58 lines
2.8 KiB
Markdown
58 lines
2.8 KiB
Markdown
# ATK v1.2.0
|
||
|
||
Six new tools, a big theming pass, and a security cleanup.
|
||
|
||
## ✨ What's new
|
||
- 💿 **GSI Loader** — boot a Generic System Image two ways: **DSU** (temporary
|
||
guest OS, no unlock/wipe, reboot to reclean) or a **permanent fastboot flash**
|
||
(danger-gated, requires unlocked bootloader). Built-in compatibility pre-check
|
||
(Treble, ABI, VNDK isolation) before either path.
|
||
- 🚀 **Intent Lab** — list an app's launchable (exported) activities straight from
|
||
`dumpsys` and start them with one click, plus a free-form implicit-intent
|
||
launcher. Reach hidden settings menus and internal screens that never show up
|
||
on the launcher.
|
||
- 📥 **Firmware** — download and SHA-verify firmware images for a device
|
||
codename, right from the app.
|
||
- 📱 **Screen Mirror** — scrcpy integration: start/stop mirroring and grab
|
||
screenshots without leaving ATK.
|
||
- 🧙 **Magisk integration** — install Magisk, extract/patch boot images, and
|
||
manage installed modules (list, toggle, remove) in one panel.
|
||
- 🕵️ **Privacy & Tracker Scanner** — scans an app's DEX bytecode for known
|
||
tracker/analytics/ad SDK signatures, cross-references dangerous permissions,
|
||
and derives a 0–100 privacy score with an A–F grade. Fully offline, no
|
||
network calls.
|
||
- 🔒 **App Lock** — password-protect the app and gate destructive actions
|
||
(flashing, permanent GSI install, etc.) behind a separate danger-unlock.
|
||
- 🔓 **Privileged uninstall, no root** — removes protected system apps via a
|
||
bundled Android helper, with one-click restore.
|
||
- 🎨 **~14 new theme palettes** (Dracula, Catppuccin Mocha/Macchiato,
|
||
Gruvbox Material, C64, Adventure Time, and more), on top of the existing
|
||
Dark/Frappé/Latte.
|
||
- 🧹 **Debloater**: device packages with no UAD database match now show as
|
||
**Unknown/Uncategorized** instead of silently disappearing from the list.
|
||
- 🔎 **APK Audit**: entry viewer now has syntax-highlighted code display instead
|
||
of a plain text dump.
|
||
|
||
## 🔐 Security
|
||
- Fixed a path-injection issue in the local file viewer (CodeQL
|
||
`go/path-injection`) — the resolved path is now validated as a real, regular
|
||
file before being served.
|
||
- Dependency bumps: `golang.org/x/image` and `golang.org/x/net` (DoS fixes),
|
||
`vite`, `postcss`, and `esbuild` (dev-tooling only, not shipped in the
|
||
built app).
|
||
|
||
## 📦 Install (Linux)
|
||
**Debian / Ubuntu:**
|
||
```bash
|
||
sudo dpkg -i atk_1.2.0_amd64.deb
|
||
```
|
||
Requirements: `adb`, `fastboot`, `libgtk-3-0`, `libwebkit2gtk-4.1-0`
|
||
(`scrcpy` only needed for the Screen Mirror module).
|
||
|
||
Other distros: build from source — see the README.
|
||
|
||
> ⚠️ Linux only. No bundled binaries — ATK uses *your* system `adb`/`fastboot`/`scrcpy`.
|
||
|
||
## 🙏 Credits
|
||
Built on the open-source community — scrcpy, Magisk, Universal Android Debloater,
|
||
Wails, Lucide, and more. Full attributions and licenses are in the README. GPL-3.0.
|