A comprehensive developer toolkit with 267+ tools, 200+ API routes, and 10 platform features. Built for developers, security researchers, and power users.
Live: https://frontend-kappa-six-83.vercel.app
API: https://dev-toolkit-api.onrender.com
- User Accounts — Register/login, sync favorites & history across devices
- Pipeline Builder — Chain tools together (e.g., DNS Lookup → Port Scan → SSL Check)
- API Playground — Test all endpoints interactively, auto-generate curl/fetch/Python snippets
- Share Results — Share tool output via link + QR code (7-day expiry)
- Analytics Dashboard — Usage stats, popular tools, charts
- PWA / Offline Mode — Install as app, client-only tools work offline
- Browser Extension — Chrome extension with right-click context menu
- Tool Comparison — Run same input through multiple tools side by side
- Export Presets — Save/share tool configurations as JSON
- AI Assistant — Describe what you need, get tool suggestions (keyword matching)
- 10 preset themes + custom theme creator
- Command palette (Ctrl+K) for instant tool access
- i18n support (English / Bahasa Melayu)
- Code splitting (all tools lazy loaded)
- Favorites, recently used, activity log
- Fully responsive
- Keyboard shortcuts throughout
- Toast notifications with progress bars
- Collapsible sidebar with fuzzy search
- Share as Image on select tools
- SSRF protection on all server-side URL fetching
- Rate limiting (60/min general, 5/min for offensive tools)
- CORS restricted to frontend origins
- Port Scanner
- SSL Checker
- DNS Lookup
- Ping / Traceroute
- Whois Lookup
- GeoIP Lookup
- GeoIP Batch Lookup
- Reverse IP
- Reverse DNS
- Network Calculator
- Domain Age Checker
- DNS Propagation
- DNS Record Builder
- HTTP/2 & HTTP/3 Checker
- Port Conflict Detector
- Port Listener
- Subdomain Enumeration
- Subdomain Finder
- Subdomain Takeover
- IP Range Calculator
- Open Port Scanner Extended
- HTTP Method Tester
- Redirect Chain Mapper
- Broken Link Finder
- Uptime Monitor
- Redirect Tracer
- WAF Detector
- Certificate Transparency
- Honeypot Detector
- XSS Payloads
- CORS Scanner
- CORS Tester
- Directory Bruteforcer
- Security.txt Checker
- Robots.txt Analyzer
- CSP Evaluator
- CSP Builder
- HSTS Preload Checker
- Mixed Content Finder
- Cookie Jar Inspector
- Cookie Analyzer
- API Key Validator
- Password Policy Checker
- Password Strength Checker
- Password Generator
- Hash Generator
- Hash Cracker
- Phishing Detector
- Phishing Scorer
- OSINT Dashboard
- Digital Footprint Scanner
- Browser Forensics
- Who Touched My PC
- Privacy Score Calculator
- IP Reputation
- Disposable Email Detector
- Social Media Link Validator
- Webhook Signature Verifier
- SSL Certificate Generator
- JSON Formatter
- Regex Tester
- Regex Debugger
- Regex Pattern Library
- Regex Golf
- Base64 Codec
- Diff Checker
- Markdown Editor
- Markdown to HTML/PDF
- JWT Playground
- JWT Builder
- JWT Tools
- API Mocker
- API Reverse Engineer
- API Endpoint Tester
- API Response Mocker
- API Rate Calculator
- API Documentation Generator
- SQL Playground
- SQL Formatter
- Docker Compose Generator
- Dockerfile Generator
- Docker Validator
- Kubernetes YAML Validator
- Terraform Plan Analyzer
- Nginx Config Generator
- Git Commit Generator
- Gitignore Generator
- Changelog Generator
- Package.json Generator
- License Picker
- ERD Generator
- GraphQL Schema Validator
- OpenAPI Validator
- Dependency License Checker
- Dependency Hell Analyzer
- NPM Analyzer
- Code Smell Detector
- Commit Roaster
- Semantic Version Calculator
- Environment Variable Validator
- Environment Diff
- Schema Diff
- Log Parser
- Cron Explainer
- Crontab Guru
- Webhook Debugger
