ronutz

User guide

How to use this site

A practical guide to the site: what is here, how each tool works, which tools to reach for, the learning material that surrounds them, and how the site handles privacy, languages, and offline use. Everything computes locally in your browser.

At a glance

The essentials in one panel. These figures are generated from the site itself at build time, so they always match what is actually published.

Live tools
152
Categories
11
Learn articles
553
Glossary terms
1242
Languages
16
Where it runs
In your browser, on your device
Your input
Never sent anywhere by default
Code license
Apache-2.0
Content license
CC BY 4.0
Built with
Next.js, a statically exported progressive web app
Price
Free to use; the first useful answer is never behind a paywall

Tool reference

Every general-purpose tool, grouped by category. This list is generated from the live registry, so it is always complete. Tools tied to a specific vendor live on that vendor's page.

Ağ

  • Cable run plannerSpeed, distance, environment, PoE in - every compliant cable and fiber option out, each citing the TIA-568 or 802.3 rule that governs it, with honest exclusions for the rest.
  • CIDR / Alt Ağ HesaplayıcıHerhangi bir IPv4 CIDR bloğunu ağ ve yayın adreslerine, kullanılabilir ana bilgisayar aralığına, ana bilgisayar sayısına ve ağ maskesine ayır. Tamamen tarayıcında çalışır.
  • dig output explainerPaste real dig output and get a decoded, explained breakdown: the header and flags, the EDNS OPT pseudo-section, every record in each section, and the query stats. Parsed entirely in your browser, nothing is resolved or sent anywhere.
  • HTTP methods comparisonEnter one to four HTTP methods (try "get vs query") to see each one's registry facts: safe, idempotent, cacheable, request-body semantics, CORS safelist membership, HTML-form support, and the defining RFC - plus exactly which properties differ. Includes QUERY, the RFC 10008 method registered in June 2026.
  • HTTP status code explainerPaste status codes (404, 301 302 307) or families (5xx) and get each one decoded: family, registered name, documented meaning, and the operational notes - including the protocol's own fallback rule for codes it has never met.
  • IPv6 Araç TakımıKanonik (RFC 5952) ve tam genişletilmiş biçimlerini, özel kullanım sınıflandırmasını, önek aritmetiğini, varsa bir EUI-64 MAC'i ve ip6.arpa ters DNS adını görmek için bir IPv6 adresi ya da öneki ayrıştır. Tamamen tarayıcında çalışır.
  • MTU / MSS calculatorEnter a link MTU and your encapsulation stack (vxlan, gre, pppoe, vlan, mpls, +N custom) to get the inner MTU and TCP MSS, the Ethernet frame sizes, the underlay MTU an overlay needs, and the wire efficiency of standard versus jumbo frames.
  • nslookup output explainerPaste real nslookup output and get a decoded, explained breakdown: the resolver it used, whether the answer is authoritative, every record (with MX / SRV / SOA field breakdowns), and any failures. Parsed entirely in your browser, nothing is resolved or sent anywhere.
  • OUI / MAC vendor lookupLook up the manufacturer behind a MAC address, and read whether it is unicast or multicast and universally or locally administered. All in your browser.
  • Registered domain (eTLD+1)Find the public suffix (eTLD) and registered domain (eTLD+1) for any hostname, using the Public Suffix List.
  • Syslog PRI decoder + encoderDecode a syslog PRI such as 134 into its facility and severity, or encode them back, all in your browser.
  • VOSS / EXOS command translatorA side-by-side reference between VOSS (Fabric Connect / SPBM) and EXOS. Search a task or command to see how each CLI expresses it - and where EXOS has no equivalent.
  • VOSS fabric identifier decoderDecode an Extreme SPBM fabric identifier - a 24-bit I-SID, a 20-bit nickname (X.XX.XX), or a system-id / B-MAC. Auto-detected, all in your browser.

