PowerShell Toolkit

Prefer the terminal? AegisToolkit.psm1 is a free PowerShell module with the same utilities as the web toolbox — encoding, hashing, defang/refang, IOC extraction, JWT, Punycode, CIDR, email headers, security headers, certificates, and more. No dependencies; works in Windows PowerShell 5.1 and PowerShell 7+, and it's pipeline-friendly.

Import-Module ./AegisToolkit.psm1
Get-Command -Module AegisToolkit          # list everything

'hello world' | ConvertTo-Base64          # aGVsbG8gd29ybGQ=
ConvertFrom-Base64 'aGVsbG8='             # hello
ConvertFrom-Base64 'dwBoAG8AYQBtAGkA'     # whoami  (UTF-16LE, as in powershell -enc)
Get-StringHash 'password' -Algorithm MD5  # 5f4dcc3b5aa765d61d8327deb882cf99
ConvertTo-Defanged 'http://evil.com/x'    # hxxp[://]evil[.]com/x
Get-SubnetInfo '10.0.0.0/24'              # Network/Broadcast/HostMin.../UsableHosts
ConvertFrom-Punycode 'xn--80ak6aa92e.com' # аррӏе.com  (homograph!)

# Pull every indicator out of an alert, refanged automatically:
Get-Content .\alert.txt -Raw | Get-Ioc

ConvertTo-Base64 / ConvertFrom-Base64 [-Encoding <UTF8|Unicode>]
    Base64. Decode accepts URL-safe input and auto-detects
    UTF-16LE (powershell -EncodedCommand); -Encoding Unicode forces it.

ConvertTo-Hex / ConvertFrom-Hex
    Text to spaced hex and back.

ConvertTo-Base32 / ConvertFrom-Base32
    Base32 (RFC 4648).

ConvertTo-UrlEncoding / ConvertFrom-UrlEncoding
    Percent-encoding.

Get-StringHash -Algorithm <MD5|SHA1|SHA256|SHA512>
    Hash a string.

Get-HashType
    Guess a hash type from length / format.

ConvertTo-Defanged / ConvertFrom-Defanged
    Neutralize or restore IOCs.

Get-Ioc
    Extract URLs, domains, IPs, emails, hashes (auto-refangs).

ConvertFrom-Jwt
    Decode a JWT into Header / Payload objects.

ConvertFrom-Punycode / ConvertTo-Punycode
    IDN homograph decode / encode.

ConvertFrom-UnixTime / ConvertTo-UnixTime
    Epoch <-> DateTime (UTC).

Invoke-Rot13 / Invoke-CaesarShift -Shift N
    Letter-shift ciphers.

Invoke-XorCipher -Key <k> [-KeyIsHex]
    XOR; returns Text + Hex.

Get-SubnetInfo
    CIDR: network, broadcast, range, host counts.

Get-EmailHeaderInfo
    Key fields, SPF/DKIM/DMARC, Received hop chain.

Test-SecurityHeader <Uri> | -HeaderText <text>
    Check response headers for missing or weak controls.

Get-CertificateInfo <pem> | -Path <file> | -Uri <host>
    Subject, issuer, validity, key, SANs.

Get-UnicodeInfo
    Per-code-point breakdown; flags zero-width, bidi and control characters.

Tip: Get-Ioc, ConvertFrom-Jwt, andGet-SubnetInfo return objects — pipe them intoFormat-List, Export-Csv, orConvertTo-Json for reports.