- Webhook Relay
- Webhook Tester
- Webhook Inbox
- CSS Playground
- Link Preview
- Dead Link Checker
- RSS Parser
- Response Diff
- XML/JSON Converter
- YAML/JSON Converter
- CSV/JSON Converter
- Base Converter
- String Escape/Unescape
- URL Encoder/Decoder
- HTML Entities Encoder/Decoder
- Text Case Converter
- Slug Generator
- UUID Generator
- Timestamp Converter
- Epoch Converter
- Scientific Notation Converter
- Markdown Table Generator
- Unit Converter
- Bandwidth Calculator
- Aspect Ratio Calculator
- Binary Calculator
- Statistics Calculator
- Encoding Chain
- AES Encrypt/Decrypt
- RSA Key Generator
- HMAC Calculator
- TOTP Generator
- Checksum Verifier
- Certificate Decoder
- OAuth Token Inspector
- Email Auth (SPF/DKIM/DMARC) Generator
- SSH Config Generator
- Meta Tag Generator
- Sitemap Generator
- Favicon Checker
- Favicon Stealer
- Tech Stack Detector
- Web Vitals Estimator
- Performance Budget Calculator
- Accessibility Checker
- Structured Data Validator
- htaccess Generator
- Dark Pattern Detector
- Site Speed Tester
- Markdown Link Checker
- Color Palette Generator
- Palette Generator
- Color Contrast Checker
- Cron Job Monitor
- Uptime Calculator
- Uptime Lottery
- Error Code Lookup
- Incident Report Generator
- Status Page Generator
- Postmortem Template
- HTTP Header Builder
- Rate Limit Simulator
- Load Tester
- Port Conflict Resolver
- Server Excuse Generator
- HTTP Animals
- Tracking Pixel
- Header Analyzer
- Text Statistics
- Plagiarism Similarity
- Language Detector
- Emoji Lookup
- Lorem Generator
- QR Batch Generator
- QR Generator
- QR Tracker
- Email Template Builder
- Email Validator
- Fake Data Generator
- Random API
- Sentiment Analyzer
- Text Summarizer
- Spam Classifier
- TOC Generator
- Pipeline Builder
- API Playground
- Tool Comparison
- Presets Manager
- AI Assistant
- Analytics Dashboard
- Window Faker
- File Age Faker
- Exam Pattern Predictor
- Steam Achievement Planner
- Meeting Escape Button
- Watermark Nuker
- Crypto Dust Sweeper
- ASCII Art Generator
- Fake Identity Generator
- Deepfake Text
- Alibi Builder
- Social Media Ghost
- Gaslighter
- Argument Winner
- Excuse Chain Generator
- Fake Screenshot Generator
- Clipboard History
- Meeting BINGO
- Rubber Duck Debugger
- GitHub Roaster
- Stack Overflow Excuse
- HTTP Quiz
- Pixel Art
- Meme Generator
- WiFi QR Generator
- Status Codes Explorer
- Rickroll Generator
- Conspiracy Generator
- Passive Aggressive Translator
- Buzzword Generator
- Browser Fingerprint
- Image Palette Extractor
- Metadata Viewer
- TOS Summarizer
| Layer | Technology |
|---|---|
| Frontend | React 19, Vite 6, Tailwind CSS 4 |
| Backend | Express 4 (ESM), sql.js (SQLite) |
| Animations | Framer Motion |
| Icons | Lucide React |
| Charts | Pure CSS/SVG charts |
| jsPDF, pdfjs-dist | |
| QR Codes | qrcode (server), qrcode.react (client) |
| Canvas | html2canvas |
| Routing | React Router 7 |
| Auth | JWT (crypto-based hashing) |
| Security | express-rate-limit, SSRF protection, CORS |
| PWA | Service Worker, Web App Manifest |
- Node.js 18+ (recommended: 20+)
- npm 9+
git clone https://github.com/ZafranYusof/misc-tools.git
cd misc-tools
# Frontend
cd frontend
npm install
# Backend
cd ../backend
npm install# Frontend (port 5173)
cd frontend
npm run dev
# Backend (port 3001)
cd backend
npm run devcd frontend
npm run build- Frontend: Vercel (auto-deploy from main)
- Backend: Render (auto-deploy from main)
| Variable | Description |
|---|---|
JWT_SECRET |
Secret for JWT signing (default: built-in dev secret) |
PORT |
Backend port (default: 3001) |
No external database required. The backend uses sql.js (in-memory SQLite) with file persistence.
