Base64

Encode and decode UTF-8 text locally in your browser.

URL-safe uses - and _ without padding. Decoding accepts line breaks and missing padding.

URL Inspector

Inspect URL structure, encode and decode locally.

HTML Entities

Encode text and decode HTML entities locally in your browser.

Hex ↔ Text

Convert UTF-8 text and hexadecimal bytes locally in your browser.

Data Size & Rate Converter

Convert data sizes and transfer rates without mixing bits and bytes.

b = bit · B = byte · SI: kB = 1000 bytes · IEC: KiB = 1024 bytes

Transfer time (optional)

Theoretical transfer time, excluding protocol overhead.

JSON Formatter / Validator

Validate, format and minify JSON locally in your browser.

JSON ↔ YAML

Convert JSON and YAML locally in your browser.

Regex Tester

JavaScript Regex Tester — uses JavaScript RegExp syntax.

Enter the pattern without / delimiters. Flags: g i m s u y, and d if supported.

Text Diff

Compare two blocks of text line by line locally in your browser.

Ignore whitespace ignores spaces and tabs within each line; blank lines still count.

UUID Generator

Generate UUID v4 locally using secure browser randomness.

Random Password Generator

Generate a secure random password locally in your browser.

Character sets

Includes at least one character from each selected set.

Hash Inspector

Calculate, inspect formats and compare hash values locally.

HMAC Calculator

Calculate a keyed message authentication code locally.

Use the selected output encoding. Input encodings are never guessed.

JWT Inspector

Decode claims and optionally verify a signature locally.

Crypto Material Inspector

Inspect a pasted certificate, CSR or key without external connections.

Parsed by the Toolbox backend. Private keys return metadata only. No remote checks or saved material.

Unix Permissions Calculator

Inspect chmod permissions and calculate the effect of umask.

Umask

result = mode & ~umask. Umask clears permission bits; it is not subtraction.

Cron Explorer

Explain Unix cron and preview the next executions.

minute · hour · day-of-month · month · day-of-week

Time Converter

Convert Unix timestamps and date/time across IANA timezones.

Source timezone is required only when the date has no offset. Timezone and UTC offset are distinct.

Internet Protocol Reference

Look up IP protocol numbers, ICMP messages and DNS record types locally.

Numbers have separate namespaces. For ICMP type/code, use e.g. 3/4.

HTTP Reference

Find HTTP status codes, methods, headers and media types locally.

Practical HTTP reference. Search runs locally without sending requests.

DNS Lookup

Inspect DNS records for any domain.

DNS Propagation

Compare DNS answers from selected resolvers, queried from this server's location.

For PTR, enter a reverse DNS name such as 1.1.1.1.in-addr.arpa.
Resolvers to compare

DNSSEC Inspector

Inspect DNSSEC records and signatures.

Subdomain Discovery

Discover common subdomains and their DNS records.

Domain Discovery

Discover known DNS service records and policies configured for a domain.

SRV / Service Discovery

Discover services advertised through DNS SRV. DNS only; no connection tests.

Empty: known services. Service only: TCP by default. Full SRV name: leave Service empty.

Domain Registration

Inspect registration, registrar and domain lifecycle information.

Domain Security

Review registry-reported locks, delegation and expiry information.

Mail Security

Inspect mail DNS policies, keys and TLS configuration. No active SMTP tests.

Example: mail → mail._domainkey.example.com

Mail Server Inspector

Inspect MX connectivity, SMTP capabilities, TLS certificates and reverse DNS.

IP WHOIS

Inspect public IPv4 and IPv6 registration, network ranges and registry contacts using RDAP.

CIDR Calculator

Calculate IPv4 and IPv6 network ranges, masks and address capacity. No external lookups.

IPv4 prefix ↔ mask

Subnet Calculator

Split an IPv4 or IPv6 network into smaller subnets by prefix, with a visual overview.

Split by prefix · At most 256 subnets displayed.

