package icon

ClassyShark3xodus - Scan apps for warnings

Checks apk(s) for known trackers (provided by Exodus) +other warnings and specs.
New in version 2.0-32
# ...ExodusPrivacy NEW database (eof443),

598 exoTrackers(453) = 567+31 signatures for 424+29 identified trackers

# upSDK:30 + permission.QUERY_ALL_PACKAGES

# Chairlock/AI on par:
* inactive apps: permission.PACKAGE_USAGE_STATS for android 10 (Q) & up
* viewManifest with search
* permissions: [internal]protectionLevel + flags/ui...., + Base64 sig

More info :
- https://reports.exodus-privacy.eu.org/api/trackers
- https://gitlab.com/oF2pks/3xodusprivacy-toolbox (31 known additions ²/ETI
Checks apps for code signatures of known trackers (provided by Exodus). Also can list all classes for launchable (via the app drawer) packages.

Can be used against any APK:


* installed: via an app manager or built-in ApplicationInfos/PermissionInfos,

* downloaded: via any file manager (long press and open with ClassyShark3xodus),

* launchable installed: via the first screen list (long press to display dynamic manifest).

Note: doesn't work on odexed/system packages (it's a work-in-progress).

Finally, the app doesn't sync or connect to the Internet and thus cannot sneak on end users.

The app is updated when Exodus updates their list of trackers: https://reports.exodus-privacy.eu.org/api/trackers

(Can display any *.xml file stored on the device.)


Other features:
- Selinux device & per app: appZygote + read_log + shareUser detection,
- dynamic & static androidManifest,
- full permissions device explorer (via Super#1),
- complete apk(s) device explorer (via additional icon)
- install & update Date per app,
- certificate & fileSum fingerprints details at each scan.


ClassyShark3xodus is based on Google's ClassyShark: https://github.com/google/android-classyshark (and apps_Packages Info: com.oF2pks.applicationsinfo).

Versions

Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.

Download F-Droid
  • Version 2.0-32 (32) suggested Added on 2022-05-09

    This version requires Android 5.0 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Permissions
    • read the contents of your shared storage
      Allows the app to read the contents of your shared storage.
    • query all packages
      Allows an app to see all installed packages.
    • measure app storage space
      Allows the app to retrieve its code, data, and cache sizes
      (7.1)
    • request delete packages
      Allows an application to request deletion of packages.

    Download APK 2.5 MiB PGP Signature | Build Log

  • Version 2.0-30 (30) - Added on 2022-02-20

    This version requires Android 5.0 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Permissions
    • read the contents of your shared storage
      Allows the app to read the contents of your shared storage.
    • measure app storage space
      Allows the app to retrieve its code, data, and cache sizes
      (7.1)
    • request delete packages
      Allows an application to request deletion of packages.

    Download APK 2.6 MiB PGP Signature | Build Log

  • Version 2.0-29 (29) - Added on 2022-01-05

    This version requires Android 5.0 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Permissions
    • read the contents of your shared storage
      Allows the app to read the contents of your shared storage.
    • measure app storage space
      Allows the app to retrieve its code, data, and cache sizes
      (7.1)
    • request delete packages
      Allows an application to request deletion of packages.

    Download APK 2.6 MiB PGP Signature | Build Log