Security Tools | CyberRamen.com

CVSS v3.1 Calculator

Score vulnerabilities using the official CVSS v3.1 methodology with Base, Temporal, and Environmental metrics

CVSS v4.0 Calculator

Official CVSS v4.0 vulnerability scoring with Base, Threat, Environmental and Supplemental metrics. Real-time scoring, vector string parsing and URL sharing. 100% client-side

🌐

DNS Mapper

Map DNS infrastructure with visual network graphs, subdomain discovery, and ASN lookup

🛡

Phishing Checker

Analyze URLs, domains, and content for phishing indicators and typosquatting

📧

Email Header Analyzer

Analyze email headers for phishing indicators, spoofing, and security threats

🔒

Hash Toolkit

Generate, verify, and identify cryptographic hashes (MD5, SHA-256, SHA-512, bcrypt, and more)

🌐

CIDR Calculator

Calculate IP ranges, subnets, and network addressing for infrastructure planning

🕵

Kaidoku Cipher Decoder

Decode 80+ classical ciphers and encodings with auto-detection, then triage the plaintext for URLs, social handles, coordinates, wallets, hashes and CTF flags

🛡

IOC Defanger

Safely defang and refang malicious indicators for secure SOC sharing

🔭

IOC Pivoting Tool

Paste or import IOCs, link to incidents and systems, pivot between related objects, and export as CSV or STIX 2.1

🔓

JWT Decoder

Decode and analyze JSON Web Tokens for security issues and debugging

🔐

Password Security Suite

Generate strong passwords, analyze strength with entropy and cracking time, and hash with bcrypt

🗃

JSON / YAML / PHP Formatter

Validate, format, and convert between JSON, YAML, and PHP array syntax with syntax highlighting and tree view

🌐

IP Info

Analyze IPv4/IPv6 addresses with binary representation and range detection

📅

Timestamp & Epoch Converter

Convert Unix timestamps to human-readable dates and vice versa, with batch conversion and timezone support

🔎

Regex Tester

Test regular expressions with highlighting, pattern library, and ReDoS protection

🚀

HTTP Request Builder

Build HTTP requests and export as cURL, fetch, Python, PHP, and more

📋

Diff Tool

Compare two texts with side-by-side diff and unified format output

📊

CSV Converter

Parse CSV/TSV data and convert to JSON, SQL, HTML, or Markdown tables

🔢

Encoding Toolkit

Encode, decode, and detect text encodings: Hex, Binary, URL, HTML, Unicode, Base64, and more

▦

QR Code Generator

Generate QR codes for URLs, WiFi, contacts, and more with custom colors

🎨

Color Converter

Convert colors between HEX, RGB, HSL, CMYK with WCAG contrast checker

📝

Markdown Preview

Write Markdown with live preview and export as HTML or Markdown file

📊

Text Statistics

Analyze text for word count, readability scores, and keyword density

⏰

Cron Parser

Parse cron expressions, see next run times, and build schedules visually

🔒

Certificate Decoder

Decode SSL/TLS certificates to view subject, issuer, validity, and extensions

🗂

SQL Formatter

Format, beautify, and minify SQL queries with syntax highlighting

🔒

Unix Permissions Calculator

Calculate Unix/Linux file permissions (chmod) with visual editor

🖥

User Agent Parser

Parse browser user agent strings to extract browser, OS, and device information

🔑

UUID Generator

Generate and validate UUIDs (v1, v4) with bulk generation support

🔗

URL Parser

Parse URLs into components, encode/decode, and build URLs from parts

🖥

MAC Address Lookup

Look up MAC address vendor/manufacturer from OUI database

🤖

Robots.txt Analyzer

Parse and analyze robots.txt files with URL testing and validation

🛡

CSP Builder

Build Content-Security-Policy headers with visual interface and presets

🔡

String Case Converter

Convert text between camelCase, snake_case, kebab-case, PascalCase, and more, plus URL slug generation

📄

MIME Type Lookup

Look up MIME types by file extension for correct Content-Type headers

🎨

Favicon Generator

Generate favicons from text, emojis, or solid colors in multiple sizes

⚙

.htaccess Generator

Create Apache .htaccess files with security, caching, and rewrite rules

🔍

Server Config Validator

Validate Apache and Nginx configuration syntax with best-practice checks

🔄

Mod_Rewrite Tester

Test Apache mod_rewrite rules and see URL transformations

🔌

Port Lookup

Look up network port information, security status, and common usage

🔢

Binary/Hex/Decimal Calculator

Convert between number bases with step-by-step explanations and arithmetic

📰

Security Feeds

Aggregated security news, CVEs, and threat intel from 40+ sources (CISA, NVD, CERTs, vendors)

