sysadmins.tools
117 free utilities for network, security, text, Unix, and email diagnostics work. Most run entirely in your browser — nothing you type is sent anywhere. A few, mostly under "Network Diagnostics" and "Email Tools," use this site's server to reach hosts you don't control directly — each of those discloses it on its own page.
Network Utilities
9 toolsSubnet / CIDR Calculator
Network address, broadcast, mask, and usable host range from an IP + CIDR.
x254IPv4 Range Expander
Expand a CIDR block or IP range into every address in it.
:8080Random Port Generator
Generate random TCP/UDP ports, optionally avoiding well-known ones.
AA:BBMAC Address Generator
Generate random, locally-administered MAC addresses.
wss://WebSocket Tester
Connect to a ws:// or wss:// endpoint and exchange test messages.
overlapCIDR Overlap Checker
Paste a list of CIDR blocks and find any that overlap.
1500MTU Calculator
Effective MTU after common tunnel/encapsulation overhead.
VLANVLAN Calculator
Validate and expand VLAN IDs/ranges, flag reserved and default VLANs.
::/64IPv6 Subnet Calculator
Network range, host count, and compressed/full address forms for an IPv6 CIDR.
Security
19 toolsPassword Generator
Cryptographically random passwords, generated in your browser.
###.###.###JWT Parser
Decode a JWT's header and payload — no signature check.
SHA256:SSH Key Fingerprint Generator
SHA256 and MD5 fingerprints for a pasted SSH public key.
PEMCertificate Decoder
Decode a PEM certificate or CSR — subject, SANs, validity, algorithms.
SHA?Hash Identifier
Guess a hash's algorithm from its length and format.
SDDLSDDL / SID Decoder
Decode an SDDL security descriptor or SID into readable form.
ssh-rsaauthorized_keys Parser
Parse authorized_keys — type, fingerprint, options, and comment per line.
H(x)Entropy Calculator
Shannon entropy of a string, in bits per character and total.
IAMAWS IAM Policy Visualizer & Linter
Readable view of an IAM policy's statements, plus a permissiveness check.
jwkJWK Viewer
Inspect a JWK or JWKS JSON — key type, use, algorithm, and key material.
gcpIAMGCP IAM Policy Formatter
Readable view of a GCP IAM policy's bindings, plus a permissiveness check.
SeDebugWindows Privilege Decoder
Decode Windows privilege names (whoami /priv) and flag high-risk ones.
cPassGPP Password Decoder
Decrypt a Group Policy Preferences cpassword — for finding and fixing exposure.
HS256JWT Signer
Sign a header/payload as an HS256 JWT using a test secret, via Web Crypto.
chainCertificate Chain Analyzer
Link pasted PEM certificates into a chain, check each one's validity window.
CSRCSR Generator
Generate an RSA keypair and a PKCS#10 CSR, entirely in your browser.
armorGeneric PEM Inspector
Decode any PEM block — label, byte length, SHA-256 hash, hex dump.
sigmaSigma Rule Validator
Check a Sigma detection rule's required fields and condition references.
$2b$bcrypt Hash Generator & Verifier
Generate and verify bcrypt password hashes, entirely in your browser.
Converters
9 toolsEncode / Decode / Hash
Base64, URL encoding, and SHA-1/256/384/512 hashing.
epochUnix Timestamp Converter
Timestamp to date-time and back, with a live clock.
-EncPowerShell Base64 Decoder
Decode/encode PowerShell -EncodedCommand Base64 blobs.
FILETIMEWindows FILETIME Converter
Convert a 64-bit Windows FILETIME to a date, and back.
{GUID}GUID Format Converter
Convert a GUID between hyphenated, braced, and bare formats.
cron6AWS Cron Converter
Convert between standard 5-field cron and AWS EventBridge's 6-field syntax.
~maskWildcard Mask Converter
Convert between subnet masks and Cisco ACL wildcard masks.
b32Base32 Encode / Decode
RFC 4648 Base32 encode and decode, the alphabet behind TOTP secrets.
<=>Data Format Converter (JSON/YAML/TOML/CSV)
Text & Data
40 toolsJSON Formatter / Validator
Pretty-print, minify, and validate JSON with clear errors.
/^.$/Regex Tester
Test a regex against sample text with live match highlighting.
* * * *Cron Expression Parser
Human-readable schedule, plus the next 5 run times.
grepLog Viewer / Filter
Filter pasted logs live by substring or /regex/.
+/-Diff Viewer
Line-level diff between two blocks of text.
sort -uList Tools
Sort, dedupe, trim, and prefix/suffix a list of lines.
://URL Parser
Break a URL into protocol, host, path, query, and fragment.
UAUser-Agent Parser
Decode a User-Agent into browser, engine, OS, and device.
200HTTP Status Code Reference
Searchable lookup for every 1xx-5xx status code.
4625Windows Event ID Lookup
Searchable reference for common Windows Event IDs.
{ }!=JSON Diff
Structural diff between two JSON documents, by path.
uuid4UUID Batch Generator
Generate one or more random (v4) UUIDs.
v2.0.0Semantic Version Comparer
Compare two semantic versions and see why one outranks the other.
arn:ARN Parser
Decode an AWS ARN into partition, service, region, and resource.
</>XML Formatter
Pretty-print, minify, and validate XML.
(&)LDAP Filter Builder
Build an RFC 4515 LDAP search filter from attribute/operator/value rows.
cronCrontab Validator
Validate a full crontab file — schedules, @shortcuts, env vars, comments.
[ini]INI Parser
Parse INI config text into sections and keys, with a JSON export.
k8sKubernetes YAML Validator
Structural sanity check for Kubernetes manifests.
yaml!=YAML Diff
Structural diff between two YAML documents, by path.
