Advanced Network Reconnaissance, Port Scanner & Social Media MITM Sniffer Tool for Linux
NetRecon is a powerful Python-based network utility designed for local network reconnaissance, active host discovery, real-time port scanning, and live DNS query interception using ARP Spoofing (MITM) techniques.
- Advanced Host Discovery: Fast multi-threaded ping sweep to scan and list active devices on any subnet.
- Smart Gateway & IP Detection: Automatically detects your local IP, subnet, and default router/gateway.
- Quick Port Scanner: Optional fast TCP port check on target devices to discover open services (HTTP, HTTPS, SSH, etc.).
- Social Media Alert System: Real-time keyword filtering that highlights social media traffic (Instagram, TikTok, Twitter, Facebook, etc.) in high-visibility alert colors.
- ARP Spoofing Engine (MITM): Seamlessly redirects traffic from target devices through your machine for monitoring.
- Interactive Main Menu Loop: Runs continuously; once a sniffing session or timeout completes, it automatically restores the network and returns you to the menu to pick a new target without restarting the script.
- Robust Error Handling: Built-in fault tolerance that prompts you dynamically if a target goes offline or fails to respond.
- Clean Exit & Restoration: Automatically restores original network ARP tables, disables IP forwarding, and exits safely.
- OS: Tested and verified on BlackArch Linux / Kali Linux / Arch Linux
- Python: Python 3.x
- Dependencies:
scapy
- Clone or download the repository to your local machine.
- Ensure Python and Scapy are installed on your system:
sudo pacman -S python-scapy
🛠️ Usage
NetRecon requires root privileges to send raw packets and perform ARP spoofing. Run the script with sudo: Bash
sudo python3 netracon.py
Step-by-Step Execution:
Interface Selection: Enter your network interface name when prompted (e.g., wlan0, eth0), or simply press Enter for default auto-detection.
Subnet Selection: Choose auto-detection (recommended) or enter a custom subnet (e.g., 192.168.1.0/24).
Host Discovery: The tool scans the network and lists all active hosts with their MAC addresses.
Sniffer Mode:
Mode 1: Target a specific device manually by IP.
Mode 2: Universal Mode – select a device from the discovered list using its index number.
Port Scan Option: Choose whether to run a quick port scan on the selected target (y/n).
Termination Criteria:
Stop after a specific timeout (seconds).
Stop after a specific DNS query packet count.
Run unlimited until manual interruption (Ctrl+C).
Live Monitoring: Watch DNS queries flow! Social media requests will trigger an instant visual alert. Once finished, the network tables are automatically restored, and the tool returns to the menu for your next target.
Legal Notice: This tool is intended for educational purposes, network administration, and authorized security testing only. The author is not responsible for any misuse or damage caused by this program. Only use this tool on networks you own or have explicit permission to test.# 🛡️ NetRecon v3.6
Advanced Network Reconnaissance, Port Scanner & Social Media MITM Sniffer Tool for Linux
NetRecon is a powerful Python-based network utility designed for local network reconnaissance, active host discovery, real-time port scanning, and live DNS query interception using ARP Spoofing (MITM) techniques.
- Advanced Host Discovery: Fast multi-threaded ping sweep to scan and list active devices on any subnet.
- Smart Gateway & IP Detection: Automatically detects your local IP, subnet, and default router/gateway.
- Quick Port Scanner: Optional fast TCP port check on target devices to discover open services (HTTP, HTTPS, SSH, etc.).
- Social Media Alert System: Real-time keyword filtering that highlights social media traffic (Instagram, TikTok, Twitter, Facebook, etc.) in high-visibility alert colors.
- ARP Spoofing Engine (MITM): Seamlessly redirects traffic from target devices through your machine for monitoring.
- Interactive Main Menu Loop: Runs continuously; once a sniffing session or timeout completes, it automatically restores the network and returns you to the menu to pick a new target without restarting the script.
- Robust Error Handling: Built-in fault tolerance that prompts you dynamically if a target goes offline or fails to respond.
- Clean Exit & Restoration: Automatically restores original network ARP tables, disables IP forwarding, and exits safely.
- OS: Tested and verified on BlackArch Linux / Kali Linux / Arch Linux
- Python: Python 3.x
- Dependencies:
scapy
- Clone or download the repository to your local machine.
- Ensure Python and Scapy are installed on your system (BlackArch/Kali usually come with Scapy pre-installed, or install via package manager):
sudo pacman -S python-scapy # or via pip: sudo pip install scapy