🔍

Audit a web page in your browser: content stats, heading hierarchy, internal / external / social links, images without alt, scripts, palette, fonts — and hidden-text detection through the real CSS cascade

🔗

Link Extractor

Extract and list all links from any webpage with filtering and export options

🔒

SSL Certificate Checker

Analyze SSL/TLS certificates with trust score, expiration alerts, and legitimacy indicators

📢

NATO Phonetic Converter

Convert text, hex, UUIDs, and hashes to NATO phonetic alphabet for clear verbal communication

🌐

Meeting Time Zone Converter

Convert meeting times across timezones with business hours visualization and calendar export

📅

ICS Calendar Generator

Create .ics calendar event files compatible with Apple Calendar, Google Calendar, Outlook, and Thunderbird

📜

HTTP Status Code Reference

Complete searchable reference of HTTP response status codes with descriptions and use cases

🔢

ASCII Table

Complete ASCII character reference with decimal, hex, octal, and binary values

📝

Lorem Ipsum Generator

Generate placeholder text for design mockups in various formats and lengths

📧

Email Security Checker

Check SPF, DKIM, and DMARC records to validate email authentication

🔍

WHOIS Lookup

Look up domain registration information using RDAP (registrar, dates, nameservers)

🔢

ASCII Banner Generator

Generate ASCII art text banners for MOTD, scripts, and terminal displays

📍

IP Geolocation & Privacy Checker

Geolocate any IP address, view your browser fingerprint, and detect VPN/proxy usage with privacy analysis

📝

Incident Report Generator

Generate NIS2, DORA, and GDPR incident report templates with regulatory deadlines, severity classification, and markdown export

📜

Compliance Reference Database

Searchable database of 1000+ compliance specifications from NIST 800-53, DORA, GDPR, NIS2, and CRA frameworks

✂

Log Snippet Anonymizer & Redactor

Safely anonymize IPs, emails, JWT tokens, session IDs, and API keys in log snippets before sharing. 100% client-side.

🔑

Secrets & Credential Leak Scanner

Find leaked API keys, tokens, private keys and passwords in pasted code, .env files, CI pipelines, logs or chat exports: AWS, GitHub, GitLab, Slack, Stripe, SendGrid, Twilio, Azure, GCP, JWTs, PEM keys. Confidence tiers, example-value filtering, masked findings, one-click redaction. 100% client-side, nothing stored

🕔

Incident Timeline Builder

Build interactive incident timelines from log snippets with automatic timestamp normalization, annotations, and JSON export

📸

USB Hygiene Helper

Analyze USB device lists from lsusb, PowerShell, or CSV exports to identify risky devices like potential BadUSB or unknown vendors

💙

System Resource Health Checker

Paste output from uptime, free, df, top, or PowerShell to get CPU, RAM, disk, and IO health analysis with severity ratings

🌐

Domain Availability Checker

Check if domain names are available across multiple TLDs using RDAP lookups

🔐

TOTP Generator & Verifier

Generate and verify Time-based One-Time Passwords (RFC 6238) with provisioning URI builder

🔑

SSH Key Generator & Analyzer

Generate Ed25519 and RSA SSH key pairs, analyze public keys with fingerprint and security assessment

🔍

DNS Record Lookup

Look up A, AAAA, MX, TXT, NS, CNAME, and SOA records for any domain with TTL and export

🎲

Random Test Data Generator

Generate realistic random test data: emails, usernames, IPs, domains, paths, MACs, UUIDs, and more

🔒

AES-GCM Encrypt & Decrypt

Encrypt and decrypt text with AES-256-GCM using Web Crypto API and PBKDF2 key derivation

🧹

Text Cleaner & Normalizer

Strip HTML, remove diacritics, normalize whitespace, trim BOMs, fix line endings, and remove invisible characters

🔍

Recon / OSINT Helper

Generate instant pivot links to 25+ OSINT services (Shodan, Censys, VirusTotal, urlscan) from a domain or IP

🍣

IAM Policy Analyzer

Grade an AWS, Azure or GCP IAM policy A–F: wildcards, privilege-escalation paths, NotAction, missing conditions, public principals, with plain-English fixes and a least-privilege rewrite. 100% client-side.

