Cripple-NetStrip

Network hardening · DNS sinkhole · Encrypted DNS · Firewall · Traffic classification

Windows / macOS / Linux / Android Python Network Security

Network visibility and control. See everything. Control everything. Trust nothing.

Platforms

Builds ship for Windows, macOS, Linux and Android (APK), plus a headless mode for Raspberry Pi, NUC and home-server deployments that protect a whole LAN.

  • Windows / macOS / Linux — desktop builds with live dashboard, tray control and native OS firewall sync
  • Android — on-device APK build, same kernel-level packet filtering
  • Headless / LAN — run it on the gateway and every device on the network is covered

Three layers, at once

  1. DNS sinkhole — 3.2M+ blocked domains across 49 threat feeds, resolved to 0.0.0.0
  2. Encrypted-DNS interception — DoH/DoT tunnels are caught, not trusted
  3. Packet-level firewall — hardcoded IPs and stealthy IPv6 broadcasts never leave the machine

Works alongside dnscrypt-proxy, torifier, YogaDNS, NextDNS and antivirus/VPN suites without DNS loops or conflicts.

This tool is free and open source. Support the developer: