XCOM.DEV

Tool · encoding · client-side

Payload Encoder / Decoder

Peel back one layer at a time.

Convert between plaintext, base64, hex, URL encoding and HTML entities — in either direction, and chain transforms to unwind nested encoding (a base64 blob that’s really URL-encoded hex). All local to the tab.

—

Notes

Chaining feeds each result back as the next input — use it to unwind nested encodings. base64/hex operate on raw bytes, so non-ASCII text round-trips as UTF-8. HTML entities (A, &) are common in obfuscated payloads; decoding them is a first triage step.