Tools
Tools that compute, never guess.
Small, fast, privacy-first utilities that run entirely in your browser. Nothing you type is sent anywhere.
Straight to the tools ↓
Skip the signposting and go to the index below: every tool, filterable by vendor and category.
Vendor hubs →
One page per platform, gathering its tools, articles and certification material in a single place. The way in if you already know which vendor you are working on.
Technology study guides →
Walkthroughs of the protocols and mechanisms themselves, with no exam attached. Read these to understand the thing rather than to pass something.
Certification exam guides →
Objective by objective for each exam, showing what is covered here and, honestly, what is not.
Certificates & PKI
ACME dns-01 TXT computer
Compute the TXT record for an ACME dns-01 challenge, from the token and account key.
Certificates & PKICertificate renewal planner
Work out a TLS certificate's validity, whether it fits the CA/Browser Forum 47-day schedule, and the renewal cadence it implies — all offline.
Certificates & PKICSR decoder
Decode a PKCS#10 certificate signing request to read its subject, public key, requested SANs and extensions, and attributes — entirely in your browser.
Certificates & PKILet's Encrypt rate-limit planner
Plan certificate issuance for a set of hostnames: group them by registered domain and see how they map onto Let's Encrypt's rate limits.
Certificates & PKIX.509 Certificate Decoder
Paste a PEM, base64, or hex certificate to read its subject, issuer, validity window, public key, and v3 extensions, with SHA-256 and SHA-1 fingerprints. Runs entirely in your browser.
Certificates & PKI
| Tool | Badges | Posture | Anchors |
|---|---|---|---|
| ACME dns-01 TXT computeracme-dns01 | Certificates & PKInew4 GV | compute / verify | RFC 8555 · RFC 7638 · RFC 4648 |
| Certificate renewal plannercert-renewal-planner | Certificates & PKInew5 GV | calculate / explain | CA/Browser Forum SC-081v3 · RFC 5280 · RFC 8555 |
| CSR decodercsr-decoder | Certificates & PKI | decode / verify | PKCS#10 / RFC 2986 · RFC 5280 |
| Let's Encrypt rate-limit plannerletsencrypt-rate-limits | Certificates & PKInew3 GV | compute | LE Rate Limits · Public Suffix List |
| X.509 Certificate Decoderx509 | Certificates & PKI7 GV | decode / explain | RFC 5280 · RFC 6960 · RFC 7633 |
Encoding & data
Base64, Base32, Hex & Percent Codec
Encode text to Base64, URL-safe Base64, Base32, hexadecimal, or percent-encoding, and decode any of them back. Tolerant of missing padding and whitespace, and it flags binary (non-UTF-8) results. Runs entirely in your browser.
Encoding & dataJSON ↔ YAML Converter
Convert JSON to block-style YAML or YAML back to JSON, entirely in your browser. Parse errors point to the exact line and column, and conversion notes flag the lossy edges like dropped comments and expanded anchors.
Encoding & dataJSON Formatter & Validator
Validate, pretty-print, minify, and sort JSON. Parse errors point to the exact line, column, and path; duplicate keys are flagged; and large numbers are preserved exactly. Runs entirely in your browser.
Encoding & dataMulti-time-zone meeting planner
One instant, read in every attendee's IANA time zone: local time, UTC offset, day shift, and a working-hours flag. DST is whatever the zone database says for that date, which is exactly why you plan with a real one.
Encoding & dataRoman numerals converter
Numbers to numerals and back, with the canonical subtractive form, the place-by-place construction, and honest validation: IIII is accepted and explained, IL is refused with the rule it breaks.
Encoding & dataTime calculator
Exact time arithmetic: the span between two instants, or an instant plus or minus a duration, in ISO 8601 or plain shorthand. Months and years are refused honestly: they are calendar units with no single exact length.
Encoding & dataUnix time converter
Type a Unix timestamp — seconds, milliseconds, microseconds, or nanoseconds, detected automatically — or an ISO-8601 date, and read it back in every common format. All in your browser.
