// tooling
Client-side utilities.
Quick, focused operators for day-to-day security work. Every tool runs locally in your browser inputs never leave this tab.
(01)
Base64 Codec
Encode and decode UTF-8 strings. Toggle URL-safe variant.
(02)
URL Codec
Percent-encode / decode query strings and path segments.
(03)
JWT Inspector
Decode the header and payload of a JSON Web Token. No verification.
(04)
Hash Analyzer
Identify a hash by length and alphabet. Compute SHA-1 / SHA-256 / SHA-512 in-browser.
(05)
CVSS v3.1 Calculator
Live base score + vector string from the eight base metrics.
(06)
Threat Lookup
Paste any IP, domain, URL, hash or email. Fans out to VirusTotal, AbuseIPDB, Shodan, host.io, Hunter.io and urlscan.io in parallel with an inline live-scan + screenshot for URLs.