Transform

Transform

The Transform tab is a utility belt for the everyday encoding, hashing, and token operations that come up constantly during testing. Paste input, pick an operation, and read the output.

Encoding and decoding chains

Build a chain of encodings or decodings and apply them in one pass:

• Base64 (standard and URL-safe)
• URL encoding
• HTML entities
• Hex
• ASCII, UTF-8, UTF-16

Chains run top to bottom, so you can, for example, base64-decode then URL-decode a stacked payload in a single click.

Hash generation

Generate common cryptographic hashes over arbitrary input:

• MD5
• SHA-1
• SHA-256, SHA-512
• and others

Handy for quick integrity checks, comparing leaked password hashes, or crafting expected values during testing.

JWT tampering

Paste a JSON Web Token to decode the header and payload, then edit either and re-sign with a new key or switch to alg: none to test for verification flaws. The result is a ready-to-send token you can drop into a request.

When to use it

Transform is a companion to every other tab. If you are in Manipulate or Fuzz and need to encode a payload or inspect a token before you send it, pop over to Transform, do the conversion, and copy the result back.