# Multi-Layer Decoder

URL: https://phishdestroy.io/developer-tools/multi-layer-decoder
Category: Files & pages
Where it runs: Runs locally (nothing you enter is uploaded)

Paste encoded or obfuscated text and the decoder peels one layer after another, showing each step, until readable text or a known file format remains. Everything runs in your browser.

## Example input

URL-encoded Base64 of gzip

```
H4sIAAAAAAACA7MpTi7KLCixK8%2FMS8kv18vJT04syczP08soSk1TsFVQyigpKSi20tdPrUjMLchJ1UvOz9UvSy3KTKu0L04tLgYqtTVPM05UsrbRh5oEACvqcc1SAAAA
```

Three layers: URL percent-encoding (%2F), Base64 that decodes to gzip data, and gzip itself, ending in a script that sends the browser to https://example.com/verify.

## FAQ

### Which encodings does it recognise?

Base64 (standard and URL-safe, padding optional), hex in plain, 0x, \x, spaced or colon-separated form, URL percent-encoding, HTML entities, \x, \u, \u{…} and %u escapes, String.fromCharCode lists, quoted-printable, gzip, zlib and raw deflate, and UTF-16LE text such as a PowerShell -EncodedCommand. Calls like atob('…') or base64_decode('…') and data: URIs are unwrapped as well.

### Why did it stop, or leave my text as it is?

A layer is only accepted when its output is readable text, a known file format or a stream that decompresses cleanly, so ordinary words that happen to be valid Base64 are left alone. Short or unusual encodings can therefore be missed: use Decode as to apply a method by hand and Undo to step back. It stops after 12 layers.

### Is the decoded content run or sent anywhere?

No. Decoding uses plain JavaScript and the browser's DecompressionStream; the result is shown as text or as a hex dump and is never executed, rendered or uploaded.

## Related tools

- [HTML Attachment Analyzer](https://phishdestroy.io/developer-tools/html-attachment-analyzer)
- [File Type Sniffer](https://phishdestroy.io/developer-tools/file-type-sniffer)
- [Base64 Encoder / Decoder](https://phishdestroy.io/developer-tools/base64-encoder-decoder)
- [URL Encoder / Decoder](https://phishdestroy.io/developer-tools/url-encoder-decoder)
- [Link Unwrapper](https://phishdestroy.io/developer-tools/link-unwrapper)

All tools: https://phishdestroy.io/developer-tools