Skip to main content

Authorized use only. Use this tool solely on systems, tokens, and assets you own or are explicitly permitted to test — credential extraction, signature forging, and unauthorized access are prohibited by our Acceptable Use Policy.

String Obfuscator

Obfuscate/Deobfuscate Text

About Obfuscation

This tool uses zero-width characters to hide text within text.

The obfuscated text looks normal but contains invisible characters.

Use deobfuscation to reveal or clean hidden characters.

Continue with

TLS Certificate Checker

Check TLS/SSL certificate expiry, issuer, and security configuration. Paste openssl output for instant analysis.

Prompt Injection Tester

Scan prompts and untrusted content for injection patterns: overrides, exfiltration commands, hidden Unicode, encoded payloads. Includes attack payloads and the Lethal Trifecta checklist.

OWASP ZAP Report Analyzer

Paste an OWASP ZAP JSON or Markdown scan report and get a triaged summary: risk counts, affected URLs, CWE links and fix guidance. 100% client-side.

About the String Obfuscator

Homoglyph obfuscation replaces characters with visually identical alternatives from other alphabets - a Latin "a" becomes a Cyrillic "а". The text reads the same to humans but is materially different to any string matcher, which makes it a standard technique for testing profanity filters, plagiarism detection, and string-matching code.

Transform any text using homoglyph substitution and invisible characters. Everything renders locally in your browser - useful for security research, filter testing, and understanding why naive string matching fails.

How to use

  1. Paste the text to obfuscate.
  2. Choose the transformation - homoglyphs, zero-width characters, or both.
  3. Copy the result - it looks identical but differs underneath.
  4. Test how your filters and validators handle it.

Frequently Asked Questions

What are homoglyphs? ▾

Characters from different alphabets that look identical - like the Latin "a" and the Cyrillic "а". Text built with homoglyphs reads normally but differs at the byte level, defeating exact string matching.

Why would I obfuscate a string? ▾

Commonly to test content filters, profanity detection, plagiarism checkers, and URL validators - systems that must be robust against lookalike-character evasion. Security researchers use it to probe where naive matching breaks.

Does the obfuscated text behave differently? ▾

Yes. Search, diff, copy-detection, and validation logic that compares strings will not match the original. Visually it is indistinguishable, which is precisely the point - and the risk when it is used against you.