Security Tools

Encode and decode Base64, Hex, Binary, and other formats with file support

Decode and analyze JSON Web Tokens with security validation

Debug OAuth 2.0 and OpenID Connect flows with JWT decoder, PKCE generator, flow tester, and error troubleshooting

Encode and decode text using ROT13 and Caesar cipher

Decode and analyze SSL/TLS certificates with security validation

Free XOR encryption and decryption online. Encrypt text, decode XOR ciphertext, brute force cryptanalysis

Encrypt and decrypt text or files with AES-256-GCM, AES-CBC, or AES-CTR. Runs in your browser.

Calculate Shannon entropy to detect packed, encrypted, or obfuscated malware in binary files

Encrypt and decrypt text with Caesar cipher (ROT-N), frequency analysis, auto-detection, and visual cipher wheel

Polyalphabetic cipher with Kasiski examination, Index of Coincidence analysis, key recovery, and Tabula Recta visualization

Monoalphabetic substitution cipher with interactive solving assistant, frequency analysis, and pattern finder

Collection of classical cipher tools for encryption, decryption, and cryptanalysis including Caesar, Vigenère, and substitution ciphers

Auto-detect cipher types from ciphertext using frequency analysis, Index of Coincidence, and pattern matching

Encrypt and decrypt with affine cipher (ax + b mod 26). Includes brute force mode and modular inverse calculator

Ancient Hebrew reverse alphabet cipher (A↔Z, B↔Y). Self-inverse cipher with visual alphabet mapping

Transposition cipher that writes text in zigzag pattern. Visual diagram and brute force mode included

Digraph substitution cipher using 5×5 keyword matrix. Includes visual matrix and encoding rules

Self-reciprocal polyalphabetic cipher similar to Vigenère. Same operation encrypts and decrypts with C = (K - P) mod 26

Matrix-based polygraphic cipher using linear algebra. Supports 2×2 and 3×3 key matrices with inverse calculator

Interactive WWII Enigma cipher machine simulator with authentic rotors (I-V), reflectors, plugboard, and signal visualization

Theoretically unbreakable cipher with random key generation. XOR encryption with perfect secrecy when used correctly

Interactive RSA encryption with small primes. See key generation, encryption, decryption step-by-step. Break RSA to understand why key size matters.

Detect and decode nested encodings (Base64→Hex→URL→ROT13). Visualize decoding chains for CTF and forensics

See why ECB encryption mode is insecure through pixel-level visualization. Compare ECB vs CBC with interactive Canvas-based demos and mode comparison tables. CISSP Domain 3.

Generate CSRs, convert between PEM/DER/PFX/P7B formats, and verify certificate chains - 100% client-side

Build complete SSL/TLS certificate chains automatically. Upload your certificate and fetch missing intermediate CA certs.

Multi-technique deobfuscation tool for malware analysis with auto-detection and chaining

Search Certificate Transparency logs for SSL/TLS certificates and subdomains

Run quick or deep SSL scans to verify certificate chains, protocol support, and common configuration issues

Create customized IR playbooks aligned with NIST SP 800-61 for ransomware, data breaches, DDoS, supply chain compromise, and operational runbooks. Includes evidence preservation checklists, compliance guidance (GDPR, HIPAA, PCI-DSS), team roles, and export to PDF/Markdown

Generate Software Bill of Materials (SBOM) in CycloneDX and SPDX formats for supply chain security and EO 14028 compliance

Expand shortened URLs safely and analyze redirect chains with security checks

Trace HTTP redirect chains and analyze response headers for debugging

Extract OCSP responder URLs and CRL distribution points from X.509 certificates. Check certificate revocation status

Desktop app for filesystem analysis and security auditing with SSH scanning (macOS, Windows, Linux)

Generate SSH key pairs (Ed25519, RSA, ECDSA) with fingerprints and randomart visualization - 100% client-side

Generate PGP/GPG key pairs (Curve25519, RSA, NIST curves) with fingerprints and QR codes - 100% client-side

Detect exposed API keys, tokens, private keys, and database credentials in code. 100% client-side scanning.

Understand public/private key cryptography through visual analogies - padlock, color mixing, and mailbox demos. No math required.