Hash ve kripto

  • Hash Preimage FinderWatch a bounded, local brute-force search recover a weak hash input in seconds, or run out of keyspace on anything with real entropy. No wordlist, no table, just your browser. A demonstration of why fast, unsalted hashes fail.
  • Hash Üreteci (SHA-1/256/384/512)Herhangi bir metnin SHA-1, SHA-256, SHA-384 ve SHA-512 özetlerini, tarayıcının yerel Web Crypto'su ile hesapla; hex ve Base64 olarak gösterilir. Tamamen tarayıcında çalışır.
  • HMAC Üreteci (SHA-256/384/512)Gizli anahtarınla bir mesaj üzerinde anahtarlı bir HMAC hesapla; tarayıcının yerel Web Crypto'su ile hex ve Base64 olarak gösterilir. JWT doğrulayıcının HS256 için kullandığı yapının aynısı. Anahtarın asla tarayıcından çıkmaz.

Kimlik ve token'lar

  • LDAP filter explainerPaste an LDAP search filter - get the annotated tree: operators, match types, decoded RFC 4515 escapes, recognized AD matching-rule OIDs, and errors anchored to the exact character.
  • OAuth flow chooserWhat kind of app, is there a user, offline access needed - and the right grant comes back RFC-cited, with implicit and ROPC retired by name per RFC 9700.

Kodlama ve veri

  • Base64, Base32, Hex ve yüzde codec'iMetni Base64, URL güvenli Base64, Base32, onaltılık veya yüzde kodlamasına kodlayın ve bunlardan herhangi birini geri çözün. Eksik dolguya ve boşluklara toleranslıdır ve ikili (UTF-8 olmayan) sonuçları işaretler. Tamamen tarayıcınızda çalışır.
  • JSON ↔ YAML ConverterConvert JSON to block-style YAML or YAML back to JSON, entirely in your browser. Parse errors point to the exact line and column, and conversion notes flag the lossy edges like dropped comments and expanded anchors.
  • JSON Formatter & ValidatorValidate, pretty-print, minify, and sort JSON. Parse errors point to the exact line, column, and path; duplicate keys are flagged; and large numbers are preserved exactly. Runs entirely in your browser.
  • Multi-time-zone meeting plannerOne instant, read in every attendee's IANA time zone: local time, UTC offset, day shift, and a working-hours flag. DST is whatever the zone database says for that date, which is exactly why you plan with a real one.
  • Roman numerals converterNumbers to numerals and back, with the canonical subtractive form, the place-by-place construction, and honest validation: IIII is accepted and explained, IL is refused with the rule it breaks.
  • Time calculatorExact time arithmetic: the span between two instants, or an instant plus or minus a duration, in ISO 8601 or plain shorthand. Months and years are refused honestly: they are calendar units with no single exact length.
  • Unix zaman dönüştürücüBir Unix zaman damgası — saniye, milisaniye, mikrosaniye veya nanosaniye, otomatik algılanır — ya da bir ISO-8601 tarihi girin ve onu tüm yaygın biçimlerde okuyun. Hepsi tarayıcınızda.

