Shellhound / utility index
Find the next useful move.
Every tool is a small, inspectable instrument. Search by the thing you are holding—an address, token, header, hash, log, or payload—and follow the adjacent work.
[ tip ]Press Ctrl K from anywhere to open command search.112 tools · 16 fields
112 tools in view
01JWT DecoderDecode and inspect JWT tokens — header, payload, signature, expiry.02JWT GeneratorBuild and sign JWT tokens with custom claims, headers, and algorithms.03Basic Auth Header GeneratorGenerate Authorization: Basic headers from username:password pairs.04Bearer Token GeneratorGenerate cryptographically secure bearer tokens of any length.05API Key GeneratorGenerate prefixed API keys like sk_live_... or pk_test_... with checksums.06TOTP Code GeneratorGenerate time-based one-time passwords from a secret key (RFC 6238).07SAML DecoderDecode and pretty-print SAML assertions and responses.08X.509 Certificate DecoderParse PEM-encoded X.509 certificates and display subject, issuer, validity, SANs.09SSH Key FingerprintCalculate the fingerprint of an SSH public key (MD5, SHA-256).10OAuth 2.0 URL BuilderBuild OAuth 2.0 authorization and token URLs with proper parameters.11Hash GeneratorGenerate MD5, SHA-1, SHA-256, SHA-384, SHA-512 hashes from text.12HMAC GeneratorGenerate HMAC signatures using SHA-256, SHA-512, and other algorithms.13Hash IdentifierDetect hash type from a hash string — MD5, SHA-1, SHA-256, bcrypt, and more.14Base64 EncoderEncode text or binary data to Base64.15Base64 DecoderDecode Base64 strings back to text.16Hex Encoder / DecoderConvert text to hexadecimal and back.17Binary / Text ConverterConvert between text, binary, decimal, and octal representations.18ROT13 Encoder / DecoderApply ROT13 substitution cipher to text.19HTML Entity Encoder / DecoderEncode special characters as HTML entities and decode them back.20JSON String EscaperEscape and unescape special characters in JSON strings.21Base32 Encoder / DecoderEncode and decode data in Base32 (RFC 4648).22Unicode ConverterConvert text to Unicode escape sequences (\u0041) and codepoints.23Password GeneratorGenerate cryptographically secure passwords with configurable rules.24Passphrase GeneratorGenerate memorable passphrases using the EFF diceware word list.25Password Strength TesterAnalyze password entropy, crack time estimates, and pattern detection.26Password Hash GeneratorHash passwords with bcrypt, PBKDF2, scrypt, and Argon2 algorithms.27Entropy CalculatorCalculate Shannon entropy and bit strength of any text string.28IP Address LookupGet geolocation, ASN, ISP, and risk data for any IP address.29What Is My IPDetect your public IP address, browser headers, and connection details.30CIDR / Subnet CalculatorCalculate subnet ranges, broadcast addresses, and host counts from CIDR notation.31Subnet Mask ConverterConvert between CIDR prefix, dotted decimal, and wildcard mask formats.32IP Address ValidatorValidate IPv4 and IPv6 addresses. Detect type (private, loopback, multicast).33MAC Address LookupIdentify the vendor/manufacturer from a MAC address (OUI lookup).34MAC Address GeneratorGenerate random MAC addresses with optional OUI prefix.35Port Number LookupLook up well-known ports, services, and protocols (1–65535).36DNS LookupQuery DNS records — A, AAAA, MX, TXT, CNAME, NS, SOA, SRV — via DNS-over-HTTPS.37Reverse DNS LookupFind the hostname associated with an IP address (PTR record).38WHOIS LookupQuery WHOIS data for domains — registrar, dates, nameservers.39SPF Record CheckerCheck and validate SPF records for a domain. Detect includes, lookups, and errors.40DKIM Record CheckerLook up and validate DKIM DNS records for a domain and selector.41DMARC Record CheckerLook up and parse DMARC policies for a domain.42MX Record LookupList mail exchange servers for a domain, sorted by priority.43NS Record LookupFind the authoritative nameservers for any domain.44SSL Certificate CheckerCheck a site's SSL/TLS certificate chain, expiry, and configuration.45CSR DecoderDecode Certificate Signing Requests (CSR) and display their fields.46CSR GeneratorGenerate a Certificate Signing Request with custom subject fields.47PEM ↔ DER ConverterConvert certificates and keys between PEM and DER formats.48SSL Config GeneratorGenerate secure SSL/TLS configurations for Nginx, Apache, and HAProxy.49Certificate Chain CheckerVerify the certificate chain order and detect missing intermediates.50TLS Cipher Suite ReferenceBrowse and filter TLS cipher suites by protocol version and security rating.51HTTP Headers CheckerCheck security headers for any URL — CSP, HSTS, X-Frame-Options, and more.52CSP Header BuilderBuild Content-Security-Policy headers with a visual directive editor.53HSTS Preload CheckerCheck if a domain is on the HSTS preload list and validate HSTS headers.54CORS Policy TesterTest and debug Cross-Origin Resource Sharing policies for any URL.55Cookie AnalyzerParse and audit Set-Cookie headers for security best practices.56Permissions Policy BuilderBuild Permissions-Policy headers to control browser features (camera, mic, geolocation).57Security Headers GraderGrade a website's security