k3ystr0k3r/routeglassMulti-threaded router fingerprinting tool that identifies web-exposed network devices by analyzing HTTP responses, headers, and favicon hashes for security assessments.
Routeglass is a fast, multi-threaded router fingerprinting tool written in Go.
The goal of the project is simple: identify web-exposed routers, firewalls, gateways, and embedded network devices by fingerprinting HTTP responses instead of relying solely on open ports.
Routeglass currently includes hundreds of fingerprint rules covering consumer, enterprise, ISP, and industrial networking equipment.
Clone the repository:
git clone https://github.com/K3ysTr0K3R/Routeglass.git
cd Routeglass
Install dependencies:
go mod tidy
Build:
go build
Or specify an output binary:
go build -o routeglass
./routeglass -ip 192.168.1.1
./routeglass -ip 192.168.1.0/24
./routeglass -ip 192.168.1.10-192.168.1.100
./routeglass -f targets.txt
Example targets.txt
192.168.1.1
192.168.1.0/24
10.0.0.5-10.0.0.50
./routeglass -ip 192.168.1.0/24 -ports 80,443,8080,8443
./routeglass -ip 192.168.1.0/24 -t 250
./routeglass -ip 192.168.1.0/24 -o results.txt
./routeglass -ip 192.168.1.0/24 -o results.txt -append
./routeglass -ip 192.168.1.1 -user-agent "Mozilla/5.0"
./routeglass \
-ip 10.0.0.0/16 \
-ports 80,443,8080,8443 \
-t 500 \
-o results.txt
Routeglass - Coded By: K3ysTr0K3R
192.168.1.1:80 [FOUND] MikroTik RouterOS
10.0.0.1:443 [FOUND] Cisco IOS Router
172.16.10.5:8443 [FOUND] Fortinet FortiGate
192.168.10.254:80 [FOUND] TP-Link Archer AX55
10.20.1.15:80 [FOUND] ASUS RT-AX86U
Scan complete.
500 targets scanned.
37 device(s) found.
Routeglass performs fingerprinting using multiple detection methods.
Detects products based on webpage titles.
Example:
<title>MikroTik RouterOS</title>
Inspects response headers.
Example:
Server: cisco-IOS
Searches HTML content for known vendor strings.
Example:
Powered by RouterOS
Supports regex fingerprints for identifying model families.
Example:
(?i)tp-link\s+[a-z0-9-]+
Calculates the MD5 hash of a favicon and compares it against known fingerprints.
This allows Routeglass to identify devices even when login pages have been customized.
Routeglass contains fingerprints for hundreds of networking products including:
...and many more
Routeglass is designed to efficiently fingerprint large address ranges while maintaining a lightweight memory footprint.
Features include:
Traditional port scanners tell you what ports are open.
Routeglass tells you what device is actually running behind those ports.
Instead of simply reporting that TCP/80 is open, Routeglass attempts to identify the vendor and exact product using multiple fingerprinting techniques.
This makes it useful during:
This project was created for security research, defensive security assessments, asset inventory, and authorized penetration testing.
Only scan systems that you own or have explicit permission to assess.
The author assumes no responsibility for misuse or damage caused by this software.
| Flag | Description | Default |
|---|
-ip | Single IP, CIDR or IP Range | - |
-f | Read targets from file | - |
-t | Number of worker threads | 50 |
-ports | Comma-separated ports | 80 |
-o | Output file | - |
-append | Append instead of overwrite | false |
-user-agent | Custom User-Agent | Random Browser |