Skip to content
/ Android-Non-Root Public

Open-source tools for non-root Android functionality, security, privacy, and customization, such as Termux, Shizuku, Tor, TrackerControl, InviZible Pro, and QEMU.

13 stars 0 forks Branches Tags Activity
Star
Notifications You must be signed in to change notification settings

Willie169/Android-Non-Root

BranchesTags

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

99 Commits
LICENSE
LICENSE
 
 
img
img
 
 
README.md
README.md
 
 

Repository files navigation

Willie169 Android Non Root

Android Non Root

Android Non Root has three versions:

My main development about emulation (proot, proot-distro, qemu-system, box64, wine64, etc.) and developement tools in Termux has been moved to my another repository, termux-sh. Please refer to it for more scripts and instructions for Termux.

In this tutorial, we'll explore a range of powerful, open-source tools such as Termux, Shizuku, Tor, TrackerControl, InviZible Pro, and QEMU to enhance your Android device’s functionality, security, privacy, and customization without the need for root access.

Please read the Global Note before you start or you may encounter errors.

Table of Contents

Author Information

The author of this tutorial is Willie169, Willie Shen, or 沈威宇.

If for whatever reason you want to send me money, here are where you may do so:

  • BTC: bc1qm7fuvza2tktvjzfmvf37vw6yft5ntd2u5gh9l0
  • ETH: 0xC5A26bF0F3564a77973a261624231Ac9DE647967
  • BNB (BNB Smart Chain): 0xC5A26bF0F3564a77973a261624231Ac9DE647967
  • SOL: 5ytjeNsMqxUqCZGHghGWjZNZHFSebwfAkKXepExmqvTU
  • DOGE: DQUWv5vBhCLgoCCyNU2T4fh35ZhGi9cM4T
  • XMR: 48j6iQDeCSDeH46gw4dPJnMsa6TQzPa6WJaYbBS9JJucKqg9Mkt5EDe9nSkES3b8u7V6XJfL8neAPAtbEpmV2f4XC7bdbkv

Global Note

  • This tutorial is provided WITHOUT ANY WARRANTY, including but not limited to the implied warranties of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  • Turn off battery optimization and auto sleeping, set battery usage to unrestricted, acquire wakelock, etc. to prevent apps from being killed. See DontKillMyApp.
  • Many sections of the tutorial mention Termux. For people who are new to it, please refer to Termux: A Powerful Terminal Emulation with an Extensive Linux Package Collection section.
  • My main development about emulation (proot, proot-distro, qemu-system, box64, wine64, etc.) and developement tools in Termux has been moved to my another repository, termux-sh. Please refer to it for more scripts and instructions for Termux.
  • Run update command (such as pkg update and apt update) before install command (such as pkg install and apt install) to update available packages.
  • Add sudo at the beginning of commands in Linux if root permission is needed. Remove sudo from the beginning of commands in Termux if the device is not rooted. Termux doesn't need root permission to install packages etc.
  • Type Y, y, Yes, yes, etc. as asked for in response to any prompts that request confirmation during command execution to confirm execution.
  • Change the file names, directories, paths, addresses, ports, variables, etc. in the commands provided in the tutorial to the actual ones of yours.
  • Most of the software mentioned in this tutorial is open source.
  • Some sections about Linux usages are included, some of which assumes the Linux distribution is Debian derived.
  • Uncommenting a line means to remove the comment signs (# for bash) from the beginning of the line.
  • When the tutorial uses text editor such as nano, vim, or vi to edit a file, you can use any text editor you want.
  • Many sections of the tutorial mention VNC server. You can connect VNC server with a VNC client on many devices such as Linux, Windows, macOS, Android, iOS, etc. Read the tutorial about AVNC, a VNC client for Android, in AVNC: A VNC Client for Android.
  • You may encounter Process completed (signal 9) press Enter error even if you follow the steps in this tutorial. Read the tutorial about how to fix it in Process completed (signal 9) press Enter Error.
  • In Linux, you can install a window manager such as Fluxbox or Openbox, or desktop environment such as XFCE, LXQt, or MATE for your GUI.
  • In Linux, root is usually the password for root for the first time. You can usually set password latter by passwd.
  • Many sections of the tutorial mention Android Debug Bridge (ADB). You can connect to an Android device's ADB shell from another device via Android SDK Platform Tools or from the same device via Shizuku. Read the tutorial about Shizuku ADB connection in Shizuku, SystemUI Tuner, and aShell: Use Local ADB of Android Device on Terminals Such as Termux without Another Device with Shizuku, Leave Developer Options off When Doing So with SystemUI Tuner, and Use ADB with Features like Autocomplete Suggestion with aShell.
  • Many sections of the tutorial mention Tor. Read the tutorial about it in Introduction of Tor.

