Toolbox

Tools

Random Password Generator

Generate a secure random password locally in your browser.

Character sets

Includes at least one character from each selected set.

Choose your settings and generate a password.

Base64

Encode and decode UTF-8 text locally in your browser.

URL-safe uses - and _ without padding. Decoding accepts line breaks and missing padding.

Ready. All conversion happens locally.

Input length: 0 · Output length: 0

Hash Calculator

Calculate a text hash locally in your browser.

Ready. Hashing happens locally.

Algorithm: SHA-256 · Input length: 0 · Hash length: 256 bits

JWT Decoder

Decode JWT header and claims locally in your browser.

Signature not verified. Decoding does not establish token validity.

Enter a JWT. All decoding happens locally.

JSON Formatter / Validator

Validate, format and minify JSON locally in your browser.

Enter JSON. All processing happens locally.

Input length: 0 · Output length: 0 · Top-level type: —

JSON ↔ YAML

Convert JSON and YAML locally in your browser.

Ready. All conversion happens locally.

URL Encode / Decode

Encode and decode URL text locally in your browser.

Spaces use %20; decoding keeps + as +. Full URL preserves reserved URL delimiters.

Ready. All conversion happens locally.

Input length: 0 · Output length: 0

HTML Entities

Encode text and decode HTML entities locally in your browser.

Ready. All conversion happens locally.

Hex ↔ Text

Convert UTF-8 text and hexadecimal bytes locally in your browser.

Ready. All conversion happens locally.

Bytes: 0

UUID Generator

Generate UUID v4 locally using secure browser randomness.

Generate UUIDs. Click any value to copy it.

    Generated: 0

    Text Diff

    Compare two blocks of text line by line locally in your browser.

    Ignore whitespace ignores spaces and tabs within each line; blank lines still count.

    Enter two texts and compare them.

    Lines added: 0 · Lines removed: 0 · Lines unchanged: 0

    Regex Tester

    JavaScript Regex Tester — uses JavaScript RegExp syntax.

    Enter the pattern without / delimiters. Flags: g i m s u y, and d if supported.

    Enter a pattern and test text.

    Matches: 0

    Indices use UTF-16 offsets; end is exclusive. Empty matches are shown as │ in the preview.

    DNS

    DNS Lookup

    Inspect DNS records for any domain.

    Enter a domain to inspect its DNS records.

    DNS Propagation

    Compare DNS answers from selected resolvers, queried from this server's location.

    For PTR, enter a reverse DNS name such as 1.1.1.1.in-addr.arpa.
    Resolvers to compare

    Enter a name and choose resolvers to compare their DNS responses.

    DNSSEC Inspector

    Inspect DNSSEC records and signatures.

    Enter a domain to inspect its DNSSEC configuration.

    Subdomain Discovery

    Discover common subdomains and their DNS records.

    Enter a domain to discover its subdomains.

    Domain Discovery

    Discover known DNS service records and policies configured for a domain.

    Enter a domain to discover its known DNS services and policies.

    Domain Registration

    Inspect registration, registrar and domain lifecycle information.

    Enter a domain to inspect its registration information.

    Domain Security

    Review registry-reported locks, delegation and expiry information.

    Enter a domain to inspect its security summary information.

    Mail Security

    Inspect mail DNS policies, keys and TLS configuration. No active SMTP tests.

    Example: mail → mail._domainkey.example.com

    Enter a domain to inspect its mail security configuration.

    Mail Server Inspector

    Inspect MX connectivity, SMTP capabilities, TLS certificates and reverse DNS.

    Enter a domain to inspect its MX servers. No mail is sent and no authentication is attempted.

    IP, Addressing & Routing

    IP WHOIS

    Inspect public IPv4 and IPv6 registration, network ranges and registry contacts using RDAP.

    Enter a single IP address. Special-purpose addresses are classified locally.

    ASN Lookup

    Identify an autonomous system from an ASN or IP address and inspect registration and observed BGP prefixes.

    Enter an ASN or a single IPv4/IPv6 address. Hostnames and CIDR are not accepted.

    CIDR Calculator

    Calculate IPv4 and IPv6 network ranges, masks and address capacity. No external lookups.

    IPv4 prefix ↔ mask

    Enter an IP address with a CIDR prefix.

    Subnet Calculator

    Split an IPv4 or IPv6 network into smaller subnets by prefix, with a visual overview.

    Split by prefix · At most 256 subnets displayed.

    Enter a network and a more specific target prefix.

    IP Helpers

    Inspect IPv4/IPv6 representations and embedded IPv4 formats. No external lookups.

    Enter a single IPv4 or IPv6 address.

    Reverse DNS

    Look up IPv4/IPv6 PTR records and optionally confirm their forward addresses.