Operations & Fieldcraft

  • Before/After Health Snapshot ComparatorYou declare the states, the tool gates the conclusion: seven selections produce a tiered comparison report - baseline quality, a churn-classed dimension catalog, delta-interpretation guidance, and the continue / observe / investigate / hold-rollback-ready gate. Never labels a change successful on green components alone.
  • Change Blast-Radius MapperDescribe what you are changing and its structure; a fixed rule set maps the blast radius as concentric tiers (target, co-located, downstream, human) populated with what could be affected, plus severity-tagged risks and containment measures. It maps what could be affected, never asserts what will break.
  • Change Window Runbook BuilderDescribe a planned change in six structured fields; a fixed rule set assembles an ordered runbook across six phases - with the risks the plan carries and readiness cautions about the input. Advisory structure to review and adapt, never an approval.
  • Digital transformation trackerThirty milestones across seven domains, sorted by how much you should trust them: what shipped, what is already law, what is scheduled, what is scheduled but actively moving, and what is only somebody's forecast.
  • Fault Hypothesis BuilderDescribe a fault in six structured fields; a fixed rule set ranks hypotheses to test - with the evidence to collect, what would support each, and what would weaken it. Advisory structure, never a diagnosis.
  • Flow Path ReasonerThe senior skill is refusing to troubleshoot until the path is understood. Seven selections build a canonical hop map with side-flows, TLS segments, rewrite points, and ranked failure-domain candidates - and unknowns stay visibly unknown.
  • Incident Timeline & RCA BuilderRCA stands for root cause analysis - the disciplined walk from an incident's symptoms back to the conditions that allowed it. Enter an incident's events as a small timeline and mark the contributing-factor domains you observed; a fixed rule set orders the timeline, derives the milestone spans, and structures candidate contributing factors with the evidence for each. It never names a root cause - candidates to investigate, not a verdict.
  • Network operating system comparerFourteen network operating systems — IOS, IOS XE, IOS XR, NX-OS, Junos, Junos Evolved, EOS, TMOS, F5OS, EXOS, VOSS, FortiOS, PAN-OS and Gaia — with lineage, what each runs on, how components share state, where the planes divide, and what an upgrade costs. Pick one for a full profile or two to see them axis by axis. Every entry lists weaknesses as well as strengths.
  • Packet Capture Plan BuilderCommand builders answer how to capture; this answers where, why, and what it would mean. Describe the path and the symptom; a 35-rule original registry designs a phased capture plan: ranked points on named boundaries, expected observations, an interpretation matrix with supports and weakens decided before collection, and sync/authorization discipline. It plans captures - it never ingests them.
  • TAC Escalation Packet BuilderDescribe the issue you are about to escalate; a fixed rule set assembles a complete vendor-support packet and a checklist of the artifacts still to collect before opening the case, dropping what you already have. It structures the hand-off; it does not open a case or contact any vendor.
  • Terminal, shell, TTY and console explainerPaste what `tty` printed — /dev/pts/3, /dev/tty2, /dev/ttyS0, /dev/tty, /dev/console, or “not a tty” — and see which layer you are actually looking at, what is holding the other end, and what that implies for signals, job control and what happens when the window closes. Local and offline.

Security & WAF

  • CVSS vector decoderPaste a CVSS v3.1 or v3.0 vector and get the score computed and mapped to a severity, with every metric spelled out. Local and offline; nothing is sent anywhere.
  • OGNL injection decoderPaste an OGNL payload you found in a WAF or application log and read what it was trying to do. Separates a sandbox escape from an execution call, names the advisory family the shape is consistent with, and always states what it did not determine. Decodes only - it never evaluates the payload and holds no templates.
  • Secure Headers AnalyzerPaste an HTTP response and get a graded breakdown of its security headers, cookie flags, and cross-origin policy, checked against OWASP, RFC 6797, CSP Level 3, and RFC 6265bis.
  • SSRF URL classifierPaste a URL and see where it actually points: loopback, a private or link-local range, a cloud metadata endpoint, CGNAT, reserved space, or the public internet. Decimal, octal, and hex IP obfuscation is decoded, dangerous schemes and embedded credentials are flagged, and an SSRF risk level is shown. It never resolves DNS and never sends the request.
  • XML DecoderPaste XML and read its structure: the declaration, the DOCTYPE and any entities, the element tree with namespaces and attributes, plus a security check of the XML attack surface. Nothing is fetched or resolved.

