PHP
Charset Encoder
This tool helps you encoding arbitrary texts to and from
65 kinds
of charsets. Also some encoding functions featured by JavaScript are provided. Feel free to give
feedback
if you are missing something or if you found a bug.
input encoding
pass
auto
wchar
byte2be
byte2le
byte4be
byte4le
BASE64
UUENCODE
HTML-ENTITIES
Quoted-Printable
7bit
8bit
UCS-4
UCS-4BE
UCS-4LE
UCS-2
UCS-2BE
UCS-2LE
UTF-32
UTF-32BE
UTF-32LE
UTF-16
UTF-16BE
UTF-16LE
UTF-8
UTF-7
UTF7-IMAP
ASCII
EUC-JP
SJIS
eucJP-win
SJIS-win
CP51932
JIS
ISO-2022-JP
ISO-2022-JP-MS
Windows-1252
ISO-8859-1
ISO-8859-2
ISO-8859-3
ISO-8859-4
ISO-8859-5
ISO-8859-6
ISO-8859-7
ISO-8859-8
ISO-8859-9
ISO-8859-10
ISO-8859-13
ISO-8859-14
ISO-8859-15
ISO-8859-16
EUC-CN
CP936
HZ
EUC-TW
BIG-5
EUC-KR
UHC
ISO-2022-KR
Windows-1251
CP866
KOI8-R
ArmSCII-8
PUNYCODE
output encoding
pass
auto
wchar
byte2be
byte2le
byte4be
byte4le
BASE64
UUENCODE
HTML-ENTITIES
Quoted-Printable
7bit
8bit
UCS-4
UCS-4BE
UCS-4LE
UCS-2
UCS-2BE
UCS-2LE
UTF-32
UTF-32BE
UTF-32LE
UTF-16
UTF-16BE
UTF-16LE
UTF-8
UTF-7
UTF7-IMAP
ASCII
EUC-JP
SJIS
eucJP-win
SJIS-win
CP51932
JIS
ISO-2022-JP
ISO-2022-JP-MS
Windows-1252
ISO-8859-1
ISO-8859-2
ISO-8859-3
ISO-8859-4
ISO-8859-5
ISO-8859-6
ISO-8859-7
ISO-8859-8
ISO-8859-9
ISO-8859-10
ISO-8859-13
ISO-8859-14
ISO-8859-15
ISO-8859-16
EUC-CN
CP936
HZ
EUC-TW
BIG-5
EUC-KR
UHC
ISO-2022-KR
Windows-1251
CP866
KOI8-R
ArmSCII-8
PUNYCODE
[
charset info
]
toCharCode()
encodeURIComponent()
fromCharCode()
decodeURIComponent()
--Encoder/Decoder--
to decimal entities
to HEX entities
to Unicode(%u00)
to SQL HEX()
to SQL Char()
to octal JS entities
to Base64
to Base62
from decimal entities
from HEX entities
from Unicode(%u00)
from SQL HEX()
from SQL Char()
from octal JS entities
from Base64
from Base62
from \NN to &#NN;
from &#NN; to \NN
from % to \
from %0A to %0D%0A
------- MISC -------
Reverse
Char++
Char--
Minify
ContentLength
Save to Cookie
Get from Cookie
View All Cookies
-----------------Updated XSS Payloads---------------------
Add onclick event hadler
Advanced HTML injection locator
Advanced XSS Locator
Advanced XSS Locator for title-Injections
aim: uri exploit
Backslash-obfuscated XBL injection - variant 1
Backslash-obfuscated XBL injection - variant 2
Backslash-obfuscated XBL injection - variant 3
Backslash-obfuscated XBL injection - variant 4
Backslash-obfuscated XBL injection - variant 5
BASE
Basic back ticked attribute breaker
Basic double quoted attribute breaker
Basic JS breaker
Basic JS breaker variant 1
Basic JS breaker variant 2
Basic JS breaker variant 3
Basic JS breaker variant 4
Basic JS breaker variant 5
Basic JS breaker variant 6
Basic JS breaker variant 7
Basic JS breaker variant 8
Basic JS breaker variant 9
Basic JS breaker variant 10
Basic single quoted attribute breaker
Basic title breaker
BGSOUND
BODY background-image
BODY ONLOAD
Camouflaged comment injection with JS link
Case Insensitive
Character Encoding Example
Closing JS Tag in JS String assignment
Commented-out Block
Comment-breaker using obfuscated JavaScript
Conditional style injection for IE
Content Replace
Cookie Manipulation
DIV background-image 1
DIV background-image 2
DIV expression
DIV w/Unicode
Double open angle brackets
Dword Encoding
Embed Flash
Embedded Carriage Return
Embedded Encoded Tab
Embedded Newline
Embedded Tab
End title tag
Escaping JavaScript escapes
Evade Regex Filter 1
Evade Regex Filter 2
Evade Regex Filter 3
Evade Regex Filter 4
Evade Regex Filter 5
Eval string contained in name property
Extra dot for Absolute DNS
Extraneous Open Brackets
Filter Evasion 1
Filter Evasion 2
Firefox Lookups 1
Firefox Lookups 2