IP Helpers

Inspect IPv4/IPv6 representations and embedded IPv4 formats. No external lookups.

Reverse DNS

Look up IPv4/IPv6 PTR records and optionally confirm their forward addresses.

Network Overlap Checker

Check overlap, containment and shared ranges between IPv4/IPv6 CIDR networks.

One CIDR per line. Maximum 64 networks; blank lines are ignored.

IP Range ↔ CIDR

Convert IPv4/IPv6 ranges to minimal CIDR sets, or CIDR to address boundaries.

Supernet / Route Summarization

Aggregate IPv4/IPv6 prefixes without adding addresses outside the input networks.

One CIDR per line. Maximum 1024 prefixes; duplicates and blank lines are ignored.

ASN Lookup

Identify an autonomous system from an ASN or IP address and inspect registration and observed BGP prefixes.

BGP / AS Path Lookup

Inspect observed AS paths and origins from public RIPE RIS collectors.

Routing / Prefix Info

Inspect routed IPv4/IPv6 prefixes and origin ASNs observed by RIPE RIS.

RPKI Validator

Check whether a prefix and origin ASN are authorized by published ROA data.

Ping

Check public-host ICMP Echo replies, RTT and packet loss.

Result is measured from the Toolbox runtime.

Traceroute

Inspect network hops observed on the way to a public destination.

Trace performed from Toolbox runtime.

MTR

Measure per-hop latency and probe response loss.

Measured from Toolbox runtime.

TCP Connect

Test a single public destination TCP handshake.

Tested from Toolbox runtime.

Connection Tester

Connect to one public TCP service and optionally send a short text payload.

For HTTP headers, terminate the payload with an empty line. Tested from Toolbox runtime.

iperf3

Measure throughput between Toolbox runtime and an external iperf3 server.

One stream. UDP bandwidth limit: 10 Mbps. Measured from Toolbox runtime.

Path MTU Test

Estimate the unfragmented ICMP packet size to a public destination.

PMTU detection may be inconclusive when ICMP responses are filtered.

Latency & Packet Loss

Measure RTT distribution and ICMP loss over a controlled sample run.

Max 60 s total. Sample spacing must fit within 54 s.

Connection Diagnostic Chain

Find where a web connection stops: DNS → TCP → TLS → HTTP.

A plain host defaults to HTTPS/443. Up to 5 redirects; HEAD requests only.

Port Reference

Find practical operator / DevOps port and service references locally.

Port assignments are conventions; an actual service may use any port. registered: standard/registered use · common: popular default · range: range information.

Port Scanner

Run a limited TCP connect scan of one public destination.

Maximum 1024 unique ports, e.g. 1-1024. TCP connect only; no service detection.

Service Detection

Recognize protocol evidence from one public TCP endpoint.

Passive banners; fixed HEAD probes on common HTTP/HTTPS ports. No login attempts.

Quick Network Scan

A small profile-based connectivity and service overview of one public host.

Ports: 21,22,25,53,80,110,143,443,465,587,993,995,3306,5432,6379,8080,8443

TLS Inspector

Snapshot of one verified TLS connection. No HTTP test or version/cipher enumeration.

TLS Capabilities

Controlled handshake probes for protocol versions and cipher acceptance.

SNI Test

Compare the same TLS endpoint with and without Server Name Indication.

HTTPS Inspector

A bounded overview of TLS, certificates and HTTPS endpoint behavior.

Certificate Chain & Revocation

Inspect the server-sent chain, local trust and advertised revocation information.

Certificate Inspector

Inspect leaf certificate identity, validity, trust and cryptography.

HTTP Inspector

Inspect the actual response from a public HTTP or HTTPS endpoint.

HTTP Security Inspector

Analyze response security headers, cookie flags and observed CORS configuration.

API Endpoint Tester

Send one controlled request to a public API endpoint.

GET/HEAD: no body. Other methods can change remote data. Request secrets are masked in results.