🔄 Encoding Toolkit

Encode and decode Base64, URL percent-encoding, and Hex — essential for security analysis and CTF work.

Quick Reference

Base64

Encodes binary data as printable ASCII using 64 characters. Commonly used in JWTs, email attachments (MIME), and HTTP Basic auth.

aGVsbG8= → hello

URL Encoding

Encodes special characters for safe use in URLs. Attackers use double-encoding (%2520 = % → /) to bypass WAF and input filters.

hello world → hello%20world

Hex

Each byte represented as two hex digits. Used in shellcode, file magic bytes, hash values, and network packet analysis.

hello → 68656c6c6f

How to use this tool

1 Paste or type the text you want to encode or decode.

2 Select the encoding format: Base64, URL encoding, HTML entities, or Hex.

3 Choose Encode or Decode.

4 Copy the output for use in your application or investigation.

Frequently asked questions

What is Base64 encoding?

Base64 converts binary data or text into a string using only printable ASCII characters. It is used to embed images in HTML, encode email attachments, and transmit binary data over text-based protocols.

Is encoding the same as encryption?

No. Encoding is reversible by anyone without a key. Encryption requires a key to reverse. Never use encoding to protect sensitive data.

What is URL encoding?

URL encoding replaces unsafe characters in a URL with a percent sign followed by two hex digits. For example, a space becomes %20.

What are HTML entities?

HTML entities represent special characters using an ampersand and name or number. For example, & represents & and < represents <. They prevent browsers from interpreting the characters as HTML.