Firefox Lookups 3
firefoxurl: uri exploit (UXSS)
FRAME
Grave Accents
Half-Open HTML/JavaScript
Hex Encoding
Hex Encoding w/out Semicolons
HTML Entities
HTML Quoute & Comment breaker
HTML wrapped in XML
IE backticked semicolon injection
IE closing-tag expression injection
IE expression injection
IE VB Messagebox injection
IFRAME
Image onerror wrapped in XML statement
Image tag with obfuscated JS URI
Image w/CharCode
IMG Dynsrc
IMG Embedded commands 1
IMG Embedded commands 2
IMG Lowsrc
IMG No Quotes/Semicolon
IMG STYLE w/expression
IMG w/JavaScript Directive
IMG w/VBscript
INPUT Image
IP Encoding
JavaScript concatenation vector variant 1
JavaScript concatenation vector variant 2
JavaScript concatenation vector variant 3
JavaScript concatenation vector variant 4
JavaScript concatenation vector variant 5
JavaScript concatenation vector variant 6
JavaScript concatenation vector variant 7
JavaScript Includes
JavaScript Link Location
JavaScript-breaker using carriage return
JS link with whitespace obfuscation
JS string concatenation breaker
JSON based obfuscated onload vector
JSON based onload vector
JSON based semicolon-onload vector
LAYER
List-style-image
Livescript
Local .htc file
Long UTF-8 Unicode w/out Semicolons
Malformed IMG Tags
Markup breaker with special quotes
META
META w/additional URL parameter
META w/data:URL
Mixed Encoding
Mocha
Mozilla -moz-binding-url injection
Mozilla -moz-binding-url injection - filter evading
Multiline selfcontained XSS
Multiline w/Carriage Returns
Name contained XSS variant 1
Name contained XSS variant 2
Name contained XSS variant 3
Name contained XSS variant 4
navigatorurl: code execution
No Closing Script Tag
No Quotes/Semicolons
Non-Alpha/Non-Digit
Non-Alpha/Non-Digit Part 2
Noscript-breaker with mouseover
Null Chars 1
Null Chars 2
Obfuscated body onload vector
Obfuscated DOM element creation
Obfuscated double-body onload vector
Obfuscated image tag using dec entities
Obfuscated image tag using hex entities
Obfuscated image tag using long dec entities
Obfuscated JS image source
Obfuscated name trigger for Firefox
Obfuscated onload attribute variant 1
Obfuscated onload attribute variant 2
Obfuscated XML predicate vector variation 1
Obfuscated XML predicate vector variation 2
Obfuscated XML predicate vector variation 3
Obfuscated XSS variant 1
OBJECT
OBJECT w/Embedded XSS
OBJECT w/Flash 2
Octal Encoding
Open string contained in name property
PHP
Plain JavaScript alert
Protocol Resolution Bypass
Protocol resolution in script tags
RegExp based, and native C filter vector.
Remote IE URL overloading
Remote Stylesheet 1
Remote Stylesheet 2
Remote Stylesheet 3
Remote Stylesheet 4
Removing Cnames
Rename .js to .jpg
res:// installed software probing
SCRIPT w/Alert()
SCRIPT w/Char Code
SCRIPT w/Source File
Self-contained XSS variant 1
Self-contained XSS variant 2
Self-contained XSS variant 3
Self-contained XSS variant 4
Self-contained XSS variant 5
Self-contained XSS variant 6
Self-contained XSS variant 7
Self-contained XSS variant 8
Self-contained XSS variant 9
Self-containing XSS with no dots
Spaces/Meta Chars
SSI
STYLE
Style injection via content and double-eval
STYLE w/Anonymous HTML
STYLE w/background
STYLE w/background-image
STYLE w/broken up JavaScript
STYLE w/Comment
Stylesheet
Style-breaker using obfuscated JavaScript
Super basic HTML breaker 2
Super short XSS variant 1
Super short XSS variant 2
TABLE
TD
Textarea-breaker with mouseover
Unicode encoded script tags
URL breaker for double quotes
URL breaker for single quotes
URL encoded image source
Other cool stuff:
PHP Charset Encoder
PHP Unicode Generator
PHPIDS Smoketest
data: URL testcases