Tools
Outils
Des utilitaires petits, rapides et respectueux de la vie privée, qui s'exécutent entièrement dans votre navigateur. Rien de ce que vous saisissez n'est envoyé où que ce soit.
Straight to the tools ↓
Skip the signposting and go to the index below: every tool, filterable by vendor and category.
Vendor hubs →
One page per platform, gathering its tools, articles and certification material in a single place. The way in if you already know which vendor you are working on.
Technology study guides →
Walkthroughs of the protocols and mechanisms themselves, with no exam attached. Read these to understand the thing rather than to pass something.
Certification exam guides →
Objective by objective for each exam, showing what is covered here and, honestly, what is not.
Certificats et PKI
ACME dns-01 TXT computer
Compute the TXT record for an ACME dns-01 challenge, from the token and account key.
Certificats et PKIDécodeur de certificats X.509
Collez un certificat en PEM, base64 ou hex pour lire son sujet, son émetteur, sa fenêtre de validité, sa clé publique et ses extensions v3, avec des empreintes SHA-256 et SHA-1. S'exécute entièrement dans votre navigateur.
Certificats et PKIDécodeur de CSR
Décodez une demande de signature de certificat PKCS#10 pour lire son sujet, sa clé publique, les SAN et extensions demandés, et ses attributs ; entièrement dans votre navigateur.
Certificats et PKILet's Encrypt rate-limit planner
Plan certificate issuance for a set of hostnames: group them by registered domain and see how they map onto Let's Encrypt's rate limits.
Certificats et PKIPlanificateur de renouvellement de certificat
Déterminez la validité d'un certificat TLS, s'il respecte le calendrier des 47 jours du CA/Browser Forum, et la cadence de renouvellement qui en découle ; le tout hors ligne.
Certificats et PKI
| Tool | Badges | Posture | Anchors |
|---|---|---|---|
| ACME dns-01 TXT computeracme-dns01 | Certificats et PKInew4 GV | compute / verify | RFC 8555 · RFC 7638 · RFC 4648 |
| Décodeur de certificats X.509x509 | Certificats et PKI7 GV | decode / explain | RFC 5280 · RFC 6960 · RFC 7633 |
| Décodeur de CSRcsr-decoder | Certificats et PKI | decode / verify | PKCS#10 / RFC 2986 · RFC 5280 |
| Let's Encrypt rate-limit plannerletsencrypt-rate-limits | Certificats et PKInew3 GV | compute | LE Rate Limits · Public Suffix List |
| Planificateur de renouvellement de certificatcert-renewal-planner | Certificats et PKInew5 GV | calculate / explain | CA/Browser Forum SC-081v3 · RFC 5280 · RFC 8555 |
Encodage et données
Codec Base64, Base32, Hex et pourcent
Encodez du texte en Base64, Base64 sûr pour les URL, Base32, hexadécimal ou encodage pourcent, et décodez n'importe lequel d'entre eux. Tolère le remplissage et les espaces manquants, et signale les résultats binaires (non UTF-8). Fonctionne entièrement dans votre navigateur.
Encodage et donnéesConvertisseur de temps Unix
Saisissez un horodatage Unix — secondes, millisecondes, microsecondes ou nanosecondes, détecté automatiquement — ou une date ISO-8601, et relisez-le dans tous les formats courants. Le tout dans votre navigateur.
Encodage et donnéesJSON ↔ YAML Converter
Convert JSON to block-style YAML or YAML back to JSON, entirely in your browser. Parse errors point to the exact line and column, and conversion notes flag the lossy edges like dropped comments and expanded anchors.
Encodage et donnéesJSON Formatter & Validator
Validate, pretty-print, minify, and sort JSON. Parse errors point to the exact line, column, and path; duplicate keys are flagged; and large numbers are preserved exactly. Runs entirely in your browser.
Encodage et donnéesMulti-time-zone meeting planner
One instant, read in every attendee's IANA time zone: local time, UTC offset, day shift, and a working-hours flag. DST is whatever the zone database says for that date, which is exactly why you plan with a real one.
