> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# netspionage: Network Forensics CLI utility that performs Network Scanning, OSINT, and Attack Detection
- URL: https://darkwebinformer.com/netspionage-network-forensics-cli-utility-that-performs-network-scanning-osint-and-attack-detection/
- Published: 2025-07-31T16:58:40.000Z
- Updated: 2025-09-04T22:20:48.000Z
- Author: Dark Web Informer
- Tags: Tools

---

**GitHub:** <https://github.com/ANG13T/netspionage>

---

**Network Analysis CLI framework that performs Network Scanning, OSINT, and Attack Detection**

![](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2025/07/23978562983756987235-2.png)

[Installation](https://github.com/ANG13T/netspionage#installation) | [Usage](https://github.com/ANG13T/netspionage#usage) | [Contributing](https://github.com/ANG13T/netspionage#contributing) | [Upcoming](https://github.com/ANG13T/netspionage#upcoming)

## Installation

[](https://github.com/ANG13T/netspionage#installation)\# clone the repo  
git clone https://github.com/ANG13T/netspionage.git  
  
\# change the working directory to netspionage  
cd netspionage  
  
\# install the requirements  
pip3 install -r requirements.txt

## Update Config \[configuration.ini\]

[](https://github.com/ANG13T/netspionage#update-config-configurationini)

Adjust configuration settings such as WiFi Interface, Color, and Text File Logging

```
[Settings]
LogToTextFile=False
WiFiInterface=wlan0
Color=green

```

## Usage

[](https://github.com/ANG13T/netspionage#usage)

In order to get started with netspionage just type:

```
python3 netspionage.py

OR

sudo -E python3 netspionage.py

```

## Further Configuration

[](https://github.com/ANG13T/netspionage#further-configuration)

```
# Ensure your Network Adapter is on Monitor Mode 
sudo airmon-ng start wlan0

ip a

# Find name of Network Adapter (ie. wlan0mon)

# Set Interface to Name

vim configuration.ini

WiFiInterface=wlan0mon

```

### Banner

[](https://github.com/ANG13T/netspionage#banner)

```
                __             _                            
    ____  ___  / /__________  (_)___  ____  ____ _____ ____ 
   / __ \/ _ \/ __/ ___/ __ \/ / __ \/ __ \/ __ `/ __ `/ _ \
  / / / /  __/ /_(__  ) /_/ / / /_/ / / / / /_/ / /_/ /  __/
 /_/ /_/\___/\__/____/ .___/_/\____/_/ /_/\__,_/\__, /\___/ 
                    /_/                        /____/  
                    
 Created by Angelina Tsuboi [angelinatsuboi.net] V.0.0.1

 https://github.com/ANG13T/netspionage
 ----------------------------------------------------------------------------
 
 ENTER 1 - 4 TO SELECT OPTIONS

 1.  SCANNING                   Scan for IPs, nearby APs, ports, hosts, and more

 2.  RECONNAISSANCE             Gather  information  about nearby MAC addresses

 3.  DETECTION                  Detect for ARP Spoofing and SYN Flood attacks

 4.  EXIT                       Exit from netspionage to your terminal
 

```

**NETWORK SCANNER**

Gather information abuot devices connected to network such as IP address, MAC address, and OS.

```
netspionage >> 1
SCAN INPUT >> 1
NET IP ADDRESS (Eg: 192.168.1.1/24) >> 192.168.1.1/24

```

**WiFi SCANNER**

Gather information about nearby WiFi access points such as dBm Signal, SSID, channel, and encryption.

```
netspionage >> 1
SCAN INPUT >> 2

```

**PORT SCANNER**

Scan ports on a specified network to check if they are open or closed.

```
netspionage >> 1
SCAN INPUT >> 3
NET IP ADDRESS (Eg: 192.168.1.1/24) >> 192.168.1.1/24

```

**MAC ADDRESS RECON (CHOOSE)**

This option allows you to gather data about a selected device on the network via MAC address.

```
netspionage >> 2
RECON INPUT >> 1
NET IP ADDRESS (Eg: 192.168.1.1/24) >> 192.168.1.1/24

```

**MAC ADDRESS RECON (INPUT)**

This option allows you to gather data about a device via an inputted MAC address.

```
netspionage >> 2
RECON INPUT >> 2
MAC ADDRESS (Eg:08:00:69:02:01:FC) >> 08:00:69:02:01:FC

```

**DETECT ARP SPOOFING**

Detect for ARP Spoofing Attacks on your network.

```
netspionage >> 3
DETECT INPUT >> 1
NET IP ADDRESS (Eg: 192.168.1.1/24) >> 192.168.1.1/24

```

**DETECT TCP FLOODING**

Detect for TCP Flood Attacks on your network.

```
netspionage >> 3
DETECT INPUT >> 2
NET IP ADDRESS (Eg: 192.168.1.1/24) >> 192.168.1.1/24
TCP NUMBER (Eg: 80) >> 80

```

**HELP**

View all command options for netspionage.

```
netspionage >> help

```

**EXIT**

Exit netspionage from current terminal.

```
netspionage >> 4
Till next time!

```

## Contributing

[](https://github.com/ANG13T/netspionage#contributing)

We would love to have you help us with the development of netspionage. Read below on how to get started!

- Fork this Repository
- Contribute a change that either [resolve an issue](https://github.com/ANG13T/netspionage/issues) or [adds a new feature](https://github.com/ANG13T/netspionage#upcoming)
- Submit a PR for Review

## Upcoming

[](https://github.com/ANG13T/netspionage#upcoming)

Here is a list of features we would like to integrate to netspionage in the upcoming versions:

- View/Edit config file (configuration.ini) through cli
- Detect for more OS in scanner (scanner.py -> get\_os())