Mole Security Toolkit

Mole is a hands-on security toolkit for network professionals, IT administrators, and security-conscious users who want to understand what is happening on their networks and devices.

FEATURES

Wi-Fi Survey

Scan nearby wireless networks, inspect signal strength, encryption standards, and connected access points. Run a channel survey to identify congestion and rogue SSIDs.

Network Sweep

Discover all hosts on your local network using mDNS, SSDP, NetBIOS, and ARP. View open ports and running services across your subnet.

Bluetooth & BLE Scanner

Find nearby Bluetooth Classic and Bluetooth Low Energy devices. Inspect device names, addresses, and advertisement data.

NFC Reader

Read and inspect NFC tags before trusting them. View raw payloads and decoded NDEF records.

Honeypot

Run decoy listening sockets in the background to detect unauthorised connection attempts. Get notified the moment something probes your device.

Device Audit

Review your device's security posture — app permissions, developer options, backup settings, and hardware capabilities.

Traffic Monitor (uses a local VPN)

Monitor this device's own network traffic in real time and flag unexpected connections or unusual activity. To do this, Mole uses Android's VpnService API to act as a local VPN on your device. This is the only mechanism Android provides for an app to observe the network connections its own device is making, so VpnService is required for this feature to work. Android shows its own consent dialog before the first capture, and you can stop the capture at any time.

Exposure Check

Check whether email addresses or credentials appear in known data breaches.

QR Scanner

Scan QR codes and inspect the decoded URL or payload before following any link.

Reports

Export detailed findings as shareable security reports.

BACKGROUND MONITORING

Scheduled monitors run continuously in the background and re-arm automatically after a device restart. All monitoring is local — no data leaves your device.

VPN SERVICE DISCLOSURE

Mole uses Android's VpnService API for one purpose only: to power the Traffic Monitor feature described above, so that you can see the network connections your own device is making.

The VPN is entirely local to your device. Mole does not run a VPN server and does not route your traffic through any remote or third-party server. Traffic is forwarded on to its real destination unchanged, so your connectivity is unaffected. Mole decrypts nothing — it identifies destinations only from information protocols already send in the clear, such as the TLS SNI, the HTTP Host header and DNS queries. Connection records stay on your device and are never uploaded.

Mole is not a privacy, proxy or unblocking VPN, and does not use VpnService to filter, redirect, block, modify or monetise your traffic, or to serve ads. Starting a capture always requires your explicit consent through Android's system VPN dialog, and stopping it tears the VPN down immediately.

Mole installs on any Android device and reports which hardware capabilities are unavailable rather than refusing to run.