Torito Tools
Security utilities for everyday research.
Encode, inspect and transform data right in your browser. Your inputs stay on your device.
How privacy worksThe toolbox
21 browser toolsBase64
Encode text and files with standard or URL-safe alphabets.
Encode & decodeURL codec
Encode components and inspect query strings.
Encode & decodeText & bytes
Convert UTF-8/16 and bytes; compress with gzip or deflate.
Encode & decodeHTML entities
Safely encode and decode named and numeric entities.
Encode & decodeJWT lab
Decode, verify and sign JSON Web Tokens locally.
Tokens & cryptoHashes & HMAC
Hash text and files; verify GNU or BSD checksum manifests.
Tokens & cryptoRandom & IDs
Generate strong passwords, bytes, UUIDs and ULIDs.
Tokens & cryptoX.509 & PEM
Inspect certificates and convert JWK, JWKS and PEM keys.
Network & PKIJSON workspace
Format JSON, validate JSON Lines and convert NDJSON arrays.
Data & textTimestamp
Convert Unix, ISO, UTC and local date formats.
Data & textRegex tester
Test expressions, captures and replacements safely.
Data & textIP & CIDR
Calculate IPv4 and IPv6 networks without lookups.
Network & PKIIOC workbench
Extract, deduplicate and defang indicators from evidence.
InvestigationHTTP security inspector
Review pasted CSP, HSTS, CORS and cookie attributes.
InvestigationURL & Unicode inspector
Reveal URL destinations, Punycode and Unicode lookalikes.
InvestigationText & JSON diff
Compare text, JSON fields and sets of indicators.
Data & textHAR inspector & redactor
Inspect browser captures and review redacted HAR exports.
InvestigationHTTP & cURL converter
Convert raw requests and cURL into inspectable client code.
Network & PKISAML inspector
Decode SAML POST and Redirect messages without executing XML.
Tokens & cryptoFile triage
Inspect file signatures, hex, strings, entropy and SHA-256.
InvestigationTransformation recipes
Chain local decoders, byte operations and data transforms.
Data & text