Encoding & data
| Tool | Badges | Posture | Anchors |
|---|---|---|---|
| Base64, Base32, Hex & Percent Codecbase64 | Encoding & data | encode / decode | RFC 4648 · RFC 3986 |
| JSON ↔ YAML Converterjson-yaml-convert | Encoding & data16 GV | convert | YAML 1.2.2 · RFC 8259 |
| JSON Formatter & Validatorjson-formatter | Encoding & data19 GV | format / validate | RFC 8259 · ECMA-404 · RFC 6901 |
| Multi-time-zone meeting plannertimezone-meeting-planner | Encoding & data4 GV | compute | — |
| Roman numerals converterroman-numerals | Encoding & data21 GV | convert / explain | — |
| Time calculatortime-calculator | Encoding & data8 GV | compute | — |
| Unix time converterepoch | Encoding & data7 GV | convert | — |
Hashing & crypto
Hash Generator (SHA-1/256/384/512)
Compute SHA-1, SHA-256, SHA-384, and SHA-512 digests of any text, shown as hex and Base64, using the browser's native Web Crypto. Runs entirely in your browser.
Hashing & cryptoHash Preimage Finder
Watch a bounded, local brute-force search recover a weak hash input in seconds, or run out of keyspace on anything with real entropy. No wordlist, no table, just your browser. A demonstration of why fast, unsalted hashes fail.
Hashing & cryptoHMAC Generator (SHA-256/384/512)
Compute a keyed HMAC over a message with your secret key, shown as hex and Base64, via the browser's native Web Crypto. The same construction the JWT verifier uses for HS256. Your key never leaves your browser.
Hashing & crypto
| Tool | Badges | Posture | Anchors |
|---|---|---|---|
| Hash Generator (SHA-1/256/384/512)hash | Hashing & crypto | compute | FIPS 180-4 · FIPS 202 |
| Hash Preimage Finderhash-preimage-finder | Hashing & cryptonew22 GV | demonstrate / crack (bounded) | RFC 1321 · RFC 3174 · FIPS 180-4 |
| HMAC Generator (SHA-256/384/512)hmac | Hashing & crypto | compute / verify | RFC 2104 · FIPS 198-1 |
Identifiers
| Tool | Badges | Posture | Anchors |
|---|---|---|---|
| UUID Generator & Inspector (v4 / v7)uuid | Identifiers | generate / parse | RFC 9562 |
Identity & tokens
JWKS explainer + key matcher
Paste a JSON Web Key Set to break down every key, flag any private material, and match a JWT to its key by kid. Nothing leaves your browser.
Identity & tokensPing IdentityJWT Decoder & Verifier
Decode a JSON Web Token's header and claims, read its expiry and timing in plain language, and verify an HS256/384/512 signature with a pasted secret. Runs entirely in your browser.
Identity & tokensPing IdentityLDAP filter explainer
Paste an LDAP search filter - get the annotated tree: operators, match types, decoded RFC 4515 escapes, recognized AD matching-rule OIDs, and errors anchored to the exact character.
Identity & tokensOAuth flow chooser
What kind of app, is there a user, offline access needed - and the right grant comes back RFC-cited, with implicit and ROPC retired by name per RFC 9700.
Identity & tokensOAuth PKCE Verifier & Challenge
Generate an OAuth 2.0 code_verifier and derive its S256 code_challenge, or paste your own and check it against RFC 7636's length and charset rules. The same SHA-256 base64url derivation your authorization server expects. Runs entirely in your browser.
Identity & tokensPing IdentityOIDC Decoder
Paste an OpenID Connect ID token or a .well-known/openid-configuration document and decode it: the core claims, profile claims, endpoints, and capabilities, with checks for required claims, signing algorithm, nonce, and PKCE.
Identity & tokensPing IdentitySAML Decoder
Paste a SAML Response or assertion (raw, base64, or URL-encoded) and decode its issuer, status, subject, conditions, audience, and attributes, with signature and weak-algorithm checks. Hardened against XXE.
