OSINT Encoding and Decoding Tools
Decode, convert and analyze encoded data: Base64, hex, URL-encoding, cryptographic hashes, steganography. These tools are essential for malware analysis, CTF and obfuscated data investigation.
14 tools · Version française
- Balbuzard (T)also written BalbuzardPython malware analysis toolkit that extracts indicators and brute-forces common obfuscation patterns including XOR and rotation transforms.free
- ClearImage Barcode Readeralso written Clear Image Barcode ReaderWeb-based barcode and QR code recognition tool using Inlite Research ClearImage technology for common image and document formats.free
- CyberChefalso written Cyber ChefGCHQ-maintained browser workbench for chained encoding, decoding, hashing, crypto, and data transformation operations.free
- Firebug (T)also written FirebugFormer Firefox debugging extension that has been retired, with core functionality absorbed into modern Firefox Developer Tools.free
- Functions Onlinealso written FunctionsOnlinePHP-oriented online utility suite for common encoding, decoding, hashing, and string-manipulation function tests.free
- Hashes.comalso written HashesFree hash lookup and cracking service supporting MD5, SHA1, SHA256, bcrypt and 30+ other types. Searchable database of 30 billion+ cracked hashes with community upload feature.free
- iheartxor.py (T)also written iheartxor.py, iheartxor pyPython script for brute-forcing XOR-obfuscated strings within defined boundaries to reveal hidden text in malware samples.free
- JS BeautifierOpen-source JavaScript formatter that rewrites minified or obfuscated code into readable, consistently indented source.free
- JS NICELegacy JavaScript reverse-engineering service that previously improved variable names and recovered structure from minified code.free
- NoMoreXOR.py (T)also written NoMoreXOR.py, No More XOR.py, NoMoreXOR pyPython utility for recovering long XOR keys using character frequency heuristics and YARA-assisted pattern matching.free
- unxor (T)also written unxorKnown-plaintext XOR analysis utility for deriving keystreams and recovering original content from encoded samples.free
- XORBruteForcer.py (T)also written XORBruteForcer.py, XOR Brute Forcer.py, XORBruteForcer pySingle-byte XOR brute-force Python script that iterates candidate key values and surfaces matching decoded output.free
- XORSearch & XORStrings (T)also written XORSearch & XORStrings, XOR Search & XOR StringsDidier Stevens command-line utilities for locating XOR, ROL, ROT, and SHIFT-encoded strings in suspicious binaries.free
- xortool (T)also written xortoolPython-based XOR analysis tool that estimates key lengths and recovers likely multi-byte keys via frequency analysis.free
Frequently asked
- What is CyberChef?
- CyberChef is the reference tool for OSINT encoding/decoding: it supports 300+ operations (Base64, MD5/SHA hash, XOR, regex, etc.) in a visual drag-and-drop interface.
- How to decode a URL-encoded string?
- Paste the URL into CyberChef with the 'URL Decode' operation, or use an online decoder. %XX characters are replaced with their ASCII equivalents.