3 live
Text Encrypt / Decryptlive
AES-256-GCM encryption in the browser. Passphrase-protected via PBKDF2 (600 000 iterations), authenticated and tamper-evident.
↗
Hash Generatorlive
MD5, SHA-1, SHA-256, SHA-384 and SHA-512 for any text or file. Drag-and-drop, checksum verification and a progress bar for large files.
↗
Encoder / Decoderlive
Convert between Base64, Base64url, URL encoding, HTML entities and hex — all in one place. Useful for debugging payloads and inspecting encoded strings.
↗
4 live
URL & Phishing Analyzerlive
Dissect any URL — scheme, host, path, parameters, fragment. Detect homograph attacks, IDN punycode, suspicious TLDs and phishing patterns without clicking.
↗
Metadata Extractorlivenew
Extract EXIF, XMP and IPTC metadata from images and documents without uploading them. Reveals GPS coordinates, device model, software and timestamps.
↗
Browser Fingerprint Visualizerlive
See exactly what your browser reveals to every site you visit. Canvas hash, WebGL renderer, hardware signals, fonts, timezone and a composite uniqueness score — all computed locally.
↗
CVE Lookuplive
Search and browse CVEs directly from the NVD. Filter by severity, CVSS score, CWE and affected product. Live data — no account, no API key required.
↗
4 live · 1 soon
CIDR Calculatorlive
Subnet masks, broadcast addresses, usable host ranges and wildcard masks — instant network math. Supports IPv4 with visual breakdown of each octet.
↗
WHOIS Lookuplive
Query registration data for any domain — registrar, creation and expiry dates, name servers and registrant details. Useful for domain due diligence and OSINT investigations.
↗
IP Infolive
Look up any IP address — geolocation, ASN, ISP, organisation, country and timezone. Supports IPv4 and IPv6. Automatically detects your own IP on load.
↗
IP Blacklist Checkerlive
Check any IP against major DNS-based blacklists (DNSBLs) for spam, malware or abuse flags. Results returned in seconds via DNS-over-HTTPS — no server, no logs.
↗
2 live
JWT Decoderlive
Decode any JSON Web Token — colour-coded header, payload and signature. Registered claims inspector, expiry status and in-browser signature verification for HMAC and RSA/ECDSA.
↗
Password Analyzerlive
Real-time entropy score, crack-time estimates across four attack scenarios, pattern detection and a HaveIBeenPwned breach check using k-anonymity.
↗
1 live
no tools match ""
More tools in progress.
Have an idea? Open a GitHub issue — it takes 30 seconds and helps prioritise the roadmap.
Have an idea? Open a GitHub issue — it takes 30 seconds and helps prioritise the roadmap.
// open source
Suggest a tool.
Fill in the fields below and we'll open a pre-filled GitHub issue for you. You'll need a free GitHub account.
No GitHub? Email us instead → · All suggestions are public.