Enlyzr
ZRAK
Your pocket network security toolkit
ZRAK (in the app: Z.R.A.K., Zone Recon & Analysis Kit) turns an Android phone into a toolkit for looking at the wireless world around it: which Wi-Fi networks and Bluetooth devices are in range, which devices share your network, and whether something there looks wrong. It is made for examining and defending a network that is yours or that you are allowed to test, and for learning how networks and their weak points work. It is also made for teaching: free lab guides for schools are built around it.
For Android 12 and newer.
- 200+tools for Wi-Fi, the local network and Bluetooth
- 36guided workflows, from a quick check to a full audit
- 2modes: RECON to investigate, SOC to keep watch
- 6report formats: JSON, CSV, Markdown, PDF, CEF, Syslog
What the tools show
The Wi-Fi networks in range
Every network the phone can hear, with its kind of security, signal strength and channel, a chart of how crowded each channel is, and a history of what was seen where and when.
The devices on your network
A scan lists the devices that share your network with IP address, host name and vendor, the services they announce and the ports they leave open. Save a baseline and compare later to see what is new, gone or changed.
Warning signs, explained
With monitoring on, ZRAK watches for a changed router address, forged DNS answers, a second DHCP server, an imitated access point and probes of the phone's ports. Each event says why it matters and lists harmless causes.
Bluetooth devices nearby
Bluetooth Classic and Low Energy devices with maker, type and the services they offer. The app scores each device's risk and points out the ones that behave like a tracker: still close after you have moved on.
Signal and radio
Follow a signal to the access point or Bluetooth device it comes from, walk a building to map coverage as a heatmap, and see which channels in the 2.4 and 5 GHz bands are congested.
Privacy and hidden devices
Whether the phone hides its hardware address and whether a VPN leaks. For a hotel room: a scan for devices from makers of surveillance cameras, and a search with the camera for lens reflections and infrared lights.
Checks of DNS, TLS and login pages
DNS answers are compared with those of public resolvers, TLS certificates are checked for expiry, self-signing, a wrong name and weak keys, and a public Wi-Fi's login page is examined before you trust it.
Analysis, map and reports
The Analyzer scores every stored network and Bluetooth device from 0 to 100 and lists the reasons. Findings appear on a map, and reports are exported as JSON, CSV, Markdown, PDF, CEF or Syslog.
Guided workflows for learning
36 workflows chain the tools into step-by-step procedures at four levels, from quick checks of 10 to 20 minutes for beginners to full assessments. Every step says why it matters, and most tools carry their own help.
Questions and answers
Who is ZRAK for?
For people who want to see what is going on in the wireless surroundings of their phone: owners and administrators of a network, people who care about their privacy, security professionals, and learners. It is also used for teaching network security in schools; the links on this page lead to the teaching materials.
May I use it on any network?
Use it on a network that is yours or that you have permission to examine. Listing the Wi-Fi networks and Bluetooth devices in range only listens. Several tools, however, send probes to other devices; they are for authorised assessments only. Examining somebody else's network without permission can be against the law.
Which phones does it run on, and does it need root?
ZRAK runs on Android 12 and newer and needs no root, no developer mode and no special Wi-Fi hardware. It works best on a Google Pixel, because some manufacturers slow down scanning in the background; switching off battery optimisation for the app helps there. On a rooted phone more works: without root Android hides most hardware addresses of the devices on a network, so the checks that depend on them are limited.
Can it see everything that happens on a network?
No. An Android app cannot capture other devices' radio traffic, so ZRAK works with what Android's scans and ordinary network connections show. Some detectors therefore conclude from side effects rather than observe an attack directly, and a finding is a reason to look closer, not a proof. Each event lists harmless causes next to the suspicious one.
What are Basic and Advanced mode, and RECON and SOC?
Basic mode shows about 33 essential tools and hides technical details such as hardware addresses and signal values in dBm; Advanced mode shows all tools and all details. You choose at first start and can change it in the settings. RECON is the hands-on side with tabs for Wi-Fi, Bluetooth, map, events, analysis and tools. SOC is for leaving the app running: it gathers events into incidents and shows how the surroundings change over time.
What does the app know about me, and where does it go?
ZRAK has no account, no advertising and no analytics, and it sends nothing to Enlyzr. What it finds, including the places where it found it, is kept on your device until you delete it, and it is not part of Android's backup. Some tools ask internet services for an answer, for example the map, the connection checks and the look-up of an IP address; the privacy policy names every one of them.
What does it cost?
Nothing. ZRAK is free. There is nothing to buy in the app, no subscription and no advertisements.
ZRAK in the classroom
Z.R.A.K. Education
My website for schools and teachers: free lab guides and teaching materials for network security, built around this app.
The app on Z.R.A.K. Education
The app from a teacher's side: its two modes, which devices suit a classroom, and a checklist for setting up a lesson.
Coming to Google Play
ZRAK is not listed on Google Play yet. This page will carry the link as soon as it is.
Questions or feedback: enlyzr@gmail.com