Leetha is a passive network fingerprinting and analysis engine.
It identifies devices on a network by analysing broadcast traffic and protocol exchanges, combining passive observation with optional active service probing to build a device inventory, detect anomalies, and map the attack surface.
This is free and open source software.
Key Features
- Passive-first device discovery without agents, credentials, or device cooperation.
- Optional active probing for deeper service and protocol identification.
- Multi-evidence fingerprinting with weighted confidence scoring.
- Uses protocol sources such as DHCP, mDNS, TCP/IP fingerprints, TLS fingerprints, service banners, and MAC vendor data.
- Captures device hostnames, service ports, model names, and other identity clues.
- Infrastructure-aware filtering to reduce noisy multicast-derived results.
- Device inventory with analyst-editable owner, location, criticality, tags, and notes.
- Includes CLI tools and a web dashboard.
- Attack surface analysis, spoofing detection, and presence monitoring.
Website: github.com/tjnull/leetha
Support:
Developer: tjnull
License: GNU General Public License v3.0
Leetha is written in Python. Learn Python with our recommended free books and free tutorials.
Related Software
| Passive OS Fingerprinting | |
|---|---|
| Ettercap | Comprehensive suite for man in the middle attacks |
| PacketFence | Network access control solution with passive DHCP fingerprinting |
| PRADS | Passive Real-time Asset Detection System |
| p0f | Array of passive traffic fingerprinting mechanisms that are highly scalable |
| satori | Python rewrite of passive OS fingerprinting tool |
| MuonFP | Enterprise-ready passive TCP fingerprinter |
| Leetha | Passive network fingerprinting and analysis engine |
Read our verdict in the software roundup.
 Explore our carefully curated directory of recommended free and open source software, covering every major software category.The directory forms part of our extensive collection of articles for Linux enthusiasts. It includes hundreds of detailed reviews, together with free and open source alternatives to proprietary software from companies such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. LinuxLinks also covers interesting projects worth exploring, Linux-compatible hardware, free programming books and tutorials, and much more. Know a useful free and open source Linux application that we haven’t covered? Tell us about it using our submission form. |
Please read our Comment Policy before commenting.