🥣

Bucket Exposure Checker

Passive, credential-free check of an S3, Cloud Storage or Azure Blob name: exists, listable, readable, or a takeover candidate — with what the provider error codes reveal and the fix per cloud

🥤

Container Manifest Linter

Security-only lint of a Dockerfile or Kubernetes manifest, graded A–F: root, :latest, secrets in layers, privileged pods, host namespaces, hostPath, missing limits — each with a copy-paste fix. 100% client-side.

🛡

HTTP Security Headers Grader

Grade HTTP security headers A+ to F with per-header analysis, scoring, and fix recommendations

📜

DORA Compliance Checker

Interactive DORA self-assessment covering all five pillars with Luxembourg CSSF specifics and exportable gap report

🔭

MITRE ATT&CK Search

Fast offline search across ATT&CK Enterprise techniques with detection guidance and SIEM cross-links

📜

Sigma Rule Builder

Build Sigma detection rules visually with live YAML preview and export to Splunk SPL, QRadar AQL, and Sentinel KQL

🔍

Dependency Vulnerability Scanner

Scan package.json, requirements.txt, or composer.json for known CVEs via OSV.dev API

🕵

LinkedIn Exposure Audit

Assess LinkedIn profile exposure risk from an attacker perspective. Score identity leaks, job details, network openness, and posting behavior.

📷

EXIF & Metadata Analyzer

Extract EXIF metadata from images client-side. GPS coordinates, camera info, timestamps, and software details for OSINT and forensics

🚫

Metadata Stripper

Remove EXIF and metadata from images before sharing. Strip GPS, camera info, and identifying data. Batch processing supported

🔐

Filigrane — Document Watermark

Stamp a repeated diagonal watermark onto ID cards, payslips, and PDFs before sending them to a landlord, recruiter, or insurer. 100% in-browser — nothing is uploaded. Images + PDF, batch, templates

📊

SOC Sizing & Cost Calculator

Calculate SIEM sizing, storage, and 3-year TCO across Wazuh, Graylog, Splunk, QRadar, Sentinel, and LogRhythm with compliance retention overlay

📷

QR Code Scanner

Decode QR codes from images with URL defanging for safe SOC sharing. Drag & drop, paste, or upload

🛡

security.txt Generator

Generate a compliant /.well-known/security.txt file (RFC 9116) for vulnerability disclosure. Client-side, with validation and PGP key prompts

🔭

YARA Rule Builder & Tester

Visually build YARA detection rules with live preview, validation, and a client-side rule tester for malware hunting

📊

Risk Matrix Builder

Plot risks on likelihood-vs-impact heatmaps for ISO 27001, DORA, and NIS2 risk registers. 3x3 or 5x5, export PNG/CSV/JSON

🔍

File Signature Identifier

Identify file formats by their magic numbers. Drop a file (browser reads first 64 bytes only) or paste hex. 60+ signatures for DFIR and malware triage

📚

Tabletop Exercise Generator

Generate ready-to-run incident response tabletop scenarios (ransomware, BEC, insider, supply chain, DDoS, OT) with injects, discussion questions, and Markdown export

🔐

Password Policy Tester

Score your password policy against NIST SP 800-63B, NCSC, and CIS guidance. Get a graded gap report and ready-to-publish policy text

🔭

STIX 2.1 Indicator Formatter

Convert IOC lists into STIX 2.1 bundles for TAXII, MISP, or OpenCTI sharing. Auto-detects type, refangs, supports TLP markings and kill-chain phases

📖

Control Mapper (CSF / ISO / DORA)

Cross-reference NIST CSF 2.0 outcomes to ISO 27001:2022 Annex A and DORA articles. Search, filter, browse all 106 subcategories, and export the mapping as CSV / JSON / Markdown

📊

NIST CSF 2.0 Profile Builder

Build a NIST CSF 2.0 Current and Target Profile across all 106 subcategories. Score on a 0-4 scale, see gap analysis by Function and Category, export JSON / CSV / Markdown. Source: NIST CSWP 29

📋

NIST CSF 2.0 Tier Self-Assessment

Self-assess your NIST CSF 2.0 Implementation Tier (Partial / Risk Informed / Repeatable / Adaptive) across the Cybersecurity Risk Governance and Risk Management dimensions defined in CSWP 29

