Lan Scanner

What This Skill Does

The Lan Scanner skill is a robust, security-conscious utility designed to map local network topologies and identify potential vulnerabilities. By leveraging the industry-standard nmap tool, it allows users to discover connected devices, identify open ports, and conduct service-level reconnaissance. This skill is engineered with "security-first" defaults, ensuring that scanning operations are restricted to private IP ranges and preventing accidental scanning of public infrastructure. It provides actionable intelligence by parsing scan results into a clean, human-readable format that highlights critical risks such as insecure protocols (e.g., Telnet, unencrypted HTTP) and exposed management interfaces.

Installation

To integrate this skill into your OpenClaw environment, ensure that nmap is present on your system. On Debian/Ubuntu-based distributions, run sudo apt install nmap. On macOS, use brew install nmap. Once verified, execute the following command in your terminal: clawhub install openclaw/skills/skills/sa9saq/lan-scanner. No API keys or external services are required, as the skill operates entirely locally.

Use Cases

• Security Auditing: Rapidly identify devices on your home or office network that may have insecure services exposed.
• Network Troubleshooting: Verify device connectivity or identify which IP addresses are assigned to specific hardware when standard DHCP lists are unavailable.
• Inventory Management: Generate an overview of your local network assets for documentation or security hardening purposes.
• Vulnerability Assessment: Conduct proactive service detection to ensure that critical vulnerabilities aren't exposed to the internal network.

Example Prompts

1. "Scan my local network and tell me which devices are active and what services they are running."
2. "I think there's a rogue device on my Wi-Fi, can you run a quick scan and list all connected devices and their open ports?"
3. "Run a vulnerability scan on 192.168.1.5 and check if there are any insecure ports open that I should close."

Tips & Limitations

• Target Validation: Always define your subnet clearly. The skill is hard-coded to reject public IPs to ensure ethical usage.
• Permissions: Some features, such as OS detection, require root privileges via sudo. However, basic discovery and port scanning can be performed without administrative access.
• Subnet Size: Avoid scanning subnets larger than /24 to maintain performance. If scanning a /16 or /8 network, expect long execution times.
• Firewalls: Many modern operating systems block ICMP packets (ping). If a device fails to appear, consider using the -Pn flag to force port discovery, but be aware this significantly increases scan duration.