A Chrome extension is included in the extension/ folder:
- Open
chrome://extensions - Enable Developer Mode
- Click "Load unpacked" → select the
extension/folder - Access quick tools from the popup or right-click context menu
Features:
- 10 configurable quick tools in popup
- Right-click selected text → Hash, Encode, Decode, Regex test
- Link to full app for complex tools
200+ REST API routes available at /api/*. All routes:
- Accept JSON request bodies
- Return JSON responses
- Are rate-limited (60 req/min general, 5 req/min for offensive tools)
- Have SSRF protection on URL-fetching endpoints
- Support AbortSignal timeout (15s default)
Example:
curl -X POST https://dev-toolkit-api.onrender.com/api/json-formatter/format \
-H "Content-Type: application/json" \
-d '{"json": "{\"hello\":\"world\"}"}'| Endpoint | Description |
|---|---|
POST /api/auth/register |
Create account |
POST /api/auth/login |
Login, get JWT |
GET /api/auth/me |
Get profile (auth required) |
GET /api/user-data/favorites |
Get favorites (auth required) |
POST /api/pipeline/run |
Execute tool pipeline |
GET /api/api-docs/endpoints |
List all API endpoints |
POST /api/share/create |
Share tool result |
GET /api/analytics/popular |
Top 20 tools |
POST /api/ai-assistant/suggest |
Get tool suggestions |
POST /api/presets/save |
Save tool preset |
| Shortcut | Action |
|---|---|
| Ctrl + K | Open search |
| Ctrl + D | Toggle dark/light mode |
| Ctrl + 1-9 | Jump to tool 1-9 |
| ? | Show keyboard shortcuts |
| Esc | Close modals |
misc-tools/
├── frontend/
│ ├── public/ # PWA manifest, service worker, icons
│ ├── src/
│ │ ├── components/ # Shared UI (AuthModal, ShareButton, InstallPrompt, etc.)
│ │ ├── contexts/ # Theme, Auth, Favorites, Activity, I18n, Toast
│ │ ├── data/ # Translations (BM/EN)
│ │ ├── hooks/ # useDebounce, useLocalStorage
│ │ ├── layouts/ # MainLayout (sidebar + routing)
│ │ └── tools/ # 267+ tool components (one folder each)
│ ├── index.html
│ ├── package.json
│ └── vite.config.js
├── backend/
│ ├── middleware/ # JWT auth middleware
│ ├── routes/ # 200+ route files
│ ├── utils/ # url-validator.js (SSRF protection)
│ ├── db.js # sql.js database (users, analytics, shares, presets, etc.)
│ ├── server.js
│ └── package.json
├── extension/ # Chrome browser extension
│ ├── manifest.json
│ ├── popup.html/js/css
│ ├── background.js
│ └── content.js
└── README.md
- All user-supplied URLs validated against SSRF (blocks private IPs, metadata endpoints, non-HTTP protocols)
- Rate limiting on all routes (stricter on offensive tools)
- CORS restricted to frontend origins only
- JWT-based authentication with crypto password hashing
- No secrets stored client-side
- ErrorBoundary prevents white-screen crashes
window.openusesnoopenerthroughout- Webhook relay headers whitelisted
- Analytics tracking middleware (anonymous usage stats)
- Fork the repository
- Create a feature branch (
git checkout -b feature/awesome-tool) - Each tool lives in its own folder under
frontend/src/tools/ - Backend routes go in
backend/routes/ - Update
server.js,App.jsx, andMainLayout.jsx - Run
npm run buildto verify - Open a Pull Request
MIT