ATK — Android Toolkit

An all-in-one ADB GUI for Android power users, security researchers, and bug hunters.

Built with Wails v2 (Go + React). Runs natively on Linux, macOS, and Windows. Uses your system ADB — no bundled binaries, no mystery executables.

---

Features

📱 Dashboard

• Live device list with connection status
• Rich device info — model, Android version, build, kernel, CPU, RAM, storage, battery, IP, root status, security patch, bootloader state
• Wireless ADB — enable TCP/IP, connect/disconnect
• One-click reboot to system / recovery / bootloader / fastboot / sideload

📁 File Explorer

• Browse the device filesystem
• Push, pull, rename, copy, delete, create folders
• Batch select and export multiple files
• No timeout on large transfers

📦 Package Manager

• List all / user / system / disabled packages
• Batch install, uninstall, enable, disable
• Pull APK from device, clear data, force stop
• Install APKs from local files

🛡️ Debloater

• 2,157 packages from the Universal Android Debloater (UAD-ng) database
• Covers: Samsung, Xiaomi, OnePlus/Oppo, Huawei, Sony, Motorola, LG, Nokia, Asus, Realme, Google, Carriers, AOSP
• Safety ratings: Safe / Caution / Keep
• Dependency warnings
• Filter by manufacturer, safety level, or search
• Batch disable or uninstall for user 0

📜 Live Logcat

• Real-time streaming via Wails events
• Colour-coded by log level (V/D/I/W/E/F)
• Filter by level, tag, or search string
• Buffer selector: main / radio / events / crash / all
• Auto-scroll, save to file, clear buffer

🔍 App Inspector

• Deep package inspection: version, paths, UID, install dates, debuggable flag
• All granted permissions
• Activities, services, broadcast receivers, content providers
• Native libraries (.so files)
• Signing certificate info
• Full package dump
• Certificate pinning heuristic check (OkHttp, TrustKit, networkSecurityConfig)

🔒 Certificate Manager

• List all system and user CA certificates
• Install user CA certificates (for Burp Suite / mitmproxy HTTPS interception)
• Remove user certificates
• Fingerprint and expiry display
• Built-in HTTPS interception setup guide

💾 Device Backup

• adb backup with APK, shared storage, and app selection options
• Restore from .adb backup files
• Honest warnings about Android 12+ restrictions

⚙️ Prop Editor

• View all 300+ system properties grouped by category
• Search and filter
• Edit properties inline (uses root if available)
• Read-only properties clearly marked

💻 Shell Terminal

• Direct adb shell and adb host command execution
• Command history (arrow keys)
• No shell injection — args are split directly, no shell interpretation

🔧 Utilities

• 487 commands across 15 categories: Device Info, Processes & Memory, Battery & Power, Network & Connectivity, Permissions & Security, Package Manager, Activities & Services, Sensors & Media, Logs & Diagnostics, File System, Settings & Config, Fastboot (including all fastboot oem commands), Root & Magisk, Instrumentation & Testing, Reboot
• Commands that need arguments prompt inline before running
• Search across all commands
• Output copy button

⚡ Flasher (Fastboot)

• Flash individual partitions
• Fastboot getvar queries
• ADB sideload
• Partition allowlist prevents accidental flashes to wrong targets

📲 Pixel Factory Flash

• Select a Pixel factory image zip directly from Google
• Reads flash-all.sh from inside the zip — executes the correct sequence automatically
• Options: wipe data, disable verity, disable verification, force flash, flash both slots
• Step-by-step live progress with per-step status
• Live flash log

---

Security Design

• No bundled binaries — uses system adb/fastboot from your PATH
• Settings view shows SHA-256 of whichever binary is being used — verify it yourself
• No shell string building — every command uses exec.Command(binary, arg1, arg2, ...) with discrete args passed directly to execve. No shell injection surface.
• Input validation — package names, partition names, IP addresses, and paths all validated before use
• Partition allowlist — fastboot flash only accepts known partition names

---

Building from Source

Prerequisites (Ubuntu/Debian)

sudo apt update
sudo apt install -y build-essential pkg-config libgtk-3-dev libwebkit2gtk-4.1-dev \
  libayatana-appindicator3-dev adb fastboot curl wget git

# Go 1.23
wget https://go.dev/dl/go1.23.0.linux-amd64.tar.gz
sudo rm -rf /usr/local/go && sudo tar -C /usr/local -xzf go1.23.0.linux-amd64.tar.gz
echo 'export PATH=$PATH:/usr/local/go/bin:$HOME/go/bin' >> ~/.bashrc
source ~/.bashrc

# Node.js 20
curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash -
sudo apt install -y nodejs
sudo npm install -g pnpm

# Wails CLI
go install github.com/wailsapp/wails/v2/cmd/wails@latest

Build

git clone https://github.com/jegly/ATK
cd ATK
go mod tidy
cd frontend && pnpm install && cd ..
wails build -tags webkit2_41

# Binary output
./build/bin/ATK

Install system-wide

sudo cp build/bin/ATK /usr/local/bin/atk

Build .deb package

# Install nfpm
go install github.com/goreleaser/nfpm/v2/cmd/nfpm@latest

# Build binary first
wails build -tags webkit2_41

# Package as .deb
nfpm pkg --packager deb --target build/

Dev mode (hot reload)

wails dev -tags webkit2_41

---

Licence

ATK is licensed under the GNU General Public License v3.0.

The debloater package database is sourced from Universal Android Debloater Next Generation (GPL-3.0, Universal-Debloater-Alliance).

See LICENSE for full terms and third-party attributions.

---

Acknowledgements

• Universal Android Debloater Alliance — package database
• Wails — Go + Web framework
• PixelFlasher — Pixel flash sequence reference
• Lucide — icons
• shadcn/ui — UI components