XHUNTER

Milestone v2.0 · Download APK · Full setup → USAGE.md · Issues

Screenshots

In-app binder and modules on the operator handset · desktop merge alternative: binder/ · binder/BINDER.md

Home	WhatsApp	Instagram
APK binder — config	APK binder — logs	APK binder — activity hook
Network scanner — embedded Nmap Drop a GIF or still here alongside v2.0 release assets when ready. ╔════════════════════════════════════════════╗ ║ nmap · discovery · svc/version · scripts ║ ╚════════════════════════════════════════════╝
Listener	Remote device · actions	Installed apps
Camera	Microphone	Device info
File explorer

---

Architecture, features, credits & repo SEO — expand

Operations map

flowchart LR
  subgraph ops [Operator]
    Host[XHunterHostApp]
    Tunnel[SSH_session]
  end
  subgraph edge [Controlled_VPS]
    Sshd[SSHd_GatewayPorts]
    Listen[Tunnel_listener]
  end
  subgraph node [Authorized_client]
    Agent[Merged_apk_agent]
    Recon[Nmap_module]
  end
  Host --> Tunnel
  Tunnel --> Sshd
  Agent -->|"reverse_tunnel"| Sshd
  Listen <-->|"sessions"| Sshd
  Host --> Listen
  Recon -.->|"lab_networks"| Agent

Loading

Merged APK HOST = same VPS/DNS as binder/config.txt HOST and the operator SSH profile. Steps: USAGE.md.

Highlights

Track	v2.0
On-device binder	Host APK → hook activity → decode / merge / rebuild / sign via apktool-android (libaapt2, no Termux/root for that pipeline).
Desktop binder	binder/binder.sh · binder/BINDER.md for CI / scripting.
Network recon	Embedded Nmap presets + advanced options on networks you control — USAGE.md.
Session stack	Reverse SSH, listener, files / comms views, gated remote actions.

What’s new in v2.0

• v2.0 tag / xhunter_v2.0.apk (migrate from v2.0-demo).
• In-app binder (no desktop CLI required for that flow).
• Nmap-class scanning in the same operator build.

About

Operator + VPS + enrolled client ; in-app binder restores xhunter_1.x style convenience with the current tunnel model · optional binder/ for workstations · upstream anirudhmalik/xhunter.

Credits

• Apktool
• apktool-android
• JSch

Repo SEO — maintainer checklist

1. About repo field — keywords: Android, authorized testing, SSH tunnel, APK bind, Nmap, Apktool.
2. Topics: android, penetration-testing, red-team, network-scanner, nmap, apktool, ssh-tunnel, mobile-security, security-research, authorized-testing, infosec.
3. Social preview image (~1200×630) under repo Settings.
4. Rich GitHub Release notes for v2.0 + screenshots/GIF + legal reminder.

License

MIT — LICENSE. Confirm component licenses in the upstream monorepo if you ship mixed builds.