pivot-cache data snapshots, connection strings, external file paths, author metadata, hidden sheets. Purge and re-download.

VBA extractPivot cacheConnections

EML Parser

Upload and analyze suspicious email files (.eml). Extract headers, attachments, URLs, and sender authentication (SPF, DKIM, DMARC) results.

HeadersAttachmentsSPF/DKIM

File Signature Identifier

Drag a file to read its magic bytes, identify the true file type and flag spoofed extensions. Only the header is read · no upload.

Magic bytesDFIRSpoofed ext

Encoding

Encode and decode Base64 and percent-encoded URLs.

Base64 Encoder & Decoder

Encode text to Base64 or decode Base64 strings. UTF-8 and Base64URL support.

UTF-8Base64URL

URL Encoder & Decoder

Encode or decode percent-encoded URLs. encodeURI, encodeURIComponent, and full encoding.

PercentencodeURI

Network

Subnet maths for IPv4 and IPv6.

CIDR / Subnet Calculator

Compute network, broadcast, host range, subnet & wildcard masks and host counts for any IPv4 or IPv6 CIDR.

IPv4/IPv6NetmaskHost range

Developer utilities

Everyday helpers for JSON, regular expressions, timestamps, User-Agent strings and cron schedules.

JSON Formatter & Validator

Format, beautify, validate, or minify JSON. Auto-fix common errors. Stats and structure analysis.

BeautifyValidateMinify

Regex Tester

Test regular expressions with real-time matching, capture groups, highlighted preview, and quick patterns.

Live matchGroups

Timestamp Converter

Convert Unix/epoch timestamps to dates and dates to timestamps. Live clock, auto-detect ms vs s.

UnixEpoch

User-Agent Parser

Detect browser, version, OS, device and bot/crawler signatures from any User-Agent string.

BrowserOSBot

Crontab Parser & Explainer

Translate a cron expression into plain English and preview the next scheduled run times.

CronNext runs

More than tools

Need a full investigation platform?

Scan IPs, domains and files. Get structured threat intelligence.
Build YARA & Sigma rules. All in one platform.

Create free account Try a search

Navigation