—
FIELD UTILITY / 01
Useful tools.
No theatre.
A compact browser workbench for bug bounty research, web testing and development. The core tools run locally with native browser APIs.
DESIGN PRINCIPLE
Fast enough to keep open beside Burp.
WORKBENCH
Common tasks
Small utilities you can explain, audit and trust.
Local-first by default
Core processing happens in this browser. No CDN, framework, analytics script, API key or application backend is required.
UTILITY / T01
Transform Lab
Turn one representation into another. Keep the mechanics visible.
Ready
All transformations are deterministic and local.
UTILITY / INSPECT
Inspect
Read common web-security artifacts without sending them anywhere.
JWT INPUT
Decoding is not signature verification.
—
TEXT TO HASH 0 chars
SHA-1 is legacy; SHA-256+ is preferred for new security designs.
URL
HTTP RESPONSE HEADERS
Heuristic checklist — not a vulnerability scanner.
UTILITY / HELPERS
Helpers
Small pieces of kit that save time during labs, testing and development.
H01
Random password
Uses crypto.getRandomValues(); generated locally.
H02
Random token
Raw random bytes represented as hex or Base64URL.
H03
UUID
Generate a standards-compatible random UUID.
H04
Unix time
Useful when reading JWT iat/exp or API data.