Update README.md

This commit is contained in:
Jesse Li-Yates 2026-06-04 18:38:27 +10:00 committed by GitHub
commit 93083463b5
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

421
README.md
View file

@ -1,161 +1,296 @@
<p align="center">
<img src="screenshot/atkbanner.png" alt="ATK Banner" />
<img src="assets/appicon.png" alt="ATK" width="132" />
</p>
![GitHub all releases](https://img.shields.io/github/downloads/jegly/ATK/total)
### Preview Demo Screenshots
<h1 align="center">ATK — Android Toolkit</h1>
<p align="center">
<img src="screenshot/1.png" width="100%" alt="1">
<img src="screenshot/2.png" width="100%" alt="2">
<b>The all-in-one, OEM-style Android command centre — with a state-of-the-art real-time debugging engine.</b>
</p>
<p align="center">
<img src="screenshot/3.png" width="100%" alt="3">
<img src="screenshot/4.png" width="100%" alt="4">
<img src="https://img.shields.io/github/downloads/jegly/ATK/total?style=for-the-badge&color=50FA7B&label=Downloads" alt="Downloads" />
<img src="https://img.shields.io/badge/License-GPLv3-BD93F9?style=for-the-badge" alt="License GPLv3" />
<img src="https://img.shields.io/badge/Platform-Linux-50FA7B?style=for-the-badge&logo=linux&logoColor=282A36" alt="Linux" />
<img src="https://img.shields.io/badge/Go%20+%20React%20(Wails)-8BE9FD?style=for-the-badge&color=8BE9FD&logoColor=282A36" alt="Go + React via Wails" />
<a href="https://deepwiki.com/jegly/ATK"><img src="https://deepwiki.com/badge.svg" alt="Ask DeepWiki" /></a>
</p>
<p align="center">
<img src="screenshot/5.png" width="100%" alt="5">
<img src="screenshot/6.png" width="100%" alt="6">
</p>
<p align="center">
<img src="screenshot/7.png" width="100%" alt="7">
<img src="screenshot/8.png" width="100%" alt="8">
</p>
<p align="center">
<img src="screenshot/9.png" width="100%" alt="9">
</p>
[![Ask DeepWiki](https://deepwiki.com/badge.svg)](https://deepwiki.com/jegly/ATK)
> All-in-one ADB command centre for Android power users, security researchers, and bug hunters.
> Built with Go + React via Wails. Runs natively on Linux, Windows, and macOS.
> Uses your system ADB — no bundled binaries, no mystery executables.
---
```
[ DOWNLOADS ]━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
```
## What is ATK?
| Platform | Format | Install |
|-----------------------|-------------|--------------------------------------------------|
| Linux — Debian/Ubuntu | `.deb` | `sudo dpkg -i ATK-*.deb` |
| Linux — any distro | `.AppImage` | `chmod +x ATK-*.AppImage && ./ATK-*.AppImage` |
| Windows | `.exe` | Run directly |
| macOS 11.0+ | `.dmg` | Unsigned — see note below |
**All your phone, on your desktop.** ATK (Android Toolkit) is an all-in-one,
OEM-style ADB/fastboot command centre for power users, security researchers, and
bug hunters — built with Go + React via Wails for **Linux**. Every tool an
OEM service centre has, in one app — plus a
**state-of-the-art real-time debugging engine no other Android tool has.**
Mirror and control your phone in a detachable window, browse files both ways
with a built-in image viewer, root and flash Pixels end-to-end, audit APKs for
trackers and secrets, debloat 5,000+ packages, fire off hundreds of one-click
ADB commands, and **watch the whole device's behaviour unfold in real time as a
live system map** — all from one clean, themeable UI.
> **🗺️ The Live System Map is a first of its kind** — no Android tool has ever
> turned logcat into a live, interactive visualization of the entire system's
> behaviour. [Jump to it ↓](#-live-system-map--first-of-its-kind)
> [!NOTE]
> **No bundled binaries.** ATK uses *your* system `adb`, `fastboot`, and
> `scrcpy` (from PATH) — nothing mystery is shipped. Settings shows the path and
> SHA-256 of each so you can verify them yourself.
