Torito

Torito Tools

Security utilities for everyday research.

Encode, inspect and transform data right in your browser. Your inputs stay on your device.

How privacy works

The toolbox

21 browser tools

Base64

Encode text and files with standard or URL-safe alphabets.

Encode & decode

URL codec

Encode components and inspect query strings.

Encode & decode

Text & bytes

Convert UTF-8/16 and bytes; compress with gzip or deflate.

Encode & decode

HTML entities

Safely encode and decode named and numeric entities.

Encode & decode

JWT lab

Decode, verify and sign JSON Web Tokens locally.

Tokens & crypto

Hashes & HMAC

Hash text and files; verify GNU or BSD checksum manifests.

Tokens & crypto

Random & IDs

Generate strong passwords, bytes, UUIDs and ULIDs.

Tokens & crypto

X.509 & PEM

Inspect certificates and convert JWK, JWKS and PEM keys.

Network & PKI

JSON workspace

Format JSON, validate JSON Lines and convert NDJSON arrays.

Data & text

Timestamp

Convert Unix, ISO, UTC and local date formats.

Data & text

Regex tester

Test expressions, captures and replacements safely.

Data & text

IP & CIDR

Calculate IPv4 and IPv6 networks without lookups.

Network & PKI

IOC workbench

Extract, deduplicate and defang indicators from evidence.

Investigation

HTTP security inspector

Review pasted CSP, HSTS, CORS and cookie attributes.

Investigation

URL & Unicode inspector

Reveal URL destinations, Punycode and Unicode lookalikes.

Investigation

Text & JSON diff

Compare text, JSON fields and sets of indicators.

Data & text

HAR inspector & redactor

Inspect browser captures and review redacted HAR exports.

Investigation

HTTP & cURL converter

Convert raw requests and cURL into inspectable client code.

Network & PKI

SAML inspector

Decode SAML POST and Redirect messages without executing XML.

Tokens & crypto

File triage

Inspect file signatures, hex, strings, entropy and SHA-256.

Investigation

Transformation recipes

Chain local decoders, byte operations and data transforms.

Data & text