Sertifikalar ve PKI

  • ACME dns-01 TXT computerCompute the TXT record for an ACME dns-01 challenge, from the token and account key.
  • CSR kod çözücüBir PKCS#10 sertifika imzalama isteğini kod çözerek konusunu, açık anahtarını, istenen SAN'ları ve uzantıları ve özniteliklerini okuyun; tümü tarayıcınızda.
  • Let's Encrypt rate-limit plannerPlan certificate issuance for a set of hostnames: group them by registered domain and see how they map onto Let's Encrypt's rate limits.
  • Sertifika yenileme planlayıcısıBir TLS sertifikasının geçerliliğini, CA/Browser Forum'un 47 günlük takvimine uyup uymadığını ve bunun gerektirdiği yenileme sıklığını hesaplayın; tümü çevrimdışı.
  • X.509 Sertifika ÇözücüKonusunu, verenini, geçerlilik penceresini, açık anahtarını ve v3 uzantılarını SHA-256 ve SHA-1 parmak izleriyle okumak için PEM, base64 veya hex bir sertifika yapıştır. Tamamen tarayıcında çalışır.

Tanımlayıcılar

  • UUID Üreteci ve İnceleyici (v4 / v7)Rastgele v4 veya zaman sıralı v7 UUID'ler üret ya da herhangi bir UUID yapıştırarak sürümünü, varyantını ve (v7 için) gömülü oluşturma zaman damgasını oku. Üretme, tarayıcının güvenli rastgelelik kaynağını kullanır. Tamamen tarayıcında çalışır.

Text & utilities

  • Greek alphabet explainerType Greek and get names plus transliteration; type letter names and get glyphs. The full 24-letter table explains where engineers meet each one, from μ micro to Ω ohms.
  • Text DiffCompare two blocks of text and see exactly what changed, line by line, with inline word-level highlighting on edited lines. Optionally ignore whitespace or case. Everything is computed in your browser; your text is never sent anywhere.

TLS ve taşıma

  • Şifre paketi çözücüBir TLS şifre paketini IANA adı, OpenSSL veya GnuTLS adı ya da onaltılık kod noktası olarak girin; anahtar değişimi, kimlik doğrulama, şifre, mod ve MAC bileşenlerine ayırın. Sade dilde bir güvenlik değerlendirmesi ve resmî IANA önerisiyle birlikte gelir. Tamamen tarayıcınızda, gömülü bir IANA kayıt kopyası üzerinde çalışır.

Web & HTTP

  • curl command builderPick any of the 27 protocols curl speaks, fill in protocol-aware fields, and get the exact command with every flag explained and safety warnings surfaced. The inverse of the HTTP request translator: that one reads a command, this one writes it.
  • HTTP request translatorPaste a curl command and get it explained flag by flag, then translated to fetch, a raw HTTP request, HTTPie, and Python requests. Local and offline; the command is decoded in your browser and nothing is sent or run.
  • Regex ToolkitTest, explain, and debug regular expressions with live matches and a backtracking-risk check.
  • Sorting Algorithm StepperPaste a small list of numbers, pick a strategy - bubble, selection, insertion, merge, or quick - and watch the algorithm think: every comparison, every swap, one WHY line per move, with live comparison and write counters that make Big-O growth tangible.
  • URL InspectorDissect any URL into its named parts: scheme, host, port, path, query parameters, and fragment. Decodes percent-escapes and internationalized hosts, and flags credentials and other issues. Runs entirely in your browser.

Suggested usage

Common tasks, and the tools that get them done. Follow the tools in order for each task.

Inspect a token you received

Decode a JSON Web Token to read its claims, then decode any Base64 fields inside it.

  1. JWT Çözücü ve Doğrulayıcı
  2. Base64, Base32, Hex ve yüzde codec'i

Plan an IP subnet

Work out network ranges, masks, and host counts for IPv4, then do the same for IPv6.

  1. CIDR / Alt Ağ Hesaplayıcı
  2. IPv6 Araç Takımı

Work with a TLS certificate

Decode a certificate to see its fields, check a signing request, and plan the renewal date.

