DEV Community: Roman Madaev

I Made REGENT: An MCP Server for Configuring OpenWrt Routers Through an AI

Roman Madaev — Tue, 28 Jul 2026 22:09:03 +0000

A while ago my own OpenWrt router simply stopped passing traffic, and everything in the web interface looked perfectly fine. It took me a whole afternoon to find the cause: four separate misconfigurations, each enough to stop traffic on its own, none of them visible on the page where I had set them up

This became the reason for creating REGENT — a server that lets an AI read the entire router at once, tell you what is actually broken, and fix it in plain language, without ever touching the command line yourself

What is it?

REGENT is an MCP server that hands an AI controlled root access to an OpenWrt router. You describe what the network should do in ordinary words, and it works out which uci and ubus commands that takes, in which order, and which service has to reload before the change means anything. It handles ordinary OpenWrt configuration across network, Wi-Fi, firewall, packages and services, and goes deepest on the routed client mode scenario, where the router joins an upstream Wi-Fi network and shares that connection onward with the VPN and ad-blocking the upstream cannot provide

How does it work?

REGENT speaks the Model Context Protocol over stdin and stdout, so the AI client spawns it directly and no network ports are ever opened. It holds a single reused SSH session to the router and turns natural-language intent into ordered uci, ubus and opkg calls. Rather than dumping the raw configuration, its topology tool reads the whole router in one pass and names the specific misconfigurations that leave a router looking healthy while nothing works

Every change is guarded on two fronts. A three-level access gate keeps reading always available, while writes need an explicit gate and destructive actions need a separate confirmation on each call. And before any risky change, the configuration is snapshotted and a deferred restore is armed on the router itself — if connectivity is confirmed afterwards the restore is cancelled, and if it is not, the router puts itself back on its own

Example diagnosis:

UPLINK   wwan via phy1-sta0, 192.168.1.4/24, gateway 192.168.1.1
SERVES   lan  192.168.1.1/24   DHCP OFF
AP       HomeNet  2.4 GHz  →  wwan2

WARNINGS 4
  ! lan is on the same subnet as the uplink — the gateway resolves to
    this router itself and nothing routes out
  ! access point HomeNet is attached to 'wwan2', which is not up
  ! dhcp is not serving lan — clients must be configured by hand
  ! the uplink sits in zone lan, which does not masquerade

Key Features:

Natural-Language Configuration
Say what the network should do, and REGENT works out the exact uci and ubus commands, their order, and the service reload each one needs
Diagnosis, Not a Dump
Its topology tool reads the whole configuration in one call and reports what is broken and why it stops traffic, instead of a listing to interpret by hand
Whole Recipes
Composite intents like "share the uplink with clients" run as one ordered change across several config files, so the AI never has to reassemble the steps itself
Watchdog Rollback
Before a risky change the router is snapshotted and a restore is armed on the device itself, so a change that severs your own connection is undone automatically
Three Levels of Access
Reading always works, changing needs the write gate open, and rebooting, flashing or resetting need the gate plus a separate confirmation on each call
Secrets Stay In
Wi-Fi passwords, VPN keys and subscription links are stripped before anything reaches the model, the command log, or the system log

Roadmap:

apk Support — package handling on OpenWrt 24.10 and newer, where opkg became apk
Wider Device Coverage — verification beyond the single TP-Link Archer C59 confirmed so far
Guest Network — a separate isolated Wi-Fi brought up in one intent

Repository Link

https://github.com/m-o-z-z-i-x/REGENT

I Made NR34P3R: Fast Multi-Threaded Port Scanner for Detecting Open Ports & Services

Roman Madaev — Sun, 22 Jun 2025 01:52:34 +0000

A few months ago I found myself in need of a lightweight port scanner that could deliver actionable insights quickly without bloating system resources or drowning me in irrelevant data. Existing tools felt either too bulky or too barebones, so I decided to build something new — NR34P3R , a fast, multi-threaded port scanner with an intuitive terminal interface and smart service detection

What is it?

NR34P3R is a modern port scanner designed to help security professionals and sysadmins detect open ports and identify associated services with precision. It supports multi-threaded scanning for maximum efficiency, automatically resolves over 3000 service names, and presents results in a clean, color-coded format using Rich tables

Demo

How does it work?

NR34P3R uses a modular scanning engine that leverages Python's socket library and advanced concurrency. You define a target host and specify a port range — single ports, custom ranges (80-443), or full-range scans (1-65535). The scanner then sends asynchronous requests and collects responses, resolving service names and descriptions from its built-in database

When a port is found open, NR34P3R automatically fetches service metadata including protocol, description, and known vulnerabilities (if available), giving you immediate context for further investigation

Key Features:

Ultra-Fast Multi-threaded Scanning
Supports up to 100 concurrent threads for lightning-fast scans across large port ranges
Rich Service Database
Automatically identifies over 3000 services with detailed descriptions powered by WikiLess integration
Colorful Terminal UI
Interactive output with live progress bars, syntax highlighting, and adaptive formatting via Colorama and Rich
Structured Results
Displays findings in organized tables showing port number, service name, status, and description
Flexible Scanning Options
Supports single ports, custom ranges, or full-range scans from 1 to 65535

Roadmap:

ASN Lookup — Identify network ownership for scanned hosts
JSON Reporting — Export scan results for documentation and analysis
Ping Sweep — Check host availability before scanning
Port Test Tool — Verify specific port configurations and firewall rules

Repository Link

https://github.com/m-o-z-z-i-x/NR34P3R

I Made CR4SH3R: Tool for Automating Vulnerability Detection in WordPress Plugins

Roman Madaev — Sun, 22 Jun 2025 01:38:36 +0000

A couple of months ago, I came across a WordPress site that needed a quick security check for obvious vulnerabilities. It all started with routine work: standard checks, searching for known CVEs, and inspecting popular plugins. But what I found made me think more seriously — critical Arbitrary File Download vulnerabilities in several plugins that allowed access to wp-config.php with just a few requests

This became the reason for creating CR4SH3R — a simple yet powerful tool designed to automate the detection of such vulnerabilities within the WordPress ecosystem

What is it?

CR4SH3R is a GUI utility designed to scan websites for Arbitrary File Download vulnerabilities in WordPress plugins. Its main purpose is to detect paths through which the wp-config.php file can be downloaded, and automatically extract sensitive information from it — such as database login credentials and other important parameters

Screenshots

How does it work?

The scanner uses a pre-prepared list of potentially vulnerable URL paths and sends HTTP requests to the target domain. If the server returns the contents of the wp-config.php file, the program parses it and displays only the relevant data. There’s also an option to save results in .xlsx format

Example payload:
/wp-content/plugins/vulnerable-plugin/download.php?file=../../../../wp-config.php

Key Features:

Multi-threaded Scanning
Fast scanning using concurrent request processing. Supports up to 10 simultaneous checks
Automatic Data Extraction from wp-config.php
If the file is found, CR4SH3R automatically extracts values like:
DB_NAME
DB_USER
DB_PASSWORD
DB_HOST
table_prefix
Excel (.xlsx) Report Generation
All findings are saved in a structured and easy-to-share format
Simple GUI Interface
Built using PyQt5 for user-friendly interaction

Roadmap:

Auto-updater — built-in version checker
Config Presets — save and load frequently used scan settings
Session History — track previous scans with timestamps and results
Encrypted .env File — prevent plaintext exposure when bundled into binaries

Repository Link

https://github.com/m-o-z-z-i-x/CR4SH3R