skefo — developer & pentester toolkit

MD5, SHA-1, SHA-256, SHA-384 and SHA-512 digests of any text.

Keyed-hash message authentication codes with a secret key.

Guess a hash's algorithm from its length and format.

Repeating-key XOR encryption to and from hex.

Classic shift cipher over the Latin alphabet.

Convert text to and from Base64 with full UTF-8 support.

Percent-encode and decode URL components.

Convert between UTF-8 text and hexadecimal bytes.

Escape and unescape HTML entities for safe output review.

RFC 4648 Base32 — used by TOTP secrets and tokens.

Bitcoin-style Base58 without ambiguous characters.

Convert URL query strings to JSON and back.

Escape or unescape backslash sequences like \n and \uXXXX.

Convert CSV to a JSON array of objects and back.

Inspect JSON Web Token headers and claims (unverified).

Encode and decode International Morse code.

Convert Unix epoch values to readable dates.

Convert integers between binary, octal, decimal and hex.

Unix file permissions as octal and symbolic notation.

Convert data sizes across decimal and binary units.

Batch-generate random version 4 UUIDs.

Strong random passwords with an entropy estimate.

Random bytes as hex or Base64URL for keys and nonces.

Placeholder text by paragraph, sentence or word.

Browse, sort and regex-filter huge CSV files locally with paging.

Validate, pretty-print and minify JSON.

camelCase, snake_case, kebab-case, Title Case and more.

Sort, deduplicate, reverse, shuffle and count lines.

Test regular expressions and inspect matches and groups.

Line-by-line comparison of two blocks of text.

Reveal code points and spot homoglyphs and invisible characters.

Break down a cron expression field by field.

Character, word, line counts and reading time.

Break a URL into components and query parameters.

IPv4 subnet, netmask, broadcast and host range.

Convert domains to and from Punycode; flag homograph attacks.

Read camera, timestamp and GPS metadata from a photo.

Strip EXIF and metadata from an image before sharing.

Convert coordinates to DMS and open in map services.

Compose advanced Google search operators for recon.

Build Shodan, GitHub and Censys search queries.

Launch reverse image searches from an image URL.

Find archived snapshots of a URL or save a new one.

WHOIS, RDAP, crt.sh and DNS intel links plus CLI.

Generate username variations from a person's name.

Build profile URLs across platforms from a handle.

Canonicalize an email, flag disposables, Gravatar URL.

Identify country and format from a phone number.

Classify an IPv4/IPv6 address, scope and reverse DNS.

Vendor, cast bits and EUI-64 from a MAC address.

Parse browser, OS and device from a UA string.

Generate look-alike domains for phishing recon.

Validate and identify Bitcoin, Ethereum and more.

Identify card network from BIN and check Luhn.

Fingerprint, key ID and identities from a PGP key.

Convert colors between HEX, RGB and HSL.

Generate clean URL slugs from any title.

Searchable reference of HTTP response codes.