Egress Recon vs NetMaster

You are on a guest Wi-Fi you did not choose. Something will not connect and nobody can tell you why. Egress Recon answers that from your phone, in under a second. WHICH PORTS GET OUT Sixteen common outbound ports, tried against real public services. You get more than "open" or "closed": • Refused and timed out are different answers. One means something on the network actively rejected the connection; the other means it was dropped silently. • Intercepted is its own finding. The connection succeeded, but the thing that replied was not the service you asked for — a portal, a proxy, or a middlebox re-signing TLS. WHAT NAT YOU ARE BEHIND Your public address, and whether your NAT gives you a reusable mapping or a symmetric one — the reason a video call falls back to a relay. Carrier-grade NAT is reported with its confidence and the evidence behind it, never as a bare label. IPv6 and NAT64 state, and whether you can reach your own public address from inside. WHAT IT DOES TO DNS Whether plain DNS gets out. Whether the network's resolver agrees with a public one. Whether it invents answers for names that cannot exist. And whether DNS over HTTPS and DNS over TLS still work when plain DNS does not — each tested with a real query, not just a connection. WI-FI VERSUS CELLULAR The most useful thing a network tool can tell you is "this Wi-Fi blocks it, and your cellular connection does not." Egress Recon runs the same tests over both and shows the difference — attributing it correctly in both directions, because blaming the café for something your carrier blocks helps nobody. BEHIND A CAPTIVE PORTAL It tells you the portal is there, shows the URL it is pushing you to, and labels the results "before you sign in." Sign in, run again, and it shows you exactly what changed. IT SHOWS ITS WORK Every verdict comes with what was actually observed: the banner the server sent, the certificate it presented and who issued it, the exact response that came back. You can check the reasoning instead of trusting a colored label. Where something cannot be determined, it says so and why. Two ports in the standard set have no public server to test against, so they stay untested rather than showing a red cell that means nothing. Share any run as text, a web page, a PDF, or JSON. Saved runs are grouped by network. PRIVACY • No analytics, no telemetry, no accounts, no ads, no third-party SDKs. • It never scans your network. Every probe goes to a public internet service — never your router, never your other devices. That is why it never asks for local network permission. • It does not read your Wi-Fi name. That needs location permission, which it never requests. • Saved runs stay on your device. A report leaves only when you share it. Egress Recon for Mac and for iPhone and iPad are both free apps on one App Store record. Requires iOS 17 or iPadOS 17.

NetMaster-X is a professional network intelligence suite for engineers, IT admins, and power users who need real diagnostics — Measure latency, map your internet path, survey Wi‑Fi coverage, inspect TLS and HTTP traffic, and run security-focused checks from a single premium dark cyber workspace. CORE NETWORKING • Ping Utility — TCP-based latency, jitter, and loss charts (built for iOS where raw ICMP is unavailable) • Traceroute — hop-by-hop path timing with clear logs • DNS Toolkit — multi-record lookups and DNSSEC-aware workflows • WHOIS Lookup — domain and IP registration intel • Port Scanner — fast and deep scans with service hints and banner capture • Speed Test — download, upload, and jitter snapshots • Subnet Calculator — IPv4 & IPv6 CIDR math • IP Tools — public IP, local interfaces, and MAC vendor lookup WI‑FI & RF • Wi‑Fi Analyzer — current network signal and channel context • Wi‑Fi Site Survey — calibrated floor-plan heatmap with walk mode, wall/obstacle attenuation, distance measure, AP pins, and −67/−70 dBm coverage metrics • RF Interference — educational channel-overlap visualization • Bluetooth Scanner — BLE discovery and RSSI CYBER & ANALYSIS • Protocol Analyzer — paste hex/xxd/Wireshark dumps; parse TLS ClientHello (SNI, ALPN, ciphers, JA3), HTTP, DNS, MQTT • HTTP Capture — session recorder with redirect hops and HAR export • HTTP Client Suite — methods, headers, body, and cURL export • Certificate Inspector — chain and expiry visibility • Vulnerability Scanner — TLS + HTTP header checks • Device Security Audit — jailbreak, VPN/DNS leak style checks • ASN Intelligence & BGP Monitoring — ownership and routing signals • Threat Intelligence — IP/ASN reputation lookups DEVELOPER TOOLS • Socket Tester, MQTT Tester, WebSocket Tester • Remote Diagnostics helpers REPORTING & CLOUD • Internet Path Map — Device → LAN → Gateway → ISP → Internet → Destination with live TCP probes • Timeline View and Report Generator (Markdown/HTML) • Cloud sync and team workspace hooks DESIGNED FOR REAL WORK • Premium metrics • On-device diagnostics first — your probes stay practical and transparent about iOS platform limits • Results you can save and export NetMaster X — diagnose faster, understand more.