Reconix v1.16 — engine 4.3

Reconix Android v1.16 — engine 4.3

Reconix Android app v1.16 carries engine 4.3.

What is new in engine 4.3

• Mass assignment / BOPLA (CWE-915). The API fuzzer now tries
  undeclared fields such as role, is_admin and price with test
  values, and only reports a finding when a read-back confirms the
  value was really saved. No proof, no finding.
• Cloud-metadata SSRF: IBM and OpenStack. The server-side request
  forgery probes now cover IBM Cloud and OpenStack metadata addresses
  alongside the existing AWS probe. Google and Azure are not probed:
  they need headers no SSRF probe can send.
• Phone shell, render fixes. The phone Home/Scan/Findings/Tools
  shell now carries the fixes found by rendering it on a real phone:
  the header row is truly left/right, Scan and Tools button labels are
  readable, and the Findings clutter above the cards is hidden on
  phone only. Desktop UI is unchanged.

Note on skipped versions

App version v1.15 (engine 4.2 + phone shell) was built but never
published: no source push and no release was made for it, so there
are no release notes for it. v1.16 supersedes it.

Install

Install the APK from the release asset over USB. Do not install APKs
received as chat attachments: large chat downloads can arrive
truncated and fail to parse. This build is signed with the same
signer as v1.5–v1.15, so it updates in place.

Reconix v1.14 — engine 4.2

Reconix v1.14 — engine 4.2.

• New phone design: risk-gauge Home with severity breakdown, mode pills on Scan, filter pills and finding cards on Findings, grouped More menu (Assess / Automate / App), mint accent on the phone only.
• VAPT tab kept separate from Scan, restyled to match the new phone design.
• Desktop UI unchanged; engine unchanged from 4.1 (test suite 292/292).
• Install on the phone via USB (large chat downloads can arrive truncated). Updates in place over v1.13.

Reconix v1.13 — engine 4.1

Reconix v1.13 — engine 4.1.

• All 14 features from engine 4.0: subdomain takeover, JS secrets, GraphQL, WebSocket, CMS packs, Nuclei templates, exposed cloud storage, CVE matching, scan diff, Word/Excel/JSON/Jira/GitHub reports, false-positive marking, custom check builder, login recorder, AI phase 2.
• Separate Scan and VAPT tabs (engine 4.1): each tab has its own target and options, and progress survives tab switches.
• Proof before reporting throughout: Nuclei matches and CVE matches are labelled advisory-only and never mixed into proven findings.
• Install on the phone via USB (large chat downloads can arrive truncated). Updates in place over v1.12.

Reconix v1.12 — engine 3.33

Reconix v1.12 — engine 3.33.

• Scanner view split into separate SCAN and VAPT SCAN cards, each with its own target field (VAPT falls back to the Scan target when empty).
• Local AI assistance (engine 3.32): AI report writing, AI payload ideas, AI logic-test ideas, AI finding ranking — all local-only via Ollama, off by default, and the engine still proves every finding before reporting.
• Third-party Subresource Integrity scan and XPath injection check (engine 3.31), plus the upload-bypass variants from 3.29/3.30.
• Install on the phone via USB (large chat downloads can arrive truncated). Updates in place over v1.11.

Reconix v1.11 — engine 3.31

Reconix Android app v1.11, carrying engine 3.31.
New in this version:

• Third-party Subresource Integrity scan (CWE-829, passive): flags cross-origin scripts and stylesheets loaded without a usable integrity hash.
• XPath injection check (error-based + boolean differential).
• The app now carries engine 3.31 in full, which includes the 3.29/3.30 file-upload bypass variants.
  Same signer as v1.10, so this is a clean in-place update. Install via USB; the file is also attached below.

Reconix v1.10 — engine 3.28

Reconix v1.10 — engine 3.28

The full Reconix scanner (engine 3.28) as a standalone Android app.
Install it, open it, scan — everything runs on the phone.