Encodage et donnéesRoman numerals converter
Numbers to numerals and back, with the canonical subtractive form, the place-by-place construction, and honest validation: IIII is accepted and explained, IL is refused with the rule it breaks.
Encodage et donnéesTime calculator
Exact time arithmetic: the span between two instants, or an instant plus or minus a duration, in ISO 8601 or plain shorthand. Months and years are refused honestly: they are calendar units with no single exact length.
Encodage et données
| Tool | Badges | Posture | Anchors |
|---|---|---|---|
| Codec Base64, Base32, Hex et pourcentbase64 | Encodage et données | encode / decode | RFC 4648 · RFC 3986 |
| Convertisseur de temps Unixepoch | Encodage et données7 GV | convert | — |
| JSON ↔ YAML Converterjson-yaml-convert | Encodage et données16 GV | convert | YAML 1.2.2 · RFC 8259 |
| JSON Formatter & Validatorjson-formatter | Encodage et données19 GV | format / validate | RFC 8259 · ECMA-404 · RFC 6901 |
| Multi-time-zone meeting plannertimezone-meeting-planner | Encodage et données4 GV | compute | — |
| Roman numerals converterroman-numerals | Encodage et données21 GV | convert / explain | — |
| Time calculatortime-calculator | Encodage et données8 GV | compute | — |
Hachage et crypto
Générateur de hachage (SHA-1/256/384/512)
Calculez des empreintes SHA-1, SHA-256, SHA-384 et SHA-512 de n'importe quel texte, affichées en hex et en Base64, à l'aide du Web Crypto natif du navigateur. S'exécute entièrement dans votre navigateur.
Hachage et cryptoGénérateur de HMAC (SHA-256/384/512)
Calculez un HMAC à clé sur un message avec votre clé secrète, affiché en hex et en Base64, via le Web Crypto natif du navigateur. La même construction que le vérificateur de JWT utilise pour HS256. Votre clé ne quitte jamais votre navigateur.
Hachage et cryptoHash Preimage Finder
Watch a bounded, local brute-force search recover a weak hash input in seconds, or run out of keyspace on anything with real entropy. No wordlist, no table, just your browser. A demonstration of why fast, unsalted hashes fail.
Hachage et crypto
| Tool | Badges | Posture | Anchors |
|---|---|---|---|
| Générateur de hachage (SHA-1/256/384/512)hash | Hachage et crypto | compute | FIPS 180-4 · FIPS 202 |
| Générateur de HMAC (SHA-256/384/512)hmac | Hachage et crypto | compute / verify | RFC 2104 · FIPS 198-1 |
| Hash Preimage Finderhash-preimage-finder | Hachage et cryptonew22 GV | demonstrate / crack (bounded) | RFC 1321 · RFC 3174 · FIPS 180-4 |
Identifiants
| Tool | Badges | Posture | Anchors |
|---|---|---|---|
| Générateur et inspecteur d'UUID (v4 / v7)uuid | Identifiants | generate / parse | RFC 9562 |
Identité et jetons
Décodeur et vérificateur de JWT
Décodez l'en-tête et les claims d'un JSON Web Token, lisez son expiration et ses échéances en langage clair et vérifiez une signature HS256/384/512 avec un secret collé. S'exécute entièrement dans votre navigateur.
Identité et jetonsPing IdentityDécodeur OIDC
Collez un jeton d'identité OpenID Connect ou un document .well-known/openid-configuration et décodez-le : les claims principaux, les claims de profil, les endpoints et les capacités, avec des vérifications des claims requis, de l'algorithme de signature, du nonce et de PKCE.
Identité et jetonsPing IdentityJWKS explainer + key matcher
Paste a JSON Web Key Set to break down every key, flag any private material, and match a JWT to its key by kid. Nothing leaves your browser.
Identité et jetonsPing IdentityLDAP filter explainer
Paste an LDAP search filter - get the annotated tree: operators, match types, decoded RFC 4515 escapes, recognized AD matching-rule OIDs, and errors anchored to the exact character.
Identité et jetonsOAuth flow chooser
What kind of app, is there a user, offline access needed - and the right grant comes back RFC-cited, with implicit and ROPC retired by name per RFC 9700.