HKLMWindows Registry Path Parser
Expand a registry hive abbreviation and split a path into components.
tomlTOML Validator
Parse TOML config text and view it as JSON, with clear errors.
csvCSV Viewer
View CSV/TSV as a table, with TSV and JSON export.
s3://S3 URL Parser
Break an S3 URL (s3://, virtual-hosted, or path-style) into bucket, region, key.
.gitGit Ignore Generator
Combine curated .gitignore templates for common stacks and tools.
/re/Regex Explainer
Break a regex pattern down token by token into plain English.
diffPatch Viewer
View a unified diff/patch with colorized additions and removals.
composeDocker Compose Validator
Structural sanity check for a docker-compose.yml.
/sub/Azure Resource ID Parser
Break an Azure resource ID into subscription, resource group, provider, type.
gcp-idGCP Project ID Validator
Check a Google Cloud project ID against GCP's naming rules.
trimkubeconfig Cleaner
Pick contexts to keep and export a trimmed kubeconfig with just what they need.
mergekubeconfig Merger
Merge two kubeconfig files into one, deduplicated by name, conflicts flagged.
helm!=Helm Values Diff
Merge a base and override values.yaml Helm-style, see what actually changed.
accessApache/Nginx Log Analyzer
Parse Apache/Nginx access log lines into a table with a status-code summary.
syslogSyslog Parser
Parse RFC 3164/5424 syslog lines — PRI, facility/severity, message.
$.a.bJSONPath Tester
Query pasted JSON with a JSONPath expression and see every match.
RBACKubernetes RBAC Visualizer
See who a Role/RoleBinding pair actually grants access to, and for what.
SOADNS Zone File Validator
Check a BIND zone file for SOA/NS presence and common record mistakes.
nginxNginx Config Visualizer
Re-indent an nginx.conf into a clear block structure.
hclTerraform/HCL Validator
Structural sanity check for Terraform/HCL — balanced braces, block labels, duplicate resources.
Unix & System
12 toolsChmod Calculator
Checkboxes, octal, and symbolic notation, in sync.
fstabfstab Validator
Check /etc/fstab lines for field count, types, options, dump/pass.
visudoSudoers Syntax Validator
Check sudoers syntax — aliases, Defaults lines, and user/host/command rules.
ssh_configSSH Config Validator
Check ~/.ssh/config — Host blocks and directive names.
.servicesystemd Unit Validator
Check a systemd unit file — sections and a few required-field rules.
+dtDuration Calculator
Elapsed time between two moments, or add/subtract a duration from a date.
+5dBusiness Day Calculator
Count business days between dates, or add N business days, skipping weekends.
UTCTime Zone Comparison
See one moment rendered across multiple time zones side by side.
-A INPUTiptables/nftables Rule Analyzer
Explain iptables-save rules in plain English, one line at a time.
clashFirewall Rule Conflict Detector
Find iptables rules that can never fire because an earlier rule already decides.
022umask Calculator
Resulting permissions from a umask, or the umask needed for target permissions.
OnCalsystemd Timer (OnCalendar) Explainer
Parse a systemd OnCalendar= expression and preview its next 5 run times.
Network Diagnostics
19 toolsDNS Lookup
A/AAAA/MX/TXT/NS/CNAME/SOA/PTR records for a domain or IP.
whoisWHOIS Lookup
Registrar and record lookup, following referrals automatically.
TLSSSL Certificate Checker
Issuer, validity window, SANs, and chain trust for a host.
ICMPPing
4 ICMP echo requests to a host, from our server.
TTLTraceroute
Trace the network path to a host, up to 15 hops.
:443Port Checker
Check one port, or scan ~27 common ports at once.
RBLDNS Blacklist (RBL) Checker
Check an IP against 5 public DNSBL zones in parallel.
HDRHTTP Header Inspector
Status, headers, and timing per hop, following redirects.
8.8.8.8DNS Propagation Checker
Compare a DNS answer across 6 major public resolvers.
HSTSHSTS Header Validator
Check a site's HSTS header against preload-list criteria.
A*nBulk DNS Resolver
Look up the same record type for up to 10 hostnames at once.
PTR*nReverse DNS Bulk Lookup
Look up the PTR record for up to 10 IP addresses at once.
RRSIGDNSSEC Validator
Verify a domain's DNSSEC chain of trust with real cryptographic signature checks.
cipherTLS Cipher Compatibility Tester
See exactly which TLS versions and cipher suites a host will negotiate.
OCSPOCSP Checker
Check a certificate's live revocation status via its CA's OCSP responder.
:tagContainer Registry / Image Inspector
Look up a public container image's manifest, platforms, and config.
CAACAA Record Checker
Which Certificate Authorities (if any) are authorized to issue for a domain.
NTPNTP Checker
Query an NTP server over UDP and see its reported time, stratum, and your clock offset.
ASIP ASN / Registry Lookup
Which Autonomous System and BGP prefix an IP address belongs to.
Email Tools
9 toolsSPF Record Checker
Parse a domain's SPF record and flag misconfigurations.
DKIMDKIM Record Checker
Look up a domain + selector's DKIM key, catch revoked ones.
DMARCDMARC Record Checker
Parse policy, percentage, and report-to addresses.
MXEmail Health Check
MX, SPF, and DMARC together — one pass/fail summary.
RUADMARC Aggregate Report Viewer
Open a DMARC aggregate XML report — parsed locally, never uploaded.
Rcvd:Email Header Analyzer
Received chain with hop timing, plus a From/To/Subject/Date summary.
220SMTP Banner Tester
Connect to a mail server and see its SMTP banner and EHLO capabilities.
BIMIBIMI Checker
Look up and parse a domain's BIMI brand-logo record.
MIMEMIME Parser
Break a raw MIME email into its parts — headers and decoded bodies.