leadrogue/lanflux

Lanflux is a command line tool for security professionals who need to explore and test a local network after they already have a foothold on it, for example after connecting to a Wi-Fi network. The README is explicit that it is meant for authorized security testing only, on networks you own or have permission to audit. It is described as a sibling project to another tool called Wiflux, which handles the earlier step of getting onto the wireless network in the first place. Once it is pointed at a network, Lanflux walks a tester through a guided workflow: first mapping which devices are present, then running reconnaissance on them, and only after that offering attack or man in the middle options, so noisier actions come after quieter information gathering. It tries to identify each device on the network, for example guessing that a machine is someone's phone based on clues like its network vendor, hostname, and open ports, and it scores hosts by likely role, such as a gateway, a file server, or an Internet of Things device. Based on what a soft recon pass finds open on each host, Lanflux can suggest or run deeper tools, such as checking web servers, SSH, or SNMP services, or looking for default logins. Its man in the middle features are described honestly in the README: it can see website names and cleartext web login forms, but it explicitly states it cannot read HTTPS app passwords without a separate SSL bypass step, which it does not include. Findings, discovered hosts, and any captured credentials are stored locally in a small database, with credentials kept in an encrypted vault if the user chooses a password for it. Results can be exported as JSON or CSV files or turned into PDF reports, and the tool can compare results between two runs to show what changed on the network. It also supports resuming a previous session and sending webhook alerts for serious findings. Lanflux runs on Linux, is written in Python, and is installed by cloning the repository and running pip install. It requires several external command line tools such as nmap and arp-scan to be installed alongside it, and it ships an installer helper for optional extra tool packs. The full README is longer than what was shown.