Identité et jetonsSAML Decoder
Paste a SAML Response or assertion (raw, base64, or URL-encoded) and decode its issuer, status, subject, conditions, audience, and attributes, with signature and weak-algorithm checks. Hardened against XXE.
Identité et jetonsPing IdentityTOTP / HOTP Generator & Validator
Generate and check time-based (TOTP, RFC 6238) and counter-based (HOTP, RFC 4226) one-time passwords - the codes behind authenticator apps and hardware tokens such as FortiToken. SHA-1/256/512, configurable digits and step. Computed locally with Web Crypto; your secret never leaves your browser.
Identité et jetonsPing IdentityVérificateur et challenge OAuth PKCE
Générez un code_verifier OAuth 2.0 et dérivez son code_challenge S256, ou collez le vôtre et vérifiez-le par rapport aux règles de longueur et de jeu de caractères de RFC 7636. La même dérivation SHA-256 en base64url qu'attend votre serveur d'autorisation. S'exécute entièrement dans votre navigateur.
Identité et jetonsPing Identity
| Tool | Badges | Posture | Anchors |
|---|---|---|---|
| Décodeur et vérificateur de JWTjwt | Identité et jetons | decode / verify | RFC 7519 · RFC 7515 · RFC 7518 |
| Décodeur OIDCoidc | Identité et jetons17 GV | decode / explain | OpenID Connect Core 1.0 · OpenID Connect Discovery 1.0 · RFC 6749 · RFC 7519 |
| JWKS explainer + key matcherjwks-explainer | Identité et jetons13 GV | decode / explain | RFC 7517 · RFC 7518 · RFC 8037 |
| LDAP filter explainerldap-filter-explainer | Identité et jetonsnew14 GV | decode / explain | RFC 4515 grammar; anchored errors; AD matching-rule OIDs recognized |
| OAuth flow chooseroauth-flow-chooser | Identité et jetonsnew12 GV | compute (deterministic) | RFC 6749/7636/8252/8628; RFC 9700 retirements encoded |
| SAML Decodersaml-decoder | Identité et jetons20 GV | decode / explain | OASIS SAML 2.0 · W3C XML-DSig · OWASP XXE |
| TOTP / HOTP Generator & Validatortotp-hotp | Identité et jetons | generate / verify | RFC 6238 · RFC 4226 |
| Vérificateur et challenge OAuth PKCEpkce | Identité et jetons | generate / verify | RFC 7636 · RFC 6749 |
Operations & Fieldcraft
Before/After Health Snapshot Comparator
You declare the states, the tool gates the conclusion: seven selections produce a tiered comparison report - baseline quality, a churn-classed dimension catalog, delta-interpretation guidance, and the continue / observe / investigate / hold-rollback-ready gate. Never labels a change successful on green components alone.
Operations & FieldcraftChange Blast-Radius Mapper
Describe what you are changing and its structure; a fixed rule set maps the blast radius as concentric tiers (target, co-located, downstream, human) populated with what could be affected, plus severity-tagged risks and containment measures. It maps what could be affected, never asserts what will break.
Operations & FieldcraftChange Window Runbook Builder
Describe a planned change in six structured fields; a fixed rule set assembles an ordered runbook across six phases - with the risks the plan carries and readiness cautions about the input. Advisory structure to review and adapt, never an approval.
Operations & FieldcraftDigital transformation tracker
Thirty milestones across seven domains, sorted by how much you should trust them: what shipped, what is already law, what is scheduled, what is scheduled but actively moving, and what is only somebody's forecast.
Operations & FieldcraftFault Hypothesis Builder
Describe a fault in six structured fields; a fixed rule set ranks hypotheses to test - with the evidence to collect, what would support each, and what would weaken it. Advisory structure, never a diagnosis.
Operations & FieldcraftFlow Path Reasoner
The senior skill is refusing to troubleshoot until the path is understood. Seven selections build a canonical hop map with side-flows, TLS segments, rewrite points, and ranked failure-domain candidates - and unknowns stay visibly unknown.
