On-device security toolkit

CTF & forensics tools

A privacy-first alternative to the usual online crypto and forensics sites: cipher and hash identification, an encode/decode recipe chain, a dictionary hash cracker, strings, steganography detection and a JWT inspector — every one runs entirely in your browser. Your flags, hashes and tokens never leave your device.

100% on your device — nothing uploaded

Cipher identifier

Auto-detect and decode Base64, hex, Caesar, XOR, Morse and more.

Encode / decode recipe

Chain Base64, hex, URL, ROT13, XOR — CyberChef-style, live.

Hash identifier

Name a hash by its shape + get the hashcat/John mode.

Hash cracker

Dictionary attack on weak MD5/SHA — your hash stays on device.

Strings extractor

Pull ASCII + UTF-16 text from any binary.

Steganography detector

Find appended data, embedded files and LSB layers in images.

JWT decoder

Decode a token, read the claims, verify HS256 with your secret.

EXIF viewer

See every metadata field a photo carries.

Why on-device matters here

CTF challenge files, password hashes and JWTs are exactly the kind of data you should not paste into a random web service. Most 'decode this' and 'crack that' sites upload your input to their servers. These tools don't: the code runs in your browser, so the sensitive material stays with you. Same capability, none of the exposure.