General dev

Find & Replace

Runs locally

Use Find & Replace

What it does

Replace plain text or a JavaScript regular expression across a block of text, for example to refang IOCs or to normalise a pasted log before you search it.

It runs entirely in your browser: nothing you enter is uploaded.

Example

Defanged links

Input
Blocked: hxxps://login.example[.]com/verify and hxxp://cdn.example[.]net/kit.zip
Output (captured 2026-10-20)
Blocked: hxxps://login.example[.]com/verify and hxxp://cdn.example[.]net/kit.zip

With Find empty, Replace returns the text unchanged. Enter [.] in Find and . in Replace with (Replace all stays on) to get login.example.com and cdn.example.net back.

FAQ

How does matching work?

In plain mode the Find text is matched literally, every occurrence or only the first if Replace all is off. With Regex ticked it is a JavaScript regular expression, and the replacement can use $1, $2 or a named group reference for captured groups and $& for the whole match.

Why does Case insensitive change nothing?

It only applies together with Regex; plain-text search is always case-sensitive. Regex mode also has no multiline or dotAll flag, so ^ and $ match only at the very start and end of the text.

Is the text uploaded?

No. The replacement runs in your browser and nothing is sent or stored.