wifit3

NetWatch is a real-time network diagnostics tool that runs in the terminal as a single, configuration-free binary. It captures network activity, attributes connections to processes where available, decodes application-layer protocols, fingerprints clients with JA4, tracks streams, and displays connections, interfaces, packets, protocol statistics, topology, timelines, per-process bandwidth, and egress destinations. Its diagnostic engine learns baselines, applies diagnostic rules, ranks possible causes, and records issues through verified closure. Egress linting observes destinations, promotes policies, and alerts when activity drifts from them; the tool also supports TLS 1.3 decryption for user traffic, PCAP export, display filters, beaconing and DNS-tunneling analysis, and Prometheus metrics. NetWatch provides full, lite, and dense terminal views and can run without elevated privileges for basic information, while capture features may require sudo or Linux capabilities. It is distributed for macOS, Linux, Windows, and other platforms through package managers, binaries, and a container. The repository is MIT-licensed; optional LLM commentary in the Diagnose view is disabled by default.

User Scanner is an open-source command-line and Python library OSINT suite for investigating email addresses and usernames across hundreds of platform modules. It checks account registrations and scrapes profile metadata such as avatars, biographies, follower counts, user IDs, seller statuses, and other account attributes. The tool supports cross-scan pivoting: initial results can yield handles, profile links, aliases, or exposed email addresses that are used as inputs for subsequent scans. It also provides username permutation generation, Hudson Rock infostealer-breach lookups, parallel HTTP scanning with TLS fingerprint impersonation, proxy rotation and validation, category or module targeting, bulk-file input, and PDF, JSON, and CSV exports. It can be installed from PyPI or run through Nix. An optional Model Context Protocol server exposes username scanning, email scanning, and module-discovery tools to compatible AI clients. The project describes itself as intended for educational use, authorized security research, and defensive OSINT investigations.

WandEnhancer is an open-source interoperability and user-interface enhancement tool for the Wand (WeMod) desktop application. Its .NET patcher modifies files in a selected local Wand installation, while a bundled version.dll proxy changes Wand's Electron ASAR-integrity fuse byte inside the application's own process. It supports local configuration management, client-version compatibility adjustments, client-side layout and theme customization, AI features, and custom JavaScript injection into Wand's renderer. Injected scripts have DOM and Node require access, run with the Wand client's privileges, and are wrapped so thrown errors are logged rather than crashing the application. The tool includes an optional Remote Web Panel that starts a plain HTTP/WebSocket server on the local network at TCP port 3223, allowing a phone on the same LAN or VPN to control the active trainer. The panel has no pairing code, so the project warns against exposing the port to the public internet. The patching step has no updater or project telemetry, although the optional panel can use Wand's existing API/CDN paths. The project does not publish prebuilt executables; users build it on Windows with CMake, Node.js and pnpm, Visual Studio/MSBuild, and .NET Framework 4.8, or run its GitHub Actions workflow from a fork. It is licensed under Apache-2.0.

Fscan is an open-source intranet security scanning tool developed as a Go project. It discovers hosts with ICMP probing, scans TCP ports, identifies services and web technologies, performs credential and hash-based authentication tests, detects selected vulnerabilities and unauthorized access, and provides exploitation and local information-gathering modules. Its inputs include IP addresses, CIDR ranges, domains, URLs, and batch files; results can be written as TXT, JSON, or CSV. The tool is organized around service, web, and local plugins. It supports common service fingerprinting, Xray- and Afrog-format web POCs, DNSLog-based detection, HTTP and SOCKS5 proxies, interface selection, rate and timeout controls, independent scan concurrency settings, and configurable exclusions. Its local modules include system and domain information collection, credential acquisition, persistence mechanisms, shells, security-software detection, and log-cleaning utilities. The repository also provides a Go SDK under pkg/fscan for embedding scan tasks in agents or security platforms, with pause/resume control and progress callbacks, plus an optional web management interface enabled through a build tag.

WireGuard is a cross-platform VPN tunnel and network interface for securely encapsulating IP packets over UDP. It uses a private key for each interface and public keys for peers; its Cryptokey Routing mechanism associates peers with allowed tunnel IP addresses, which select encrypted destinations when sending and act as an access-control check when receiving. The project uses cryptographic components including the Noise protocol framework, Curve25519, ChaCha20, Poly1305, BLAKE2, SipHash24, and HKDF. It is configured through the wg tool and ordinary system networking utilities, supports roaming between IP addresses, and is designed for use from embedded devices to backbone routers.