Torito Tools

Encode text and files with standard or URL-safe alphabets.

Encode components and inspect query strings.

Convert UTF-8/16 and bytes; compress with gzip or deflate.

Safely encode and decode named and numeric entities.

Decode, verify and sign JSON Web Tokens locally.

Calculate and compare one-time codes from Base32 or otpauth inputs.

Hash text and files; verify GNU or BSD checksum manifests.

Generate strong passwords, bytes, UUIDs and ULIDs.

Inspect certificates and convert JWK, JWKS and PEM keys.

Decode SAML POST and Redirect messages without executing XML.

Extract, deduplicate and defang indicators from evidence.

Reveal URL destinations, Punycode and Unicode lookalikes.

Inspect message headers, delivery hops, MIME and suspicious links.

Inspect browser captures and review redacted HAR exports.

Inspect file signatures, hex, strings, entropy and SHA-256.

Calculate IPv4 and IPv6 networks without lookups.

Compare IPs, networks and domains against inclusion and exclusion lists.

Review and compare saved hosts, ports and service observations.

Review pasted CSP, HSTS, CORS and cookie attributes.

Convert raw requests and cURL into inspectable client code.

Format JSON, validate JSON Lines and convert NDJSON arrays.

Test expressions, captures and replacements safely.

Convert Unix, ISO, UTC and local date formats.

Compare text, JSON fields and sets of indicators.

Chain local decoders, byte operations and data transforms.

Score vectors and document severity assumptions for reports.

Filter, compare and selectively export local static-analysis findings.

Find sensitive values and review text or JSON redactions before sharing.

Add text watermarks to PDFs, preview pages and download locally.