Open-source toolkit for security professionals
Cal Security & Forensics LLC is a browser-based cybersecurity and digital forensics toolkit built for CTF competitors, security researchers, students, and educators. Every tool runs entirely in your browser — no data leaves your machine.
Why Cal Security & Forensics LLC?
Security tooling is often fragmented across dozens of command-line utilities, online services that log your data, or heavyweight desktop applications that require installation. Cal Security & Forensics LLC brings the most commonly needed forensic and cryptographic tools into a single, fast, privacy-first web interface.
Every computation — hash generation, cipher analysis, metadata extraction, frequency analysis — happens locally in your browser using the Web Crypto API and pure-JavaScript implementations. Nothing is transmitted to a server.
Modules
Forensics
Hash verification, file metadata extraction, log analysis, disk image inspection, and network packet analysis tools for digital forensics workflows.
Cipher
Classical cipher solver, frequency analysis, automated cipher identifier, and encoding/decoding utilities for cryptanalysis and CTF challenges.
Hash & Password
Hash identification by format and length, multi-algorithm hash workbench with salting controls, password strength auditor, and rainbow table demonstrator.
Who uses Cal Security & Forensics LLC?
Quickly identify hash types, decode classical ciphers, run frequency analysis, and verify file integrity during time-pressured competitions.
Analyze password policies, test hash implementations, inspect file metadata, and demonstrate cryptographic concepts without installing tools.
Visualize how hash functions work, experiment with cipher breaking, and understand password strength through interactive, in-browser demonstrations.
Verify file hashes against known-good baselines, analyze log patterns, and inspect metadata during rapid triage without leaving the browser.
Concepts & education
Privacy by design
All cryptographic operations use the browser's built-in Web Crypto API or pure-JavaScript implementations.
Cryptographic inputs — hashes, passwords, file contents, cipher text — are never transmitted to our servers. All computation happens locally in your browser.
No analytics, tracking pixels, or third-party scripts are loaded.
The application can be used offline once loaded.
Exception: the OSINT Breach Checker and Blue Team Threat Intel tools send indicator data (IPs, domains, hashes) directly from your browser to AlienVault OTX, AbuseIPDB, and Shodan to retrieve live threat intelligence. No data passes through our servers — requests go straight to those providers' APIs.