KEYSEC

Description

KEYSEC is a powerful, all-in-one cybersecurity utility toolkit built by rootsec. It provides encoding, decoding, hashing, encryption, data analysis, and various security-related transformations in a single, streamlined interface. Designed for penetration testers, bug bounty hunters, and CTF players who need fast, reliable data manipulation during engagements.

Key Features

• Encoding/Decoding — Base64, URL, Hex, HTML entities, Unicode
• Hashing — MD5, SHA1, SHA256, SHA512, NTLM
• Encryption/Decryption — AES, DES, RC4, XOR
• JWT Analysis — Decode, verify, and tamper with JSON Web Tokens
• Data Transformation — Character set conversion, format transformation
• Security Utilities — IP conversion, timestamp analysis, regex testing
• Payload Generation — XSS, SQLi, and common payload encoding

Usage

# Visit the web interface
https://rootsec.org/tools/keysec

# Common operations:
# - Decode suspicious base64 strings found during recon
# - Analyze JWT tokens from intercepted API calls
# - Encode payloads for injection testing
# - Hash comparison for password analysis
# - XOR brute-force for obfuscated data

Bug Bounty Tips

# Decode obfuscated cookies
URL Decode → Base64 Decode → Analyze

# JWT tampering workflow
1. Decode JWT from Authorization header
2. Modify payload (change role, user ID)
3. Re-sign with common weak keys
4. Test for algorithm confusion (none, HS256 vs RS256)

# Payload encoding for WAF bypass
1. Create XSS/SQLi payload
2. Apply double URL encoding
3. Or use Unicode encoding for bypass
4. Test encoded payload against target