---
## 🙏 Built on the community
**ATK wouldn't exist without the open-source community.** It stands on the
shoulders of these projects — built on, inspired by, or made possible by their
work. Go star them:
- **[scrcpy](https://github.com/Genymobile/scrcpy)** (Genymobile) — the screen mirroring & control engine behind the Screen Mirror module.
- **[apkauditor](https://apkauditor.com)** (Sandeep Wawdane) — inspiration for the APK Audit feature (clean-room reimplementation; no code reused).
- **[Canta](https://github.com/samolego/Canta) / [Shizuku](https://github.com/RikkaApps/Shizuku)** — approach reference for removing/disabling apps without root.
- **[Magisk](https://github.com/topjohnwu/Magisk)** (topjohnwu) — boot-image patching / root.
- **[Universal Android Debloater Next Generation](https://github.com/Universal-Debloater-Alliance/universal-android-debloater-next-generation)** — the debloater package database.
- **[PixelFlasher](https://github.com/badabing2005/PixelFlasher)** (badabing2005) — Pixel flash-sequence reference.
- **[Wails](https://wails.io)** — Go + Web application framework.
- **[Lucide](https://lucide.dev)** — icon set.
- **[adb-gui-kit](https://github.com/Drenzzz/adb-gui-kit)** (Drenzzz) — early ADB GUI groundwork this project built on.
### 🗺️ See the Live System Map in action
Real-time demos of the map engine visualising live device telemetry:
| | |
|---|---|
| ▶️ [Map engine — demo 1](screenshot/ATK_MAP_ENGINE_DEMO1.mp4) | ▶️ [Map engine — demo 2](screenshot/ATK_MAP_ENGINE_DEMO2.mp4) |
| ▶️ [Map engine — demo 3](screenshot/ATK_MAP_ENGINE_DEMO3.mp4) | ▶️ [Map engine — demo 4](screenshot/ATK_MAP_ENGINE_DEMO4.mp4) |
<p align="center"><img src="screenshot/Logcat.png" width="100%" alt="Live System Map"></p>
<details>
<summary>📸 More screenshots</summary>
<table>
<tr><td align="center"><b>Dashboard</b><br><img src="screenshot/Dashboard.png" alt="Dashboard"></td><td align="center"><b>File Explorer</b><br><img src="screenshot/Files.png" alt="Files"></td></tr>
<tr><td align="center"><b>Package Manager</b><br><img src="screenshot/Packages.png" alt="Packages"></td><td align="center"><b>Debloater</b><br><img src="screenshot/Debloater.png" alt="Debloater"></td></tr>
<tr><td align="center"><b>APK Audit</b><br><img src="screenshot/APK_Audit.png" alt="APK Audit"></td><td align="center"><b>App Inspector</b><br><img src="screenshot/App_Inspector.png" alt="App Inspector"></td></tr>
<tr><td align="center"><b>Certificate Manager</b><br><img src="screenshot/Certificates.png" alt="Certificates"></td><td align="center"><b>Device Backup</b><br><img src="screenshot/Backup.png" alt="Backup"></td></tr>
<tr><td align="center"><b>Prop Editor</b><br><img src="screenshot/Prop_Editor.png" alt="Prop Editor"></td><td align="center"><b>Shell Terminal</b><br><img src="screenshot/Shell.png" alt="Shell"></td></tr>
<tr><td align="center"><b>Utilities</b><br><img src="screenshot/Utilities.png" alt="Utilities"></td><td align="center"><b>Flasher</b><br><img src="screenshot/Flasher.png" alt="Flasher"></td></tr>
<tr><td align="center"><b>Screen Mirror prefs</b><br><img src="screenshot/ATK_screen_mirror_pref.png" alt="Screen Mirror prefs"></td><td align="center"><b>Settings — Appearance</b><br><img src="screenshot/Settings.png" alt="Settings"></td></tr>
<tr><td align="center"><b>Settings — Features</b><br><img src="screenshot/Settings2.png" alt="Settings 2"></td><td align="center"><b>Settings — Advanced</b><br><img src="screenshot/Settings3.png" alt="Settings 3"></td></tr>
<tr><td align="center"><b>Password lock</b><br><img src="screenshot/Login_Window_Password.png" alt="Login"></td><td align="center"><b>Logcat (map mode)</b><br><img src="screenshot/Logcat.png" alt="Logcat"></td></tr>
</table>
</details>
> [!NOTE]
> The demo links above open the `.mp4` in GitHub's player. To embed them **inline**
> (autoplaying preview), drag each video into the README on github.com once — GitHub
> then gives a `user-attachments` URL that renders in-page.