Identity & tokensPing IdentityTOTP / HOTP Generator & Validator
Generate and check time-based (TOTP, RFC 6238) and counter-based (HOTP, RFC 4226) one-time passwords - the codes behind authenticator apps and hardware tokens such as FortiToken. SHA-1/256/512, configurable digits and step. Computed locally with Web Crypto; your secret never leaves your browser.
Identity & tokensPing Identity
| Tool | Badges | Posture | Anchors |
|---|---|---|---|
| JWKS explainer + key matcherjwks-explainer | Identity & tokens13 GV | decode / explain | RFC 7517 · RFC 7518 · RFC 8037 |
| JWT Decoder & Verifierjwt | Identity & tokens | decode / verify | RFC 7519 · RFC 7515 · RFC 7518 |
| LDAP filter explainerldap-filter-explainer | Identity & tokensnew14 GV | decode / explain | RFC 4515 grammar; anchored errors; AD matching-rule OIDs recognized |
| OAuth flow chooseroauth-flow-chooser | Identity & tokensnew12 GV | compute (deterministic) | RFC 6749/7636/8252/8628; RFC 9700 retirements encoded |
| OAuth PKCE Verifier & Challengepkce | Identity & tokens | generate / verify | RFC 7636 · RFC 6749 |
| OIDC Decoderoidc | Identity & tokens17 GV | decode / explain | OpenID Connect Core 1.0 · OpenID Connect Discovery 1.0 · RFC 6749 · RFC 7519 |
| SAML Decodersaml-decoder | Identity & tokens20 GV | decode / explain | OASIS SAML 2.0 · W3C XML-DSig · OWASP XXE |
| TOTP / HOTP Generator & Validatortotp-hotp | Identity & tokens | generate / verify | RFC 6238 · RFC 4226 |
Networking
Cable run planner
Speed, distance, environment, PoE in - every compliant cable and fiber option out, each citing the TIA-568 or 802.3 rule that governs it, with honest exclusions for the rest.
NetworkingCIDR / Subnet Calculator
Break down any IPv4 CIDR block into network and broadcast addresses, usable host range, host count, and netmask. Runs entirely in your browser.
Networkingdig output explainer
Paste real dig output and get a decoded, explained breakdown: the header and flags, the EDNS OPT pseudo-section, every record in each section, and the query stats. Parsed entirely in your browser, nothing is resolved or sent anywhere.
NetworkingHTTP methods comparison
Enter one to four HTTP methods (try "get vs query") to see each one's registry facts: safe, idempotent, cacheable, request-body semantics, CORS safelist membership, HTML-form support, and the defining RFC - plus exactly which properties differ. Includes QUERY, the RFC 10008 method registered in June 2026.
NetworkingHTTP status code explainer
Paste status codes (404, 301 302 307) or families (5xx) and get each one decoded: family, registered name, documented meaning, and the operational notes - including the protocol's own fallback rule for codes it has never met.
NetworkingIPv6 Toolkit
Parse an IPv6 address or prefix to see its canonical (RFC 5952) and fully expanded forms, special-use classification, prefix math, an EUI-64 MAC if present, and its ip6.arpa reverse-DNS name. Runs entirely in your browser.
NetworkingMTU / MSS calculator
Enter a link MTU and your encapsulation stack (vxlan, gre, pppoe, vlan, mpls, +N custom) to get the inner MTU and TCP MSS, the Ethernet frame sizes, the underlay MTU an overlay needs, and the wire efficiency of standard versus jumbo frames.
Networkingnslookup output explainer
Paste real nslookup output and get a decoded, explained breakdown: the resolver it used, whether the answer is authoritative, every record (with MX / SRV / SOA field breakdowns), and any failures. Parsed entirely in your browser, nothing is resolved or sent anywhere.
NetworkingOUI / MAC vendor lookup
Look up the manufacturer behind a MAC address, and read whether it is unicast or multicast and universally or locally administered. All in your browser.
