A comprehensive, production-ready toolkit of essential cybersecurity tools for security researchers, penetration testers, and developers. Built with Next.js 14, TypeScript, and Tailwind CSS.
- π Cryptography & Encoding: Hash tools, JWT manipulation, PGP encryption, Base64 encoding
- π Web & Cloud Security: CORS testing, security headers, URL analysis, device fingerprinting
- π― Threat Intelligence: IOC extraction, CVE lookups, threat intel checks, QR code analysis
- π§ͺ Penetration Testing: Command injection payloads, JWT fuzzing, file upload validation
- π€ AI Security: Prompt testing, jailbreak detection, toxicity checking, context trimming
- π Learning: Security tips, prompt engineering, text-to-speech
- Node.js 18+
- npm or yarn
# Clone the repository
git clone https://github.com/your-username/secutools-io.git
cd secutools-io
# Install dependencies
npm install
# Start development server
npm run devOpen http://localhost:3000 in your browser.
| Tool | Description | Status |
|---|---|---|
| Hash Tools | MD5, SHA1, SHA256, SHA512 calculators | β Live |
| JWT Decoder | Decode and verify JSON Web Tokens | β Live |
| JWT Fuzzer | Test JWT vulnerabilities with algorithm confusion attacks | β Live |
| Password Utilities | Strength checker and secure generator | β Live |
| Hash Identifier | Detect hash type from string | β Live |
| String Obfuscator | ROT13, Caesar, XOR, Base conversions | β Live |
| Certificate Parser | Parse PEM/DER certificates | β Live |
| Hash Collision Demo | Visualize MD5/SHA1 collisions | β Live |
| Base64/Base32 Encoder | Encode/decode with file support | β Live |
| PGP Key Generator | Generate PGP keys, encrypt/decrypt | β Live |
| AES/RSA Encryptor | Client-side encryption | β Live |
| Unicode/Hex Converter | Convert between formats | β Live |
| Tool | Description | Status |
|---|---|---|
| Security Headers Checker | Inspect CSP, HSTS, X-Frame-Options | β Live |
| URL Unshortener & Redirect Tracer | Expand and trace redirect chains | β Live |
| CORS Tester | Detect misconfigured Access-Control headers | β Live |
| CVE Severity Calculator | Compute CVSS scores | β Live |
| Device Info Inspector | Browser fingerprinting analysis | β Live |
| Tool | Description | Status |
|---|---|---|
| IOC Extractor | Extract IPs, URLs, hashes, emails | β Live |
| CVE Lookup | Fetch details from CIRCL CVE | β Live |
| CVE Feed Viewer | Browse latest CVEs from NVD | β Live |
| Threat Intel Check | VirusTotal/AbuseIPDB integration | β Live |
| WHOIS / RDAP | Domain ownership & registration | β Live |
| Email Header Analyzer | Trace spoofing & spam origins | β Live |
| QR Code Security Analyzer | Scan and analyze QR codes for risks | β Live |
| Tool | Description | Status |
|---|---|---|
| Wordlist Generator | Custom password/wordlists | β Live |
| Command Injection Tester | 40+ OS injection payloads across 5 categories | β Live |
| JWT Fuzzer | Algorithm confusion & claim manipulation | β Live |
| File Upload Validator | MIME spoofing & magic byte detection | β Live |
| Tool | Description | Status |
|---|---|---|
| Prompt Template Builder | Create reusable structured prompts | β Live |
| Prompt A/B Tester | Compare model responses | β Live |
| Context Trimmer | Smart token management for LLMs | β Live |
| Jailbreak Tester | Test prompt-injection attacks | β Live |
| Toxicity Classifier | Detect harmful language | β Live |
| Tool | Description | Status |
|---|---|---|
| Daily Security Tips | Flashcards & rotating advice | β Live |
| PromptShortcuts | Quick prompt templates | β Live |
| Text β Voice (TTS) | Browser-based text-to-speech | β Live |
- β¨ Glassmorphic UI: Modern backdrop blur effects
- π Gradient Backgrounds: Unique color schemes per category
- π Smooth Animations: Slide-in effects and hover states
- π± Fully Responsive: Mobile-first design
- βΏ Accessible: ARIA labels and semantic HTML
- β‘ Fast: Client-side processing where possible
Create a .env.local file for API integrations:
# Optional: VirusTotal API key for threat intel
VT_API_KEY=your_virustotal_api_key
# Optional: AbuseIPDB API key for IP reputation
ABUSEIPDB_KEY=your_abuseipdb_api_key
# Optional: LLM API keys for AI tools
OPENAI_API_KEY=your_openai_key
ANTHROPIC_API_KEY=your_anthropic_keysecutools-io/
βββ app/
β βββ api/ # API routes
β β βββ trace/ # URL redirect tracing
β β βββ cors-check/ # CORS testing
β β βββ ...
β βββ command-injection/ # Command injection tester
β βββ jwt-fuzzer/ # JWT fuzzer
β βββ file-upload-validator/ # File upload validator
β βββ url-trace/ # URL tracer
β βββ cors-check/ # CORS tester
β βββ context-trimmer/ # Context trimmer
β βββ ...
βββ components/
β βββ Section.tsx # Reusable section
β βββ Navigation.tsx # Header navigation
βββ public/ # Static assets
# Install Vercel CLI
npm i -g vercel
# Deploy
vercel# Build Docker image
docker build -t secutools-io .
# Run container
docker run -p 3000:3000 secutools-io# Build for production
npm run build
# Start production server
npm startnpm run dev # Start development server
npm run build # Build for production
npm run start # Start production server
npm run lint # Run ESLint- Create new page in
app/[tool-name]/page.tsx - Add API route in
app/api/[tool-name]/route.tsif needed - Update
app/data.tswith tool metadata - Set
isPublish: trueto make it visible
- Client-side Processing: Most tools run entirely in the browser
- No Data Storage: No user data is stored or tracked
- Open Source: Full transparency with public codebase
- API Keys: Optional external API integrations only
- Ethical Use: All penetration testing tools include ethical use warnings
We welcome contributions! Please see our Contributing Guidelines.
# Fork and clone the repository
git clone https://github.com/your-username/secutools-io.git
# Install dependencies
npm install
# Start development server
npm run dev- Create a feature branch
- Make your changes
- Test thoroughly
- Submit a pull request
This project is licensed under the MIT License - see the LICENSE file for details.
- OWASP for security guidelines
- MITRE ATT&CK for threat intelligence framework
- CIRCL for CVE database
- VirusTotal for threat intelligence
- AbuseIPDB for IP reputation
- Documentation: GitHub Wiki
- Issues: GitHub Issues
- Discussions: GitHub Discussions
- Email: tkarthikeyan@gmail.com
Built with β€οΈ for the cybersecurity community
π‘οΈ SecuTools.io - Your comprehensive security toolkit