{ "success": true, "status": 200, "meta": { "api_version": "1.0.0", "author": "BAKCHOD Network", "author_url": "https://bakchod.net", "frontend_url": "https://tools.bakchod.net", "api_host": "tools-api.bakchod.net", "docs": "https://tools.bakchod.net/docs", "cached": false, "cache_source": "LIVE_EXECUTION", "timestamp": "2026-09-30T12:45:31Z", "execution_time_ms": 8.29 }, "data": { "platform": "BcToolBox Modular Tools API", "version": "2.5.0", "architecture": "OpenResty LuaJIT + Redis 8 + PHP-FPM", "author": "BAKCHOD Network", "author_url": "https://bakchod.net", "frontend_url": "https://tools.bakchod.net", "available_tools": [ { "slug": "bgp-lookup", "name": "BGP Route & Autonomous System (ASN) Intelligence", "description": "Inspects Autonomous System Numbers (ASN), announced IP prefixes, BGP peers, upstream transit providers, and registry allocations", "category": "Network & Security", "actions": [ "lookup" ], "cache_ttl": 86400, "param_key": "asn", "default_val": "AS13335" }, { "slug": "cdn-detector", "name": "CDN, Cloud WAF & Edge Provider Detector", "description": "Identifies Content Delivery Networks (Cloudflare, Akamai, Fastly, CloudFront, Imperva, BunnyCDN) via DNS CNAMEs, IP ranges, and edge HTTP headers", "category": "Web Security & Standards", "actions": [ "detect" ], "cache_ttl": 1800, "param_key": "domain", "default_val": "cloudflare.com" }, { "slug": "cert-transparency", "name": "Certificate Transparency (CT) & Subdomain Discovery", "description": "Queries public Certificate Transparency (CT) logs to discover issued SSL certificates, SAN hostnames, and historical subdomains for any domain", "category": "Domain & DNS", "actions": [ "search" ], "cache_ttl": 3600, "param_key": "domain", "default_val": "github.com" }, { "slug": "cidr-splitter", "name": "CIDR Subnet Splitter & VLSM Planner", "description": "Subdivides an IPv4 CIDR block into smaller subnets with equal allocation, host capacity, and boundary addresses", "category": "Network & Security", "actions": [ "split" ], "cache_ttl": 86400, "param_key": "cidr", "default_val": "10.0.0.0/24" }, { "slug": "dkim-checker", "name": "DKIM Selector & Public Key Inspector", "description": "Validates DomainKeys Identified Mail (DKIM) TXT records, extracts public key RSA/Ed25519 bits, and verifies key length", "category": "Email Security & Deliverability", "actions": [ "validate" ], "cache_ttl": 300, "param_key": "domain", "default_val": "google.com" }, { "slug": "dmarc-checker", "name": "DMARC Policy & Alignment Inspector", "description": "Inspects _dmarc DNS TXT records, parses enforcement policies (none, quarantine, reject), percentage rules, and reporting URIs (rua/ruf)", "category": "Email Security & Deliverability", "actions": [ "validate" ], "cache_ttl": 300, "param_key": "domain", "default_val": "google.com" }, { "slug": "dns-lookup", "name": "DNS Records & Propagation", "description": "Comprehensive DNS record inspection (A, AAAA, MX, TXT, NS, CNAME, SOA, PTR, ANY) and DoH multi-resolver verification", "category": "Domain & DNS", "actions": [ "lookup", "propagation" ], "cache_ttl": 300, "param_key": "domain", "default_val": "google.com" }, { "slug": "domain-availability", "name": "Domain Availability Checker", "description": "Ultra-fast domain availability probing using authoritative WHOIS heuristics and DNS SOA checks", "category": "Domain & DNS", "actions": [ "check", "bulk" ], "cache_ttl": 60, "param_key": "domain", "default_val": "mygreatbrand.com" }, { "slug": "email-validator", "name": "Email Address Deliverability & MX Validator", "description": "Validates RFC syntax, verifies domain MX mail