Termux: A Powerful Terminal Emulation with an Extensive Linux Package Collection

My main development about emulation (proot, proot-distro, qemu-system, box64, wine64, etc.) and developement tools in Termux has been moved to my another repository, termux-sh. Please refer to it for more scripts and instructions for Termux.

Install Termux

Termux can be installed from F-Droid: https://f-droid.org/packages/com.termux.

WARNING: If you installed termux from Google Play or a very old version, then you will receive package command errors. Google Play builds are deprecated and no longer supported. It is highly recommended that you update to termux-app v0.118.0 or higher as soon as possible for various bug fixes, including a critical world-readable vulnerability reported at https://termux.github.io/general/2022/02/15/termux-apps-vulnerability-disclosures.html. It is recommended that you shift to F-Droid or GitHub releases.

Introduction of Termux

Termux is an Android terminal application and Linux environment. Termux combines powerful terminal emulation with an extensive Linux package collection. Some of the commands available in Linux are available in Termux too, such as cp, mv, ls, mkdir, apt, and apt-get.

Features:

  • Shells: bash, zsh etc.
  • Editors: nano, vi, vim, neovim, emac, etc.
  • Connection: openssh, tor, iproute2, net-tools, curl, wget, tigervnc, x11vnc, etc.
  • Development: gcc, g++, clang, gdb, openjdk-17, openjdk-21, python2, python3, nodejs, go, rust, perl, ruby, cmake, maven, git, subversion, gh, glab-cli, apksigner, android-tools, fdroidcl, etc.
  • Emulation: proot, proot-distro, qemu-system, qemu-user, etc.
  • Encryption: openssl, etc.
  • Multimedia: ffmpeg, etc.
  • Archiving: bzip, tar, etc.
  • Graphical environment: fluxbox, openbox,xfce4, lxqt, mate, etc.
  • Textual user interface: frotz, ncurses-utils, etc.

and more.

At first startup, a small base system is downloaded. Desired packages can then be installed using the apt package manager, which is known from the Debian and Ubuntu Linux distributions. To learn more, access the built-in help by long-pressing anywhere on the terminal and selecting the Help menu option.

$PREFIX and ~ refer to /data/data/com.termux/files/home.

Official Wiki and Community of Termux

Termux App User Interface

  • Pinch to zoom in or out.
  • Swipe right from the left edge of the screen to drag out the navigation bar, where you can open Termux Settings, start another NEW SESSION, switch to another session, or launch KEYBOARD.
  • Long press on screen to:
    • COPY
    • PASTE
    • More
    • Select URL
    • Share transcipt: transfer all output of the current session (via Android api)
    • Reset: Reset
    • Kill process: Kill the current terminal session process
    • Style: Style (requires Termux:Styling plugin)
    • Keep screen on
    • Help: Help documentation (Termux Wiki)

Shortcuts

The following are some of the shortcuts commonly used in the terminal, and they also work in Ter­mux. The volume plus button (abbreviated to Volume below) can be used as a special key to generate a specific input, which can be roughly understood as the Fn key on a laptop.

  • Ctrl + A - Move cursor to the start position
  • Ctrl + E - Move cursor to the end
  • Ctrl + K - Cut everything from here to the end
  • Ctrl + U - Cut everything from here to the beginning
  • Ctrl + W - Cut everything from here to the left
  • Ctrl + Y - Paste words cut by Ctrl + U, Ctrl + D, or Ctrl + W
  • Ctrl + L - Equivalent to clear command or clear screen
  • Ctrl + C - Send Signal Interrupt (SIGINT), which terminate the process
  • Ctrl + D - Close the terminal
  • Ctrl + Z - Send Signal Terminal Stop (SIGTSTP), which suspend the current process
  • Volume + E - Esc
  • Volume + T - Tab
  • Volume + 1 - F1
  • Volume + 2 - F2
  • Volume + 3 - F3
  • Volume + 4 - F4
  • Volume + 5 - F5
  • Volume + 6 - F6
  • Volume + 7 - F7
  • Volume + 8 - F8
  • Volume + 9 - F9
  • Volume + 0 - F10
  • Volume + B / Alt + B - Return a word when using readline
  • Volume + F / Alt + F - Forward a word when using readline
  • Volume + X / Alt + X
  • Volume + W - Up Arrow
  • Volume + A - Left Arrow
  • Volume + S - Down Arrow
  • Volume + D - Right Arrow
  • Volume + L - | (pipe character)
  • Volume + H - ~ (tilde character)
  • Volume + U - _ (underscore character)
  • Volume + P - Page Up (previous page)
  • Volume + N - Page Down (next page)
  • Volume + . / Ctrl + \ - Signal Quit (SIGQUIT)
  • Volume + V - Show volume control
  • Volume + Q / Volume + K - Show extra button view