🔎

Interactive Google Dork Builder

Compose advanced search-engine queries by picking operators (site:, filetype:, inurl:, intitle:, intext:, ...). Live preview, copy, or launch on Google / DuckDuckGo / Bing / Yandex / GitHub. Includes a preset gallery for OSINT and bug bounty

📝

Vendor Risk Questionnaire Generator

Build a tailored third-party / supplier security questionnaire from curated banks (governance, cloud, IAM, AppSec, IR, privacy, AI, exit) with regulatory overlays for GDPR, DORA, NIS2, PCI, HIPAA, SOC 2

🍽

Third-Party Risk Register

Browser-local register of your ICT third parties: DORA-style criticality tiering, status, frameworks, review dates with overdue flags, open findings. CSV import/export, encrypted backup, hand-off to the questionnaire generator

📜

Policy Document Generator

Generate eight security policy documents (Information Security, Acceptable Use, Access Control, Incident Response, Third-Party, Data Classification, Business Continuity, Password & Authentication) from one tagged clause library, aligned to ISO 27001, NIS2, DORA, GDPR, PCI DSS. Markdown, wiki text, print. Client-side

🔒

CAA & HSTS Preload Checker

Check DNS CAA records (which CAs may issue certs) and HSTS preload eligibility (max-age, includeSubDomains, preload directive) for any domain

🔑

PGP / GPG Key Inspector

Inspect an OpenPGP public key in your browser: version, algorithm, fingerprint, user IDs, subkeys, expiration, key flags. Refuses private key blocks. Client-side

🔍

PGP / GPG Key Lookup

Find a public OpenPGP key by email, fingerprint, or 16-hex key ID. Queries keys.openpgp.org with keyserver.ubuntu.com fallback; reveals every user ID, alias, email, subkey, capability, and the key timeline

🔐

Password Hash Verifier

Verify a password against bcrypt or Argon2 hashes, identify the algorithm, and benchmark cost factors on the server. No logging

🔍

Nmap XML Report Parser

Drop or paste Nmap -oX XML output and get a clean, filterable HTML report with severity hints. Markdown / CSV export. 100% client-side

🔍

CVE / CPE Search Builder

Compose CPE 2.3 names from form fields, validate, and get one-click search links to NVD, MITRE, GitHub Advisories, OSV.dev, Vulners, and CISA KEV

🤖

LLM Pre-flight Redactor

Scan and redact text before pasting into ChatGPT, Claude, Gemini, or Copilot. Detects PII, API keys, secrets, internal hostnames, IBAN, credit cards. 100% client-side

🤖

LLM Output Scanner

Review what a model produced before it goes further: personal data and credentials it reproduced (masked, with a redacted copy) plus every URL, DOI, CVE, RFC, regulatory article, author-year citation and quoted figure as a verification checklist. 100% client-side, nothing stored

🤖

LLM Token Counter & Cost Estimator

Approximate token count for GPT, Claude, Gemini, Llama, DeepSeek, Mistral. Live cost matrix in $/1M tokens, editable pricing, input/output split, volume calculator

🤖

Context-Window Fit Checker

Will it fit in 128k or 1M? Paste text or drop files; see pass/warn/fail per model with reserved response budget. 100% client-side

🤖

Local-Model VRAM Calculator

Estimate GPU memory for Llama, Mistral, Qwen, DeepSeek, Phi, Gemma. Tweak quantization (FP16/Q8/Q5/Q4), context, batch, KV-cache dtype. Fits-on-this-GPU table

🤖

LLM System-Prompt Linter

Lint your system prompt for foot-guns: weak refusals, prompt-injection vulnerabilities, missing role / output anchors, leaked credentials, contradictions

🤖

MITRE ATLAS Technique Search

Offline search across MITRE ATLAS tactics & techniques targeting AI/ML systems (prompt injection, model evasion, data poisoning, model extraction). Detection guidance and mitigations

🤖

EU AI Act Readiness Checker

Walk a self-assessment for the EU AI Act (Regulation 2024/1689): scope, prohibited practices, high-risk Annex III, GPAI thresholds, transparency. Markdown export

📚

AI / LLM Vocabulary

Plain-language glossary of 100+ AI / LLM terms: token, context window, VRAM, RAG, MoE, quantization, RLHF, prompt injection, jailbreak, agent, EU AI Act. Searchable, cross-linked

🤖

AI/ML Threat Model Builder

Wizard-driven threat model generator for AI/ML systems. 5 steps, 27+ threats mapped to STRIDE + MITRE ATLAS + OWASP LLM Top 10. Risk-scored, with control gap analysis. Markdown / JSON export

