ZeroTrace OSINT
CIDR Tools
Network calculator, range expander, mask preview, and RFC1918 / CGNAT / loopback / bogon classification.
A small but heavily-used utility category. The CIDR tools normalise, expand, and classify IP networks — useful as the first step before any bulk-paste run against the network tools.
Three tools live here:
- CIDR Calculator — facts about a single CIDR.
- IP Range Expander — flatten a CIDR into individual IPs.
- Mask preview — visualise the bit boundaries of a netmask.
CIDR Calculator
Input a CIDR block. The tool returns:
| Field | Example |
|---|---|
| Network address | 192.168.1.0 |
| Broadcast address | 192.168.1.255 |
| Subnet mask | 255.255.255.0 |
| Wildcard mask | 0.0.0.255 |
| Total addresses | 256 |
| Usable host count | 254 (excludes network + broadcast) |
| Reverse-DNS arpa zone | 1.168.192.in-addr.arpa |
| Binary mask preview | 11111111.11111111.11111111.00000000 |
| Classification | One of: public, RFC1918 private, CGNAT, loopback, link-local, multicast, broadcast, bogon |
| Supernet (/N-1) | The next-larger containing network |
| Immediate subnets (/N+1) | The two subnets one bit deeper |
The classification chip is the most immediately useful field — it tells you whether the CIDR is something you care about (public address space) or something you do not (private, link-local, loopback, multicast).
IP Range Expander
Input a CIDR block (or a start-end range). The tool returns a flat list of every IP in the range, with optional filters:
- Drop network and broadcast addresses.
- IPv4 only / IPv6 only.
- Limit count (caps very large ranges to a configurable maximum).
The expanded list exports as:
- Plain text, one IP per line.
- CSV.
- Nmap target file (
.nmap). - Hosts file fragment.
This is the input you feed into a bulk-paste run against IP geolocation, reverse DNS, or IP reputation.
Be reasonable about what you expand. A /24 is 256 IPs — fine. A /16 is 65,536 IPs — bulk paste will handle it but the rate limits on public APIs will pace you. A /8 is 16.7 million IPs — almost certainly the wrong tool for what you actually want.
Per-IP rDNS pass
After expanding a range, you can optionally run per-IP reverse DNS in parallel (with bounded concurrency). This is the "interesting hosts inside an unknown range" pattern — most IPs return no PTR, the ones that do tell you what the operator wanted to publish.
Grouped /24 view
For larger expansions, the tool offers a grouped by /24 view that shows one row per /24 inside the original range, with the count of "interesting" IPs (those with a PTR or other signal). Helpful for narrowing where to actually look.
Pivots
| Click on... | Pivot to |
|---|---|
| Any expanded IP | All the IP-targeted tools |
| Supernet | CIDR calculator (recursive) |
| Subnet | CIDR calculator (recursive) |
| Reverse-DNS arpa zone | DNS lookup with PTR filter |
Bulk CIDR
Bulk paste accepts multiple CIDRs and returns the calculator output for each in an aggregate table — useful when you have a stack of network blocks to classify quickly.
Sources
- All CIDR math runs locally. No external sources are queried.
- Per-IP rDNS pass uses the system DNS resolver.