The Universal Network Toolkit

Raw socket power.
Infinite connections.

Netweave gives you direct, unmediated access to any network endpoint on the planet. Connect, listen, scan, transfer, chat — all from a single, category-defining interface. This is networking at first principles.

netweave
$ netweave -l 8080
Listening on 0.0.0.0:8080...
$ netweave api.example.com 443 --ssl
Connected to api.example.com:443.
$ netweave -z -v target.io 20-80
target.io [10.0.1.5] 22 (ssh) open
target.io [10.0.1.5] 80 (http) open

Every network interaction,
handled.

Connect

Reach any host on any port with zero config. TCP or UDP, raw or encrypted. Just tell Netweave where to go.

netweave example.com 8080

Listen

Spin up a server on any port instantly. Accept connections, receive data, or bind applications to the network.

netweave -l 9090

Scan

Zero-I/O reconnaissance. Probe any port range with surgical precision and discover what's listening, silently.

netweave -z -v host 1-1024

Transfer

Move files across any network boundary. No protocol overhead, no handshake tax. Just raw, point-to-point data.

netweave -l 9899 > file.dat

Chat

Ad-hoc real-time messaging between any number of connected parties. Connection brokering built right in.

netweave -l --chat 4444

Every flag is a superpower.

🔓

Quantum Shield™

End-to-end SSL/TLS encryption baked into every connection. Verify certificates, pin ciphersuites, negotiate ALPN — all at the socket level.

--ssl --ssl-verify

Neural Bridge™

Bind any application directly to the network. Execute commands on connection, turning local programs into live network services in one line.

-e COMMAND
🌐

Shadow Route™

Tunnel through HTTP, SOCKS4, or SOCKS5 proxies with authenticated credentials. Your traffic, your path, your rules.

--proxy --proxy-type
📡

Datagram Engine™

Flip to UDP with a single flag. Full datagram support for latency-sensitive workloads, DNS probing, and connectionless architectures.

-u
🛡️

Velvet Rope™

Whitelist and blacklist hosts with allow/deny rules. File-based ACLs for large-scale deployments. Only the right connections get through.

--allow --deny
♾️

Immortal Socket™

Keep-open mode accepts unlimited simultaneous connections with configurable concurrency limits. Your server never sleeps.

-k --max-conns
🔇

Ghost Mode™

Skip DNS resolution entirely. Operate with pure IP addresses for maximum stealth and zero lookup latency.

-n
🔀

Mesh Broker™

Multi-party connection brokering lets clients behind NATs communicate through a centralised Netweave relay. Network topology is irrelevant.

--broker

Three steps to raw network power.

01

Choose Your Mode

Connect to a remote host, listen for inbound connections, or scan a port range. Every mode is one flag away.

02

Configure the Socket

Layer on encryption, set timeouts, bind source addresses, route through proxies — compose your perfect network primitive.

03

Stream Data

Pipe anything through the connection. Files, commands, chat messages, application I/O — if it's data, Netweave moves it.

Connection Simulator

Watch Netweave establish connections in real time. Select a scenario to see raw socket communication unfold.

Client
192.168.1.10
Ready
Server
10.0.1.5:8080
Click a scenario to start the simulation...

Port Scanner Visualization

Watch Netweave's zero-I/O mode sweep through port ranges with surgical precision.

Target: 10.0.1.5 | Ports: 1–1024
0
Ports Accessible
0
Concurrent Connections
0
Protocol Modes (TCP/UDP/SCTP)
0
ms
Avg Connect Latency

Real workflows. Real output.

Banner Grab

$ echo "" | netweave -v -w 3 mail.example.com 25
Connection to mail.example.com 25 port [tcp/smtp] succeeded!
220 mail.example.com ESMTP Postfix

Quick HTTP Request

$ printf "GET / HTTP/1.0\r\n\r\n" | netweave example.com 80
HTTP/1.0 200 OK
Content-Type: text/html; charset=UTF-8
Content-Length: 1256

Remote Shell Binding

$ netweave --exec "/bin/bash" -l 8081 --keep-open --allow 192.168.0.0/24
Listening on 0.0.0.0:8081.
Connection received on 192.168.0.42 49210.

Encrypted File Transfer

# Receiver
$ netweave -l --ssl 9899 > backup.tar.gz
# Sender
$ netweave --ssl host1 9899 << /span> backup.tar.gz

Trusted by the network obsessed.

★★★★★

"Netweave replaced our entire custom socket library. One tool — connect, listen, transfer, proxy. It compound-accelerated our infra velocity by 10x."

James Kirkwood
James Kirkwood VP of Infrastructure, ScaleForge
★★★★★

"The Phantom Probe scan mode is game-changing. We went from zero visibility to full port reconnaissance in under a second. That's a paradigm shift for our security posture."

Finn Kwon
Finn Kwon CISO, WatchTower Security
★★★★★

"I use Netweave for everything. Quick file transfers, banner grabs, debugging HTTP, probing services. It's the Swiss army knife energy I never knew I needed."

Adrian Morrow
Adrian Morrow Solo Developer
★★★★★

"The --broker mode lets our field teams communicate through NAT-traversed connections without any infrastructure changes. High-leverage, zero friction, default alive."

Victor Park
Victor Park CTO, DataMesh

Raw power at every scale.

Start free. Scale infinitely. No hidden fees, no per-byte charges.

Starter
Free
forever
  • TCP connect mode only
  • 1 concurrent connection
  • 5 port scans / day
  • No encryption
  • Community support
Get Started
Team
$59/seat/mo
billed annually
  • Everything in Pro
  • SSL/TLS encryption
  • Proxy support (HTTP/SOCKS)
  • Chat server mode (--chat)
  • Access control (--allow/--deny)
  • Session logging (-o, -x)
  • Team audit trails
  • SSO
Contact Sales
Enterprise
Custom
talk to us
  • Everything in Team
  • Exec binding (-e, -c)
  • Connection brokering (--broker)
  • Lua script execution
  • Unix domain sockets (-U)
  • Custom concurrent limits
  • Dedicated SLA
  • On-prem deployment
Contact Sales

Frequently asked questions.

Netweave natively supports TCP (default), UDP (-u), and SCTP (--sctp), with full SSL/TLS encryption available across all modes. We also support Unix domain sockets (-U) and AF_VSOCK for hypervisor-grade communication.

Absolutely. Enable --ssl on any connection for transport-level encryption. Use --ssl-verify for certificate validation, --ssl-cert and --ssl-key for mutual TLS, and --ssl-ciphers to lock down your ciphersuite selection. Enterprise plans include full session hex-dump logging for compliance.

Yes — both directions. Use --proxy with --proxy-type http, socks4, or socks5 to tunnel outbound connections through a proxy. Or run Netweave as an HTTP proxy server in listen mode with -l --proxy-type http.

Netweave operates at the socket level, so it works anywhere you have network interfaces — localhost, LAN, or air-gapped environments. Unix domain sockets (-U) require no network whatsoever.

Netweave's --chat flag enables a built-in multi-party messaging server. Each connected client gets a unique ID prefix, messages are relayed to all participants, and non-printable characters are automatically escaped for terminal safety. It's real-time collaboration at the socket level.

Backed by mandō

See mandō's portfolio