Online reverse-engineering tools
Small, single-purpose tools for the first look at a file: what it is, what it declares and what will get it rejected. Each one is a static page that parses your file with JavaScript or WebAssembly in your own browser.
Files never leave your browser. There is no upload endpoint. Parsing runs locally in a Web Worker, and you can confirm in your browser's network panel that nothing is sent.
Available now 17
Android
APK & AAB analyzer
Reads the manifest, native libraries and signing certificates of an APK or AAB and checks 16 KB alignment, targetSdk and the other Google Play rules that most often block a release.
Blockchain
EVM function selector extractor
Paste deployed contract bytecode to list its 4-byte function selectors with inferred argument types and state mutability, using EVMole compiled to WebAssembly. No ABI or verified source needed.
Blockchain
EVM bytecode disassembler
Paste EVM bytecode to get an address-annotated opcode listing, with the Solidity CBOR metadata trailer (solc version, IPFS/bzzr hash) decoded separately and the dispatcher function selectors listed. Runs entirely in your browser.
WebAssembly
WebAssembly module analyzer and WASM to WAT
Open a .wasm file to see its imports, exports, functions, memory and custom sections, and convert it to readable WAT text with wabt.
.NET
.NET assembly metadata and IL viewer
Inspect a .NET DLL or EXE without running it: PE/CLI headers, type and member tables, referenced assemblies and the IL of each method.
HAR / SAZ
HAR and Fiddler SAZ API summarizer
Load a HAR or Fiddler SAZ capture to group requests by host and endpoint, with the methods, status codes and query and body parameters seen for each API.
Electron
ASAR unpacker and Electron IPC analyzer
Unpack an Electron app.asar in the browser, browse its files, and list the IPC channels and preload bridges exposed between the main and renderer processes.
Source maps
JS bundle and source map restorer
Rebuild the original source tree from a source map's sourcesContent and download it as a .zip, and map minified bundle positions or a stack trace back to original files, lines and names.
ELF / PE / Mach-O
Native binary overview (ELF, PE, Mach-O)
Identify an ELF, PE or Mach-O file without running it: architecture, headers, sections with entropy, imports and exports, hardening flags such as NX, PIE, RELRO and ASLR, and printable strings.
Java / JAR
Java class and JAR version checker
See which Java version a .class, JAR, WAR, EAR or AAR needs: the class file version of every class including nested jars, multi-release layers, module-info and the build JDK, plus an explainer for UnsupportedClassVersionError messages.
Protobuf / gRPC
Protobuf decoder (no .proto needed)
Decode a binary protobuf, gRPC or gRPC-Web body pasted as hex or base64, or opened as a file, into field numbers and values, with output identical to protoc --decode_raw and a tree of alternative readings.
Keystore / SHA-1
Signing certificate fingerprints (keystore, APK)
Get the SHA-1, SHA-256 and MD5 of the certificates in a .jks, .keystore, .p12 or .pfx file, an APK or AAB, or a certificate file, in the colon, plain and Base64 forms Firebase, Google Sign-In and Facebook ask for, without installing keytool.
X.509
X.509 certificate decoder
Paste a PEM certificate or chain, or drop a DER, CRT or CER file, to read every field and extension (SAN, key usage, EKU, basic constraints, AKI/SKI, AIA, CRL, SCTs), check the chain order and see whether each certificate is valid today.
Magic bytes / hex
File type identifier and hex viewer
Find out what an unknown file is from its magic bytes, with the evidence offset and a confidence level, then scan it for embedded signatures, plot its entropy, extract strings and inspect any byte in a hex view. Works on multi-gigabyte files.
R8 / ProGuard
R8 / ProGuard stack trace retrace
Paste an obfuscated Android or Java stack trace and choose the build's mapping.txt to get the original classes, methods and line numbers back, inlined frames included. Same output as Google's retrace.
Deobfuscate
JavaScript deobfuscator and unminifier
Turn minified or obfuscator.io-style JavaScript back into readable code: string arrays decoded, control-flow and dead-code tricks undone, _0x names renamed, and webpack or browserify bundles split into modules.
iOS / IPA
iOS provisioning profile and IPA viewer
Read a .mobileprovision or an .ipa in the browser: profile type, expiry, team, devices and certificates, Info.plist and privacy manifest, and the entitlements the executable is signed with, checked against the profile.