XHUNTER

Typing disclaimer: authorized use only, no liability, follow laws and in-app terms

Milestone v2.0 · Download APK · Full setup → USAGE.md · Issues

Screenshots

In-app binder and modules on the operator handset · desktop merge alternative: binder/ · binder/BINDER.md

Home

XHunter home dashboard with SSH and offline data shortcuts

WhatsApp SQLite archive rendered inside xhunter offline mode

Instagram

Instagram offline artefacts browser in xhunter

APK binder — config

In-app binder configuration screen for callback host

APK binder — logs

Binder job log output on Android showing apktool stages

APK binder — activity hook

Binder wizard choosing host activity for payload hook

Network scanner — embedded Nmap

Drop a GIF or still here alongside v2.0 release assets when ready.

╔════════════════════════════════════════════╗
║  nmap · discovery · svc/version · scripts   ║
╚════════════════════════════════════════════╝

Listener

XHunter listener panel awaiting enrolled devices

Remote device · actions

Remote device contextual action sheet in xhunter

Installed apps

Installed packages inventory inside xhunter

Camera

Authorized live camera streaming tile

Microphone

Microphone capture module in xhunter demo

Device info

Telemetry heavy device posture panel

File explorer

Remote file explorer bulk operations pane

Remote file explorer detail drawer

Architecture, features, credits & repo SEO — expand

Operations map

flowchart LR
  subgraph ops [Operator]
    Host[XHunterHostApp]
    Tunnel[SSH_session]
  end
  subgraph edge [Controlled_VPS]
    Sshd[SSHd_GatewayPorts]
    Listen[Tunnel_listener]
  end
  subgraph node [Authorized_client]
    Agent[Merged_apk_agent]
    Recon[Nmap_module]
  end
  Host --> Tunnel
  Tunnel --> Sshd
  Agent -->|"reverse_tunnel"| Sshd
  Listen <-->|"sessions"| Sshd
  Host --> Listen
  Recon -.->|"lab_networks"| Agent

Merged APK HOST = same VPS/DNS as binder/config.txt HOST and the operator SSH profile. Steps: USAGE.md.

Highlights

Track	v2.0
On-device binder	Host APK → hook activity → decode / merge / rebuild / sign via apktool-android (`libaapt2`, no Termux/root for that pipeline).
Desktop binder	`binder/binder.sh` · binder/BINDER.md for CI / scripting.
Network recon	Embedded Nmap presets + advanced options on networks you control — USAGE.md.
Session stack	Reverse SSH, listener, files / comms views, gated remote actions.

What’s new in v2.0

v2.0 tag / xhunter_v2.0.apk (migrate from v2.0-demo).
In-app binder (no desktop CLI required for that flow).
Nmap-class scanning in the same operator build.

About

Operator + VPS + enrolled client ; in-app binder restores xhunter_1.x style convenience with the current tunnel model · optional binder/ for workstations · upstream anirudhmalik/xhunter.

Credits

Repo SEO — maintainer checklist

About repo field — keywords: Android, authorized testing, SSH tunnel, APK bind, Nmap, Apktool.
Topics: android, penetration-testing, red-team, network-scanner, nmap, apktool, ssh-tunnel, mobile-security, security-research, authorized-testing, infosec.
Social preview image (~1200×630) under repo Settings.
Rich GitHub Release notes for v2.0 + screenshots/GIF + legal reminder.

License

MIT — LICENSE. Confirm component licenses in the upstream monorepo if you ship mixed builds.