Map every device on a local network and identify likely roles such as gateway or file server.
Run reconnaissance on discovered hosts to find open web, SSH, or SNMP services.
Test whether man in the middle attacks can capture cleartext login forms on a network you are authorized to audit.
Generate a PDF report of findings from an authorized penetration test.
| leadrogue/lanflux | aimer-zero/redforge-ai | arthuryangx/nano-notebooklm | |
|---|---|---|---|
| Stars | 41 | 41 | 41 |
| Language | Python | Python | Python |
| Setup difficulty | hard | moderate | moderate |
| Complexity | 4/5 | 4/5 | 2/5 |
| Audience | ops devops | developer | researcher |
Figures from each repo's GitHub metadata at analysis time.
Requires Linux plus several external tools like nmap, arp-scan, and smbclient installed alongside it.
Lanflux is a command line tool for security professionals who need to explore and test a local network after they already have a foothold on it, for example after connecting to a Wi-Fi network. The README is explicit that it is meant for authorized security testing only, on networks you own or have permission to audit. It is described as a sibling project to another tool called Wiflux, which handles the earlier step of getting onto the wireless network in the first place. Once it is pointed at a network, Lanflux walks a tester through a guided workflow: first mapping which devices are present, then running reconnaissance on them, and only after that offering attack or man in the middle options, so noisier actions come after quieter information gathering. It tries to identify each device on the network, for example guessing that a machine is someone's phone based on clues like its network vendor, hostname, and open ports, and it scores hosts by likely role, such as a gateway, a file server, or an Internet of Things device. Based on what a soft recon pass finds open on each host, Lanflux can suggest or run deeper tools, such as checking web servers, SSH, or SNMP services, or looking for default logins. Its man in the middle features are described honestly in the README: it can see website names and cleartext web login forms, but it explicitly states it cannot read HTTPS app passwords without a separate SSL bypass step, which it does not include. Findings, discovered hosts, and any captured credentials are stored locally in a small database, with credentials kept in an encrypted vault if the user chooses a password for it. Results can be exported as JSON or CSV files or turned into PDF reports, and the tool can compare results between two runs to show what changed on the network. It also supports resuming a previous session and sending webhook alerts for serious findings. Lanflux runs on Linux, is written in Python, and is installed by cloning the repository and running pip install. It requires several external command line tools such as nmap and arp-scan to be installed alongside it, and it ships an installer helper for optional extra tool packs. The full README is longer than what was shown.
Lanflux is a guided command line tool for authorized security testers to map, recon, and test a local network after gaining Wi-Fi access.
Mainly Python. The stack also includes Python, nmap, arp-scan.
MIT license: use, modify, and distribute freely, including for commercial purposes, as long as you keep the copyright notice.
Setup difficulty is rated hard, with roughly 1h+ to a first successful run.
Mainly ops devops.
This repo across BitVibe Labs
double-check against the repo, no cap.