---
## Download
**[→ Latest Release](https://github.com/jegly/ATK/releases/latest)**
sha256:0e6b28b46f07a959c1d402f953f21f79821d8f34c70b47fc67280683ff35df82 - .Deb
| Distro | Format | Install |
|-----------------|--------|--------------------------|
| Debian / Ubuntu | `.deb` | `sudo dpkg -i ATK-*.deb` |
> [!NOTE]
> **Linux only.** ATK is built and tested on Debian/Ubuntu. Other distros can
> build from source (below).
Release checksums are published on the releases page — verify before installing.
**Linux requirements**
```bash
sudo apt install adb fastboot libwebkit2gtk-4.1-0
```
**macOS — Gatekeeper bypass**
```bash
xattr -rd com.apple.quarantine /Applications/ATK.app
# or: System Preferences → Security & Privacy → Open Anyway
# optional — only needed for the Screen Mirror module:
sudo apt install scrcpy
```
---
```
[ MODULES ]━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
```
## Modules
```
┌─────────────────────┬────────────────────────────────────────────────────┐
│ MODULE │ DESCRIPTION │
├─────────────────────┼────────────────────────────────────────────────────┤
│ Dashboard │ Device info, wireless ADB, reboot controls │
│ File Explorer │ Push, pull, rename, delete, batch export │
│ Package Manager │ Install, uninstall, enable, disable, pull APK │
│ Debloater │ 2157 packages — Samsung, Xiaomi, Google, 10+ OEMs │
│ Live Logcat │ Real-time streaming, level filter, tag filter │
│ App Inspector │ Permissions, components, certs, pinning check │
│ Certificate Manager │ Install/remove user CAs for HTTPS interception │
│ Device Backup │ adb backup with app selection and restore │
│ Prop Editor │ Read/write all 300+ system properties │
│ Shell Terminal │ adb shell and host commands, command history │
│ Utilities │ 487 commands across 15 categories │
│ Flasher │ Fastboot partition flash, getvar, sideload │
│ Pixel Factory Flash │ Full factory image flash from flash-all.sh │
└─────────────────────┴────────────────────────────────────────────────────┘
```
| Module | What it does |
|---|---|
| 🖥️ **Screen Mirror** | Live mirror & full control via scrcpy — detachable, recordable |
| 📊 **Dashboard** | Device info, wireless ADB, reboot controls |
| 📁 **File Explorer** | Browse device **and** computer, push/pull, image viewer |
| 📦 **Package Manager** | Install, uninstall, enable, disable, pull APK — incl. **privileged removal of protected system apps without root** |
| 🔎 **APK Audit** | Static APK security audit: perms, trackers, certs, rule findings |
| 🧹 **Debloater** | 5,362 packages — Samsung, Xiaomi, Google + 11 more OEMs |
| 📡 **Live Logcat + System Map** | Real-time log streaming **and** a live, interactive visual map of system behaviour across every subsystem |
| 🕵️ **App Inspector** | Permissions, components, certs, SSL-pinning check |
| 🔐 **Certificate Manager** | Install/remove user CAs for HTTPS interception |
| 💾 **Device Backup** | `adb backup` with app selection and restore |
| 🎚️ **Prop Editor** | Read/write all 300+ system properties |
| 💻 **Shell Terminal** | adb shell/host, command library, export session |
| 🧰 **Utilities** | 631 one-click commands across 50+ categories |
| ⚡ **Flasher** | Fastboot, live-boot, Magisk root, firmware download |
> [!TIP]
> Hide any module you don't use from **Settings → Sidebar Features**. Theme
> (Dark / Catppuccin Frappé / Latte) and sidebar position (left / top / bottom)
> are configurable too.
