Netdiscover is an active/passive address reconnaissance tool, mainly developed for those wireless networks without dhcp server, when you are wardriving. It can be also used on hub/switched networks. Built on top of libnet and libpcap, it can passively detect online hosts, or search for them, by actively sending arp requests, it can also be used to inspect your network arp traffic, or find network addresses using auto scan mode, which will scan for common local networks.  Additional information about Netdiscover may be found on the developer's website at http://nixgeneration.com/~jaime/netdiscover/

​The following custom script may be used to run Netdiscover against a target range.

Steps for use:

  1. Login to Pwn Pulse, select Scripts from the main drop-down menu.
  2. Select Add a script, provide an indicative name for example Custom - Netdiscover and select Bash.
  3. In the scripting window, type the following lines and click the Save button.

    #!/bin/bash
    netdiscover -i eth0 -P -r {{target_range}}
  4. Next, select Tasks from the main drop-down menu, then select Add a task.
  5. On the New Task page, provide an indicative name for the task, for example Run Netdiscover, select the newly created script from the Script drop-down menu, specify a target range ,like 192.168.11.0/24, for the target_range variable.
  6. For the Add to parameter, choose to run the task specific to a single sensor selected from the drop-down menu, or to a group of sensors.
  7. Next, select a Start Time and choose a Frequency how often the task should be run (***).  Afterward, click the Save button.
  8. After the task has completed and assuming the targets were accessible at the time the task was run, the results of the task may be viewed by returning to the Tasks page, then selecting the Results button.​

​​​​Provided below is an example of what the Results of the task may look like:

 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname
 -----------------------------------------------------------------------------
 10.0.0.101      b8:ae:ed:76:e4:98      1      60  Elitegroup Computer Systems Co.,Ltd.
 10.0.0.1        14:59:c0:09:aa:12      1      60  NETGEAR
 10.0.0.4        bc:60:a7:f3:55:48      1      60  Sony Interactive Entertainment Inc.
 10.0.0.10       00:18:4d:ff:ff:07      1      64  NETGEAR
 10.0.0.20       9c:3d:cf:8a:98:34      1      60  NETGEAR
 10.0.0.11       14:fe:b5:bb:75:0e      1      60  Dell Inc.
 10.0.0.17       00:90:a9:b9:5c:41      1      60  WESTERN DIGITAL
 10.0.0.33       9c:3d:cf:7b:0f:ab      1      60  NETGEAR
 10.0.0.13       b0:5a:da:8d:08:92      1      60  Hewlett Packard
 65.96.13.200    14:59:c0:09:aa:11      1      60  NETGEAR
 10.0.0.18       e8:2a:44:99:b3:e5      1      60  Liteon Technology Corporation
 10.0.0.14       60:03:08:98:ec:a8      1      60  Apple, Inc.
 10.0.0.70       d8:61:62:07:a4:fa      1      60  Wistron Neweb Corporation
 10.0.0.41       50:c7:bf:59:8b:69      1      60  TP-LINK TECHNOLOGIES CO.,LTD.
 10.0.0.28       38:8b:59:5d:b9:3f      1      60  Google, Inc.
 10.0.0.26       20:df:b9:06:c9:3f      1      60  Google, Inc.
 10.0.0.43       50:c7:bf:ca:5f:e8      1      60  TP-LINK TECHNOLOGIES CO.,LTD.
 10.0.0.27       7c:2e:bd:62:4c:b9      1      60  Google, Inc.
 10.0.0.42       50:c7:bf:5e:e2:ba      1      60  TP-LINK TECHNOLOGIES CO.,LTD.
 10.0.0.24       20:df:b9:02:79:0a      1      60  Google, Inc.
 10.0.0.62       64:52:99:58:7b:68      1      60  The Chamberlain Group, Inc
 10.0.0.61       64:52:99:57:ec:ab      1      60  The Chamberlain Group, Inc
 10.0.0.71       18:b4:30:d2:0c:85      1      60  Nest Labs Inc.
 10.0.0.72       18:b4:30:cb:e7:6d      1      60  Nest Labs Inc.