🤖

Prompt Injection Playground

Learn prompt injection by breaking a simulated LLM. 8 scenarios (direct, indirect, persona override, smuggling, jailbreak, multi-turn). 100% client-side pattern-matching engine, no API. Educational use only

🤖

LLM Red Teaming Checklist

Operational red-team checklist for LLM application security assessments. 60 items across 6 phases (recon, prompt injection, output handling, excessive agency, data exposure, DoS). Markdown report export

🤖

OWASP LLM Top 10 Checker

Self-assessment for the OWASP Top 10 for LLM Applications (v1.1 2024/2025). Score your posture across all 10 risks, identify gaps, and export CSV / JSON / Markdown. 100% client-side

🔭

Windows Event ID Lookup

Offline searchable reference for Security, System, and Sysmon event IDs with logon-type decoding and MITRE ATT&CK cross-links

📜

Sysmon Config Builder

Visually compose Sysmon rules and export valid XML. Include/exclude logic, per-event-type filters, and minimal/balanced/verbose presets

🔎

Log Parser Pattern Builder

Build and test Grok / named-capture regex against a sample log line; export to Logstash, regex, or QRadar extraction syntax

📊

EPSS Score Lookup

Get the FIRST EPSS exploit-prediction score and percentile for a CVE, with CISA KEV cross-check and triage guidance

🔥

Actionable CVEs Dashboard

Today's must-patch CVEs — vulnerabilities newly added to the CISA KEV catalog (actively exploited) enriched with EPSS, plus the highest exploit-probability CVEs right now

🌲

SSVC Decision Tree

Walk CISA's Stakeholder-Specific Vulnerability Categorization to a Track / Attend / Act outcome with exportable rationale

📧

Email Auth Record Builder

Generate valid SPF, DKIM, and DMARC DNS records with guided policy choices and common-mistake warnings

📧

DMARC Report Analyzer

Parse DMARC aggregate (RUA) XML reports into a readable pass/fail-by-source view to spot spoofing and misconfigured senders. 100% client-side

🛡

Domain Security Posture Scanner

Scan one domain and get a graded report across security.txt, DMARC, SPF, MTA-STS, CAA, DNSSEC, and HSTS. Server-side checks, your IP is not forwarded

🎭

Subdomain Takeover Checker

Check hostnames for dangling CNAMEs vulnerable to subdomain takeover, matching 20+ takeover-prone services with fingerprint confirmation. Server-side, IP not forwarded

💻

LOLBin / GTFOBins Browser

Offline searchable reference of living-off-the-land binaries (Unix + Windows) by name and abuse function, with ATT&CK cross-links

🐺

Reverse Shell Generator

Templated reverse/bind-shell commands for authorized testing across bash, nc, python, PowerShell and more, with URL/Base64/PS encoders

🔨

Hashcat / John Rule & Mask Builder

Compose Hashcat masks and rule lines (and John rules) with live sample-word preview and keyspace estimates. Builder only, no cracking

🔒

CSR Generator & Decoder

Generate a key pair and PKCS#10 CSR in your browser (RSA/ECDSA, SANs), or decode an existing CSR. Private key never leaves your machine

🔑

HMAC Generator

Compute and verify HMAC signatures (SHA-1/256/384/512) for webhook and API signing. Hex or Base64 output, 100% client-side

🧬

SRI Hash Generator

Generate Subresource Integrity hashes (sha256/384/512) and ready-to-paste script/link tags to lock down third-party assets

🍪

Cookie Security Analyzer

Parse Set-Cookie headers and flag missing Secure/HttpOnly/SameSite, weak prefixes, and broad scopes with remediation guidance

📒

DORA Register of Information Builder

Compile the mandatory DORA ICT third-party register across all template tables, with completeness checks and CSV/JSON/Markdown export

📋

NIS2 Self-Assessment

Self-assess NIS2 scope, Article 21 risk-management measures, and reporting obligations with scored gap report and Markdown/CSV/JSON export

🇨🇭

Swiss FADP (nLPD) Self-Assessment

Self-assess the revised Swiss Federal Act on Data Protection (nLPD / revDSG): duty to inform, DPIA, FDPIC breach notification, processing register, disclosure abroad, data protection advisor, data-subject rights — with a scored gap report that says where your GDPR control already covers you. Markdown/CSV/JSON export

📉

Tools Hub