KKND Detector 3.0
What is new in 3.0:
- Expanded root detection coverage across Kotlin and native layers
- Added kernel and patch freshness analysis to compare kernel build time against Android and boot image security timelines
- Added stronger init rc scanning for root framework traces, services, and startup artifacts
- Re-enabled environment variable scanning with stricter matching
- Improved runtime artifact detection and reduced false positives in service, mount, and framework sweeps
- Refined mount and native checks to avoid noisy detections on normal locked devices
- Improved handling of debug_ramdisk, Magic Mount style traces, and suspicious file descriptor heuristics
- Removed low-value install source reporting from the main scan
- Excluded KeyAttestation from app-based root warnings
- Added long-press copy for detection cards
- Improved release stability and overall detector consistency
Included commits:
- 7822062 Bump app version to 3.0
- d85c4ee Expand root detection for 3.0
- 03755c3 Refine kernel window and app source checks
- e217b88 Add kernel and patch freshness checks
- 7e504a2 Reduce false positives in mount and native checks
- 34c8278 Fix external GitHub links in settings
- 793d75a Refine root detector heuristics
- 371ebe0 Add long-press copy for detection cards
- 1e1c589 Harden detector signals and reduce false positives
- a7de121 Stabilize release build and Gradle config
- ccf3f6c Update README download instructions
- 74a638c Tighten root detection heuristics