Shell MIT

xhunter

Android Penetration Tool [ RAT for Android ]

A

anirudhmalik

Dernière activité 2 mai 2026
anirudhmalik/xhunter

936

étoiles

219

forks

5

issues ouvertes

androidandroid-hack-ratandroid-hackingandroid-pentestingexploithackmetasploitratremote-accessremote-shellwhatsapp

Ce README est souvent en anglais.

Screenshots

In-app binder and modules on the operator handset · desktop merge alternative: binder/ · binder/BINDER.md

Home

XHunter home dashboard with SSH and offline data shortcuts

WhatsApp

WhatsApp SQLite archive rendered inside xhunter offline mode

Instagram

Instagram offline artefacts browser in xhunter

APK binder — config

In-app binder configuration screen for callback host

APK binder — logs

Binder job log output on Android showing apktool stages

APK binder — activity hook

Binder wizard choosing host activity for payload hook

Network scanner — embedded Nmap

Drop a GIF or still here alongside v2.0 release assets when ready.

╔════════════════════════════════════════════╗
║  nmap · discovery · svc/version · scripts   ║
╚════════════════════════════════════════════╝

Listener

XHunter listener panel awaiting enrolled devices

Remote device · actions

Remote device contextual action sheet in xhunter

Installed apps

Installed packages inventory inside xhunter

Camera

Authorized live camera streaming tile

Microphone

Microphone capture module in xhunter demo

Device info

Telemetry heavy device posture panel

File explorer

Remote file explorer bulk operations pane

Remote file explorer detail drawer


Architecture, features, credits & repo SEO — expand

Operations map

flowchart LR
  subgraph ops [Operator]
    Host[XHunterHostApp]
    Tunnel[SSH_session]
  end
  subgraph edge [Controlled_VPS]
    Sshd[SSHd_GatewayPorts]
    Listen[Tunnel_listener]
  end
  subgraph node [Authorized_client]
    Agent[Merged_apk_agent]
    Recon[Nmap_module]
  end
  Host --> Tunnel
  Tunnel --> Sshd
  Agent -->|"reverse_tunnel"| Sshd
  Listen <-->|"sessions"| Sshd
  Host --> Listen
  Recon -.->|"lab_networks"| Agent
Loading

Merged APK HOST = same VPS/DNS as binder/config.txt HOST and the operator SSH profile. Steps: USAGE.md.

Highlights

Track v2.0
On-device binder Host APK → hook activity → decode / merge / rebuild / sign via apktool-android (libaapt2, no Termux/root for that pipeline).
Desktop binder binder/binder.sh · binder/BINDER.md for CI / scripting.
Network recon Embedded Nmap presets + advanced options on networks you control — USAGE.md.
Session stack Reverse SSH, listener, files / comms views, gated remote actions.

What’s new in v2.0

  • v2.0 tag / xhunter_v2.0.apk (migrate from v2.0-demo).
  • In-app binder (no desktop CLI required for that flow).
  • Nmap-class scanning in the same operator build.

About

Operator + VPS + enrolled client ; in-app binder restores xhunter_1.x style convenience with the current tunnel model · optional binder/ for workstations · upstream anirudhmalik/xhunter.

Credits

Repo SEO — maintainer checklist

  1. About repo field — keywords: Android, authorized testing, SSH tunnel, APK bind, Nmap, Apktool.
  2. Topics: android, penetration-testing, red-team, network-scanner, nmap, apktool, ssh-tunnel, mobile-security, security-research, authorized-testing, infosec.
  3. Social preview image (~1200×630) under repo Settings.
  4. Rich GitHub Release notes for v2.0 + screenshots/GIF + legal reminder.

License

MIT — LICENSE. Confirm component licenses in the upstream monorepo if you ship mixed builds.

Projets similaires

An all-in-one hacking tool to remotely take over Android devices.

Pythonadbandroidandroid-debug-bridge
AAzeemIdrisi
6,3 k étoiles896

The most powerful security toolkit for Android: without rooting your device. Run security tools like Nmap, Metasploit, and Wireshark on your Android device without voiding your warranty. Access a wide range of penetration testing tools and utilities, right from your Android phone or tablet.

Shellandroidandronixarchlinux
AAryanVBW
837 étoiles109

Magic tool for pentest from your android device!

Java
Zzalexdev
1,7 k étoiles249