Explore. Learn.
Stay secure.
Practical security guides and hands-on tools, written and built by CyberSearch — everything you need to understand and defend your digital life.
Test any password against real-world cracking estimates — right in your browser.
Launch tool →Train your eye to catch the details attackers hope you'll miss.
Latest writing
Day 5 of our web security series: how a name like cybersearch.in becomes an address, where that lookup can go wrong, and the simple settings that protect your domain.
Day 4 of our web security series: what the padlock really promises, the three jobs HTTPS does, and why a padlock alone doesn't make a site trustworthy.
Day 3 of our web security series: how a site with no memory keeps you logged in, why that small token is so valuable, and the settings that protect it.
Day 2 of our web security series: what your browser actually says to a server, what the server says back, and the parts that matter for security.
Day 1 of our web security series: the journey from typing a URL to seeing a page, and the security checkpoints along the way.
Built by CyberSearch
Hands-on utilities I build and publish here — free, fast, and running entirely in your browser.
Convert PDFs, images, DOCX, spreadsheets, text, data, ZIPs and audio locally in your browser. Files are never uploaded.
Launch →Paste the raw headers of a suspicious email to trace its real origin, read the SPF, DKIM and DMARC results, and flag sender spoofing — all in your browser, nothing sent anywhere.
Launch →Enter your email or name to map where your personal data is publicly exposed — breaches, public profiles, people-search sites — and get a direct opt-out link for each.
Launch →Enter keywords (and an optional target site) to build ~50 advanced search queries across 10 categories — files, exposed folders, logins, social profiles and more. Click any dork to view live results.
Launch →Enter a domain to discover its subdomains from public certificate-transparency logs — passive recon that sends nothing to the target. For assets you own or are authorized to test.
Launch →Search the NIST National Vulnerability Database by product and version — or a CVE id — to see known security flaws, CVSS severity and fixes.
Launch →Paste a JSON Web Token to decode its header and claims, read the expiry in plain English, and flag insecure signing like the “none” algorithm. Runs entirely in your browser.
Launch →Audit a domain’s TLS certificate (issuer, expiry, trust) and whether it can be email-spoofed — SPF, DKIM, DMARC and MTA-STS — in one pass.
Launch →Route your browser through your own encrypted tunnel with a one-click extension — no account, no shared server, nothing to trust. Download and go.
Launch →Estimate crack times and get instant suggestions to harden any password.
Launch →Unshorten and expand suspicious links to see where they really lead — before you click.
Launch →Base64, URL and hex encoding-decoding with one-click copy. Nothing leaves your device.
Launch →Generate and verify SHA-256, SHA-1 and MD5 checksums for text and files.
Launch →Enter an email to see which known data breaches it appears in — and exactly what was exposed.
Launch →Enter any phone number, any country, to see which data breaches exposed it — and what leaked alongside.
Launch →A live awareness demo: see exactly what your browser hands over the moment you open a link — IP, location, provider and device fingerprint — the same data a malicious “IP logger” secretly collects. Shown only to you, stored nowhere.
Launch →PhoneInfoga-style number intelligence — parse any number’s country, line type and every format, then launch a full OSINT footprint across reverse-lookup, reputation and search sources. Parsing runs entirely in your browser.
Launch →Paste any URL to grade its load speed, page weight, mobile-responsiveness and security headers — with plain-English fixes.
Launch →Drop in a photo to reveal its hidden EXIF data — GPS location, camera fingerprint and timestamps — mapped and geolocated. Runs entirely in your browser.
Launch →Check what any domain or IP reveals about itself — records, location, and more.
Launch →Create transparent links that report coarse location and device details only after visitor consent.
Launch →New utilities are published here as they're built. Suggest one via the contact form.
Security, explained by doing
CyberSearch is an independent blog and toolbox. Every article comes from hands-on testing, and every tool is built from scratch and published right here — free for anyone to use.
No fluff, no fear-mongering — just practical security you can act on today.
Say hello
Questions, corrections, tool ideas or collaborations — drop a message and I'll get back within a couple of days.