~/tools $ ./encode
Encoder / Decoder
Chain Base64, URL, hex, HTML entity, and ROT13 transforms into a recipe and watch the output update live.
Runs entirely in your browser. Nothing you paste is sent anywhere.
Add a step
Recipe
Output
Why chain transforms
Real payloads and CTF flags are rarely encoded once. A value might be URL encoded, then Base64 encoded, then dropped into a cookie. Build the recipe in the order the data was encoded to see each layer, then reverse it to decode.
Things worth knowing
- Base64 decode here accepts the URL-safe alphabet (
-and_) and missing padding, which is how JWTs and many APIs store it. - Hex decode ignores
0x,\x, spaces, and colons, so you can paste output from xxd, Wireshark, or a debugger. - ROT13 is not encryption. If you find it protecting anything real, that is a finding.