exchange records, detects disposable/burner providers, and flags typo domains", "category": "Domain & Email", "actions": [ "validate" ], "cache_ttl": 3600, "param_key": "email", "default_val": "test@gmail.com" }, { "slug": "hash-generator", "name": "Zero-Knowledge Multi-Hash Generator", "description": "Calculates SHA-256, SHA-512, and SHA-1 directly in your browser using native WebCrypto API. Plaintext is never transmitted over any network", "category": "Cryptography & Privacy (Client-Side)", "actions": [ "hash" ], "cache_ttl": 86400, "param_key": "text", "default_val": "Hello BAKCHOD Network" }, { "slug": "http-headers", "name": "HTTP Headers & Security Analyzer", "description": "Analyzes HTTP response headers, redirects, and evaluates OWASP security headers (HSTS, CSP, X-Frame, CORS)", "category": "Network & Security", "actions": [ "analyze" ], "cache_ttl": 600, "param_key": "url", "default_val": "https://github.com" }, { "slug": "ip-blacklist-checker", "name": "IP Blacklist & DNSBL Spam Reputation Checker", "description": "Multi-engine reputation scanner probing major global DNSBL and RBL blacklists (Spamhaus, Barracuda, Sorbs, SpamCop, UCEPROTECT)", "category": "Email Security & Deliverability", "actions": [ "check" ], "cache_ttl": 600, "param_key": "ip", "default_val": "1.1.1.1" }, { "slug": "ip-lookup", "name": "IP Geolocation & Threat Intelligence", "description": "Inspect IP metadata, country, city, ASN, ISP, Bogon / Private classification and Reverse DNS", "category": "Network & Security", "actions": [ "lookup", "asn", "rdns", "classify" ], "cache_ttl": 86400, "param_key": "ip", "default_val": "1.1.1.1" }, { "slug": "ipv6-calculator", "name": "IPv6 Subnet & Address Expander / Compressor", "description": "Expands compressed IPv6 addresses, compresses full addresses (RFC 5952), calculates prefix ranges, reverse DNS arpa zones, and network boundaries", "category": "Network & Infrastructure", "actions": [ "calculate" ], "cache_ttl": 86400, "param_key": "ipv6", "default_val": "2001:db8::1/64" }, { "slug": "jwt-debugger", "name": "Zero-Knowledge JWT Token Inspector", "description": "Decodes JSON Web Tokens (JWT) locally inside your browser. Inspect headers, payload claims, expiration timestamps without server exposure", "category": "Cryptography & Privacy (Client-Side)", "actions": [ "decode" ], "cache_ttl": 0, "param_key": "jwt", "default_val": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkJha2Nob2QgTmV0d29yayIsImlhdCI6MTUxNjIzOTAyMn0.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c" }, { "slug": "mac-lookup", "name": "MAC Address OUI & Vendor Lookup", "description": "Decodes MAC address prefix, identifies hardware vendor/manufacturer, IEEE registry, and unicast/multicast attributes", "category": "Network & Security", "actions": [ "lookup" ], "cache_ttl": 86400, "param_key": "mac", "default_val": "00:0C:29:12:34:56" }, { "slug": "mail-diagnose", "name": "Comprehensive Mail Server & Deliverability Diagnostic", "description": "Unified email ecosystem audit: verifies MX host availability, Reverse DNS (PTR), SPF policy, DMARC enforcement, and mail relay hygiene", "category": "Email Security & Deliverability", "actions": [ "diagnose" ], "cache_ttl": 300, "param_key": "domain", "default_val": "google.com" }, { "slug": "password-generator", "name": "Cryptographic Password Generator", "description": "Zero-Knowledge client-side generator creating high-entropy passwords with custom character sets and Shannon entropy scoring", "category": "Cryptography & Privacy (Client-Side)", "actions": [ "generate" ], "cache_ttl": 