Network Tools
Pick a tool from the left, or browse by category below.
Core Connectivity & Reachability
-
Ping
Send ICMP echo requests and report RTT and packet loss.
-
Load site (headless)
Load a URL in headless Chromium via Playwright and stream every fetched resource with size and timing.
-
Traceroute
Trace the path packets take to a destination host, hop by hop.
-
MTR
Continuous traceroute with per-hop loss and RTT statistics.
-
Fping
Ping many hosts in parallel and report which are alive.
Packet Generation & Testing
-
Curl
Send any HTTP method with custom headers and body; inspect the full response.
-
Wget
Fetch a URL over HTTP/HTTPS, following redirects.
-
Netcat (nc)
Check TCP port reachability; optionally send a payload and read the reply.
-
OpenSSL s_client
Inspect a server's TLS handshake: version, cipher, ALPN, full cert chain.
-
Httprobe
Probe a list of hostnames (max 16) for HTTP and HTTPS availability.
-
Apache Bench (ab) login
HTTP benchmark with N requests at concurrency C.
-
Wrk login
Multi-threaded HTTP benchmarking tool.
-
Httperf login
HTTP load generator with configurable request rate.
-
Siege login
HTTP load tester with concurrent virtual users.
-
Iperf / Iperf3 login
TCP/UDP throughput, jitter, and loss measurement.
-
Netperf login
TCP/UDP throughput and request/response latency benchmarks.
-
Socat login
Bidirectional data relay between any two endpoints.
DNS & Name Resolution
Packet Capture & Analysis
-
Tcpdump login
Capture and decode live network packets on an interface.
-
Tshark login
Wireshark's CLI packet capture and protocol decoder.
-
Dumpcap login
Wireshark's lightweight packet capture daemon.
-
Ngrep login
Match regular expressions against live packet payloads.
-
Netsniff-ng login
High-performance zero-copy packet capture and replay.
Port & Service Scanning
-
Nmap (TCP-connect)
Polite TCP-connect port scan of a single public host (max 128 ports) with optional banner grab.
-
Masscan login
Asynchronous TCP scanner capable of millions of packets per second.
-
ZMap login
Single-packet internet-wide network scanner.
-
RustScan login
Fast port scanner that pipes results into Nmap.
-
Naabu login
ProjectDiscovery's fast SYN/CONNECT port scanner.
-
Unicornscan login
Asynchronous stateless TCP/UDP scanner.
IP & Subnet Utilities
Routing & BGP
-
Looking Glass (BGP)
Look up the announcing ASN, covering prefix, country, and AS neighbours for a public IP via RIPEstat.
-
Bgpdump login
Parse MRT-format BGP routing table dumps from route collectors.
-
Bgpq3 login
Generate router filter configs from IRR data.
-
Bgpq4 login
Modern successor to bgpq3 — emits router prefix-list / AS-path filters.
TLS / SSL Auditing
-
TLS Quick Scan
Probe which TLS protocol versions a server accepts and show the cipher each negotiates.
-
TLS Deep Scan
Full chain validation, OCSP stapling, SCT count, and per-TLS-version cipher matrix.
-
testssl.sh login
In-depth bash-based TLS audit suite.
-
Nikto login
Web server vulnerability scanner.
Email / SMTP Diagnostics
-
checkdmarc
Consolidated MX, SPF, DMARC, and DKIM-selector lookup for an email domain.
-
SMTP Banner Probe
Connect to an SMTP server, capture its banner + EHLO capabilities, and test STARTTLS.
-
Sendmail login
Server-side mail submission and queue interface.
-
Mailq login
Show the local mail queue.
-
Postqueue login
Postfix mail-queue inspection and flush.
-
mail / mutt login
Send mail from the command line.
-
Swaks (SMTP) login
Send a test email through an SMTP server.
NTP / Time Sync
-
sntp
Query a public NTP server: stratum, offset, round-trip, ref-id, root delay/dispersion. Does not change the system clock.
-
Ntpq login
Standard query/control interface for ntpd.
-
Chronyc login
Chrony's runtime control and statistics CLI.
-
Ntpdate login
One-shot NTP client that sets the system clock.
SSH
-
ssh-keyscan
Fetch a server's SSH version banner and host public keys (Ed25519, ECDSA, RSA) with fingerprints. No authentication.
-
SSH client login
Interactive Secure Shell login to a remote host.
-
SFTP login
Interactive file transfer over SSH.
-
SCP login
Copy files over SSH.
-
ssh-copy-id login
Install a public key into ~/.ssh/authorized_keys on a remote host.
CDN & DNS Propagation
HTTP/2 & WebSocket
-
nghttp (HTTP/2 probe)
Negotiate HTTP/2 via ALPN and decode the server's SETTINGS frame (window size, max streams, etc.).
-
websocat (WebSocket probe)
Send a WebSocket Upgrade handshake and verify the Sec-WebSocket-Accept response, subprotocols, and extensions.
-
h2load login
HTTP/2 load benchmarking tool from nghttp2.