Operations & FieldcraftIncident Timeline & RCA Builder
RCA stands for root cause analysis - the disciplined walk from an incident's symptoms back to the conditions that allowed it. Enter an incident's events as a small timeline and mark the contributing-factor domains you observed; a fixed rule set orders the timeline, derives the milestone spans, and structures candidate contributing factors with the evidence for each. It never names a root cause - candidates to investigate, not a verdict.
Operations & FieldcraftNetwork operating system comparer
Fourteen network operating systems — IOS, IOS XE, IOS XR, NX-OS, Junos, Junos Evolved, EOS, TMOS, F5OS, EXOS, VOSS, FortiOS, PAN-OS and Gaia — with lineage, what each runs on, how components share state, where the planes divide, and what an upgrade costs. Pick one for a full profile or two to see them axis by axis. Every entry lists weaknesses as well as strengths.
Operations & FieldcraftPacket Capture Plan Builder
Command builders answer how to capture; this answers where, why, and what it would mean. Describe the path and the symptom; a 35-rule original registry designs a phased capture plan: ranked points on named boundaries, expected observations, an interpretation matrix with supports and weakens decided before collection, and sync/authorization discipline. It plans captures - it never ingests them.
Operations & FieldcraftTAC Escalation Packet Builder
Describe the issue you are about to escalate; a fixed rule set assembles a complete vendor-support packet and a checklist of the artifacts still to collect before opening the case, dropping what you already have. It structures the hand-off; it does not open a case or contact any vendor.
Operations & FieldcraftTerminal, shell, TTY and console explainer
Paste what `tty` printed — /dev/pts/3, /dev/tty2, /dev/ttyS0, /dev/tty, /dev/console, or “not a tty” — and see which layer you are actually looking at, what is holding the other end, and what that implies for signals, job control and what happens when the window closes. Local and offline.
Operations & Fieldcraft
| Tool | Badges | Posture | Anchors |
|---|---|---|---|
| Before/After Health Snapshot Comparatorhealth-snapshot-comparator | Operations & Fieldcraftnew13 SV | declare / gate / export (advisory) | Original ruleset (D-18) |
| Change Blast-Radius Mapperchange-blast-radius-mapper | Operations & Fieldcraftnew11 SV | map / assess / export (advisory) | Original ruleset (D-18) |
| Change Window Runbook Builderchange-window-runbook-builder | Operations & Fieldcraftnew13 SV | structure / sequence / export (advisory, deterministic rule-firing) | Original ruleset (D-18) |
| Digital transformation trackerdigital-transformation-tracker | Operations & Fieldcraftnew14 GV | compute (deterministic) | Certainty-tiered milestone dataset; attribution invariant enforced by golden vectors |
| Fault Hypothesis Builderfault-hypothesis-builder | Operations & Fieldcraftnew13 SV | structure / rank / export (advisory, deterministic rule-firing) | Original ruleset (D-18) |
| Flow Path Reasonerflow-path-reasoner | Operations & Fieldcraftnew13 SV | model / rank / export (advisory) | Original ruleset (D-18) |
| Incident Timeline & RCA Builderincident-timeline-rca-builder | Operations & Fieldcraftnew12 SV | structure / correlate / export (advisory) | Original ruleset (D-18) |
| Network operating system comparernetwork-os-comparer | Operations & Fieldcraft | reference (vendored) | Vendor architecture documentation |
| Packet Capture Plan Builderpacket-capture-plan-builder | Operations & Fieldcraftnew13 SV | plan / rank / export (advisory) | Original ruleset (D-18) |
| TAC Escalation Packet Buildertac-escalation-packet-builder | Operations & Fieldcraftnew12 SV | collect / structure / export (advisory) | Original ruleset (D-18) |
| Terminal, shell, TTY and console explainerterminal-stack-explainer | Operations & Fieldcraft | explain | POSIX termios |
Réseau
Boîte à outils IPv6
Analysez une adresse ou un préfixe IPv6 pour voir ses formes canonique (RFC 5952) et entièrement développée, sa classification d'usage spécial, le calcul de préfixe, une MAC EUI-64 si elle est présente et son nom DNS inverse ip6.arpa. S'exécute entièrement dans votre navigateur.