Generate professional email templates for incident response, disaster recovery tests, maintenance notifications, security alerts, and stakeholder communications

Validate SPF, DKIM, and DMARC records with security grading and recommendations

Validate email syntax, MX records, disposable domains, and provider risk scoring

Analyze email headers for SPF/DKIM/DMARC validation, routing, and security threats

Test HTTP security headers and get security scores with actionable recommendations

Generate DMARC records with step-by-step wizard, preset templates, and deployment roadmap

Generate Content Security Policy headers with nonce/hash support and validation

Generate SPF records with automatic DNS lookup counter and optimization

Set up email authentication with guided SPF, DKIM, and DMARC configuration for your domain

Query DNS records with email security analysis and health scoring

Search CVEs, visualize vendor trends, analyze response times, and calculate CVSS scores

Look up Common Weakness Enumeration entries from MITRE with detailed mitigations and Top 25 list

Calculate CVSS v3.1 vulnerability scores with Base, Temporal, and Environmental metrics. Generate vector strings and severity ratings.

Defang and refang URLs, IPs, and domains for threat intelligence

Explore MITRE ATT&CK tactics and techniques for threat hunting

Detect homograph attacks and typosquatting. Analyze suspicious domains or generate protective variants

Check IP reputation, geolocation, and threat intelligence with fraud detection

Extract indicators of compromise (IPs, domains, URLs, hashes) from threat intel

Aggregate IOCs from multiple feeds, deduplicate indicators, and export collections for investigations

Extract ASCII and Unicode strings from binary files for malware analysis with IOC pattern detection

Binary file viewer and editor with hex/ASCII display, search, bookmarks, and byte editing

Build detection queries for Splunk SPL, Elastic KQL, and Microsoft Sentinel. Includes presets for authentication, network, malware, and threat hunting with MITRE ATT&CK mappings.

Look up geographic location, ISP, and threat intelligence for IP addresses

Query domain registration information, expiration dates, and nameservers

Interactive FAR/FRR curves with sensitivity slider, CER calculation, and modality comparison for CISSP Domain 5 (IAM)

NIST SP 800-88 decision-tree wizard that recommends Clear, Purge, or Destroy methods based on media type, data sensitivity, and asset disposition (CISSP Domain 2)

Educational simulator demonstrating how database inference and aggregation attacks work, and how countermeasures protect against them. Run queries against mock databases and see how combining aggregate results can reveal individual records. CISSP Domain 8.

Build complete threat models with STRIDE decomposition, DREAD scoring, auto-generated threat libraries, and prioritized mitigations. CISSP Domain 1.

Evaluate which formal security model (Bell-LaPadula, Biba, Clark-Wilson, Brewer-Nash) best fits your requirements with scored comparisons and implementation guidance. CISSP Domain 3.

Select the right federation protocol (SAML, OIDC, OAuth, Kerberos) with visual auth flow diagrams, protocol comparison, and Kerberos troubleshooter. CISSP Domain 5.

Generate cryptographic hashes (MD5, SHA-256, SHA-512) for files and text. Check malware with VirusTotal integration.

Disassemble x86/ARM/RISC-V machine code with assembler, shellcode detection, call graphs, and performance analysis

Identify true file types by analyzing magic numbers and detect extension spoofing

Look up hash values to identify known malware and file signatures

Generate Subresource Integrity hashes for scripts and stylesheets

Parse and analyze robots.txt files with path testing and security checks

Analyze HTTP cookies for security issues and privacy concerns

Detect and analyze CORS misconfigurations, security vulnerabilities, and policy issues

Map NIST Cybersecurity Framework 2.0 controls to CIS Controls v8, ISO 27001:2022, and SOC 2 Trust Services Criteria

Validate K8s manifests against CIS Kubernetes Benchmark security checks. Detect privileged containers, missing resource limits, and misconfigurations.

Interactive developer tool for constructing, sending, and analyzing HTTP requests directly from the browser

Visual Nmap command generator with preset templates and intelligent results parser

Visual Metasploit command generator with module presets, payload selector, and console command reference

Test regular expressions with pattern library and explanations

Test your password strength and get recommendations for improvement

Generate secure random passwords with customizable options