Security Tools

🔩 PowerShell Decoder

Paste a powershell -enc <base64> line (or just the Base64) and recover the original script. -EncodedCommand encodes in UTF-16LE Base64, not UTF-8 — that is why generic decoders leave it full of garbage. This one understands the real format, flags obfuscation anti-patterns (IEX, download cradles, AMSI bypass) and extracts IOCs. Nothing leaves your browser. A 4104 or 4688 event hands you this Base64: read it here.