file forensics
Metadata analyzer
Drop a file. This tab reads magic bytes, hashes with SHA-256 / SHA-1 / MD5, estimates Shannon entropy, walks JPEG EXIF, PNG chunks, PDF info, ZIP entries, PE and ELF headers, then prints a hex dump. Nothing is uploaded.
client-side only · no network request for the file
hashes
format metadata
byte histogram
hex dump (first 512 bytes)
json report
crypto
Hash lab
SHA-1, SHA-256, SHA-384, SHA-512 via Web Crypto. Hash a string or a local file. Same-origin, still never uploaded.
identity
JWT inspector
Decode header and payload, surface exp/nbf/iat, and warn on alg=none. Signatures are not verified without the issuer key — that limitation is called out on purpose.
networking
CIDR / subnet calculator
Network, broadcast, wildcard, usable host range, class, and RFC1918 detection. The kind of math you do during firewall reviews.
http
Header forensics
Paste a raw request or response. Scores common security headers and flags cookies missing HttpOnly / Secure.
pki
X.509 certificate decoder
Paste PEM. SHA-256 / SHA-1 fingerprints of the DER, plus a small ASN.1 walker for subject, issuer, and validity when the structure is standard.
auth
Password entropy
Charset-size estimate, Shannon per character, cheap pattern checks, and a deliberately rough offline crack-time model. Runs locally as you type.
ops
Timestamp converter
Unix seconds, milliseconds, ISO-8601, RFC 2822, and Discord snowflakes (epoch 2015-01-01).
bytes
Hex / base64
If the input is even-length hex, decode to ASCII and Base64. Otherwise encode UTF-8 text to hex and Base64.