GhostNet - Network Scanner

Who else is connected to your WiFi? That smart TV you forgot about? A neighbor piggybacking on your signal? A rogue IoT device phoning home? GhostNet scans your local network and reveals every connected device.

ARP NETWORK DISCOVERY

GhostNet sends ARP requests across your subnet and collects responses from every active device. Within seconds you see a list of IP addresses, MAC addresses, and — where possible — hostnames and device manufacturers. Identify each device or flag unknown ones for investigation.

DEVICE IDENTIFICATION

MAC address vendor lookup reveals the manufacturer behind each connection. That unknown IP at 192.168.1.47 turns out to be a Samsung device — probably the smart fridge. Or an unrecognized manufacturer that warrants changing your WiFi password.

PORT SCANNING

Select any discovered device and scan its open ports. See which services are running — HTTP servers, SSH daemons, printer protocols, media streaming. Useful for finding devices that are exposing services they should not be.

NETWORK OVERVIEW

See your gateway, subnet mask, DNS servers, and public IP at a glance. Understand your network topology without digging through router settings menus.

PRACTICAL USES

Home security: verify only your devices are on your network. IT support: inventory devices on a client's network during a site visit. Smart home management: find the IP address of that new IoT device that did not appear in your router's admin panel.

RESPONSIBLE DESIGN

GhostNet only scans networks your device is connected to. It uses standard ARP protocol — the same mechanism your phone already uses to communicate on any network. No exploitation, no packet injection, no attacks.

All scanning happens on-device. Results are not stored, transmitted, or shared. Part of the HALOCORE collection of free Android security tools.