The full reference for encoding, hashing, tokens, cryptocurrency addresses, structured identifiers, and developer utilities — tool by tool, with inputs, outputs, and data source.
4 Min. LesezeitDiese Anleitung gibt es nur auf Englisch.
This category is the workbench's cryptography, encoding, and data-utility bench. Almost everything here runs entirely on your machine; a small number of cryptocurrency and identifier lookups reach out to read public ledger or registry data.
Tool
Input
Returns
Data source
Base64
Text or Base64
Encodes or decodes, standard and URL-safe alphabets, with auto-detection
Local
Base32
Text or Base32
Encodes or decodes
Local
Base45
Text or Base45
Encodes or decodes
Local
Base58
Base58 or Base58Check
Decodes
Local
Ascii85
Adobe Ascii85 / Base85
Decodes
Local
Quoted-Printable
Quoted-Printable text
Decodes
Local
URL Encode
Text or percent-encoded text
Percent-encodes or decodes
Local
HTML Entities
Text or HTML-entity-encoded text
Encodes or decodes
Local
Hex Converter
Text or hex
Encodes or decodes, with ASCII and other companion views
Local
Number Base
A whole number
Converts between decimal, hex, octal, and binary
Local
Data URI
A data: URI
Decodes it to its underlying content
Local
Smart Decode
An unknown blob
Peels back layered encodings automatically, guessing at each layer
Local
Tool
Input
Returns
Data source
Hash Compute
Text or a value
Every common digest (MD5, SHA-1, SHA-256, SHA-512, and more) in a single pass
Local
Hash Detector
An unknown hash string
Candidate algorithms it might be, from a built-in corpus, with crackability notes
Local
File Hasher
A local file
Multiple hashes of the file computed in one streaming pass
Local
File Signature
A file's leading bytes (hex or base64)
The file's true type identified from its magic bytes, regardless of its extension
Local
Tool
Input
Returns
Data source
JWT Decoder
A JWT, optionally a verify key or JWKS URL
Header, payload, and claims decoded and analyzed, with signature verification when a key is given
Mixed — network only if you supply a JWKS URL
JWT Secret Cracker
An HS256/HS384/HS512 JWT
A dictionary attack against its HMAC secret
Local
HMAC
Text, a key, and an algorithm
The HMAC digest, with optional constant-time verification against an expected value
Local
TOTP
A Base32 shared secret, algorithm, digit count
The current RFC 6238 time-based one-time-password code
Local
AES
Plaintext/ciphertext and a key
AES-256/192/128-GCM encryption or decryption
Local
PGP Key
A public PGP key
What it says about the person who made it — identity, creation date, algorithm
Network
Tool
Input
Returns
Data source
Crypto Address
A Bitcoin or Ethereum address
Validated and identified — network, format, checksum — offline
Local
Crypto Wallet
A public address
Ledger data for it: ETH via Etherscan, BTC via a block explorer
Network
Onion Address
A Tor onion address
Validated and decoded — version, checksum
Local
Decoders for identifier formats you run into during an investigation — each validates and reads out what the identifier encodes, without contacting anything.
Tool
Input
Returns
Data source
IBAN
An IBAN
Validated, with the country and bank it names
Local
ISBN
An ISBN
Validated and converted between ISBN-10/ISBN-13
Local
LEI
A Legal Entity Identifier
The company identity behind it, from the global LEI register (GLEIF)
Network
VIN Decoder
A 17-character VIN
The vehicle details it encodes
Network
SID Decoder
A Windows Security Identifier
Its components decoded — authority, sub-authorities, RID
Local
ID Decoder
A platform identifier (snowflake-style IDs and similar)
The information embedded in it — typically a timestamp
Local
General-purpose utilities that come up constantly while triaging data during an investigation.
Tool
Input
Returns
Data source
JSON Formatter
Pasted JSON
Pretty-printed, minified, or validated, plus structural queries (JSONPath)
Local
Timestamp Converter
A timestamp in any common form
Converts between Unix, ISO 8601, and vendor epochs (FILETIME, Cocoa, LDAP, WebKit), across timezones
Local
Regex Search
Text and a pattern
Every match of the regular expression in the text
Local
Text Diff
Two text blobs
A line-level diff between them
Local
List Compare
Two lists
Set comparison — shared, only-in-A, only-in-B
Local
User-Agent Parser
A User-Agent string
Browser, engine, OS, and device parsed out, with bot flags
Local
Unicode Inspector
A string
The tricks that make one character look like another — homoglyphs, invisible characters, mixed scripts
Local
Defang / Refang
An indicator of compromise
Defanged for safe sharing, or refanged back to its real form
Local
Calculator
An arithmetic expression
Evaluated (+ - * / % ^, plus sqrt/pow/abs/floor/ceil and similar)
Local
Password Strength
A password
A score of its resistance to guessing
Local
Randomness Analyzer
A name or string
How random it looks — offline DGA / generated-name triage