Every web developer needs to try these 3 open-source TUIs before starting their next project


As web developers, we deal with text all the time. Whether it’s JSON, HTML, URLs, Markdown, or something else. Nobody talks about the utilities that boost your productivity when managing these, so I will. I have three tools that’ll help you make faster remote API calls, build and learn jq more quickly, and transform strings from one format to many others.

Resterm

A Postman-like TUI to semi-automate remote API calls

Resterm is a Postman-like replacement that supports HTTP (REST), GraphQL, gRPC, WebSocket, and SSE. It even handles automatic port forwarding for Kubernetes clusters and some forms of authentication, including OAuth. The goal, it seems, is to remove many of the frustrating barriers of API-endpoint testing, right in your terminal.

The core idea is simple: you create query sequences inside familiar .http (or .rest) files. The left panel is the file manager, the middle is the editor, and the right is the result pane.

Because query sequences can become long and complex—like chained requests that require a shared token or authentication—Resterm includes a custom scripting engine called RestermScript (RTS) to handle them. It’s reasonably straightforward, and you declare the syntax inside comments. You can also store simple routines in helper files and even project-specific values in resterm.env.json or plain-old .env files too. Resterm runs the saved requests through a template engine, so you can access your data via curly braces, like {{ foo.bar }}.

If you’re a Vim user, you’ll be happy to hear that resterm supports basic Vim motions, modes, and commonly used text objects. However, you need to get used to :w doing absolutely nothing. In fact, the file management interface resembles Nano more than Vim, with Ctrl+N, Ctrl+S, and Ctrl+O to create, save, and open files. That’s not to knock it, because moving around feels 95% natural to Vimmers.

Resterm has both manual and headless capabilities via the CLI, TUI, or Go API, so it’s not just a niche tool but one you can adopt across your entire project.

There are installation instructions on its GitHub page (curl and brew), but I prefer UBI, which I cover extensively in another article:

ubi -p unkn0wn-root/resterm

JNV

A fuzzy JSON query builder

JSON is unavoidable for web developers, and processing large objects is frustrating without specialized tools like jq. If you’re unaware, jq is a simple query language to extract JSON values. Like most query languages, getting it exactly right the first time is unlikely, and often is the case that an interactive tool is an enormous help. Cue jnv.

Jnv feels much like fzf for JSON. It allows you to construct queries and watch the results in real time. To do that, pass the binary a JSON file path, and an interactive UI appears. As you type the query, you see a filtered view in the window below.


Server data on a monitor with Database MySQL.


5 Great Linux Utilities to Monitor Your System Resources in the Terminal

Because the core utilities don’t do it all.

Jnv is a simple tool that does one thing well. It may not seem like much, but that instant feedback is a fantastic help when learning jq and probably the best way to explore unfamiliar JSON files.

JSON seems to be the universal configuration format, and I use it to manage my setups. Love it or hate it, it’s here to stay, but a tool like jnv makes JSON files and schema a lot easier to grok.

You can install it with Homebrew, Cargo, Nix, MacPorts, Docker, or my preferred method: ubi:

ubi -p ynqa/jnv

See its GitHub page for the other installation options.

Sttr

Transform any string into any other format

As web developers, we’re constantly dealing with different formats of text. Whether it’s HTML, URLs, JSON, Markdown, or something else. I often need to craft a command pipeline just to massage the data into something usable, which is error-prone. Sttr is a simple string transformer that takes an input path plus a command and then outputs a reformatted result. Some examples are:

  • Escaping/unescaping HTML
  • Encoding/decoding URLs
  • Base64 encoding/decoding strings
  • Converting color formats, like hex to RGB
  • Escaping JSON
  • Turning Markdown to HTML
  • Changing case, e.g., camel to Pascal case, or kebab to snake case
  • Converting YAML to JSON

Sttr can do these and much more. It’s one of those tools you skip over but go, “Oh, yeah!” when you suddenly need it. The good thing is the hardest part is remembering the name, because it’s so incredibly simple to use.

echo ‘camelCase' | sttr kebab

It takes only one command: the desired output format.

