tools.fdrian.me

A compact set of browser-based utilities grouped by purpose — encoding, HTTP inspection, and recon.

encoding

Encode and decode text in Base64 for payload review, storage formats, and quick transformations.

Inspect token headers and payloads, validate signatures, and test JWT workflows in one place.

Encode or decode percent-encoded values for query strings, paths, and request payload debugging.

Review response headers, highlight security gaps, and inspect common hardening controls.

Detect CORS misconfigurations — wildcard origins, credential leaks, origin reflection, and null-origin bypasses.

Try common payloads against redirect parameters and inspect which requests are unsafe.

Pull unique domains from pasted text or fetched content to accelerate recon and cleanup work.

Check whether hostnames point to unclaimed providers and surface likely takeover conditions.

Scan JavaScript for tokens, keys, secrets, and other high-signal strings during source review.