Skip to main content

Netdiscover

Netdiscover is an active/passive ARP reconnaissance tool to discover live hosts in a network. It is useful for identifying devices on a local network, especially when you do not have access to the DHCP server. This is useful for stealth reconnaissance in CTFs.

Identify your network interface
ifconfig
# or
ip addr
Discover live hosts in a network
netdiscover -i <INTERFACE>
Use '-r' to scan a specific subnet range for faster results
netdiscover -i eth0 -r 10.10.0.0/24
Example Output
Currently scanning: 192.168.1.0/16   |   Screen View: Unique Hosts

2 Captured ARP Req/Rep packets, from 2 hosts. Total size: 120
_____________________________________________________________________________
IP At MAC Address Count Len MAC Vendor
-----------------------------------------------------------------------------
192.168.1.1 00:11:22:33:44:55 10 600 Cisco Systems
192.168.1.10 66:77:88:99:AA:BB 5 300 Hewlett Packard
192.168.1.20 CC:DD:EE:FF:00:11 2 120 Raspberry Pi Foundation
192.168.1.50 22:33:44:55:66:77 1 60 Dell Inc.
-----------------------------------------------------------------------------
tip

Netdiscover works only on local networks. It cannot discover hosts outside of your subnet.