Regex Injection / ReDoS Tester - Online Safe Pattern Test
Test a regular expression against malicious inputs to detect catastrophic backtracking and ReDoS vulnerabilities. Educational.
UD5 Toolkit
Inspect embedded JavaScript inside any PDF – instantly detect hidden scripts and potential threats.
.pdf files only, up to 50 MB
Parsing PDF, looking for JavaScript…
No JavaScript found.
qpdf to linearize/clean a PDF, or re-print the PDF to a new file (which often strips interactive elements). This inspector only detects scripts, it does not modify files.
Test a regular expression against malicious inputs to detect catastrophic backtracking and ReDoS vulnerabilities. Educational.
Shrink a PDF file size with configurable image quality and object removal. All processing stays in your browser.
Create promises that resolve or reject after a delay. See state changes and chain .then/.catch. Debug async code.
Write JavaScript using element.animate() and see the result in a live preview. Compare with CSS keyframes. Debugger included.
Validate a DNSSEC chain by entering DS and RRSIG records. Verify that signatures match. Educational. Local algorithm.
Paste the Permissions‑Policy header and get a human‑readable table of allowed/blocked browser features. Understand how your site is restricted.
Input any JavaScript object and see if structuredClone can deep‑copy it. Compare with JSON.parse/stringify. Learn transferables.
Fetch a site’s HSTS header and validate its syntax, max‑age, and subdomain flags. Ensure your site enforce HTTPS.
Test the Fullscreen API: request fullscreen on a colored div, detect changes, and copy the JavaScript boilerplate.
Choose Babel presets (env, React, TypeScript) and plugins. Get a clean babel.config.json to transpile your code. Local tool.
Press any key to see the complete KeyboardEvent properties: key, code, keyCode, modifiers. Indispensable for game & shortcut developers.
Drop a PDF and count the total words, characters, and pages. Text extraction is done locally. Privacy‑friendly.
Combine JPGs and PNGs into a single PDF. Drag to reorder pages. All processing happens locally; your files never leave your device.
Write JavaScript code and see the output or console.log results immediately. Safe iframe sandbox. For quick experiments.
Drop a PDF and see its embedded metadata: author, title, creation date, and more. No content is uploaded; pure browser PDF parsing.
Select multiple images, arrange their order, and merge them into a single PDF document. Works offline in your browser.
Build an iframe with different sandbox flags and see live which features are blocked. For secure embedding.
Paste any JavaScript snippet and get a ready‑to‑drag bookmarklet link. Minify and encode automatically. Pure client.
Instantly convert plain text into HTML‑safe escaped characters for secure display in web pages. Prevent cross‑site scripting. All processing local.
Fill in daily work hours and tasks, and generate a printable PDF timesheet. Clean, professional layout. Local.
Extract selectable text from a PDF using the browser's built‑in PDF rendering. Copy or download as TXT. No upload, fully private.
Enter a URL and instantly generate a PDF version using the browser's print-to-pdf engine. Private, no upload.
Strip dangerous HTML tags and attributes (scripts, onclick) to prevent XSS attacks. Safe iframe preview. Local sanitation engine.
Paste email headers or body text to quickly spot phishing signs, suspicious domains, and obfuscated links. Educational and private.
Combine multiple PDF files into a single document. Drag and drop to reorder pages. All merging is done locally for confidentiality.
Extract specific pages or split a PDF document into multiple files. Works entirely in the browser; your documents never leave your computer.
Evaluate the strength of your passwords with a visual meter and detailed feedback. Check for length, complexity, and breached passwords. All analysis is client-side.
Press any key to see the corresponding JavaScript event key, code, and keyCode. An essential debugging tool for front-end developers handling keyboard input.
Minify JavaScript and CSS code to reduce file size for production. Remove whitespace and comments instantly. Run locally, your code stays private.
Generate ultra-secure, random passwords with configurable length and character sets. Created entirely on your device; never transmitted or stored.