There are a variety of ways to install it, including curl, brew, snap, Docker, WinGet, scoop, Go, and other ways I’ve never heard of—see its GitHub page for installation instructions using these methods. However, as usual, UBI makes it easy:

ubi -p abhimanyu003/sttr

Sttr has a CLI, but it also has a TUI. If you pipe text into it without providing a command, it will ask you to select a conversion target. You can filter results by pressing the “https://www.howtogeek.com/” key.


Concept of computer programming or developing software. Laptop computer with code on screen. Heart, message, cog, home, user, cloud, and lock icons.


Just Starting Web Development? Here’s Exactly Where to Begin

Resist the complexity and make it easy on yourself.


REST, JSON, and string manipulation are all frequent challenges web developers face. These tools make life easier in those regards, particularly jnv. While people may not appreciate it, jnv makes learning jq 10 times quicker. It also forces you to understand complex schemas by making you write logical expressions that reflect their shapes, and with instant feedback, you’ll comprehend large JSON structures much faster.



Source link

Leave a Reply

Subscribe to Our Newsletter

Get our latest articles delivered straight to your inbox. No spam, we promise.

Recent Reviews


Global law enforcement operation takes First VPN offline

Pierluigi Paganini
May 21, 2026

Police seized First VPN in a global crackdown, exposed its cybercrime users, and shut down infrastructure tied to ransomware and data theft.

A major international law enforcement operation has taken First VPN offline, a service that had become a quiet staple for ransomware crews, data thieves, and other cybercriminals trying to hide in plain sight.

“The coordinated action took place between 19 and 20 May and targeted the infrastructure behind one of the most widely used VPN services in the cybercrime underground.” reads the press release published by Europol. “The gathered intelligence exposed thousands of users linked to the cybercrime ecosystem and generated operational leads connected to ransomware attacks, fraud schemes, and other serious offences worldwide.”

Authorities seized dozens of servers across 27 countries, arrested the administrator, and carried out a search in Ukraine, cutting off an infrastructure that had been used in a wide range of serious investigations.

The service marketed itself as a privacy-first VPN with no logging and no cooperation with law enforcement, which made it appealing not just to ordinary users but also to threat actors looking to mask their activity. That’s the uncomfortable part of the VPN story: the same tools that help people protect privacy on public Wi-Fi or work securely from home are also useful for criminals who want to conceal their origin, route traffic through different regions, and make attribution harder.

“For years, the service, known as ‘First VPN’, was promoted on Russian-speaking cybercrime forums as a trusted tool for remaining beyond the reach of law enforcement. It offered users anonymous payments, hidden infrastructure, and services designed specifically for criminal use.” continues the press release. “‘First VPN’ had become deeply embedded in the cybercrime ecosystem, appearing in almost every major cybercrime investigation supported by Europol in recent years. Criminals used it to conceal their identities and infrastructure while carrying out ransomware attacks, large-scale fraud, data theft, and other serious offences.”

Europol said the service name kept resurfacing in major cybercrime cases, and Eurojust confirmed that investigators had been building the case for years through a joint effort led by French and Dutch authorities. 

What seems to have made this case especially valuable for investigators is that they didn’t just shut the service down, they also got inside its infrastructure before it disappeared. That likely gave them access to user records, connection data, and other evidence that can be used to map criminal activity back to real people and devices.

Authorities dismantled cybercrime infrastructure, including 33 servers and a service based in Ukraine, and seized domains linked to the operation: 1vpns.com, 1vpns.net, 1vpns.org, plus associated onion sites. They also notified users directly and shared information on hundreds of accounts with international partners, which suggests this may lead to follow-on investigations well beyond the VPN itself.

The bigger lesson is simple: privacy tools are not the problem, but criminal operators often rely on the same infrastructure normal users trust. Once that infrastructure is compromised, dismantled, or logged, the illusion of anonymity can disappear very quickly.

“The operation has already generated significant operational results at Europol’s level:

  • 21 Europol-supported investigations advanced through the intelligence obtained.”
  • 83 intelligence packages disseminated;
  • information linked to 506 users shared internationally;

“For years, cybercriminals saw this VPN service as a gateway to anonymity. They believed it would keep them beyond the reach of law enforcement. This operation proves them wrong. Taking it offline removes a critical layer of protection that criminals depended on to operate, communicate and evade law enforcement.” said Edvardas Šileris, Head of Europol’s European Cybercrime Centre

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, First VPN)







Source link