Security

What it does: four security tools in one place — Cisco type-7 decode, hash verify & watch, SSH host-key checks, and SSH key generation.

Cisco type-7 decode: recovers the plaintext from a "password 7 ..." / "key 7 ..." config value. Type 7 is reversible obfuscation, NOT encryption, so treat any type-7 string as if it were the clear password. (Type 8/9 are one-way hashes and can't be decoded — use the Hash tab to watch those instead.)

Hash verify & watch: compute MD5/SHA-1/SHA-256/SHA-512 of a file or text. Paste a vendor's published checksum to confirm a downloaded IOS image isn't corrupt or tampered, or baseline a config and re-check later to catch a change.

SSH host keys: read a device's host-key fingerprint (no login needed) and remember it. On a later check a changed fingerprint is flagged: it means the key was legitimately rotated/rebuilt, or someone is intercepting the session (man-in-the-middle). Accept the new key only if you know why it changed.

SSH keys: generate your own keypair for passwordless logins (ed25519 by default; RSA 4096 for older gear) and see every public key already in your ~/.ssh folder with its type and SHA256 fingerprint. "Copy public key" puts the authorized_keys line on the clipboard to paste into a device or server. Optionally keep a copy of the private key in the Vault. An existing key file is never overwritten — pick another name. No ssh-keygen needed, so this works the same on Windows and Linux.

Safe to run: yes — all four are read-only/local. Type-7 decode, hashing and key generation never touch the network; the host-key check makes a single SSH handshake and disconnects. Key generation only ever creates NEW files.

Reading results: Green / ✓ = matches the baseline; Red = changed or mismatched. A changed file hash or host key is a prompt to investigate, not proof of attack on its own.