Strix

Android network security assessment suite — modern Kotlin/Compose rewrite of cSploit with Nmap, Metasploit, Hydra, Ettercap bundled

A complete network security toolkit in your pocket. Discover, scan, test and exploit the devices on your network, right from an Android phone.

What is Strix? Strix turns a rooted Android phone into a portable penetration-testing lab. It is a modern rewrite of the ideas behind cSploit, rebuilt from scratch for today's Android.

You don't need to install anything else. Nmap, Hydra, Ettercap, tcpdump and arpspoof come inside the app, and the full Metasploit Framework is one tap away. Everything is driven from a clean touch interface: no terminal, no commands to remember.

Features Feature What it does Host discovery Finds every device on your Wi-Fi in seconds (ARP scan), with name, MAC address and manufacturer Port & service scan Nmap frontend: open ports, service versions, operating system, web server and page title Brute force Hydra frontend for SSH, FTP, HTTP forms, SMB, RDP, MySQL, PostgreSQL, VNC, Telnet and many more, with built-in or custom wordlists Exploits Full Metasploit Framework running on the phone: find modules for a service in one tap, launch them, open interactive sessions Man-in-the-middle Sniffer, DNS spoofing and connection kill, powered by Ettercap and arpspoof Packet capture tcpdump on the device, with BPF filters and verbose mode Packet forger Send custom TCP/UDP payloads and read the reply; Wake-on-LAN included Traceroute Hop-by-hop route to any host Router check Tests common router admin panels for default credentials Wi-Fi keygen Offline recovery of default WPA/WEP keys for many vendor routers (from cSploit) Logs Built-in log viewer with filters, search and one-tap export for bug reports (Wi-Fi name redacted)

Credits Strix stands on the shoulders of great projects:

cSploit and dSploit: the original Android pentest suites and the inspiration for Strix, including the Wi-Fi keygen algorithms. Nmap, Hydra, Ettercap, tcpdump, arpspoof, Metasploit Framework and Ruby: the engines doing the real work. All credit for their capabilities goes to their authors.

License Strix is released under the GNU General Public License v3.0, like cSploit and dSploit from which it inherits code and ideas.