---
```
[ SECURITY ]━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
```
## ✨ What's new
```
NO BUNDLED BINARIES
ATK has no bin/ directory. It resolves adb and fastboot from your system
PATH — installed via apt, Homebrew, or Android SDK. The Settings view
displays the full path and SHA-256 of whichever binary is in use so you
can verify it against Google's published platform-tools checksums.
NO SHELL STRING BUILDING
Every command uses exec.Command(binary, arg1, arg2, ...) with discrete
arguments passed directly to execve. There is no shell involved and
therefore no shell injection surface.
INPUT VALIDATION
Package names, partition names, IP addresses, and remote paths are all
validated before use. Fastboot flash only accepts a known partition
allowlist — no arbitrary partition names accepted.
```
- 📡 **Live System Map** — the headline feature: turn logcat into a live,
interactive map of system behaviour across every subsystem *(see below)*.
- 🧹 **Debloater database 2,157 → 5,362 packages**, and a **privileged uninstall
of protected system apps without root** (plus a one-click **restore**).
- 🧰 **Utilities expanded to 631 one-click commands** across 50+ categories.
- 🎨 **Themes** — Dark, Catppuccin **Frappé** & **Latte**; dismissible safety banners.
- 🔎 **APK Audit** export to **JSON · CSV · SARIF**, with an in-app APK explorer.
- 📦 **Smarter package ops** — combined *Disable + Uninstall*, a *disabled* badge,
and verify-then-escalate so removals actually stick.
- 🔌 **Fully offline-capable UI** — fonts are self-hosted, no runtime CDN fetches.
---
```
[ DEBLOATER ]━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
```
## 🖥️ Screen Mirror
Package database sourced from Universal Android Debloater (UAD-ng). 2,157
packages across 14 manufacturers and categories, each with safety ratings:
See your phone on your computer and drive it with mouse + keyboard. ATK is the
control panel; the mirror opens in **its own window** you can move, resize, and
snap anywhere — powered by scrcpy (your system install, nothing bundled).
```
SAFE — generally safe to remove
CAUTION — disable rather than uninstall; may affect device behaviour
KEEP — do not remove; will break core system functionality
```
- 🕹️ **Full control** — tap, swipe, type, long-press; complete input from your desktop
- 🪟 **Detachable** — separate window; optionally keep it alive after ATK closes
- 📷 **Capture** — one-click screenshot (PNG) and full-session screen recording
- 🎛️ **Tunable** — max resolution, bitrate, FPS, stay-awake, turn-screen-off, show-touches, always-on-top, fullscreen, borderless
- ⌨️ **Shortcut cheat-sheet** — Home / Back / recents, copy↔paste, rotate, and more, built right in
Coverage: Samsung · Xiaomi · OnePlus/Oppo · Huawei · Sony · Motorola · LG
Nokia/HMD · Asus · Realme · Google · Carriers · AOSP · Misc
> [!NOTE]
> Single-instance by design — Start always yields exactly one window, and ATK
> tidies up the mirror on exit (unless you asked it to stay).
---
```
[ PIXEL FACTORY FLASH ]━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
```
## 📁 File Explorer
ATK reads `flash-all.sh` directly from inside the factory image zip and
executes the correct sequence — no hardcoded partition order. Options:
A real file manager for the device **and** your computer.
