Free utilities for security workflows

Clean URLs and extract domains, paths and parameters

Normalize and deduplicate URL lists, strip tracking parameters, then export unique domains, endpoints, paths, query keys or FUZZ-ready templates.

Clean and normalize complete URL lists

Remove tracking parameters, fragments, credentials and exact duplicate outputs while keeping every URL inside your browser.

Extract unique hostnames from URLs

Collapse complete links, crawl exports or mixed text into a clean, deduplicated hostname inventory.

Turn complete URLs into unique paths

Remove domains, query strings and fragments to compare route structures across a complete URL dataset.

Extract unique query-string keys

Build a deduplicated parameter-name inventory from complete URLs without retaining their values.

Remove normalized duplicate URLs

Standardize URL formatting, choose the comparison rules and keep one copy of every exact normalized result.

Create FUZZ-ready parameter templates

Replace URL query values with a neutral FUZZ placeholder for lawful, explicitly authorized testing workflows.

Look up MD5, SHA-1 and SHA-256 hashes online

Search known-plaintext databases in verified batches of up to 100 hashes, with strict daily limits and exportable results.

Detect hash types and get the matching hashcat mode

Paste any hash and see which algorithms match its length, charset and prefix, together with the hashcat mode and John the Ripper format for each candidate.

Generate MD5, SHA and MySQL hashes at once

Turn any text into MD5, SHA-1, SHA-256, SHA-384, SHA-512 and MySQL hashes locally, then copy individual values or export the labeled set.

Build advanced search queries from operators and templates

Combine site, URL, title, text, file type and date operators, use focused templates and generate complete Google dorks from keyword lists.

Build searches for one domain or URL prefix

Generate site: queries with keywords, file types, exclusions and dates while keeping the complete query visible and local.

Find indexed URL words and route patterns

Build inurl: searches for route fragments and public parameter patterns, with optional site and topic filters.

Search for words and phrases in page titles

Generate intitle: queries with automatic phrase quoting, optional domains, document types and date filters.

Build focused public-document searches

Create filetype: searches for PDF, DOCX, XLSX, CSV and other formats using topics, domains and dates.

Generate before: and after: date searches

Use visual date inputs to combine a topic with Google before: and after: operators, domains and file types.

Apply one operator set to many keywords

Turn a multiline topic list into unique advanced Google queries that can be copied or exported locally.

Clean combolists and combo bases locally

Remove duplicate, captured and invalid combo lines, apply password-format filters, sort the result and export clean or rejected TXT reports.

Remove repeated combo lines locally

Keep one copy of each normalized identifier:password pair, count duplicates and review every removed line without validating credentials.

Strip pipe and tab capture suffixes

Reduce authorized captured rows to identifier:password pairs while keeping malformed lines in a separate local report.

Keep email-formatted combo rows

Filter an authorized mixed combo list to email:password format, normalize email casing and report rejected rows locally.

Sort valid combo lines A–Z

Alphabetize authorized username:password and email:password lists without changing password capitalization or uploading the source.

Apply length and character policies

Filter authorized combo rows by password length, uppercase, lowercase, number and symbol rules entirely in the browser.