0, "param_key": "length", "default_val": "24" }, { "slug": "ptr-lookup", "name": "Reverse DNS (rDNS) & PTR Record Validator", "description": "Performs RFC-compliant IPv4 (.in-addr.arpa) and IPv6 (.ip6.arpa) reverse DNS queries, validates Forward-Confirmed reverse DNS (FCrDNS), and checks mail relay trust", "category": "Network & Infrastructure", "actions": [ "lookup" ], "cache_ttl": 300, "param_key": "ip", "default_val": "8.8.8.8" }, { "slug": "qr-generator", "name": "QR Code Generator & Data Matrix", "description": "Generates scannable QR codes for URLs, WiFi credentials, plain text, and vCards in SVG/PNG format", "category": "Generators & Media", "actions": [ "generate" ], "cache_ttl": 86400, "param_key": "text", "default_val": "https://tools.bakchod.net" }, { "slug": "secure-string-generator", "name": "CSPRNG Secure Secret & GUID Generator", "description": "Generates cryptographically random hex secrets, base64 strings, and UUID v4 tokens directly in browser via window.crypto CSPRNG", "category": "Cryptography & Privacy (Client-Side)", "actions": [ "generate" ], "cache_ttl": 0, "param_key": "bytes", "default_val": "32" }, { "slug": "security-txt-checker", "name": "security.txt Vulnerability Disclosure Policy Validator", "description": "Inspects RFC 9116 security.txt files at /.well-known/security.txt, validates Contact URIs, Expiration dates, Encryption keys, and Policy directives", "category": "Web Security & Standards", "actions": [ "validate" ], "cache_ttl": 3600, "param_key": "domain", "default_val": "github.com" }, { "slug": "spf-checker", "name": "SPF Record Validator & DNS Lookup Counter", "description": "Inspects Sender Policy Framework (SPF) records, validates syntax, parses mechanisms/modifiers, and verifies the RFC 7208 10-DNS-lookup limit", "category": "Email Security & Deliverability", "actions": [ "validate" ], "cache_ttl": 300, "param_key": "domain", "default_val": "google.com" }, { "slug": "ssl-checker", "name": "SSL / TLS Certificate Inspector", "description": "Inspect SSL/TLS certificate validity, issuer, SANs, cipher suite, expiry countdown, and chain health", "category": "Network & Security", "actions": [ "inspect" ], "cache_ttl": 3600, "param_key": "domain", "default_val": "cloudflare.com" }, { "slug": "subnet-calculator", "name": "IPv4 Subnet & CIDR Calculator", "description": "Calculates network address, broadcast, netmask, wildcard, usable IP range, total hosts, and binary masks for any CIDR", "category": "Network & Security", "actions": [ "calculate" ], "cache_ttl": 86400, "param_key": "cidr", "default_val": "192.168.1.0/24" }, { "slug": "svg-placeholder", "name": "Dynamic SVG Placeholder & Image Mock Generator", "description": "Generates clean, scalable SVG placeholder images with customizable dimensions, colors, text, and font sizes", "category": "Generators & Media", "actions": [ "generate" ], "cache_ttl": 86400, "param_key": "dimensions", "default_val": "600x400" }, { "slug": "user-agent-parser", "name": "User-Agent & Device Intelligence", "description": "Parses User-Agent strings to extract browser name, version, rendering engine, OS, device type, architecture, and bot classification", "category": "Client & Device", "actions": [ "parse" ], "cache_ttl": 86400, "param_key": "ua", "default_val": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" }, { "slug": "whois", "name": "Universal WHOIS & RDAP", "description": "Port 43 WHOIS server querying with automatic IANA TLD discovery for all 1,500+ TLDs and RFC 7480 RDAP fallback", "category": "Domain & DNS", "actions": [ "query", "raw", "rdap" ], "cache_ttl": 3600, "param_key": "domain", "default_val": "github.com" } ] } }