File and Directory Management Commands

File and directory management commands in Termux is the same as in Linux. Below is a brief of them.

cp: Copy Files And Directories

  • cp -r dir1/ dir2/: Recursively copy dir1 to dir2.
  • cp -i file1.txt file2.txt: Prompt before overwriting file2.txt.

mv: Move or Rename Files and Directories

  • mv file1.txt /home/user/: Move file1.txt to /home/user/.
  • mv oldname.txt newname.txt: Rename oldname.txt to newname.txt.

rm: Remove Files or Directories

  • rm file1.txt: Remove file1.txt.
  • rm -r dir1/: Recursively remove dir1 and its contents.
  • rm -rf dir1/: Forcefully remove dir1 and its contents without prompts.

mkdir: Create Directories

  • mkdir newdir: Create a directory named newdir.
  • mkdir -p parentdir/childdir: Create parentdir and childdir if they don't exist.

ls: List Directory Contents

  • ls -l: List with detailed information (permissions, ownership, size).
  • ls -a: List all files, including hidden ones (starting with .).
  • ls -h: List with human-readable file sizes.

rmdir: Remove Empty Directories

  • Syntax: rmdir [options] directory
  • rmdir emptydir: Remove emptydir if it's empty.
  • rmdir -p parentdir/childdir: Remove childdir and parentdir if they are empty.

find: Search for Files and Directories

  • Syntax: find [path] [options] [expression]
  • find /home/user/ -name '*.txt': Find all .txt files under /home/user/.
  • find . -type d -name 'dir*': Find directories starting with dir.

touch: Create or Update File Timestamps

  • Syntax: touch [options] file
  • touch newfile.txt: Create an empty newfile.txt or update its timestamp.
  • touch -c non_existent_file.txt: Don’t create non_existent_file.txt if it doesn’t exist.

chmod: Change File Permissions

chmod can use both numeric and symbolic modes to set file permissions.

Numeric Mode
  • Syntax: chmod [permissions] file
  • First number in permissions is for user (owner), second is for group, third is for others.
  • Permissions:
  • 4: read.
  • 2: write.
  • 1: execute.
  • Permissions are additive. For example, 7 = 4 + 2 + 1.
Symbolic Mode
  • Syntax: chmod [who][+/-/=][permissions] file
  • Who:
  • u: User (owner)
  • g: Group
  • o: Others
  • a: All (user, group, and others)
  • Operators
  • +: Add permission
  • -: Remove permission
  • =: Set exact permission
  • Permissions:
  • r: read.
  • w: write.
  • x: execute.
Options
  • -R or --recursive: Apply changes recursively to directories and their contents.

chown: Change File Ownership

  • Syntax: chown [options] user[:group] file
  • chown user file.txt: Change the owner to user.
  • chown user:group file.txt: Change the owner to user and the group to group.
  • chown :group file.txt: Change the group to group without changing the owner.
  • Options
  • -R or --recursive: Apply changes recursively to directories and their contents.

df: Disk Space Usage

  • Syntax: df [options] [file]
  • df -h: Display disk space in a human-readable format (e.g., MB, GB).
  • df -T: Show the filesystem type along with space usage.
  • df --total: Show a grand total of all file systems.

du: Disk Usage

  • Syntax: du [options] [file]
  • du -h: Show disk usage in human-readable format.
  • du -sh /path/to/dir: Show the total size of /path/to/dir.
  • du -a: Show the size of all files and directories.
  • du --max-depth=1: Limit the depth of directory traversal to 1 level.

pwd: Check Current Directory

  • Syntax: pwd

Grant Termux Storage Permission

Run the following command Termux:

termux-setup-storage

and tap Allow. Many processes in Termux need Termux to have this permission.

Termux-Properties

You can edit properties of Termux by:

nano ~/.termux/termux-properties

Properties that can be changed include default-working-directory, allow-external-apps, volume-keys, etc.

Termux PKG Package Manager

pkg is a tool for managing apt packages in Termux.

  • Usage: pkg [--check-mirror] command [arguments].
  • --check-mirror - forces a re-check of availability of mirrors
  • Commands:
    • autoclean - Remove all outdated packages from apt cache.
    • clean - Remove all packages from apt cache.
    • files <packages> - Show all files installed by packages.
    • install <packages> - Install specified packages.
    • list-all - List all packages available in repositories.
    • list-installed - List installed packages.
    • reinstall <packages> - Reinstall specified installed packages at the latest version.
    • search <query> - Search package by query, for example by name or description part.
    • show <packages> - Show basic metadata, such as dependencies.
    • uninstall <packages> - Uninstall specified packages. Configuration files will be left intact.
    • upgrade - Upgrade all installed packages to the latest version.
    • update - Update apt databases from configured repositories.

