{"id":31193339,"url":"https://github.com/r167/netcheck","last_synced_at":"2025-09-20T00:34:08.592Z","repository":{"id":315012972,"uuid":"1057719776","full_name":"R167/netcheck","owner":"R167","description":null,"archived":false,"fork":false,"pushed_at":"2025-09-16T06:26:50.000Z","size":27,"stargazers_count":0,"open_issues_count":8,"forks_count":0,"subscribers_count":0,"default_branch":"master","last_synced_at":"2025-09-16T08:16:19.681Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/R167.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2025-09-16T05:54:14.000Z","updated_at":"2025-09-16T06:04:55.000Z","dependencies_parsed_at":"2025-09-16T08:16:33.353Z","dependency_job_id":"6161800a-884b-43c0-8371-6a7b4844ab6b","html_url":"https://github.com/R167/netcheck","commit_stats":null,"previous_names":["r167/netcheck"],"tags_count":null,"template":false,"template_full_name":null,"purl":"pkg:github/R167/netcheck","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/R167%2Fnetcheck","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/R167%2Fnetcheck/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/R167%2Fnetcheck/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/R167%2Fnetcheck/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/R167","download_url":"https://codeload.github.com/R167/netcheck/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/R167%2Fnetcheck/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":276022596,"owners_count":25571825,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-19T02:00:09.700Z","response_time":108,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-09-20T00:32:06.749Z","updated_at":"2025-09-20T00:34:08.565Z","avatar_url":"https://github.com/R167.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# netcheck\n\nA comprehensive network gateway security assessment tool for identifying vulnerabilities in home and small office routers.\n\n## Features\n\n- **Gateway Discovery**: Automatically detects your network gateway\n- **Service Detection**: Identifies UPnP, NAT-PMP, mDNS, and other network services\n- **Security Analysis**: Tests for default credentials, exposed services, and misconfigurations\n- **Port Mapping Enumeration**: Discovers active UPnP port forwards\n- **Device Fingerprinting**: Identifies router vendor, model, and serial numbers\n- **IPv6 Assessment**: Checks IPv6 configuration and potential firewall bypasses\n- **Comprehensive Reporting**: Prioritized security issues with actionable recommendations\n\n## Detectors\n\n| Detector | Flag | Default | Description |\n|----------|------|---------|-------------|\n| **Web Interface** | `--web` | ✅ | Tests router web interface, detects vendor, and checks default credentials |\n| **Port Scanning** | `--ports` | ✅ | Scans common management ports (SSH, HTTP, HTTPS, SNMP, etc.) |\n| **UPnP Discovery** | `--upnp` | ✅ | Discovers UPnP services and enumerates active port mappings |\n| **NAT-PMP** | `--natpmp` | ✅ | Detects NAT-PMP services for automatic port mapping |\n| **IPv6 Analysis** | `--ipv6` | ✅ | Analyzes IPv6 configuration and connectivity |\n| **API Discovery** | `--api` | ✅ | Checks for exposed router APIs and CGI scripts |\n| **mDNS Discovery** | `--mdns` | 🔧 | Comprehensive mDNS/Bonjour service discovery |\n| **Starlink Detection** | `--starlink` | 🔧 | Specialized Starlink Dishy detection |\n| **Routing Info** | `--routes` | 🔧 | Displays routing table information |\n| **Device Info** | `--device` | 🔧 | Shows network interface and device information |\n| **External IP** | `--external` | 🔧 | Discovers external IPv4/IPv6 addresses |\n| **LLDP Discovery** | `--lldp` | 🔧 | Link Layer Discovery Protocol analysis |\n\n### Special Flags\n\n| Flag | Description |\n|------|-------------|\n| `--all` | Run all available detectors |\n| `--default` | Run only the default detector suite |\n| `--show-virtual` | Include virtual network interfaces (VPN tunnels, Docker bridges, etc.) |\n| `--proxy` | Test proxy configuration (requires `--external`) |\n\n**Legend**: ✅ = Enabled by default, 🔧 = Flag required\n\n## Quick Start\n\nTry netcheck without installation:\n\n```bash\ngo run github.com/R167/netcheck@latest\n```\n\n## Installation\n\n```bash\ngit clone https://github.com/R167/netcheck.git\ncd netcheck\ngo build -o netcheck\n```\n\n## Usage\n\n### Basic Security Scan\n```bash\n./netcheck\n```\n\n### Run Specific Detectors\n```bash\n./netcheck --mdns              # mDNS service discovery\n./netcheck --external --proxy  # External IP with proxy testing\n./netcheck --all               # All available tests\n```\n\n## Example Output\n\n```\n🔍 Network Gateway Security Checker\n====================================\n🌐 Gateway IP: 192.168.1.1\n\n🔍 Checking web interface...\n  📱 Detected vendor: Netgear\n  🔐 Testing default credentials for netgear...\n  🚨 Default credentials work: admin/password\n\n🔍 Checking UPnP services...\n  📡 UPnP SSDP discovered\n  📄 Device: Netgear R7000 (NETGEAR, Inc.)\n  🔓 Found 3 port mapping(s)\n    *:80 → 192.168.1.100:80 (TCP)\n    *:22 → 192.168.1.50:22 (TCP)\n\n📊 Security Assessment Report\n=============================\nVendor: Netgear\nModel: R7000\nIssues Found: 3\n\n🚨 Security Issues:\n1. 🚨 [CRITICAL] Default credentials are active\n   Username: 'admin', Password: 'password'\n\n2. ⚠️ [HIGH] Active UPnP port mappings detected\n   Found 3 active port forwarding rules that may expose internal services\n\n3. 🔶 [MEDIUM] UPnP service is enabled\n   UPnP can expose internal services and allow port forwarding\n```\n\n## Security Analysis\n\nThe tool performs comprehensive security analysis including:\n\n- **Default Credentials**: Tests vendor-specific default login combinations\n- **Service Discovery**: UPnP/SSDP, NAT-PMP, mDNS/Bonjour, IPv6 configuration\n- **Port Scanning**: Common management ports (SSH, HTTP, HTTPS, SNMP, Telnet)\n- **API Enumeration**: Router APIs, CGI scripts, WPS configuration\n- **Device Fingerprinting**: Vendor, model, and serial number identification\n\n## Supported Vendors\n\nLinksys, Netgear, D-Link, TP-Link, ASUS, Cisco, Belkin, Motorola, and others.\n\n## Security Issues\n\nIssues are categorized by severity:\n\n- **🚨 Critical**: Default credentials, exposed admin interfaces\n- **⚠️ High**: Active UPnP port mappings, Telnet exposure, exposed CGI scripts\n- **🔶 Medium**: UPnP/NAT-PMP enabled, SSH exposure, IPv6 issues, WPS enabled\n- **ℹ️ Low**: mDNS exposure, information disclosure\n\n## Contributing\n\nContributions are welcome! Please feel free to submit issues, feature requests, or pull requests.\n\n## License\n\nMIT License - see LICENSE file for details.\n\n## Disclaimer\n\nThis tool is intended for security assessment of networks you own or have explicit permission to test. Users are responsible for complying with all applicable laws and regulations.","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fr167%2Fnetcheck","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fr167%2Fnetcheck","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fr167%2Fnetcheck/lists"}