CyberLabs
FREE CYBERSECURITY TOOLKIT

Practical tools for security learners and analysts.

Quick browser-based utilities for networking, investigation and day-to-day security work. Most tools run locally in your browser; this page does not upload your input to our server.

NEW INTERACTIVE LEARNING TOOL Investigate eight fictional cases in Guided or Free Explore mode with a safe Linux-style terminal, evidence panels, scoring and incident reports. Open the Mission Simulator →
GRC STARTER KIT Practice a fictional risk register, compare inherent and residual risk, map safeguards and choose evidence sources such as SIEM, NDR and EDR. Entries stay in this browser until you export them. Open GRC Starter Kit → · Read the beginner guide

IP / Subnet Calculator

Enter an IPv4 address and CIDR prefix.

Enter a value and calculate.

JWT Decoder

Decodes the header and payload locally. It does not verify signatures.

Paste a JWT to inspect it.

Hash Generator

Uses the browser Web Crypto API. SHA-256, SHA-384 and SHA-512 are supported by modern browsers.

Your hash will appear here.

Base64 Encoder / Decoder

Works with normal Unicode text as well as ASCII.

Result will appear here.

URL Encoder / Decoder

Result will appear here.

Unix Timestamp Converter

Convert Unix seconds/milliseconds to local time, or a date/time to Unix seconds.

Result will appear here.

Regex Tester

Matches will appear here.

VirusTotal IOC Lookup

Open a VirusTotal report/search for a hash, IP address, domain or URL. This version does not expose an API key or upload files. VirusTotal documents search for hashes, URLs, domains and IP addresses.

Enter an IOC and choose its type.

Common Security Ports

Quick reference for common ports encountered during investigation and troubleshooting.

20/21 FTP 22 SSH 23 Telnet 25 SMTP 53 DNS 80 HTTP 110 POP3 123 NTP 143 IMAP 161/162 SNMP 389 LDAP 443 HTTPS 445 SMB 514 Syslog 636 LDAPS 3389 RDP 8080 HTTP-alt 8443 HTTPS-alt
SAFETY NOTE

Use responsibly.

These tools are intended for learning, troubleshooting and authorized security work. Do not use them to test systems, accounts or networks without permission.