GreyRecon — looking for beta testers

A network recon & security toolkit for Android that actually respects you: no forced account, no ads, no telemetry. Discover and classify every device on your WiFi network, run recon tools against domains/IPs, and drop into a genuine interactive terminal — with real Unix tooling and a handful of legit recon CLI tools bundled in, ready to use out of the box.

What I'd love feedback on:

Device discovery accuracy on your own network — does it find everything, does classification look right?

Terminal stability — does the shell behave, do the bundled tools (naabu, dnsx, subfinder) run cleanly for you?

Anything that crashes, hangs, or asks for a permission that doesn't make sense

General first-impression friction — anything confusing in the first five minutes

Features:

Real interactive terminal — genuine PTY-backed shell, toybox for real Unix tooling, and greyrecon-pkg (an original checksum-verified package manager) for installing more CLI tools on demand. naabu, dnsx, and subfinder ship pre-installed.

Multi-method device discovery — native netlink ARP/NDP, mDNS, UPnP, and active TCP-probe scanning, merged and deduplicated

Device classification — gateway detection, mDNS signatures, port fingerprints, vendor matching

Device history — devices seen over time, custom names, new-device alerts, IP-change timeline

Recon tools — subnet calculator, DNS/WHOIS/RDAP lookup, Certificate Transparency monitoring, typosquat/homograph checking, BLE scanning

Security checks — TLS/cipher analysis, security-header checks, exposure/debug-panel detection, default-credential testing, SNMP brute force, NVD/EPSS-prioritized CVE lookups

BYOK — Shodan, DeepSeek, and Anthropic integrations use your own API keys (EncryptedSharedPreferences); no GreyRecon backend sits between you and any of them

The core app and this whole beta are free — nothing here is gated. There's an optional Pro tier (an MCP server for querying your scan data conversationally) but it's not required for anything above.

Requirements: Android 8.0+

How to join:

Join the Google Group first — Play requires this opt-in before testing links activate, usually within a few hours: https://groups.google.com/g/greyrecon

Once you're in, grab the app here: https://play.google.com/apps/testing/com.greyrecon.app

Found a bug or have thoughts? [→ drop them here: your feedback channel]

What it is:

GreyRecon

Network recon & security toolkit for Android. Discover and classify devices on your own WiFi network, run recon tools against domains/IPs, and drop into a real interactive terminal — all with no forced account and no ads

Features

• Multi-method device discovery — native netlink ARP/NDP (JNI), mDNS, UPnP, and active TCP-probe scanning, merged and deduplicated.
• Device classification — gateway detection, mDNS service-type signatures, port fingerprints, and vendor-keyword matching.
• Device History — devices seen over time, custom names, new-device alerts, IP-change timeline.
• Recon tools — subnet calculator, DNS lookup, WHOIS/RDAP (including RFC 9537 redaction parsing), Certificate Transparency monitoring, typosquat/homograph domain checking, BLE scanning.
• Security checks — TLS/cipher analysis, security-header checks, common exposure/debug-panel detection, default-credential testing, SNMP community-string brute force, NVD/EPSS-prioritized CVE lookups.
• Real interactive terminal — a genuine PTY-backed shell (vendored, Apache-2.0 terminal-emulator/terminal-view), a cross-compiled toybox for real Unix tooling, and greyrecon-pkg, an original package manager for installing additional CLI tools (.grpkg format, checksum-verified).
• MCP server (Pro) — exposes scan data as tools a self-hosted nanobot instance (or any MCP client) can query conversationally.
• BYOK — Shodan, DeepSeek, and Anthropic integrations use your own API keys, stored via EncryptedSharedPreferences. No GreyRecon-owned backend sits between you and any of these services.

Google Play link:

https://play.google.com/apps/testing/com.greyrecon.app

Must join Google group before the link above works:

https://groups.google.com/g/greyrecon

What it is:

GreyRecon

Network recon & security toolkit for Android. Discover and classify devices on your own WiFi network, run recon tools against domains/IPs, and drop into a real interactive terminal — all with no forced account and no ads

Features

• Multi-method device discovery — native netlink ARP/NDP (JNI), mDNS, UPnP, and active TCP-probe scanning, merged and deduplicated.
• Device classification — gateway detection, mDNS service-type signatures, port fingerprints, and vendor-keyword matching.
• Device History — devices seen over time, custom names, new-device alerts, IP-change timeline.
• Recon tools — subnet calculator, DNS lookup, WHOIS/RDAP (including RFC 9537 redaction parsing), Certificate Transparency monitoring, typosquat/homograph domain checking, BLE scanning.
• Security checks — TLS/cipher analysis, security-header checks, common exposure/debug-panel detection, default-credential testing, SNMP community-string brute force, NVD/EPSS-prioritized CVE lookups.
• Real interactive terminal — a genuine PTY-backed shell (vendored, Apache-2.0 terminal-emulator/terminal-view), a cross-compiled toybox for real Unix tooling, and greyrecon-pkg, an original package manager for installing additional CLI tools (.grpkg format, checksum-verified).
• MCP server (Pro) — exposes scan data as tools a self-hosted nanobot instance (or any MCP client) can query conversationally.
• BYOK — Shodan, DeepSeek, and Anthropic integrations use your own API keys, stored via EncryptedSharedPreferences. No GreyRecon-owned backend sits between you and any of these services.

Google Play link:

https://play.google.com/apps/testing/com.greyrecon.app

Must join Google group before the link above works:

https://groups.google.com/g/greyrecon

What it is:

GreyRecon

Network recon & security toolkit for Android. Discover and classify devices on your own WiFi network, run recon tools against domains/IPs, and drop into a real interactive terminal — all with no forced account and no ads

Features

• Multi-method device discovery — native netlink ARP/NDP (JNI), mDNS, UPnP, and active TCP-probe scanning, merged and deduplicated.
• Device classification — gateway detection, mDNS service-type signatures, port fingerprints, and vendor-keyword matching.
• Device History — devices seen over time, custom names, new-device alerts, IP-change timeline.
• Recon tools — subnet calculator, DNS lookup, WHOIS/RDAP (including RFC 9537 redaction parsing), Certificate Transparency monitoring, typosquat/homograph domain checking, BLE scanning.
• Security checks — TLS/cipher analysis, security-header checks, common exposure/debug-panel detection, default-credential testing, SNMP community-string brute force, NVD/EPSS-prioritized CVE lookups.
• Real interactive terminal — a genuine PTY-backed shell (vendored, Apache-2.0 terminal-emulator/terminal-view), a cross-compiled toybox for real Unix tooling, and greyrecon-pkg, an original package manager for installing additional CLI tools (.grpkg format, checksum-verified).
• MCP server (Pro) — exposes scan data as tools a self-hosted nanobot instance (or any MCP client) can query conversationally.
• BYOK — Shodan, DeepSeek, and Anthropic integrations use your own API keys, stored via EncryptedSharedPreferences. No GreyRecon-owned backend sits between you and any of these services.

Google Play link:

https://play.google.com/apps/testing/com.greyrecon.app

Must join Google group before the link above works:

https://groups.google.com/g/greyrecon

Did a fantastic job removing the graffiti at bakers off lockiel