NetGuard

DaemonSec ToolKit (Android) App to check on your surroundings from your phone no root required

What it does

NetGuard is a self-contained, Termux-free pentest companion. Every scan writes structured findings to an on-device Room database, everything is grouped for at-a-glance reading, and every session can be exported, viewed, or saved on the phone. Module What you get Root needed Network Recon ARP-table host discovery, active TCP sweep of your whole /24, mDNS + SSDP passive listen, OUI vendor lookup No WiFi Scan Every visible AP recorded (SSID/BSSID/ch/security/RSSI), channel-congestion advisor, evil-twin detection, security-downgrade detection, venue-SSID rogue-AP alerts — all grouped in one view No Traffic Observation VpnService TUN observer: real UDP forwarding (DNS/QUIC/HTTP3 pass through), DNS query log, TLS SNI extraction (what domains, without decryption), known-tracker flagging, cleartext-port flagging No BLE Discovery Nearby-device scan classified into groups (below), AirTag/Tile/SmartTag/Chipolo tracker detection incl. Apple Find My beacons, movement heuristic No 🦊 Fox Hunt Its own tab: enter a tracker's MAC (copy it from any BLE row), Hunt, and NetGuard locks onto that device — live RSSI, warmer/colder range estimate, "walk back to where that was" best-signal guidance, packet counter; every packet logs as a hunt trail. Platform-filtered to the target MAC (battery-friendly) No GATT Profiling Connect to any BLE device, walk the service/characteristic tree, flag writable-unencrypted characteristics (the smart-lock vuln pattern), JSON profile export No Web Recon crt.sh subdomain enum, DNS-over-HTTPS record pulls, security-header audit (CSP/HSTS/cookies/CORS), directory busting with custom-404 fingerprinting, reflection triage, severity + OWASP tags No OSINT Username presence across 12 platforms, HIBP breach lookup, Wayback CDX pull, GitHub secret-dork search, domain RDAP + IP intel (RDAP/AbuseIPDB) — domains not required No Reporting Markdown / JSON / PDF (rendered on-device), session diffing ("new since last scan"), scope declaration auto-embedded, in-app viewer, save to Downloads, share sheet, per-report delete No Findings feed Every row carries a source badge (Bluetooth/WiFi/LAN scan/OSINT/Web recon/Traffic), collapsible radio sections, and 🛰 intel records: recon/OSINT results group per target — one tap opens everything a target produced (TXT/A/CAA/SOA/RDAP/headers…) in one place No

License

MIT