Networkingp0f passive TCP/IP signature explainer
Decode a p0f v3 SYN fingerprint into its eight fields and see what each reveals about the sender's OS, network path, and stack.
NetworkingZscalerPAC file explainer and validator
Paste a Proxy Auto-Config file and it reads back the proxy directives it returns, the PAC helper functions it uses (with the DNS-consulting ones flagged), structural and correctness lints, and whether it is a Netskope explicit-proxy steering file. Never runs the file.
NetworkingNetskopeRegistered domain (eTLD+1)
Find the public suffix (eTLD) and registered domain (eTLD+1) for any hostname, using the Public Suffix List.
NetworkingSyslog PRI decoder + encoder
Decode a syslog PRI such as 134 into its facility and severity, or encode them back, all in your browser.
NetworkingVOSS / EXOS command translator
A side-by-side reference between VOSS (Fabric Connect / SPBM) and EXOS. Search a task or command to see how each CLI expresses it - and where EXOS has no equivalent.
NetworkingVOSS fabric identifier decoder
Decode an Extreme SPBM fabric identifier - a 24-bit I-SID, a 20-bit nickname (X.XX.XX), or a system-id / B-MAC. Auto-detected, all in your browser.
Networking
| Tool | Badges | Posture | Anchors |
|---|---|---|---|
| Cable run plannercable-run-planner | Networkingnew14 GV | compute (deterministic) | ANSI/TIA-568 channel limits + IEEE 802.3 optic reaches; rules table pinned by golden vectors incl. exact-at-limit cases |
| CIDR / Subnet Calculatorcidr | Networking | calculate / explain | RFC 4632 |
| dig output explainerdig-output-explainer | Networkingnew3 GV | decode / explain (local) | RFC 1035 · RFC 6891 · RFC 2308 · RFC 8499 |
| HTTP methods comparisonhttp-methods-comparison | Networkingnew19 GV | explain | RFC 9110 §9.3 · RFC 10008 (QUERY) · IANA HTTP Method Registry · RFC 5789 (PATCH) · RFC 4918/3253/5323 (WebDAV) |
| HTTP status code explainerhttp-status-code-explainer | Networkingnew12 GV | explain | RFC 9110: HTTP Semantics · RFC 6585: Additional HTTP Status Codes · RFC 7725 (451) · RFC 8297 (103 Early Hints) |
| IPv6 Toolkitipv6 | Networking | expand / compress / explain | RFC 4291 · RFC 5952 |
| MTU / MSS calculatormtu-mss | Networking22 GV | calculate / reference | RFC 791/8200/9293/768 (header sizes) · RFC 2784 GRE · RFC 7348 VXLAN · RFC 8926 GENEVE · RFC 2516 PPPoE · RFC 3032 MPLS |
| nslookup output explainernslookup-output-explainer | Networkingnew4 GV | decode / explain (local) | RFC 1035 · RFC 2308 · RFC 2782 · RFC 8499 |
| OUI / MAC vendor lookupoui-lookup | Networkingnew10 GV | decode / lookup | IEEE MA-L |
| p0f passive TCP/IP signature explainerp0f-signature-explainer | Networkingnew10 GV | decode / explain | p0f v3 |
| PAC file explainer and validatorpac-file-explainer | Networkingnew6 GV | parse / validate | PAC (FindProxyForURL) |
| Registered domain (eTLD+1)public-suffix | Networkingnew8 GV | compute | Public Suffix List |
| Syslog PRI decoder + encodersyslog-pri-decoder | Networking17 GV | decode / encode | RFC 5424 · RFC 3164 |
| VOSS / EXOS command translatorvoss-exos-translator | Networkingnew16 GV | reference | SPBM 802.1aq · Fabric Attach |
| VOSS fabric identifier decodervoss-fabric-id | Networkingnew11 GV | decode / validate | SPBM 802.1aq |
Operations & Fieldcraft
Before/After Health Snapshot Comparator
You declare the states, the tool gates the conclusion: seven selections produce a tiered comparison report - baseline quality, a churn-classed dimension catalog, delta-interpretation guidance, and the continue / observe / investigate / hold-rollback-ready gate. Never labels a change successful on green components alone.