RéseauCable run planner
Speed, distance, environment, PoE in - every compliant cable and fiber option out, each citing the TIA-568 or 802.3 rule that governs it, with honest exclusions for the rest.
RéseauCalculateur CIDR / de sous-réseaux
Décomposez n'importe quel bloc CIDR IPv4 en adresses de réseau et de diffusion, plage d'hôtes utilisables, nombre d'hôtes et masque de réseau. S'exécute entièrement dans votre navigateur.
Réseaudig output explainer
Paste real dig output and get a decoded, explained breakdown: the header and flags, the EDNS OPT pseudo-section, every record in each section, and the query stats. Parsed entirely in your browser, nothing is resolved or sent anywhere.
RéseauHTTP methods comparison
Enter one to four HTTP methods (try "get vs query") to see each one's registry facts: safe, idempotent, cacheable, request-body semantics, CORS safelist membership, HTML-form support, and the defining RFC - plus exactly which properties differ. Includes QUERY, the RFC 10008 method registered in June 2026.
RéseauHTTP status code explainer
Paste status codes (404, 301 302 307) or families (5xx) and get each one decoded: family, registered name, documented meaning, and the operational notes - including the protocol's own fallback rule for codes it has never met.
RéseauMTU / MSS calculator
Enter a link MTU and your encapsulation stack (vxlan, gre, pppoe, vlan, mpls, +N custom) to get the inner MTU and TCP MSS, the Ethernet frame sizes, the underlay MTU an overlay needs, and the wire efficiency of standard versus jumbo frames.
Réseaunslookup output explainer
Paste real nslookup output and get a decoded, explained breakdown: the resolver it used, whether the answer is authoritative, every record (with MX / SRV / SOA field breakdowns), and any failures. Parsed entirely in your browser, nothing is resolved or sent anywhere.
RéseauOUI / MAC vendor lookup
Look up the manufacturer behind a MAC address, and read whether it is unicast or multicast and universally or locally administered. All in your browser.
Réseaup0f passive TCP/IP signature explainer
Decode a p0f v3 SYN fingerprint into its eight fields and see what each reveals about the sender's OS, network path, and stack.
RéseauZscalerPAC file explainer and validator
Paste a Proxy Auto-Config file and it reads back the proxy directives it returns, the PAC helper functions it uses (with the DNS-consulting ones flagged), structural and correctness lints, and whether it is a Netskope explicit-proxy steering file. Never runs the file.
RéseauNetskopeRegistered domain (eTLD+1)
Find the public suffix (eTLD) and registered domain (eTLD+1) for any hostname, using the Public Suffix List.
RéseauSyslog PRI decoder + encoder
Decode a syslog PRI such as 134 into its facility and severity, or encode them back, all in your browser.
RéseauVOSS / EXOS command translator
A side-by-side reference between VOSS (Fabric Connect / SPBM) and EXOS. Search a task or command to see how each CLI expresses it - and where EXOS has no equivalent.
RéseauVOSS fabric identifier decoder
Decode an Extreme SPBM fabric identifier - a 24-bit I-SID, a 20-bit nickname (X.XX.XX), or a system-id / B-MAC. Auto-detected, all in your browser.
