Netrik is an open source network toolkit for Android, made for network analysts, pentesters and anyone curious about the network they're on. It runs entirely on the phone, without root, and doesn't track you.
Netrik is available on GitHub Releases page.
| Tool | What it does |
|---|---|
| Current network | Local IP, gateway and public IP at a glance; a details sheet with network name, signal, band, channel, BSSID, mask/CIDR, DNS and IPv6, with one-tap copy. The public IP is only looked up when you ask for it (or always, if you turn that on in Settings). |
| Ping | Real-time replies with seq, TTL and time, count or continuous mode, latency chart and statistics (loss, min/avg/max, jitter). |
| Traceroute | Hop-by-hop route with reverse DNS and the latency of each router. |
| Devices | Finds the devices on your local network (ping + TCP probing, mDNS, NetBIOS, UPnP, MNDP and Ubiquiti discovery), with vendor, hostname and quick actions. Checks the Top 100 ports of each device to tell cameras, printers, TVs, NAS and other devices apart (can be turned off in Settings). |
| Neighbor Discovery | Finds MikroTik routers via MNDP (identity, board, RouterOS version, MAC, interface, uptime) and Ubiquiti devices via their discovery protocol, with quick actions. The Devices scan uses the same announcements to fill in names, MACs and models. |
| Wi-Fi | Nearby networks with security (flagging WPS), channel, width and signal quality, plus a 2.4/5/6 GHz spectrum chart. A live signal meter to walk around with (optional beeps), the least congested channel per band, and the distance to access points that support Wi-Fi RTT (802.11mc). |
| Port Scanner | TCP and UDP scans of a single host or a whole network (up to /22), with Top 100/Top 1000/custom port lists and service names. Reads what each open service says (SSH/FTP/SMTP greetings, HTTP Server header, TLS certificate), flags services that are risky when exposed (Telnet, SMB, RDP, VNC, UPnP, unauthenticated databases...) and opens web services in the browser. |
| MAC/OUI Lookup | Vendor of a MAC address from the offline IEEE database (MA-L, MA-M and MA-S), updatable from the official files. |
| Port Knocking | Saved knock sequences (TCP, UDP and ICMP steps) in groups, with a delay between knocks, an optional check that the port opened, and JSON export/import. |
| Subnet Calculator | IPv4 and IPv6: network, mask, wildcard, broadcast, host range and count, address type and reverse DNS zone; split a network into equal parts or with VLSM; summarize networks, addresses and ranges into the fewest CIDR blocks and a single supernet. Works offline. |
| SSH | Saved hosts in groups, password or key authentication (Ed25519, RSA, ECDSA), host key verification and an xterm terminal with tabs, extra keys and background sessions. |
Settings let you lock Netrik with a 4-digit PIN or your fingerprint, pick the theme (system, light or dark), use your wallpaper colors (Material You) or the Netrik colors, enable pure black for AMOLED screens and choose the app language.
- No ads, no analytics, no tracking.
- The app only reaches the internet when you ask it to: the public IP lookup (
api.ipify.org, on tap or automatically if you enable it), the OUI database update (standards-oui.ieee.org) and, of course, the hosts you ping, scan or connect to. - SSH passwords and private keys are encrypted with a key kept in the Android Keystore and never leave the device.
- Read the full security policy, also available in Settings → Security policy. Found a vulnerability? Report it privately as described there, not in a public issue.
Download netrik-release.apk from the latest release and open it on your phone. Android asks you to allow installing apps from your browser or file manager the first time.
Before installing, you can check that the file is genuine:
- Checksum: each release also has
netrik-release.apk.sha256. On a computer, runsha256sum -c netrik-release.apk.sha256in the folder where you saved both files. - Signature: every release is signed with the same key.
apksigner verify --print-certs netrik-release.apkmust show the certificate fingerprint published in SECURITY.md. Android itself refuses an update signed with a different key.
Google Play Protect may offer to scan the app, since it doesn't come from Google Play. In some countries (Brazil since September 2026, more later) certified Android devices also ask for apps from verified developers; if Android blocks the install, see Verifying a release for the options.
- Android 8.0 (API 26) or later.
- Some data depends on Android permissions, and the app explains each one before asking:
- Location (Wi-Fi tab): Android only gives the list of Wi-Fi networks and the network name to apps with precise location.
- Nearby devices / local network (Android 17+): needed to talk to devices on your local network.
- Notifications (Android 13+): shows the "active SSH sessions" notification.
- Android doesn't let apps read the ARP table, so a device's MAC address only shows up when the device announces it itself. Netrik says so instead of guessing.
You need Android Studio (or the Android SDK command line tools) and JDK 17.
git clone https://github.com/henriquesebastiao/netrik.git
cd netrik
./gradlew assembleDebug # APK in app/build/outputs/apk/debug/
./gradlew test # unit testsNew to Android development? CONTRIBUTING.md walks you through everything, from installing the tools to opening a pull request.
Kotlin · Jetpack Compose · Material 3 · Hilt · Room · DataStore · Navigation Compose · Coroutines/Flow · JSch · Bouncy Castle · Termux terminal-emulator.
The code is organized by feature (feature/ping, feature/ssh, …) on top of shared modules in core/ (design system, network, database, settings). See CONTRIBUTING.md for a tour.
Bug reports, ideas, translations and code are all welcome.
- Found a bug? Open an issue (also reachable from Settings → Report a bug).
- Want to help with code or translations? Read CONTRIBUTING.md.
Netrik is free software, licensed under the GNU General Public License v3.0.
It includes third-party work under their own licenses (also listed in Settings → Open source licenses):
- Roboto Flex and JetBrains Mono fonts — SIL Open Font License 1.1.
- Material Symbols icons — Apache License 2.0.
- JSch (mwiede fork) — BSD license; Bouncy Castle — MIT license.
- Termux terminal-emulator and terminal-view — Apache License 2.0.
- Vendor data from the IEEE MA-L, MA-M and MA-S public registries; port ranking from the Nmap project (numbers only); service names from the IANA port registry.