Skip to main content

Authorized use only. Use this tool solely on systems, tokens, and assets you own or are explicitly permitted to test — credential extraction, signature forging, and unauthorized access are prohibited by our Acceptable Use Policy.

CTR Mode Encryption Visualizer

Watch counter blocks generate a keystream that XORs with plaintext — step by step

Continue with

TLS Certificate Checker

Check TLS/SSL certificate expiry, issuer, and security configuration. Paste openssl output for instant analysis.

Prompt Injection Tester

Scan prompts and untrusted content for injection patterns: overrides, exfiltration commands, hidden Unicode, encoded payloads. Includes attack payloads and the Lethal Trifecta checklist.

OWASP ZAP Report Analyzer

Paste an OWASP ZAP JSON or Markdown scan report and get a triaged summary: risk counts, affected URLs, CWE links and fix guidance. 100% client-side.

About the CTR Mode

CTR mode turns a block cipher into a stream cipher: encrypt an incrementing counter, XOR the keystream with your plaintext. Its parallelizability and seekability make it common — and its pitfalls (nonce reuse reveals XOR of plaintexts) make it worth understanding.

This visualizer encrypts step by step, showing the counter blocks, the keystream, and how each plaintext byte transforms. Watch what happens when you reuse a nonce — the demonstration is unforgettable and entirely local.

How to use

  1. Enter a key, nonce, and message.
  2. Step through counter blocks and the generated keystream.
  3. Try reusing a nonce across two messages to see why it breaks.