Operations & FieldcraftChange Blast-Radius Mapper
Describe what you are changing and its structure; a fixed rule set maps the blast radius as concentric tiers (target, co-located, downstream, human) populated with what could be affected, plus severity-tagged risks and containment measures. It maps what could be affected, never asserts what will break.
Operations & FieldcraftChange Window Runbook Builder
Describe a planned change in six structured fields; a fixed rule set assembles an ordered runbook across six phases - with the risks the plan carries and readiness cautions about the input. Advisory structure to review and adapt, never an approval.
Operations & FieldcraftDigital transformation tracker
Thirty milestones across seven domains, sorted by how much you should trust them: what shipped, what is already law, what is scheduled, what is scheduled but actively moving, and what is only somebody's forecast.
Operations & FieldcraftFault Hypothesis Builder
Describe a fault in six structured fields; a fixed rule set ranks hypotheses to test - with the evidence to collect, what would support each, and what would weaken it. Advisory structure, never a diagnosis.
Operations & FieldcraftFlow Path Reasoner
The senior skill is refusing to troubleshoot until the path is understood. Seven selections build a canonical hop map with side-flows, TLS segments, rewrite points, and ranked failure-domain candidates - and unknowns stay visibly unknown.
Operations & FieldcraftIncident Timeline & RCA Builder
RCA stands for root cause analysis - the disciplined walk from an incident's symptoms back to the conditions that allowed it. Enter an incident's events as a small timeline and mark the contributing-factor domains you observed; a fixed rule set orders the timeline, derives the milestone spans, and structures candidate contributing factors with the evidence for each. It never names a root cause - candidates to investigate, not a verdict.
Operations & FieldcraftNetwork operating system comparer
Fourteen network operating systems — IOS, IOS XE, IOS XR, NX-OS, Junos, Junos Evolved, EOS, TMOS, F5OS, EXOS, VOSS, FortiOS, PAN-OS and Gaia — with lineage, what each runs on, how components share state, where the planes divide, and what an upgrade costs. Pick one for a full profile or two to see them axis by axis. Every entry lists weaknesses as well as strengths.
Operations & FieldcraftPacket Capture Plan Builder
Command builders answer how to capture; this answers where, why, and what it would mean. Describe the path and the symptom; a 35-rule original registry designs a phased capture plan: ranked points on named boundaries, expected observations, an interpretation matrix with supports and weakens decided before collection, and sync/authorization discipline. It plans captures - it never ingests them.
Operations & FieldcraftTAC Escalation Packet Builder
Describe the issue you are about to escalate; a fixed rule set assembles a complete vendor-support packet and a checklist of the artifacts still to collect before opening the case, dropping what you already have. It structures the hand-off; it does not open a case or contact any vendor.
Operations & FieldcraftTerminal, shell, TTY and console explainer
Paste what `tty` printed — /dev/pts/3, /dev/tty2, /dev/ttyS0, /dev/tty, /dev/console, or “not a tty” — and see which layer you are actually looking at, what is holding the other end, and what that implies for signals, job control and what happens when the window closes. Local and offline.
