# Find & Replace

URL: https://phishdestroy.io/developer-tools/find-and-replace
Category: General dev
Where it runs: Runs locally (nothing you enter is uploaded)

Replace plain text or a JavaScript regular expression across a block of text, for example to refang IOCs or to normalise a pasted log before you search it.

## Example input

Defanged links

```
Blocked: hxxps://login.example[.]com/verify and hxxp://cdn.example[.]net/kit.zip
```

With Find empty, Replace returns the text unchanged. Enter [.] in Find and . in Replace with (Replace all stays on) to get login.example.com and cdn.example.net back.

## FAQ

### How does matching work?

In plain mode the Find text is matched literally, every occurrence or only the first if Replace all is off. With Regex ticked it is a JavaScript regular expression, and the replacement can use $1, $2 or a named group reference for captured groups and $& for the whole match.

### Why does Case insensitive change nothing?

It only applies together with Regex; plain-text search is always case-sensitive. Regex mode also has no multiline or dotAll flag, so ^ and $ match only at the very start and end of the text.

### Is the text uploaded?

No. The replacement runs in your browser and nothing is sent or stored.

## Related tools

- [Regex Tester](https://phishdestroy.io/developer-tools/regex-tester)
- [Trim / Clean Lines](https://phishdestroy.io/developer-tools/trim-lines)
- [Sort & Deduplicate Lines](https://phishdestroy.io/developer-tools/sort-deduplicate-lines)
- [URL Defanger & IOC Extractor](https://phishdestroy.io/developer-tools/url-defanger)
- [Text Diff Viewer](https://phishdestroy.io/developer-tools/text-diff)

All tools: https://phishdestroy.io/developer-tools