headers from A+ to F with recommendations.58URL Encoder / DecoderEncode and decode URL components (percent-encoding / RFC 3986).59URL ParserParse any URL into scheme, host, port, path, query, and fragment.60Query String ParserParse URL query strings into key-value pairs and vice versa.61URL NormalizerNormalize URLs — lowercase scheme/host, remove default ports, sort params.62Data URI GeneratorConvert files or text to data: URIs (base64-encoded inline data).63URL Slug GeneratorConvert text to URL-safe slugs with configurable separators.64Redirect Chain CheckerFollow and display the full HTTP redirect chain for any URL.65File Hash CalculatorCalculate MD5, SHA-1, SHA-256, SHA-512 hashes of uploaded files.66File Compare (Diff)Compare two text files side-by-side with highlighted differences.67MIME Type DetectorDetect the MIME type of a file from its magic bytes (file signature).68EXIF Data ViewerExtract and display EXIF metadata from images (camera, GPS, date).69EXIF Data RemoverStrip all EXIF metadata from images for privacy before sharing.70Regex TesterTest regular expressions with real-time highlighting, capture groups, and flags.71Regex Cheat SheetQuick reference for regular expression syntax, quantifiers, and special characters.72Log ParserParse Apache/Nginx access logs, extract fields, and filter by IP, status, or path.73Glob Pattern TesterTest glob patterns against file paths — useful for .gitignore and CI configs.74JSON Formatter & ValidatorFormat, validate, minify, and tree-view JSON with syntax highlighting.75Email Header AnalyzerParse email headers — trace delivery path, detect delays, and flag anomalies.76SPF Record GeneratorBuild SPF TXT records with a visual editor for includes, IPs, and mechanisms.77DMARC Record GeneratorBuild DMARC policies with configurable enforcement, reporting, and alignment.78MTA-STS Policy GeneratorGenerate MTA-STS policies and DNS records for enforcing TLS on mail delivery.79BIMI Record GeneratorGenerate BIMI DNS records to display your brand logo in email clients.80chmod CalculatorConvert between symbolic (rwxr-xr--) and octal (754) Unix permissions.81umask CalculatorCalculate the effective file and directory permissions from a umask value.82Cron Expression BuilderBuild and decode cron expressions with a visual editor and next-run preview.83SSH Config GeneratorGenerate ~/.ssh/config entries with host, port, key, and proxy settings.84systemd Unit File BuilderBuild systemd service, timer, and socket unit files with a form-based editor.85AES Encrypt / DecryptEncrypt and decrypt text with AES-256-GCM using the Web Crypto API.86RSA Key Pair GeneratorGenerate RSA key pairs (2048/4096-bit) in PEM format, client-side.87EC Key Pair GeneratorGenerate elliptic curve key pairs (P-256, P-384, P-521) in PEM format.88Random Hex GeneratorGenerate cryptographically secure random hex strings of any length.89UUID GeneratorGenerate UUID v4 (random) and UUID v7 (timestamp-ordered) identifiers.90PGP Key GeneratorGenerate PGP/GPG key pairs for email encryption and signing.91Diffie-Hellman DemoInteractive visualization of the Diffie-Hellman key exchange protocol.92IOC ExtractorExtract Indicators of Compromise (IPs, domains, URLs, hashes, emails) from text.93URL / IP DefangerDefang URLs and IPs for safe sharing in reports (hxxps://, [.], etc.).94URL / IP RefangerReverse defanging — convert hxxps://[.]example[.]com back to live URLs.95Unix Timestamp ConverterConvert between Unix timestamps, ISO 8601, RFC 2822, and human-readable dates.96Windows FILETIME ConverterConvert Windows FILETIME (100ns ticks since 1601) to human-readable dates.97User-Agent ParserParse User-Agent strings into browser, OS, device, and engine details.98ASCII Table ReferenceComplete ASCII table with decimal, hex, octal, binary, and character values.99XML FormatterFormat and validate XML with syntax highlighting and indentation.100YAML ↔ JSON ConverterConvert between YAML and JSON formats with validation.101CSV ↔ JSON ConverterConvert between CSV and JSON array formats.102Reverse Shell GeneratorGenerate reverse shell one-liners for Bash, Python, PowerShell, Netcat, and more.103Payload EncoderEncode payloads in Base64, hex, URL encoding, and Unicode for bypass testing.104XSS Payload GeneratorGenerate common XSS test payloads with context-aware encoding.105SQL Injection Cheat SheetReference for SQL injection payloads across MySQL, PostgreSQL, MSSQL, and Oracle.106Hash Lookup (Wordlist)Check if a hash matches common passwords from a local wordlist.107HTTP Method TesterTest which HTTP methods (GET, POST, PUT, DELETE, OPTIONS) a URL accepts.108QR Code GeneratorGenerate QR codes from text, URLs, or data — downloadable as PNG or SVG.109Secure Note (Encrypt & Share)Encrypt a text note with a password and generate a self-destructing share link.110Browser Fingerprint ViewerView your browser's fingerprinting surface — canvas, WebGL, fonts, screen, and more.111Fake Identity GeneratorGenerate realistic but fake identity data for testing — names, addresses, SSNs.112Password Leak CheckerCheck if a password has appeared in data breaches using the HaveIBeenPwned k-anonymity API.