v1.0.0 — Windows 10 / 11 — Free & Open Source

IoT Network
Security Scanner

Discover every device on your network, audit for known CVEs, run active penetration tests, and isolate threats — all from a single desktop application.

↓  Download for Windows ⌥  View Source Code

Standalone .exe installer  ·  No runtime required  ·  0/70 VirusTotal ✓

NetProbe — Scan Output
[08:14:32] Starting full scan on 192.168.1.0/24
[08:14:33] [1/6] Discovering devices via ARP broadcast...
[08:14:38] [OK] 9 device(s) discovered on network
[08:14:38] [2/6] Gathering vendor intelligence + TLS/UPnP...
[08:14:52] [OK] Vendor, banner, OS fingerprint complete
[08:14:52] [3/6] CVE lookup via NIST NVD API v2.0...
[08:15:10] [!] 192.168.1.108 — CVE-2021-36260  CRITICAL  CVSS 9.8
[08:15:12] [!] 192.168.1.108 — CVE-2022-30525  HIGH     CVSS 7.5
[08:15:18] [4/6] Red team — testing default credentials...
[08:15:31] [COMPROMISED] 192.168.1.108 — RTSP unauthenticated access confirmed
[08:15:31] [5/6] CVE risk scoring (Module 8)...
[08:15:32] [OK] CVE Risk Score: 74/100 — HIGH EXPOSURE
[08:15:32] [6/6] Saving scan to database...
[08:15:33] [OK] Scan #7 saved
 
Network Health Score: 52 / 100  — AT RISK
──────────────────────────────────────────
Deductions: 1 CRITICAL device (−25) · 2 HIGH ports (−10) · 3 CVEs (−13)
14+ Scan Modules
12 Ports Monitored
NVD Live CVE Database
0/70 VirusTotal Clean
// capabilities

Everything in one scanner

Built from 14 independent modules — each one focused on a specific layer of network security.

LIVE
🔍

ARP Device Discovery

Broadcasts ARP requests across your /24 subnet to identify every connected device — including those that block ICMP ping.

CRITICAL
🐛

Live CVE Lookup

Queries the NIST NVD REST API v2.0 in real time — matching device banners and vendor signatures against known vulnerabilities.

⚔️

Red Team Engine

Actively tests default credentials, unauthenticated RTSP access, FTP anonymous login, MQTT brokers, and SMB null sessions.

LIVE
📡

Traffic Monitor

Live packet capture with protocol breakdown. Detects SYN floods, port scans, ARP spoofing, and ICMP floods in real time.

🔒

Device Isolation

Instantly blocks compromised devices using Windows Firewall rules — no router access needed. One click to isolate, one to restore.

AUTO
👁

Watch Mode

Continuous background monitoring at configurable intervals. Alerts on new devices, risk escalations, and port changes automatically.

📈

CVE Risk Scoring

Weighted 0–100 risk score per device and network-wide. CRITICAL=25pts, HIGH=15pts. Grades from Minimal to Critical Exposure.

📄

PDF Reporting

One-click professional report generation. Includes device inventory, CVE findings, red team results, fix recommendations and score trends.

🕑

Scan History

Every scan stored in SQLite with score trends, device counts, and change detection. Export full history as CSV in one click.

// workflow

How it works

Six automated stages run sequentially — from raw discovery to actionable remediation.

🔍

Discover

ARP broadcast maps every device on your subnet. Double-verified to eliminate false positives.

🧠

Analyse

MAC vendor lookup, HTTP banner grab, TLS check, UPnP fingerprint, and OS detection via ICMP TTL.

🐛

Lookup CVEs

Live NIST NVD query with 3-retry logic. Full CVE descriptions, CVSS scores, and NVD links.

⚔️

Penetration Test

Active red team tests with ethics consent gate. Compromised devices escalate all CVEs to CRITICAL.

⚠️

Windows SmartScreen Warning — Expected Behaviour

Because NetProbe is an independent security tool without an expensive corporate code-signing certificate, Windows Defender SmartScreen may display a warning on first launch. This is standard for all new independent software on Windows.

To proceed: click "More info""Run anyway". The full source code is publicly available on GitHub for independent verification. A VirusTotal scan report (0/70 detections) is linked above.

// system requirements

Requirements

Standalone installer — no Python, no dependencies, no configuration.

Operating System

Windows 10 (64-bit) or Windows 11. Must be run as Administrator for ARP scanning and firewall operations.

Network

Active Wi-Fi or Ethernet connection on a local /24 subnet. Internet required for live CVE lookup via NIST NVD API.

No Dependencies

Fully self-contained .exe installer. Python runtime, Npcap, Scapy and all libraries are bundled internally.

Scan your network
in under 3 minutes.

Free, open source, and runs entirely on your own machine. No data leaves your network.

↓  Download NetProbe for Windows ⌥  View on GitHub

Version 1.0.0  ·  MIT License  ·  Windows 10/11 64-bit