Katnet vs Cert Recon

katnet is a network discovery and connectivity toolkit for IT Professionals. See which hosts are online, which ports respond, and what each device advertises-then jump straight into SSH or VNC when you need a terminal or remote desktop. Discover devices Run a TCP sweep across your subnet (with a sensible default port set, or your own list). Results merge with Bonjour browsing and SSDP/UPnP-style hints so cameras, printers, NAS boxes, and servers show up with clearer context. Enrichment includes lightweight probes where appropriate (for example HTTP, TLS certificate summaries, SSH banners, and SNMP where reachable) to build a richer fingerprint-without sending your scan results to us. Built-in clients Use SSH for shell access and VNC for remote screen sharing to machines you are authorized to manage. A URL test tab helps verify HTTP/HTTPS reachability and status. A Status view summarizes local addressing and network context. Privacy katnet is built for on-network, on-device use. Discovery talks to your routers, printers, and servers over local Wi-Fi or Ethernet. You control when scanning runs. Grant Local Network access when iOS asks so multicast, Bonjour, and LAN probes can work. Important Only scan networks and systems you own or have explicit permission to test. Unauthorized scanning or access may violate law or policy.

Cert Recon reads the TLS certificate chain a server presents and explains it in plain language: who issued it, when it expires, which names it covers, and whether this device trusts it. It also answers a question most computers cannot. Your phone holds two independent paths to the internet at once. Cert Recon asks the same host over Wi-Fi and over cellular and compares the answers, because a network that intercepts TLS has to re-sign the connection with its own certificate authority. The cellular path shows you what the certificate should have been. Hotel, airport, conference and corporate guest networks do this routinely. On a device with one path, it still catches the common case: a certificate that this device trusts yet carries no Certificate Transparency timestamps is being vouched for by an authority installed on the device rather than a public one. That is how a filtering proxy works, and Cert Recon names the authority doing it. WHAT YOU GET • The full chain, leaf to root, exactly as the server presented it • Every field: subject, issuer, validity, key type and size, signature algorithm, serial, SANs with their types, key usage, extended key usage, basic constraints, certificate policies, OCSP and CRL URLs, CT timestamps • SHA-256, SHA-1 and public-key (SPKI) fingerprints • Trust evaluated against this device's store, with the reason it failed rather than a red cross • Expiry countdown, weak-key and weak-signature flags, hostname mismatch and self-signed detection • Interception check: Wi-Fi against cellular, issuer sanity, transparency timestamps, captive-portal awareness • Pin a host's key and be told if it changes • History of what you have inspected, one tap to run again • Export the chain as PEM or the finding as a text report • Configurable port and SNI • iPhone and iPad, dark-first PRIVACY Nothing leaves your device. No account, no analytics, no tracking, no third-party frameworks. Hostnames you inspect are not transmitted anywhere. Pinned hosts and history stay on the device. Cert Recon is a certificate inspector: it completes the TLS handshake, reads the certificate, and closes. It sends no request body and no HTTP to the host you name. FREE No in-app purchases, no subscription, no gated features. Part of the 404 Tools Recon suite; hand any host straight to the other Recon apps you have installed.