Data Lab
A recipe workbench for decoding and transforming data during investigations and reviews.
- Encodings: Base64, Base32, Base58, Base85, hex, URL, HTML entities, Punycode
- Crypto: AES-GCM/CBC/CTR, HMAC, PBKDF2, XOR and classical ciphers
- Hashing (MD5, SHA family, CRC32) and gzip/deflate compression
- IOC extraction, defang/refang, JSON/CSV, timestamps, hexdump, entropy
- Magic detects layered encodings; shareable recipe links
More free security tools
- Threat Modeling: Model components, data flows and trust boundaries, generate STRIDE threats with mitigations, rate risk and export a Markdown report with a Mermaid diagram.
- Dev Toolbox: Decode and lint JWTs, evaluate Content-Security-Policy, grade HTTP security headers and cookies, encode/hash data and scan code for leaked secrets, all locally.
- Review Checklists: Run secure code reviews with OWASP Top 10:2025, API Security Top 10 and ASVS 5.0 checklists, record pass/fail with notes and paste the summary into your PR.
- Dependencies & CI: Check package-lock, yarn.lock, requirements.txt, pom.xml, go.sum and more against OSV.dev, and generate GitHub Actions for CodeQL, Dependabot, gitleaks and Trivy.
- PKI Tools: Decode and lint X.509 certificates, chains, CSRs and CRLs, generate CSRs and keys, match keys to certificates, convert PEM/DER/P7B/JWK. Nothing is uploaded.
- AI Skill Scanner: Scan SKILL.md files, agent instructions, MCP server configs and Claude Code hooks for prompt injection, data exfiltration, hidden Unicode and dangerous commands.
- Website Recon: Passive recon for a domain: DNS records, SPF, DMARC, DKIM, CAA, DNSSEC, certificate transparency subdomains, RDAP registration, HSTS preload and archive history.
Source code on GitHub (open source).