  1. X.509 Sertifika Çözücü
  2. CSR kod çözücü
  3. Sertifika yenileme planlayıcısı

Set up sign-in for an app

Understand an OpenID Connect flow, add PKCE for a public client, and add a one-time-password second factor.

  1. OIDC Çözücü
  2. OAuth PKCE Doğrulayıcı ve Challenge
  3. TOTP / HOTP Generator & Validator

Work out which Extreme OS name applies to your switch

Check whether a model carries the new Switch Engine and Fabric Engine names or the original EXOS and VOSS, see the caveats that come with the series, then translate a task between the two command sets.

  1. Extreme Universal switch OS-name mapper
  2. VOSS / EXOS command translator

Make sense of an SPB fabric configuration

Paste an I-SID, a nickname or a role and get the Shortest Path Bridging vocabulary sorted: which backbone VLAN carries the service, what the service actually binds to, and what changes between an edge bridge and a core bridge.

  1. Fabric Connect / SPB explainer

Decide how traffic should reach the service edge

Choose the steering method for a situation and see what it costs, then trace what a specific flow will actually do once that configuration is in place.

  1. Netskope steering-method explainer
  2. Netskope steering decision explainer

Understand what one request meets in an SSE platform

Describe a request and walk the single pass: which services engage, which are pillars and which are cross-cutting, and what a chain of separate appliances would have done instead.

  1. SSE / SASE single-pass architecture explainer

Read a FortiOS config block before you paste it

See the structure as a tree, find out whether any set command is about to replace a list rather than add to it, and check whether the policy it configures can even be reached.

  1. FortiOS CLI config explainer
  2. FortiGate policy match-order explainer

Work out why a FortiGate is not passing that traffic

Check which policy actually matches the packet and whether the rule you expected is even reachable, then build the diagnose debug flow sequence to watch it happen on the device.

  1. FortiGate policy match-order explainer
  2. FortiOS debug flow builder

Understand how two network operating systems differ

See lineage, what each runs on, how state is shared and where the planes divide - and what each of those predicts about behaviour when something fails.

  1. Network operating system comparer

Work out which terminal layer you are actually in

Paste what tty printed and see whether you are on a pseudoterminal, a virtual console or a real serial line - and what that means for signals, job control and what happens when the window closes.

  1. Terminal, shell, TTY and console explainer

Find out why the BIG-IP reset that connection

Paste the F5 Ethernet trailer from a capture taken on the device and read the RST cause, the slot and TMM that handled the packet, and the flow identifiers - plus a warning if the trailer carries TLS session secrets.

  1. F5 Ethernet trailer decoder

Read an F5OS tenant configuration and check its sizing

Paste the tenant block to see its lifecycle state, its platform and whether the memory allocation meets F5's published minimum, then decode the RESTCONF path you would use to change it.

  1. F5OS tenant config explainer
  2. F5OS RESTCONF path explainer

Decode a BIG-IP object path, then its statistics

Paste an iControl REST URL to see the module, collection and tilde-encoded object with its tmsh equivalent; flatten the object's stats response into readable lines; then use the F5OS explainer for the platform layer underneath.

  1. iControl REST path explainer
  2. iControl REST stats decoder
  3. F5OS RESTCONF path explainer

Read an F5OS path, then the declaration behind it

Decode an F5OS RESTCONF path segment by segment to see which module, tenant and node it addresses, then read the AS3 declaration that configures the service running inside that tenant.

  1. F5OS RESTCONF path explainer
  2. AS3 declaration explainer

Read a DNS answer

Make sense of the output from dig, and from nslookup, line by line.

  1. dig output explainer
  2. nslookup output explainer

Verify data integrity

Compute a hash of some data, or an HMAC when a shared secret is involved.

  1. Hash Üreteci (SHA-1/256/384/512)
  2. HMAC Üreteci (SHA-256/384/512)

Debug a SAML single sign-on

Decode a SAML response to read its assertions and conditions, then inspect the X.509 certificate that signed it.