Operations & Fieldcraft
| Tool | Badges | Posture | Anchors |
|---|---|---|---|
| Before/After Health Snapshot Comparatorhealth-snapshot-comparator | Operations & Fieldcraftnew13 SV | declare / gate / export (advisory) | Original ruleset (D-18) |
| Change Blast-Radius Mapperchange-blast-radius-mapper | Operations & Fieldcraftnew11 SV | map / assess / export (advisory) | Original ruleset (D-18) |
| Change Window Runbook Builderchange-window-runbook-builder | Operations & Fieldcraftnew13 SV | structure / sequence / export (advisory, deterministic rule-firing) | Original ruleset (D-18) |
| Digital transformation trackerdigital-transformation-tracker | Operations & Fieldcraftnew14 GV | compute (deterministic) | Certainty-tiered milestone dataset; attribution invariant enforced by golden vectors |
| Fault Hypothesis Builderfault-hypothesis-builder | Operations & Fieldcraftnew13 SV | structure / rank / export (advisory, deterministic rule-firing) | Original ruleset (D-18) |
| Flow Path Reasonerflow-path-reasoner | Operations & Fieldcraftnew13 SV | model / rank / export (advisory) | Original ruleset (D-18) |
| Incident Timeline & RCA Builderincident-timeline-rca-builder | Operations & Fieldcraftnew12 SV | structure / correlate / export (advisory) | Original ruleset (D-18) |
| Network operating system comparernetwork-os-comparer | Operations & Fieldcraft | reference (vendored) | Vendor architecture documentation |
| Packet Capture Plan Builderpacket-capture-plan-builder | Operations & Fieldcraftnew13 SV | plan / rank / export (advisory) | Original ruleset (D-18) |
| TAC Escalation Packet Buildertac-escalation-packet-builder | Operations & Fieldcraftnew12 SV | collect / structure / export (advisory) | Original ruleset (D-18) |
| Terminal, shell, TTY and console explainerterminal-stack-explainer | Operations & Fieldcraft | explain | POSIX termios |
Security & WAF
CVSS vector decoder
Paste a CVSS v3.1 or v3.0 vector and get the score computed and mapped to a severity, with every metric spelled out. Local and offline; nothing is sent anywhere.
Security & WAFHTTP header-order fingerprint
Paste a request header block and see how header order and casing fingerprint the client - the passive-HTTP analog of JA3.
Security & WAFZscalerPing IdentityJA3 / JA3N passive TLS fingerprint
Paste a JA3 string and it recomputes the JA3 hash, computes the permutation-stable JA3N, decodes the fields, and flags GREASE values.
Security & WAFZscalerPing IdentityJA4 / JA3 TLS fingerprint decoder
Decode a JA4 TLS client fingerprint or a JA3 fingerprint into its fields, compute the hashed JA4 from raw values, or compute a JA3 MD5. It auto-detects which you paste. All in your browser.
Security & WAFZscalerPing IdentityOGNL injection decoder
Paste an OGNL payload you found in a WAF or application log and read what it was trying to do. Separates a sandbox escape from an execution call, names the advisory family the shape is consistent with, and always states what it did not determine. Decodes only - it never evaluates the payload and holds no templates.
Security & WAFSecure Headers Analyzer
Paste an HTTP response and get a graded breakdown of its security headers, cookie flags, and cross-origin policy, checked against OWASP, RFC 6797, CSP Level 3, and RFC 6265bis.
Security & WAFSSRF URL classifier
Paste a URL and see where it actually points: loopback, a private or link-local range, a cloud metadata endpoint, CGNAT, reserved space, or the public internet. Decimal, octal, and hex IP obfuscation is decoded, dangerous schemes and embedded credentials are flagged, and an SSRF risk level is shown. It never resolves DNS and never sends the request.
Security & WAFUser-Agent entropy analyzer
Paste a User-Agent string and see the identifying tokens it exposes, the distinguishing bits each contributes, and the Client Hints migration.
Security & WAFZscalerPing IdentityXML Decoder
Paste XML and read its structure: the declaration, the DOCTYPE and any entities, the element tree with namespaces and attributes, plus a security check of the XML attack surface. Nothing is fetched or resolved.
