When you’d reach for this
Two places demand wildcards: Cisco ACL entries and OSPF network statements. Getting one octet wrong silently matches the wrong networks, so check here first, then read why the inversion exists at all.
Learn the idea behind the tool
This tool is the fast answer; the lesson is the understanding. Start with ACLs in IOS.