  1. SAML Decoder
  2. X.509 Sertifika Çözücü

Match a token to its signing key

Read a JWKS key set to see the keys it publishes, then decode a JSON Web Token to find the key that signed it.

  1. JWKS explainer + key matcher
  2. JWT Çözücü ve Doğrulayıcı

Understand a TLS connection

Decode the negotiated cipher suite, inspect the server certificate, and review the response security headers.

  1. Şifre paketi çözücü
  2. X.509 Sertifika Çözücü
  3. Secure Headers Analyzer

Harden a web response

Audit a site's HTTP security headers, then inspect the URL those headers protect.

  1. Secure Headers Analyzer
  2. URL Inspector

Assess a URL for SSRF risk

Classify whether a URL could reach an internal target, then inspect its parts in detail.

  1. SSRF URL classifier
  2. URL Inspector

Score a vulnerability

Decode a CVSS vector string into its metrics to understand how severe a finding really is.

  1. CVSS vector decoder

Convert and tidy a config

Convert a config between JSON and YAML, then format the result so it is easy to read.

  1. JSON ↔ YAML Converter
  2. JSON Formatter & Validator

Compare two files

Normalize two JSON blobs with the formatter, then diff them to see exactly what changed.

  1. JSON Formatter & Validator
  2. Text Diff

Reproduce an HTTP request

Break a URL into its parts, then translate the call into curl, fetch, or another client.

  1. URL Inspector
  2. HTTP request translator

Identify an unknown hash

Look up a digest against known values, then recompute a hash to confirm the match.

  1. Hash Preimage Finder
  2. Hash Üreteci (SHA-1/256/384/512)

Read a syslog line

Decode a syslog PRI value into its facility and severity.

  1. Syslog PRI decoder + encoder

Build and test a regex

Write a regular expression and test it against sample text as you go.

  1. Regex Toolkit

Manual

Running a tool

Open any tool, paste or type your input, and the result appears immediately. There is no sign-in and nothing to install. Most tools include an Example button that fills in sample input, and a Clear button that resets the fields. Below each tool you will find related Learn articles that explain the underlying concept.

Learning as you go

Two learning aids sit alongside the tools. The Glossary defines the acronyms, terms, and jargon the tools and articles use, from protocol names to attack backronyms, each with a short definition and a fuller explanation. And in the Learn articles and tool documentation, the first mention of a term carries a subtle dashed underline: hover or tap it for a quick definition without leaving the page, with a link to the full glossary entry. If you find the underlines distracting, turn them off under Settings, in the Reading section.

Beyond the tools

The site is more than the calculators. The Learn library holds articles that explain the concepts the tools operate on. The Vendors pages gather the vendor-specific tools and reference material for platforms like F5, along with the corporate history behind the names. And the Certifications area offers study guides and reading paths for people working toward a certification. All of it is reachable from the header.

Privacy and themes

Tools run entirely in your browser, so the data you enter is not transmitted anywhere by default. Your theme choice is remembered on your device only. Your language is carried in the page address rather than stored. The Privacy page explains exactly what is and is not kept.

The API

Each tool's logic is also documented as an API, with a machine-readable specification you can read on the API page. The API is documented for reference; whether requests are served depends on the site's current configuration, which the API page states plainly.

Languages

The interface is available in several languages; switch using the language control in the header. English and Brazilian Portuguese are authored directly. Where a phrase has not yet been translated for a given language, the English text is shown for that phrase so nothing is ever missing.

Offline use

The site is a progressive web app. Once you have visited it, your browser can keep it available, and because the tools compute locally they keep working without a connection. You can add the site to your home screen or desktop like an app.

Source and license

The project is open source. The code is licensed under Apache 2.0 and the written content under CC BY 4.0. You can read the source, report an issue, or suggest a tool from the repository, which is linked in the footer and on the License page.

Browse all tools →Explore the Learn library →