KKND Detector 3.1

What's new in main

• 71 native detection functions across all root/hook vectors
• SELinux attr/current write probe — detects root contexts in policy
• DirtySepolicy access rule checks via selinux_check_access
• Resetprop modification detection across all partition prop files
• PIF / TrickyStore spoof config detection
• Floating MD3 pill navigation bar
• All contributors shown in the About section with GitHub avatars
• Split APKs: arm64-v8a and armeabi-v7a

Two APKs are attached below — pick the one matching your device ABI.

Full Changelog: 3.0...main

KKND Detector 3.0

What is new in 3.0:

• Expanded root detection coverage across Kotlin and native layers
• Added kernel and patch freshness analysis to compare kernel build time against Android and boot image security timelines
• Added stronger init rc scanning for root framework traces, services, and startup artifacts
• Re-enabled environment variable scanning with stricter matching
• Improved runtime artifact detection and reduced false positives in service, mount, and framework sweeps
• Refined mount and native checks to avoid noisy detections on normal locked devices
• Improved handling of debug_ramdisk, Magic Mount style traces, and suspicious file descriptor heuristics
• Removed low-value install source reporting from the main scan
• Excluded KeyAttestation from app-based root warnings
• Added long-press copy for detection cards
• Improved release stability and overall detector consistency

Included commits:

• 7822062 Bump app version to 3.0
• d85c4ee Expand root detection for 3.0
• 03755c3 Refine kernel window and app source checks
• e217b88 Add kernel and patch freshness checks
• 7e504a2 Reduce false positives in mount and native checks
• 34c8278 Fix external GitHub links in settings
• 793d75a Refine root detector heuristics
• 371ebe0 Add long-press copy for detection cards
• 1e1c589 Harden detector signals and reduce false positives
• a7de121 Stabilize release build and Gradle config
• ccf3f6c Update README download instructions
• 74a638c Tighten root detection heuristics

KKND Detector 2.0

KKND Detector 2.0 is a major update focused on stronger detection, better reliability, and a cleaner overall experience.

What's new in 2.0:

• Improved root detection across both Kotlin and native layers
• Stronger checks for mount manipulation, runtime injection, Zygisk-style behavior, and system modification traces
• Better handling of locked bootloader devices to reduce false positives on clean, non-rooted systems
• Improved hardware security evaluation and verified boot trust handling
• Added warnings for non-root power-user apps such as Shizuku, Termux, and MT Manager
• Added severity filtering so High, Medium, and Low results can be viewed separately
• Improved light and dark theme behavior for status indicators
• Updated app icon and general UI polish

Made with ❤️ by Juan Ma

Root Detector

Initial public release of Android Root Detector.

This release introduces a simple Android application designed to detect
whether a device may be rooted or running in an insecure environment.

Features

• Detection of su binary in common system locations
• Detection
  of known root management applications - System integrity checks
• Suspicious file and path detection - Native root detection techniques

Notes

• This project is intended for educational and security research purposes.
• APK included in this release can be installed directly on Android devices.

Made with ❤️ by Juan Ma