Security & WAF
| Tool | Badges | Posture | Anchors |
|---|---|---|---|
| CVSS vector decodercvss-vector-decoder | Security & WAFnew10 GV | decode / score | CVSS v3.1 (FIRST.org) |
| HTTP header-order fingerprinthttp-header-order-fingerprint | Security & WAFnew7 GV | decode / explain | — |
| JA3 / JA3N passive TLS fingerprintja3-tls-fingerprint | Security & WAFnew16 GV | compute (deterministic) | — |
| JA4 / JA3 TLS fingerprint decoderja4-fingerprint-decoder | Security & WAFnew13 GV | decode / compute | JA4 (FoxIO) · JA3 (Salesforce) · BSD 3-Clause |
| OGNL injection decoderognl-injection-decoder | Security & WAF | decode / explain | CVE-2017-5638 · CVE-2018-11776 |
| Secure Headers Analyzersecure-headers | Security & WAF15 GV | analyze / grade | OWASP Secure Headers Project · RFC 6797 · CSP Level 3 · RFC 6265bis |
| SSRF URL classifierssrf-url-classifier | Security & WAFnew26 GV | classify / flag | RFC 1918 · RFC 3986 |
| User-Agent entropy analyzeruser-agent-entropy-analyzer | Security & WAFnew8 GV | decode / explain | — |
| XML Decoderxml-decoder | Security & WAF5 GV | decode / explain (XXE-hardened) | W3C XML 1.0 · W3C Namespaces · OWASP XXE |
Text & utilities
Greek alphabet explainer
Type Greek and get names plus transliteration; type letter names and get glyphs. The full 24-letter table explains where engineers meet each one, from μ micro to Ω ohms.
Text & utilitiesText Diff
Compare two blocks of text and see exactly what changed, line by line, with inline word-level highlighting on edited lines. Optionally ignore whitespace or case. Everything is computed in your browser; your text is never sent anywhere.
Text & utilities
| Tool | Badges | Posture | Anchors |
|---|---|---|---|
| Greek alphabet explainergreek-alphabet | Text & utilities9 GV | convert / explain | — |
| Text Diffdiff | Text & utilities | compare / highlight | — |
TLS & transport
| Tool | Badges | Posture | Anchors |
|---|---|---|---|
| Cipher Suite Decodercipher | TLS & transport15 GV | decode / rate | IANA TLS Cipher Suites · RFC 8446 · RFC 5246 · RFC 8447 · RFC 7465 |
Web & HTTP
curl command builder
Pick any of the 27 protocols curl speaks, fill in protocol-aware fields, and get the exact command with every flag explained and safety warnings surfaced. The inverse of the HTTP request translator: that one reads a command, this one writes it.
Web & HTTPHTTP request translator
Paste a curl command and get it explained flag by flag, then translated to fetch, a raw HTTP request, HTTPie, and Python requests. Local and offline; the command is decoded in your browser and nothing is sent or run.
Web & HTTPRegex Toolkit
Test, explain, and debug regular expressions with live matches and a backtracking-risk check.
Web & HTTPSorting Algorithm Stepper
Paste a small list of numbers, pick a strategy - bubble, selection, insertion, merge, or quick - and watch the algorithm think: every comparison, every swap, one WHY line per move, with live comparison and write counters that make Big-O growth tangible.
Web & HTTPURL Inspector
Dissect any URL into its named parts: scheme, host, port, path, query parameters, and fragment. Decodes percent-escapes and internationalized hosts, and flags credentials and other issues. Runs entirely in your browser.
Web & HTTP
| Tool | Badges | Posture | Anchors |
|---|---|---|---|
| curl command buildercurl-command-builder | Web & HTTPnew11 GV | build (deterministic) | curl manual · everything curl |
| HTTP request translatorhttp-request-translator | Web & HTTPnew10 GV | explain / translate | curl manual · RFC 9110 |
| Regex Toolkitregex | Web & HTTP24 GV | test / explain | ECMAScript regular expressions |
| Sorting Algorithm Steppersorting-algorithm-stepper | Web & HTTPnew12 GV | compute (deterministic) | Textbook-canonical sorting variants; correctness enforced by golden vectors + per-run sortedness invariant |
| URL Inspectorurl-inspector | Web & HTTP12 GV | decode / explain | RFC 3986 · WHATWG URL · RFC 3492 |