```
--wipe Wipe userdata (-w flag on fastboot update)
--disable-verity For Magisk / root setups
--disable-verif Paired with disable-verity
--force Bypass anti-rollback (use with caution)
--slot all Flash both A and B slots
```
Download factory images from: https://developers.google.com/android/images
- 🔀 **Two sources** — toggle between the phone (adb) and your local filesystem
- ⏱️ **Push / pull** — transfers with a live progress bar + ETA, cancellable
- 🎯 **Push by browsing** — pick files on your PC, then browse the phone to the destination folder and *Push here* — no typing paths
- 🖱️ **Right-click** — Open, Pull to folder, Rename, Move, Copy path, Delete
- 🖼️ **Image viewer** — full-screen, with ← / → to flip through a folder (device or local)
- 🧭 **Navigation** — Back / Forward / Up history and an editable path bar
---
```
[ BUILD FROM SOURCE ]━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
```
## 📡 Live System Map — First of its Kind
> **A first of its kind for Android.** No tool has ever turned logcat into a
> live, interactive picture of the *entire system's* behaviour. This is
> state-of-the-art real-time debugging — never seen or done before for an
> Android tool.
Turn the raw logcat firehose into a **live, interactive map of what your phone is
actually doing.** At its core is **a unified real-time telemetry renderer that
visualises system-level events across multiple subsystems simultaneously** — or,
put precisely: a real-time engine that unifies system-level telemetry from many
subsystems into a single live relational model, rendered as an interactive
multi-mode visualization.
Processes, services, tags and components become **nodes**; the relationships
mined from the stream — launches, crashes, ANRs, kills, signals, graphics/audio
events, and temporal co-occurrence — become **edges**; and every event becomes a
packet that **flows** from source to destination. The result is one coherent,
continuously updating picture of how `system_server`, SurfaceFlinger, the media
and telephony stacks, and your apps are interacting **right now**.
- 🌐 **Multiple render modes** — a crisp 2D graph, a neon flow view, and a 3D hierarchical tree
- 🧩 **Many layouts** — force-directed, hub boxes, radial-by-importance, and geometric arrangements
- 🌊 **Trackable flows** — follow individual events travelling between subsystems, source → destination
- 🚨 **Surfacing** — crashes / ANRs / errors auto-alert and ping their node; add your own keyword watch-rules
- 🎯 **Focus tools** — isolate one node's traffic, build a watchlist, filter by severity or kind, scrub a timeline, diff against a baseline
- 🎥 **Capture & export** — record the packet stream and pull it out for offline analysis
- ⌨️ **Built for flow** — pause/resume, fullscreen, freeze, search-to-step, colour-coding, savable presets
It reads as a tidy node-link graph when you want to *understand* structure, and
as rivers of flowing packets when you want to *watch* behaviour — pick the mode
that fits the question.
---
## ⚡ Flasher
All flash tooling in one place across three tabs, with a live device-info bar
(connection mode · slot · bootloader · lock state · root) up top.
| Tab | What it does |
|---|---|
| **Manual** | Reboot menu (system/bootloader/fastbootd/recovery), bootloader unlock/lock, flash any safe-listed partition, getvar, ADB sideload, **live-boot** an image or flash boot/init_boot to a chosen slot |
| **Pixel Factory** | Drag in (or browse to) a Google factory `.zip` — ATK reads `flash-all.sh` and runs the right sequence. Options: wipe/keep data, disable-verity & verification, both slots |
| **Download** | Fetch official Pixel **factory or OTA** images by device, straight from Google, with a progress bar and automatic **SHA-256 verification** |
> [!IMPORTANT]
> **Rooting (optional)** — enable in `Settings → Advanced`. ATK can download &
> install Magisk for you, extract boot/init_boot from a factory zip, push it for
> the Magisk app to patch, pull the patched image back, then **live-boot**
> (temporary root) or **flash** it (permanent). Requires an unlocked bootloader.
> Flashing can wipe or brick a device — proceed carefully.
Browse factory images: https://developers.google.com/android/images
---
## 🔎 APK Audit
Static security audit of any APK — a browsed file or an app pulled off the
device. Hybrid engine: Android SDK tools when present, pure-Go fallback
otherwise, so it works with zero extra dependencies.
