Utilities

Small tools for
everyday security work.

Ten utilities that run offline in the console, and Website Check for a domain you control.

FieldKitOS 0.10.4 Utilities page with ten tool tabs and the Encode and decode bench open.
Utilities in console release 0.10.4.

UTILITIES

Ten tools that run in your browser.

Each one runs offline with no network, no installed binaries and no contact with any target. The page's content security policy blocks outgoing connections, and pasted text and chosen files stay on your device.

01

Encode and decode bench

Base64, URL, hex, HTML entities, ROT13 and gzip, in any order. It also reads the contents of a JWT; the signature is not checked.

02

Timestamp converter

Unix, Windows FILETIME, WebKit, Excel and ISO times, in UTC and local.

03

Subnet and CIDR calculator

IPv4 and IPv6 ranges, masks, splits and address-in-range tests.

04

Certificate and CSR decoder

Paste a PEM certificate or CSR and read its names, dates, key size and issuer.

05

Secret and token inspector

Finds key, token and password patterns in pasted text, masked by default.

06

Checksum list verifier

Pick files, paste a SHA256SUMS list and see which match. Extends Evidence.

07

Log line parser

Turns syslog, web access and key=value logs into a filterable table.

08

File signature and entropy check

Magic bytes, extension mismatch, entropy and readable strings.

09

Passphrase generator and policy check

Random words and length rules, with no network.

10

Regex tester

Try patterns on pasted text, with a time limit on runaway patterns.

WEBSITE CHECK

Only check domains you control.

Website Check proves control through a DNS TXT record you publish for that domain, runs passive checks only (one HTTPS request to the home page, one to /.well-known/security.txt, and DNS reads of SPF, DMARC and CAA), follows no redirects and sends nothing else.

01 / VERIFY

Publish a TXT record

In Security Center, open Web checks and add your domain. FieldKitOS shows you a TXT record once. Publish it at _fieldkit-verify.<domain>, then choose Verify.

02 / RUN

Run the check

Choose Run check. Website Check makes the passive requests listed above and nothing else.

03 / KEEP

Save it to a case

Results save into your Casebook case and export as JSON or text.

Observations, not a verdict. The result is a list of observations, not a penetration test, vulnerability scan or malware verdict, and it does not show that a site is safe. Website Check needs an active subscription.

NEXT

Ready to try them?

The utilities and Website Check are part of FieldKitOS Security at A$49 a month. Your access code arrives by email.