New in v1.10

• Notification permission, proper flow — the app now follows the full flow: check, explain why with a dialog, ask, and if denied permanently it guides you to the app Settings page to turn notifications back on. Before, a denied answer was silently ignored and the running-engine notification stayed invisible.
• Crash log capped — the on-device crash log is trimmed to the newest 48 KB once it passes 64 KB, so the startup read stays fast no matter how many crashes accumulate. Before, it grew without limit.

Since v1.5

• Six Android fixes (v1.9) — report downloads work on the phone now (the download manager sends the loopback API token as a header, fixing the 401s); pages never serve stale after an update (no-store); the back button switches tabs instead of exiting the app; a watchdog restarts the engine if it dies while the app is open; notification taps no longer open a second copy of the app; pinch-zoom is off, so the app stops feeling like a browser.
• Looks-like-a-browser fixes (v1.8) — doubled target URLs (from a pasted-twice target) are collapsed to one, and the WebView now honours the mobile viewport, so findings lay out full-width like an app.
• Mobile progress-ring fix (v1.7) — the ring label no longer runs off the screen on small phones.
• Engine 3.22–3.28 — permission-matrix fixes and matrix table in the PDF report; every injection finding records its exact payload, shown in all reports; one-click Full VAPT run with automatic PDF download; a query-string append variant in the 403 Tester.

Requirements

• Android 7.0 or newer (arm64 or 32-bit ARM)
• ~35 MB free space

Verify your download

• Size: 30,301,790 bytes (~30.3 MB)
• SHA-256: d97f3d85f75bbf05e86b37d7b5c0c1c90aaafa68093cb09b01e8e2f4d4452d2c

If the size or checksum doesn't match, the download was corrupted — fetch it again. Never install an APK that arrives truncated; a corrupted download fails to parse on install.

Reconix v1.5 — engine 3.21

The full Reconix scanner (engine 3.21) as a standalone Android app.

Highlights:

• Loopback API authentication (security fix): the app's local API used to accept requests from any local process because no token ever existed. Now a per-install random token is minted on first run, injected into the app's own pages only (no endpoint serves it), and required on every state-changing request.
• Two new check classes: JavaScript prototype pollution (proven two ways: server JSON-merge and real browser DOM check) and insecure deserialization probes (benign payloads only, with a control-response guard).
• Payload refresh fixed: the update marker now forces a fresh copy of the engine on update.

Verify your download: 30,300,194 bytes, SHA-256 9a256b9505755592768ec8a5467ce36e2f2c1140fa83bb66c0a2efe2bcd8b158. Full notes in RELEASE_NOTES_v1.5.md on the main branch.

Reconix v1.4 — first public release

Reconix v1.4 — first public release

The full Reconix scanner (engine 3.20) as a standalone Android app.
Install it, open it, scan — everything runs on the phone.

Highlights

• New mobile interface — bottom tab bar (Home / Scan / Findings /
  History / More), a scanner screen with a live progress ring and phase
  feed, and findings as readable cards: What / Where / Why / Fix
• Working report exports — HTML, JSON, CSV, PDF, DOCX and HAR now save
  to the phone's Downloads folder
• Self-recovering engine — if the scanner process ever stops, the app
  restarts it and takes you back in automatically
• Release hardening — non-debuggable build, app backup disabled
• Scan reliability — the engine holds a wakelock during scans, so long
  assessments keep running with the screen off

Requirements

• Android 7.0 or newer (arm64 or 32-bit ARM)
• ~35 MB free space

Verify your download

• Size: 30,295,601 bytes (~30.3 MB)
• SHA-256:
  72005ed95118e9dcc07810d7f6570505aa13c4e258bf7612711cd73f4eb38094

If the size or checksum doesn't match, the download was corrupted — fetch
it again before installing.

Notes

• Only scan targets you own or are explicitly authorized to test.
• The browser-based screenshot engine and nuclei integration from the
  desktop build are not included in the Android build.