THE SUDOR TOOLKIT

Free cybersecurity
tools.

38 utilities for DNS lookups, email security, CVE research, encoding, and network calculations.

No account needed Free to use No active scans
38 tools
PUBLIC DNS

DNS record lookup

Inspect the public DNS records behind a domain.

Domains & DNS
PUBLIC DNS

IPv6 lookup

Find a domain’s published AAAA records.

Domains & DNS
PUBLIC DNS

Nameserver lookup

Find the authoritative nameservers for a domain.

Domains & DNS
PUBLIC DNS

CNAME lookup

Follow a hostname’s published alias record.

Domains & DNS
PUBLIC DNS

TXT record lookup

Read verification and policy records.

Domains & DNS
PUBLIC DNS

SOA lookup

Inspect zone authority and refresh settings.

Domains & DNS
PUBLIC DNS

CAA lookup

See which certificate authorities a domain permits.

Domains & DNS
PUBLIC DNS

Mail server lookup

Find mail exchangers and their priorities.

Email security
PUBLIC DNS

SPF record lookup

Read the domain’s published sender policy.

Email security
PUBLIC DNS

DMARC record lookup

Read enforcement and reporting policy.

Email security
PUBLIC DNS

DKIM record lookup

Look up a known DKIM selector’s public key.

Email security
IN YOUR BROWSER

Email header inspector

Extract routing and authentication claims from pasted headers.

Email security
PUBLIC DATA

CVE lookup

Read a published vulnerability record by its CVE identifier.

Web & research
IN YOUR BROWSER

Search query builder

Create scoped Google queries for public documentation and pages.

Web & research
IN YOUR BROWSER

Certificate search

Build a certificate-transparency search for domain research.

Web & research
IN YOUR BROWSER

URL inspector

Break down a URL, its parameters and encoded components.

Web & research
IN YOUR BROWSER

Security header inspector

Review security headers copied from an HTTP response.

Web & research
IN YOUR BROWSER

Robots.txt reader

Turn pasted crawler directives into structured data.

Web & research
IN YOUR BROWSER

SHA-256 generator

Calculate a SHA-256 digest locally in your browser.

Cryptography
IN YOUR BROWSER

SHA-384 generator

Calculate a SHA-384 digest without uploading text.

Cryptography
IN YOUR BROWSER

SHA-512 generator

Generate a SHA-512 digest for a text input.

Cryptography
IN YOUR BROWSER

Password generator

Create random passwords using browser cryptography.

Cryptography
IN YOUR BROWSER

UUID generator

Generate cryptographically random version 4 identifiers.

Cryptography
IN YOUR BROWSER

JWT decoder

Inspect a JWT header and payload without sending the token.

Encoding & data
IN YOUR BROWSER

Base64 encoder

Encode Unicode text as Base64.

Encoding & data
IN YOUR BROWSER

Base64 decoder

Decode Base64 into UTF-8 text.

Encoding & data
IN YOUR BROWSER

URL encoder

Percent-encode text for URL components.

Encoding & data
IN YOUR BROWSER

URL decoder

Decode percent-encoded URL components.

Encoding & data
IN YOUR BROWSER

Text to hex

Convert UTF-8 text into hexadecimal bytes.

Encoding & data
IN YOUR BROWSER

Hex to text

Decode hexadecimal bytes into UTF-8 text.

Encoding & data
IN YOUR BROWSER

JSON formatter

Validate and pretty-print JSON documents.

Encoding & data
IN YOUR BROWSER

JSON minifier

Validate JSON and remove unnecessary whitespace.

Encoding & data
IN YOUR BROWSER

Timestamp converter

Convert Unix seconds, milliseconds or ISO dates.

Encoding & data
IN YOUR BROWSER

IOC defanger

Make links and addresses less likely to open accidentally.

Web & research
IN YOUR BROWSER

IOC refanger

Restore defanged indicators as plain text.

Web & research
IN YOUR BROWSER

IPv4 subnet calculator

Calculate network, broadcast, mask and address ranges.

Network
IN YOUR BROWSER

IPv4 converter

Convert IPv4 addresses to binary, decimal and hex.

Network
PUBLIC DNS

Reverse DNS lookup

Query the PTR record of an IPv4 address.

Network

Local tools process input on your device. Public lookups send only the query to the named provider. Each tool explains where your data goes.

Read our privacy notes
GET THERE FIRST

A clearer view.
An earlier advantage.

sudor.io is in development. Leave your details for early-access updates.

Your details are sent to our Google-hosted waitlist service.