The builder assembles the commands exclusively locally in your browser. Nothing is executed, nothing is transmitted and nothing is stored. The page works without an internet connection once loaded. Review every command before you run it and set the placeholders (domain, host, account) to your own values.

What the builder covers

DNS queries: MX, A/AAAA, TXT (including SPF), DKIM selector, DMARC, PTR, name servers and targeted queries against a specific resolver to spot split DNS.
SMTP tests: Port reachability, banner and EHLO capabilities, STARTTLS on port 587, implicit TLS on 465 and sending a real test message.
TLS and OpenSSL: Show the server certificate, expiry and remaining lifetime, the delivered certificate chain, accepted TLS versions, a mail server's STARTTLS certificate and inspecting local certificate files.
LDAP and Active Directory: Find a user by sAMAccountName, test a bind (logon), run custom filters, read the Root DSE and check the LDAPS connection and its certificate.
Network and ports: Test TCP ports, ping, traceroute, find which process listens on a port and which DNS servers the system uses.
HTTP and Autodiscover: Fetch response headers, follow redirect chains and send an Autodiscover request to an Exchange or Microsoft 365 domain.
Packet capture: Capture traffic on a port or to a peer, read the SMTP dialog in clear text, write a capture file and list open connections with their process.
Certificates and PKI: Create and inspect a CSR with SAN entries, examine PFX files, convert between PFX and PEM, match key against certificate, browse the certificate store and find certificates expiring soon.
IMAP and POP3: Test mailbox login, view advertised capabilities and authentication methods, query mailbox status, check POP3 and test STARTTLS on port 143.
Message tracking: Search the tracking log by sender, recipient, subject, message ID or EventId, plus the delivery path with time offsets, failed deliveries grouped by reason, the slowest messages, top senders and a CSV export for the ticket. Here the columns separate Exchange on-prem from Exchange Online.
Mail queue: Inspect waiting messages with destination and failure reason, examine a single message, force delivery, filter deferred messages by pattern and delete messages.
Time and NTP: Check the time source and synchronisation, query a time server, measure clock skew against another system and resynchronise.
Services and logs: Inspect and restart services, follow and search logs, count SMTP error codes and check disk space and load.

Built-ins first

Why built-ins?: On someone else's server you can rarely install something quickly. So every task leads with the built-in path: on Windows, PowerShell cmdlets and the .NET framework (Resolve-DnsName, Test-NetConnection, SslStream, DirectorySearcher); on Linux, nslookup, bash's own /dev/tcp, ss and ping.
When add-on tools?: For some tasks a widespread add-on tool is the clear standard: openssl for TLS, dig for DNS, ldapsearch for LDAP, swaks for sending mail. These are labelled add-on tool and may need to be installed.
Switch platform: At the top you choose between PowerShell (Windows) and Unix shell (bash). The choice applies to every task and is remembered in your browser. Parameters such as domain or host carry across all tasks: enter them once, used everywhere.

Feedback

Is this tool useful to you? Is a feature missing, or is a result wrong? Feedback right here in the comments is welcome.

Comments are loaded from GitHub / Giscus.