Red Team Toolkit
Red team engineers simulate real-world adversaries to test an organization's defenses. The work demands rapid payload encoding, hash cracking verification, credential generation, and protocol testing — often under time pressure during an engagement. These browser-based tools run entirely client-side, keeping your tradecraft and engagement data off third-party servers.
Base64 Encoder / Decoder
Encode payloads for delivery via PowerShell, decode captured tokens, or inspect Base64-encoded command-and-control traffic. A fundamental tool used at every stage of the kill chain.
URL Encoder / Decoder
Encode payloads for URL-based injection, craft phishing links with encoded parameters, or decode obfuscated URLs found during reconnaissance. Essential for web application attack paths.
Hex Converter
Convert shellcode, binary payloads, and protocol data between hex and ASCII. Used for payload development, binary analysis, and evading signature-based detection controls.
Unicode Converter
Craft Unicode-encoded payloads for WAF bypass, homograph attacks, and input filter evasion. Convert between code points, HTML entities, and raw characters for advanced social engineering.
MD5 / Hash Generator
Generate hashes for password spraying wordlists, verify cracked credentials, or create hash values for technique validation. Supports MD5, SHA-1, SHA-256, and SHA-512.
cURL Converter
Convert intercepted requests to cURL format for replay and modification. Test API endpoints with different authentication tokens, headers, and payloads during application-layer attacks.
Password Generator
Generate strong passwords for implant configurations, exfiltration encryption keys, and temporary service accounts created during the engagement.
AES Encryptor
Encrypt command-and-control traffic, protect exfiltrated data, or test encrypted communications channels. AES-256 encryption keeps engagement data secure during transport.
RSA Encryptor
Test RSA implementations, encrypt payloads with target public keys, or verify key pairs during certificate-based attack scenarios.
RegExp Tester
Build regex patterns for log parsing, credential extraction, and automated data collection during post-exploitation. Test patterns against sample output before deploying them in scripts.
WebSocket Tester
Connect to WebSocket endpoints to test for authentication bypass, injection, and information leakage. Real-time protocols are often overlooked in security testing.
IP Address Lookup
Verify your attack infrastructure's IP reputation, check target IP ranges, and identify hosting providers during reconnaissance. Essential for operational security awareness.