- **Score + grade** with a severity breakdown
- **Dangerous permissions** highlighted
- **Tracker / ad-SDK** detection
- **Rule findings** tagged with CWE / MASVS
- **Decoded manifest** + exported components
- **Signing certificate** — identity, scheme (v1/v2/v3), SHA-256 / SHA-1
- **Explorer** — browse the APK, view text / images / hex
- **Export** to JSON · CSV · SARIF
---
## 🧹 Debloater
Package database sourced from Universal Android Debloater (UAD-ng): **5,362
packages** across 14 manufacturers, each with a safety rating. Beyond
enable/disable, ATK can perform a **privileged uninstall of protected system
apps without root** — and **restore** them later — using a Canta/Shizuku-style
technique over ADB.
| Rating | Meaning |
|---|---|
| 🟢 **Safe** | Generally safe to remove |
| 🟡 **Caution** | Disable rather than uninstall; may affect device behaviour |
| 🔴 **Keep** | Do not remove; will break core system functionality |
Coverage: Samsung · Xiaomi · OnePlus/Oppo · Huawei · Sony · Motorola · LG · Nokia/HMD · Asus · Realme · Google · Carriers · AOSP · Misc
---
## 🔒 Security
> [!NOTE]
> - **No bundled binaries**`adb`, `fastboot`, `scrcpy` are resolved from your PATH; Settings shows each binary's path + SHA-256 to verify against Google's published checksums.
> - **No host shell string-building** — host commands use `exec.Command(binary, args…)` (direct `execve`, no shell). Paths sent to the *device* shell are explicitly quoted, so filenames with spaces/special characters are safe.
> - **Input validation** — package names, partitions, IPs, and remote paths are validated; fastboot flash uses a partition allowlist; destructive flash and bootloader actions confirm first.
---
## Build from Source
**Prerequisites — Ubuntu/Debian**
```bash
@ -176,7 +311,7 @@ sudo npm install -g pnpm
go install github.com/wailsapp/wails/v2/cmd/wails@latest
```
**Build**
**Build & run**
```bash
git clone https://github.com/jegly/ATK
cd ATK
@ -186,10 +321,9 @@ wails build -tags webkit2_41
./build/bin/ATK
```
**Dev mode (hot reload)**
```bash
wails dev -tags webkit2_41
```
**Dev mode (hot reload)** — `wails dev -tags webkit2_41`
**Package as .deb**
```bash
@ -199,45 +333,18 @@ nfpm pkg --packager deb --target build/
sudo dpkg -i build/atk_*.deb
```
---
```
[ ARCH LINUX ]━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
```
A `PKGBUILD` is included in `aur/`. See `aur/README.md` for publishing to
the AUR. Until then, Arch users can use the `.AppImage` from the releases
page — no installation required.
### Other distros
Build from source as above (`wails build -tags webkit2_41`) and run
`./build/bin/ATK` directly — you just need `adb`, `fastboot`, GTK 3 and
WebKit2GTK 4.1 present.
---
```
[ LICENCE ]━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
```
## License
ATK is released under the GNU General Public License v3.0.
ATK is released under the **GNU General Public License v3.0**. The debloater
database is from the Universal Android Debloater Next Generation project
(GPL-3.0) by the Universal-Debloater-Alliance. See `LICENSE` for full terms and
third-party attributions.
The debloater package database is from Universal Android Debloater Next
Generation (GPL-3.0) by the Universal-Debloater-Alliance.
See LICENSE for full terms and third-party attributions.
---
```
[ ACKNOWLEDGEMENTS ]━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
```
```
Universal Android Debloater Alliance — debloater package database
Wails — Go + Web application framework
PixelFlasher (badabing2005) — Pixel flash sequence reference
Lucide — icon set
https://github.com/Drenzzz/adb-gui-kit - Based of Drenzzz's work of adb gui kit
```
---
```
github.com/jegly/ATK
```
<p align="center"><sub>github.com/jegly/ATK</sub></p>