Forensics · Cipher · Hash · Red Team · Blue Team · OSINT · Network

The analyst's
toolkit

60 professional-grade tools for forensic analysis, cipher breaking, hash cracking, red team ops, and threat intelligence — all running locally in your browser.

Explore Toolkit View Docs

No data leaves your browser

Zero install required

Open & transparent

calsec — hash_verify

$ calsec hash_verify --file evidence.dd \
    --algo sha256 \
    --expected a3f8c2...

[*] Computing SHA-256 digest...
[*] File: evidence.dd (2.1 GB)
[*] Progress: ████████████████ 100%

Computed:  a3f8c2d1e9b047f3a8c5d2e1f0b3a7c9
Expected:  a3f8c2d1e9b047f3a8c5d2e1f0b3a7c9

✓ PASS  File integrity verified. No tampering detected.

$ calsec pcap_analyze --file capture.pcapng
    --extract dns,http --stream tcp

DNS queries:  47 records extracted
HTTP sessions: 12 streams reassembled

✓ DONE  Analysis complete. Export CSV/JSON.

12+Cipher Types

5Hash Algorithms

EXIFMetadata Extraction

PCAPSession Reconstruction

IoCCipher Fingerprinting

Argon2Slow Hash Benchmarking

n-gramFrequency Analysis

MagicByte Signature Detection

Core Modules

Eight modules. 60 tools.

Every tool runs client-side — no data leaves your machine.

Forensics

File integrity, artifact recovery, log analysis, and network session reconstruction.

$ hash_verify --algo sha256

$ metadata_extract --exif

$ pcap_reconstruct --session

Classical cipher solving, frequency analysis, and automated cipher identification.

$ cipher_solve --vigenere

$ freq_analysis --ngram 2

$ cipher_id --ioc

Hash & Password

Hash identification, workbench, password strength auditing, and dictionary-attack demos.

$ hash_id <digest>

$ hash_bench --bcrypt --rounds 12

$ pw_audit --entropy

5e884898da28047151d0e56f8dc62927

Red Team

Payload encoding, reverse shell generation, JWT analysis, SQLi/XSS builders, and DoS simulation.

$ payload_encode --b64 --xor

$ revshell --lang python

$ jwt_analyze --crack

Blue Team

IOC extraction, YARA/Sigma rule builders, threat intel lookup, and firewall rule analysis.

$ ioc_extract --all

$ yara_build --template

$ sigma_rule --mitre

OSINT

Google dork builder, username OSINT, WHOIS parsing, and breach format analysis.

$ dork_build --site --filetype

$ whois_parse <domain>

$ breach_check --format

Network

Port reference, protocol decoder, DNS lookup, SSL/TLS checker, and packet capture.

$ dns_lookup --doh

$ ssl_check --chain

$ pcap_capture --filter

Shared Tools

Encoding knife, certificate inspector, regex tester, steganography, and subnet calculator.

$ encode --base64 --hex --url

$ cert_inspect <pem>

$ steg_detect --lsb

Why Cal Security & Forensics LLC

Built for the work,
not the demo.

Cal Security & Forensics LLC consolidates the tools analysts actually reach for — hash verification, cipher analysis, password auditing, threat intel, and packet inspection — into a single, focused environment. No bloat, no noise.

Whether you're competing in a CTF, teaching cryptographic concepts, or conducting a real forensic investigation, every tool is designed to surface the right answer fast.

CTF & competition-ready

Educational with real depth

Forensic-grade accuracy

Privacy first

Every computation happens in your browser. No data is ever sent to a server — not your hashes, not your files, not your payloads.

Session history

Every tool action is logged locally. Export a timestamped JSON or CSV audit trail to attach to your pentest report.

Pro tier available

Unlock 50MB PCAP files, TCP stream reassembly, DNS/HTTP extraction, PDF report export, and unlimited session history.

Ready to begin

Start your analysis.

Open a module and get to work. No setup, no account required.

Open Forensics Open Cipher Open Hash & Password

Weekly digest

Stay ahead of the threat landscape

Curated cybersecurity news, threat intel, CVE highlights, and tool updates — delivered every week. No spam, unsubscribe any time.

No spam. Unsubscribe any time.

The analyst'stoolkit

Eight modules. 60 tools.

Built for the work,not the demo.

Start your analysis.

Stay ahead of the threat landscape

The analyst's
toolkit

Built for the work,
not the demo.