Réseau
| Tool | Badges | Posture | Anchors |
|---|---|---|---|
| Boîte à outils IPv6ipv6 | Réseau | expand / compress / explain | RFC 4291 · RFC 5952 |
| Cable run plannercable-run-planner | Réseaunew14 GV | compute (deterministic) | ANSI/TIA-568 channel limits + IEEE 802.3 optic reaches; rules table pinned by golden vectors incl. exact-at-limit cases |
| Calculateur CIDR / de sous-réseauxcidr | Réseau | calculate / explain | RFC 4632 |
| dig output explainerdig-output-explainer | Réseaunew3 GV | decode / explain (local) | RFC 1035 · RFC 6891 · RFC 2308 · RFC 8499 |
| HTTP methods comparisonhttp-methods-comparison | Réseaunew19 GV | explain | RFC 9110 §9.3 · RFC 10008 (QUERY) · IANA HTTP Method Registry · RFC 5789 (PATCH) · RFC 4918/3253/5323 (WebDAV) |
| HTTP status code explainerhttp-status-code-explainer | Réseaunew12 GV | explain | RFC 9110: HTTP Semantics · RFC 6585: Additional HTTP Status Codes · RFC 7725 (451) · RFC 8297 (103 Early Hints) |
| MTU / MSS calculatormtu-mss | Réseau22 GV | calculate / reference | RFC 791/8200/9293/768 (header sizes) · RFC 2784 GRE · RFC 7348 VXLAN · RFC 8926 GENEVE · RFC 2516 PPPoE · RFC 3032 MPLS |
| nslookup output explainernslookup-output-explainer | Réseaunew4 GV | decode / explain (local) | RFC 1035 · RFC 2308 · RFC 2782 · RFC 8499 |
| OUI / MAC vendor lookupoui-lookup | Réseaunew10 GV | decode / lookup | IEEE MA-L |
| p0f passive TCP/IP signature explainerp0f-signature-explainer | Réseaunew10 GV | decode / explain | p0f v3 |
| PAC file explainer and validatorpac-file-explainer | Réseaunew6 GV | parse / validate | PAC (FindProxyForURL) |
| Registered domain (eTLD+1)public-suffix | Réseaunew8 GV | compute | Public Suffix List |
| Syslog PRI decoder + encodersyslog-pri-decoder | Réseau17 GV | decode / encode | RFC 5424 · RFC 3164 |
| VOSS / EXOS command translatorvoss-exos-translator | Réseaunew16 GV | reference | SPBM 802.1aq · Fabric Attach |
| VOSS fabric identifier decodervoss-fabric-id | Réseaunew11 GV | decode / validate | SPBM 802.1aq |
Security & WAF
CVSS vector decoder
Paste a CVSS v3.1 or v3.0 vector and get the score computed and mapped to a severity, with every metric spelled out. Local and offline; nothing is sent anywhere.
Security & WAFHTTP header-order fingerprint
Paste a request header block and see how header order and casing fingerprint the client - the passive-HTTP analog of JA3.
Security & WAFZscalerPing IdentityJA3 / JA3N passive TLS fingerprint
Paste a JA3 string and it recomputes the JA3 hash, computes the permutation-stable JA3N, decodes the fields, and flags GREASE values.
Security & WAFZscalerPing IdentityJA4 / JA3 TLS fingerprint decoder
Decode a JA4 TLS client fingerprint or a JA3 fingerprint into its fields, compute the hashed JA4 from raw values, or compute a JA3 MD5. It auto-detects which you paste. All in your browser.
Security & WAFZscalerPing IdentityOGNL injection decoder
Paste an OGNL payload you found in a WAF or application log and read what it was trying to do. Separates a sandbox escape from an execution call, names the advisory family the shape is consistent with, and always states what it did not determine. Decodes only - it never evaluates the payload and holds no templates.
Security & WAFSecure Headers Analyzer
Paste an HTTP response and get a graded breakdown of its security headers, cookie flags, and cross-origin policy, checked against OWASP, RFC 6797, CSP Level 3, and RFC 6265bis.
Security & WAFSSRF URL classifier
Paste a URL and see where it actually points: loopback, a private or link-local range, a cloud metadata endpoint, CGNAT, reserved space, or the public internet. Decimal, octal, and hex IP obfuscation is decoded, dangerous schemes and embedded credentials are flagged, and an SSRF risk level is shown. It never resolves DNS and never sends the request.
Security & WAFUser-Agent entropy analyzer
Paste a User-Agent string and see the identifying tokens it exposes, the distinguishing bits each contributes, and the Client Hints migration.
Security & WAFZscalerPing IdentityXML Decoder
Paste XML and read its structure: the declaration, the DOCTYPE and any entities, the element tree with namespaces and attributes, plus a security check of the XML attack surface. Nothing is fetched or resolved.
