ZeroTrace OSINT
CIDR Tools
Network calculator, range expander, mask preview, and RFC1918 / CGNAT / loopback / bogon classification.
A small but heavily-used utility category. The CIDR tools normalise, expand, and classify IP networks, useful as the first step before any bulk-paste run against the network tools.
Three tools live here:
- CIDR Calculator, facts about a single CIDR.
- IP Range Expander, flatten a CIDR into individual IPs.
- Mask preview, visualise the bit boundaries of a netmask.
CIDR Calculator
Input a CIDR block. The tool returns:
| Field | Example |
|---|---|
| Network address | 192.168.1.0 |
| Broadcast address | 192.168.1.255 |
| Subnet mask | 255.255.255.0 |
| Wildcard mask | 0.0.0.255 |
| Total addresses | 256 |
| Usable host count | 254 (excludes network + broadcast) |
| Reverse-DNS arpa zone | 1.168.192.in-addr.arpa |
| Binary mask preview | 11111111.11111111.11111111.00000000 |
| Classification | One of: public, RFC1918 private, CGNAT, loopback, link-local, multicast, broadcast, bogon |
| Supernet (/N-1) | The next-larger containing network |
| Immediate subnets (/N+1) | The two subnets one bit deeper |
The classification chip is the most immediately useful field, it tells you whether the CIDR is something you care about (public address space) or something you do not (private, link-local, loopback, multicast).
IP Range Expander
Input a CIDR block (or a start-end range). The tool returns a flat list of every IP in the range, with optional filters:
- Drop network and broadcast addresses.
- IPv4 only / IPv6 only.
- Limit count (caps very large ranges to a configurable maximum).
The expanded list exports as:
- Plain text, one IP per line.
- CSV.
- Nmap target file (
.nmap). - Hosts file fragment.
This is the input you feed into a bulk-paste run against IP geolocation, reverse DNS, or IP reputation.
Be reasonable about what you expand. A /24 is 256 IPs, fine. A /16 is 65,536 IPs, bulk paste will handle it but the rate limits on public APIs will pace you. A /8 is 16.7 million IPs, almost certainly the wrong tool for what you actually want.
Per-IP rDNS pass
After expanding a range, you can optionally run per-IP reverse DNS in parallel (with bounded concurrency). This is the "interesting hosts inside an unknown range" pattern, most IPs return no PTR, the ones that do tell you what the operator wanted to publish.
Grouped /24 view
For larger expansions, the tool offers a grouped by /24 view that shows one row per /24 inside the original range, with the count of "interesting" IPs (those with a PTR or other signal). Helpful for narrowing where to actually look.
Pivots
| Click on... | Pivot to |
|---|---|
| Any expanded IP | All the IP-targeted tools |
| Supernet | CIDR calculator (recursive) |
| Subnet | CIDR calculator (recursive) |
| Reverse-DNS arpa zone | DNS lookup with PTR filter |
Bulk CIDR
Bulk paste accepts multiple CIDRs and returns the calculator output for each in an aggregate table, useful when you have a stack of network blocks to classify quickly.
Sources
- All CIDR math runs locally. No external sources are queried.
- Per-IP rDNS pass uses the system DNS resolver.