i reverse engineered my Wi-Fi router with Claude and found a f*cking scary privacy problem...
my provider could see every website I looked up. in plain text.
so I built an open-source app where AI agents guard my network: Claude, ChatGPT or Grok.
→
it runs on your Claude or ChatGPT subscription. Mac & Windows
here’s the build step by step:
• step 1 → open Claude Code on Opus 5.5 in an empty folder, paste the prompt below
• step 2 → stack: one Electron codebase for macOS and Windows. Node does the network checks, no admin rights needed
• step 3 → Opus split the build across 9 parallel agents.
one built the router scanner, one the Wi-Fi + speed test, one the AI agents, one the device list, one the installers
every agent got a reviewer. every reviewer got a fixer. 27 agents before I saw the first screen
• step 4 → the scanner checks 12 doors: provider remote control (TR-069, port 7547), UPnP port-forwards, Telnet, SSH, plain-HTTP admin page, unencrypted DNS, Wi-Fi security, location-map opt-out
• step 5 → first real scan of my network:
provider sees all my DNS lookups, SSH open on the router, UPnP on, 22 neighbour networks fighting for my channel. score 77/100
• step 6 → the AI agents. they read the scan and answer “what should I fix first?” or “is anything on my network suspicious?”
before anything leaves my PC, Bastion strips MAC addresses, device names, Wi-Fi names and the last part of my IP
watch mode re-checks the network every 5–60 min and only wakes the agent when something changed
• step 7 → no API key. Bastion talks to Claude through Claude Code and to ChatGPT through Codex, using the login I already had
• step 8 → a separate security agent attacked every line of it and found 11 holes. all fixed:
the CLIs run with zero tools, read-only, in an empty folder. my question goes in through stdin, so nothing can be injected into a command. it refuses to start if Codex’s shell tool is on
• step 9 → real bugs only real hardware shows:
my Windows is in Russian, so Opus taught the parser Russian netsh labels. Windows 11 hides Wi-Fi info until you allow Location. Cloudflare rate-limited the speed test (HTTP 429), so Opus switched to fewer, bigger requests. next run: works
• step 10 → before the repo went public, Opus checked that none of my IPs, MAC addresses or network names were in the code
one evening. zero lines written by me. that’s it...
agents suggest, you decide. Bastion never logs in to your router, never tries a password and never changes a setting on its own
Find the GitHub repo and the full prompt below ↓
Then read the article on how to reverse engineer anything with Opus 5.5 ↓
Movez @0xMovez