Security & WAF
| Tool | Badges | Posture | Anchors |
|---|---|---|---|
| CVSS vector decodercvss-vector-decoder | Security & WAFnew10 GV | decode / score | CVSS v3.1 (FIRST.org) |
| HTTP header-order fingerprinthttp-header-order-fingerprint | Security & WAFnew7 GV | decode / explain | — |
| JA3 / JA3N passive TLS fingerprintja3-tls-fingerprint | Security & WAFnew16 GV | compute (deterministic) | — |
| JA4 / JA3 TLS fingerprint decoderja4-fingerprint-decoder | Security & WAFnew13 GV | decode / compute | JA4 (FoxIO) · JA3 (Salesforce) · BSD 3-Clause |
| OGNL injection decoderognl-injection-decoder | Security & WAF | decode / explain | CVE-2017-5638 · CVE-2018-11776 |
| Secure Headers Analyzersecure-headers | Security & WAF15 GV | analyze / grade | OWASP Secure Headers Project · RFC 6797 · CSP Level 3 · RFC 6265bis |
| SSRF URL classifierssrf-url-classifier | Security & WAFnew26 GV | classify / flag | RFC 1918 · RFC 3986 |
| User-Agent entropy analyzeruser-agent-entropy-analyzer | Security & WAFnew8 GV | decode / explain | — |
| XML Decoderxml-decoder | Security & WAF5 GV | decode / explain (XXE-hardened) | W3C XML 1.0 · W3C Namespaces · OWASP XXE |
Text & utilities
Greek alphabet explainer
Type Greek and get names plus transliteration; type letter names and get glyphs. The full 24-letter table explains where engineers meet each one, from μ micro to Ω ohms.
Text & utilitiesText Diff
Compare two blocks of text and see exactly what changed, line by line, with inline word-level highlighting on edited lines. Optionally ignore whitespace or case. Everything is computed in your browser; your text is never sent anywhere.
Text & utilities
| Tool | Badges | Posture | Anchors |
|---|---|---|---|
| Greek alphabet explainergreek-alphabet | Text & utilities9 GV | convert / explain | — |
| Text Diffdiff | Text & utilities | compare / highlight | — |
TLS et transport
| Tool | Badges | Posture | Anchors |
|---|---|---|---|
| Décodeur de suites de chiffrementcipher | TLS et transport15 GV | decode / rate | IANA TLS Cipher Suites · RFC 8446 · RFC 5246 · RFC 8447 · RFC 7465 |
Web & HTTP
curl command builder
Pick any of the 27 protocols curl speaks, fill in protocol-aware fields, and get the exact command with every flag explained and safety warnings surfaced. The inverse of the HTTP request translator: that one reads a command, this one writes it.
Web & HTTPHTTP request translator
Paste a curl command and get it explained flag by flag, then translated to fetch, a raw HTTP request, HTTPie, and Python requests. Local and offline; the command is decoded in your browser and nothing is sent or run.
Web & HTTPRegex Toolkit
Test, explain, and debug regular expressions with live matches and a backtracking-risk check.
Web & HTTPSorting Algorithm Stepper
Paste a small list of numbers, pick a strategy - bubble, selection, insertion, merge, or quick - and watch the algorithm think: every comparison, every swap, one WHY line per move, with live comparison and write counters that make Big-O growth tangible.
Web & HTTPURL Inspector
Dissect any URL into its named parts: scheme, host, port, path, query parameters, and fragment. Decodes percent-escapes and internationalized hosts, and flags credentials and other issues. Runs entirely in your browser.
Web & HTTP
| Tool | Badges | Posture | Anchors |
|---|---|---|---|
| curl command buildercurl-command-builder | Web & HTTPnew11 GV | build (deterministic) | curl manual · everything curl |
| HTTP request translatorhttp-request-translator | Web & HTTPnew10 GV | explain / translate | curl manual · RFC 9110 |
| Regex Toolkitregex | Web & HTTP24 GV | test / explain | ECMAScript regular expressions |
| Sorting Algorithm Steppersorting-algorithm-stepper | Web & HTTPnew12 GV | compute (deterministic) | Textbook-canonical sorting variants; correctness enforced by golden vectors + per-run sortedness invariant |
| URL Inspectorurl-inspector | Web & HTTP12 GV | decode / explain | RFC 3986 · WHATWG URL · RFC 3492 |