Utilities I use every day. They run right in your browser — nothing is sent to a server. Below are server diagnostic scripts you can run with a single line.
An address with a prefix or a mask: 10.0.0.37/22, 192.168.1.10 255.255.255.0.
Passwords are generated in your browser with the cryptographic crypto.getRandomValues and never leave it.
Records are fetched via Cloudflare's DNS-over-HTTPS — the domain only goes to their DNS resolver. Handy when investigating phishing and sender spoofing.
Base64, URL, HTML entities, hex and JWT decoding — all local. The JWT signature is not verified.
← encode, → decode
For text or a file. Files are hashed in your browser and never uploaded — handy for verifying a downloaded image checksum.
Seconds or milliseconds to a date and back. Now:
Proven Linux server diagnostic scripts I used for years in hosting support. They run without being saved to disk. Always check what third-party code does before running it as root — the “Code” link opens the source.
Calculates PSS and SWAP PSS for every process and shows how much memory each user and application really takes. A detailed report is saved to /tmp/ram.csv.
curl -sSL https://solo10010.github.io/scripts/measure.py | sudo python3 -
Accurate per-process memory report that accounts for shared pages. Useful for sizing pm.max_children in PHP-FPM or web server worker limits.
Arguments: -p PID · -s · -t · -w N · -S
curl -sSL https://solo10010.github.io/scripts/ps_mem.py | sudo python3 -
Reports the largest directories and files, deleted-but-still-open files and old files. Run it in any directory of the filesystem you need to check.
Arguments: --help · -l N · -t · -o · -d · -m · -u
curl -sSL https://solo10010.github.io/scripts/topdiskconsumer.sh | bash
Checks MySQL/MariaDB statistics and suggests which buffer, cache and connection settings to change. A good starting point before manual tuning.
curl -sSL https://solo10010.github.io/scripts/tuning-mysql.sh | bash
Checks a Linux configuration for typical weak spots and changes nothing on the system. Suitable for cron runs to catch configuration drift.
curl -sSL https://solo10010.github.io/scripts/lbsa.sh | sudo bash
Looks for misconfigured SUID/SGID binaries, capabilities and sudo rules that allow privilege escalation. For CTFs and pentests of your own systems or with the owner’s permission.
curl -sSL https://solo10010.github.io/scripts/gtfonow.py | python3 -
A large set of privilege escalation checks for Linux, Unix and macOS. Downloaded from the official project releases.
curl -L https://github.com/peass-ng/PEASS-ng/releases/latest/download/linpeas.sh | sh