    Enter a single IPv4 or IPv6 address.

    Routing / Prefix Info

    Inspect routed IPv4/IPv6 prefixes and origin ASNs observed by RIPE RIS.

    Enter an IPv4/IPv6 address or CIDR prefix.

    BGP / AS Path Lookup

    Inspect observed AS paths and origins from public RIPE RIS collectors.

    Enter an IPv4/IPv6 address or CIDR prefix.

    Network Overlap Checker

    Check overlap, containment and shared ranges between IPv4/IPv6 CIDR networks.

    One CIDR per line. Maximum 64 networks; blank lines are ignored.

    Enter at least two CIDR networks.

    IP Range ↔ CIDR

    Convert IPv4/IPv6 ranges to minimal CIDR sets, or CIDR to address boundaries.

    Enter start and end addresses to calculate the minimal CIDR set.

    Supernet / Route Summarization

    Aggregate IPv4/IPv6 prefixes without adding addresses outside the input networks.

    One CIDR per line. Maximum 1024 prefixes; duplicates and blank lines are ignored.

    Enter CIDR networks to calculate a minimal lossless prefix list.

    RPKI Validator

    Check whether a prefix and origin ASN are authorized by published ROA data.

    Enter a CIDR prefix and origin ASN.

    Connectivity Diagnostics

    Ping

    Check public-host ICMP Echo replies, RTT and packet loss.

    Result is measured from the Toolbox runtime.

    Enter a public hostname or IP address.

    Traceroute

    Inspect network hops observed on the way to a public destination.

    Trace performed from Toolbox runtime.

    Enter a public hostname or IP address. Maximum 30 hops.

    MTR

    Measure per-hop latency and probe response loss.

    Measured from Toolbox runtime.

    Enter a public hostname or IP address.

    TCP Connect

    Test a single public destination TCP handshake.

    Tested from Toolbox runtime.

    Enter a public hostname or IP address and one port.

    Connection Tester

    Connect to one public TCP service and optionally send a short text payload.

    For HTTP headers, terminate the payload with an empty line. Tested from Toolbox runtime.

    Enter a public hostname or IP address and one port.

    iperf3

    Measure throughput between Toolbox runtime and an external iperf3 server.

    One stream. UDP bandwidth limit: 10 Mbps. Measured from Toolbox runtime.

    Enter a public iperf3 server to run a controlled throughput test.

    Path MTU Test

    Estimate the unfragmented ICMP packet size to a public destination.

    PMTU detection may be inconclusive when ICMP responses are filtered.

    Enter a public destination. Measured from Toolbox runtime.

    Latency & Packet Loss

    Measure RTT distribution and ICMP loss over a controlled sample run.

    Max 60 s total. Sample spacing must fit within 54 s.

    Enter a public destination. Measured from Toolbox runtime.

    Connection Diagnostic Chain

    Find where a web connection stops: DNS → TCP → TLS → HTTP.

    A plain host defaults to HTTPS/443. Up to 5 redirects; HEAD requests only.

    Enter a public HTTP/HTTPS URL. Tested from Toolbox runtime.

    Ports & Services

    Port Reference

    Find practical operator / DevOps port and service references locally.

    Port assignments are conventions; an actual service may use any port. registered: standard/registered use · common: popular default · range: range information.

    Enter a port number or service name. Search runs locally.

    Port Scanner

    Run a limited TCP connect scan of one public destination.

    Maximum 1024 unique ports, e.g. 1-1024. TCP connect only; no service detection.

    Enter one public host. Scanned from Toolbox runtime.

    Service Detection

    Recognize protocol evidence from one public TCP endpoint.

    Passive banners; fixed HEAD probes on common HTTP/HTTPS ports. No login attempts.

    Enter one public endpoint. Tested from Toolbox runtime.

    Quick Network Scan

    A small profile-based connectivity and service overview of one public host.

    Ports: 21,22,25,53,80,110,143,443,465,587,993,995,3306,5432,6379,8080,8443

    Lightweight TCP scan from Toolbox runtime.

    SRV / Service Discovery

    Discover services advertised through DNS SRV. DNS only; no connection tests.

    Empty: known services. Service only: TCP by default. Full SRV name: leave Service empty.

    Enter a domain or an explicit SRV query name.

    TLS / Certificates / HTTPS

    TLS Inspector

    Snapshot of one verified TLS connection. No HTTP test or version/cipher enumeration.

    TLS connection from Toolbox runtime.

    Certificate Chain Viewer

    Inspect certificates sent by the server, with separate local trust verification.

    Certificates sent by the server are shown separately from locally trusted CAs.

    Certificate Expiry

    Check certificate validity dates and time remaining.

    One-time date check with separate certificate trust and hostname results.