Skip to content

1.0.8

Choose a tag to compare

View all tags
@actuator actuator released this 01 Dec 04:53
· 22 commits to main since this release
1.0.8
342ba55
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v1.0.8
Added

Always-on manifest hardening checks (no flag required):

Detects insecure android:allowBackup

Detects android:debuggable="true"

Detects android:usesCleartextTraffic="true"

Detects exported ContentProviders missing permissions

Hardening results now included in:

Console scan output

HTML reports

JSON export

Improved

Cleaner and clearer help text (+ hardening note)

Better formatting and severity ordering in HTML/JSON tables

More resilient manifest parsing (handles malformed nodes safely)

Fixed

Edge cases with odd package names and missing manifest attributes

Performance

Hardening checks add negligible overhead (manifest-only, no smali scanning)

Assets 3
Loading