tools.fdrian.me

A compact set of browser-based utilities for recon, encoding, headers, redirects, and content inspection.

Encode and decode text in Base64 for payload review, storage formats, and quick transformations.

Inspect token headers and payloads, validate signatures, and test JWT workflows in one place.

Encode or decode percent-encoded values for query strings, paths, and request payload debugging.

Try common payloads against redirect parameters and inspect which requests are unsafe.

Pull unique domains from pasted text or fetched content to accelerate recon and cleanup work.

Scan JavaScript for tokens, keys, secrets, and other high-signal strings during source review.

Review response headers, highlight security gaps, and inspect common hardening controls.

Check whether hostnames point to unclaimed providers and surface likely takeover conditions.

Detect CORS misconfigurations — wildcard origins, credential leaks, origin reflection, and null-origin bypasses.