https://reddit.com/link/1w0qwwl/video/f8p8jvcsb4mh1/player
I developed NetBlade, a networking toolkit for Android, and the latest versions have turned it into something I hadn't originally envisioned: it can connect to a Windows PC on the local network and read the entire system without anything installed on that PC.
The video demonstrates just that: you select a device from the local network scan, enter your credentials once, and NetBlade returns with all the information about the computer.
What it reads (via SMB and WinRM, without an agent):
– Exact version of Windows, hardware, disks, network cards
– Installed programs with their actual versions (read from the binary file version resource, so 7-Zip displays 24.09 and not 24.9.0.0), as well as updates and startup items
– Running services, shares, local and administrator accounts, user profiles
– Defenses: antivirus and execution state, firewall per profile, BitLocker per volume, TPM, SMB1
Then the part that satisfies me the most: for each program it can accurately identify, it queries the National Vulnerability Database for the published CVEs that affect that specific version. In descending order of vulnerability, the CVSS score and the link to the corresponding entry are displayed. On a saved network, you get a complete picture: every vulnerability detected and which machines have them. Participation is optional, and only the product name and version are sent, never the machine name, software list, or credentials.
The rest of the app, for completeness: LAN scan with vendor/hostname/latency, TCP+UDP port scan with service risk assessment, Wi-Fi analyzer with channel suggestions, SSH and SFTP clients, SNMP v1/v2c/v3 (printer toner, NAS storage, switch interface graphs), DNS lookups, ping/traceroute/WHOIS, Wake-on-LAN, TLS certificate inspection, subnet calculator, speed test.
Also, in these versions: optional app lock (fingerprint/face recognition/PIN) before opening, as saved scans contain addresses and credentials; scan export to CSV/JSON/PDF; backup and restore; home screen widgets and a Quick Settings pane; 42 languages.
Credentials are encrypted with Android Keystore, scans remain in a local database, and nothing is uploaded to my device. The only outgoing calls are those you request (public IP information, certificate transparency, CVE feeds).
Free with ads, one-time purchase to remove them. Android 8+.
https://play.google.com/store/apps/details?id=com.netblade.tools
I'm happy to answer any questions about how WinRM/NTLM works—writing the NTLM handshake manually was the least fun week of the project.
Source: r/HowToMen · by /u/Anxious_Factor_8638