Home LAN audit
Fast inventory → ports → shares/IoT → WAN check → harden loop for networks you own.
Authorized only. Own networks / written permission. Commands for next-to-keyboard reference.
Inventory live hosts
Only on networks you own or administer.
ARP sweep
sudo arp-scan --localnet
Ping sweep
nmap -sn 192.168.1.0/24 -oA home-discovery
DHCP leases
# Router UI → LAN → DHCP clients | cat /var/lib/misc/dnsmasq.leases
Neighbor table
ip neigh
Silent IoT discovery
mDNS
avahi-browse -a -r
NetBIOS
nbtscan 192.168.1.0/24
UPnP maps
upnpc -l
Gentle service census
Start light on cameras/bulbs.
cmd
nmap -sV --top-ports 100 192.168.1.0/24 -oA home-top100
cmd
nmap -p 80,443,8080 --script http-title 192.168.1.1
cmd
smbclient -L //192.168.1.20 -N
WAN / exposure check
cmd
curl -s https://api.ipify.org && echo
cmd
shodan host YOUR.PUBLIC.IP
cmd
# https://www.grc.com/shieldsup
Checklist
- Asset sheet started (IP, MAC, vendor, role, segment)
- WPS and WAN admin disabled on router
- Unexpected UPnP forwards removed
- Default passwords changed on cameras/NAS
- Guest/IoT isolation plan written
beginner
home-network
inventory
router