System Administration, Network Topology & Mail Diagnostics Suite
Built for System Administrators, Network Engineers, DevOps teams, and IT Security analysts. Diagnose email deliverability with live DNS-over-HTTPS lookups, map cloud and firewall topologies in DiagramCraft, slice VLSM subnets, validate PKCS#10 SSL CSRs, and audit Linux permissions — 100% locally in your browser with zero data leakage.
Zero-Knowledge File Encryptor & Decryptor (AES-256-GCM)
Encrypt and decrypt sensitive files (PDFs, tax returns, ZIPs, photos) 100% locally in your browser RAM with AES-GCM-256, PBKDF2 (600,000 rounds), SHA-256 integrity checks, and optional 2FA Keyfiles.
Zero-Knowledge Password Vault
Store passwords, payment cards, notes, and identities encrypted in your browser RAM with AES-GCM-256 and PBKDF2. Zero cloud storage or tracking.
SHA Hash Generator & UUID Creator
Generate SHA-1/256/384/512 digests from any text and mint bulk UUID v4 identifiers using your browser's Web Crypto API.
JWT Encoder, Decoder & Debugger
Decode, verify, inspect, and generate JSON Web Tokens (JWT) in real time. Validate expiration timestamps, inspect payload claims, and test HMAC signatures locally.
Email & Message Header Analyzer
Trace RFC 5322 email delivery hops, calculate MTA transit latency delays, verify SPF, DKIM & DMARC authentication, and spot spoofing indicators.
SSL CSR Decoder & Validator
Decode and validate PKCS#10 Certificate Signing Requests (CSR). Verify Common Name, SAN domains, RSA/ECDSA key bit length, and signature security.
Cron Expression Generator & Explainer
Generate, validate, and translate crontab expressions into plain English. Interactive visual builder, next execution schedule preview, and presets.
Subnet & CIDR IP Calculator
Calculate IPv4/IPv6 subnets, network/broadcast addresses, usable host ranges, and binary netmasks. Slice subnets with VLSM.
cURL to Code Multi-Language Converter
Convert cURL command lines into JavaScript (Fetch, Axios), Python (Requests, HTTPX), Go, PHP, and Rust code instantly.
User-Agent Parser & Device Inspector
Parse HTTP User-Agent strings, detect browser name and version, rendering engine, operating system, device form factor, CPU architecture, and web crawler bots.
JSON to YAML & YAML to JSON Converter
Convert between JSON and YAML bidirectionally in your browser. Features live syntax validation, custom 2/4-space indentation, and DevOps presets for Kubernetes and Docker.
Chmod Permissions Calculator & Command Builder
Interactive Linux chmod calculator. Convert between octal numbers (755, 644, 600) and symbolic strings (-rwxr-xr-x) with SUID, SGID, Sticky bit, and security presets.
DiagramCraft — Free Online Technical Diagram & Architecture Maker
Free online technical diagram maker and system design whiteboard without login or software installation. Create cloud architectures, network topologies, and flowcharts with 15 vector stencils (Routers, Switches, Firewalls, Load Balancers, Proxies, 3D Databases), 24px Snap to Grid, 1-click starter templates, and instant PNG export. 100% private in-browser tool.
SysAdmin & IT Architecture & Usage Guide
Zero-Knowledge Diagnostics for Production Infrastructure
System administrators routinely inspect sensitive production artifacts: internal message headers, private IPv4/IPv6 subnet allocations, SSL Certificate Signing Requests (CSRs), Kubernetes YAML manifests, and firewall architecture diagrams. Uploading these to third-party servers creates unnecessary compliance and security exposure.
KitWharf's SysAdmin & IT suite executes entirely inside your browser memory using WebCrypto, Canvas, and DNS-over-HTTPS, ensuring your infrastructure data stays under your control.
Related Guides & Tutorials for SysAdmin & IT
How to Encrypt Files Before Uploading to Google Drive, Dropbox & Email (AES-256-GCM Guide)
Learn how to password-protect and encrypt sensitive PDFs, tax returns, contracts, and ZIP archives with AES-256-GCM and PBKDF2 in your browser before uploading to Google Drive, OneDrive, Dropbox, or email.
SHA-256, SHA-512, and UUIDs Explained: How Cryptographic Hashes and Identifiers Work
Learn how cryptographic hash functions like SHA-256 and SHA-512 work, why they are one-way, how checksums verify data integrity, and what makes UUID v4 statistically collision-proof.
JSON Web Tokens (JWT) Explained: How They Work, How to Decode Them, and Security Best Practices
Understand the inner mechanics of JSON Web Tokens (JWT). Learn how Header, Payload, and Signature connect, decode Base64URL claims, and avoid critical security vulnerabilities like the alg: none exploit.
How to Read Email Headers, Trace Delivery Hops, and Verify SPF, DKIM & DMARC
A complete guide for sysadmins and developers on analyzing RFC 5322 email headers. Learn how to trace MTA delivery hops, diagnose mail latency bottlenecks, and verify SPF, DKIM, and DMARC authentication.
Frequently Asked Questions
100% In-Browser Privacy
All sysadmin & it operate strictly inside your device memory. No files, code snippets, tokens, or personal inputs are ever sent to remote servers.