Termux Change Repo

  • Run termux-change-repo command.
  • Select one or more repositories for which you want to change mirror by tapping "space" and navigating over list by up/down arrow keys. Tap enter to confirm the choice.
  • Pick a mirror. Control method is same as the last step.

Package Command Error

Termux had to move the primary Termux package repository hosting from Bintray to Fosshost since Bintray shut down on May 1st, 2021 which created problems for users while running package installation and update commands with pkg or apt and their commands would fail with errors similar to the following:

E: The repository 'https://termux.org/packages stable Release' does no longer have a Release file.
N: Metadata integrity can't be verified, repository is disabled now.
N: Possible cause: repository is under maintenance or down (wrong sources.list URL?).

E: The repository 'https://dl.bintray.com/grimler/game-packages-24 games Release' does not have a Release file.
N: Metadata integrity can't be verified, repository is disabled now.
N: Possible cause: repository is under maintenance or down (wrong sources.list URL?).

E: The repository 'https://science.termux-mirror.ml science Release' does not have a Release file.
N: Metadata integrity can't be verified, repository is disabled now.
N: Possible cause: repository is under maintenance or down (wrong sources.list URL?).

Command Solution

  • Run termux-change-repo command.
  • Select one or more repositories for which you want to change mirror by tapping "space" and navigating over list by up/down arrow keys. Tap enter to confirm the choice.
  • Pick a mirror. Control method is same as the last step.
  • If you have installed other package repositories, like x11 and root, then you must select and change those mirrors as well. You can check your current mirrors by running the termux-info command. Note that the science and game repos have been merged into main repo and should be removed with apt remove science-repo game-repo if you have them installed.
  • Accept them by answering y if you receive errors like:
E: Repository 'https://grimler.se/termux-root-packages-24 root InRelease' changed its 'Origin' value from 'Bintray' to 'termux-root-packages-24 root'
E: Repository 'https://grimler.se/termux-root-packages-24 root InRelease' changed its 'Label' value from 'Bintray' to 'termux-root-packages-24 root'
N: This must be accepted explicitly before updates for this repository can be applied. See apt-secure(8) manpage for details.
Do you want to accept these changes and continue updating from this repository? [y/N]
  • After changing the mirror, it is highly advisable to run pkg upgrade command to update all packages to the latest available versions, or at least update termux-tools package with pkg install termux-tools command. Also make sure your device has internet connectivity and the repository URLs are accessible in a browser.

Manual Solution

  • If for some reason termux-change-repo is not available, you can manually edit sources.list to replace the main url with a value obtained from Termux Mirrors List.
  • Run nano $PREFIX/etc/apt/sources.list to edit it.
  • This will not change the urls of other package repositories, to change those run pkg install termux-tools afterwards and use termux-change-repo or manually edit their files under $PREFIX/etc/apt/sources.list.d directory.
  • Changing the mirror may specially be needed if a user is still using bintray as the mirror or pkg upgrade command hasn't been run in a while to update termux package related scripts.

Further Readings and References about Package Command Error

Debian Derivatives and Termux APT Package Manager

apt is a commandline package manager and provides commands for searching and managing as well as querying information about packages. It provides the same functionality as the specialized APT tools, like apt-get and apt-cache, but enables options more suitable for interactive use by default.

Process completed (signal 9) - press Enter Error

Some Android OS will kill any (phantom) processes greater than 32 (limit is for all apps combined) and also kill any processes using excessive CPU.

You may get Process completed (signal 9) - press Enter message in the terminal without actually exiting the shell process yourself.

Here is the guide of how to turn it off.

Fix for Stock Android 12L and beyond

  1. In phone's Settings or something similar, go to About Phone > Software Information or something similar, and tap the Version Number seven times to enable Developer Options. Some phones may have different methods to enable Developer Options.
  2. Find the section named Feature Flags, enter via clicking it.
  3. Find the switch to toggle off settings_enable_monitor_phantom_procs to disable phantom process killer.
  4. To enable phantom process killer again, just toggle on the switch.

Fix for QEMs like OneUI, MiUi, Samsung, etc. and other non-stock Android 12L and beyond

  1. Connect to Android Debug Bridge (ADB) of your Android device from another device or via Shizuku.
  2. Type adb shell to enter adb shell.
  3. Run the following commands inside adb shell:
/system/bin/device_config set_sync_disabled_for_tests persistent
/system/bin/device_config put activity_manager max_phantom_processes 2147483647
settings put global settings_enable_monitor_phantom_procs false
  1. To check the status of whether phantom process killer is disabled, run the following commands inside adb shell:
/system/bin/dumpsys activity settings | grep max_phantom_processes
/system/bin/device_config get activity_manager max_phantom_processes
  1. To enable phantom process killer again, run the following commands inside adb shell:
/system/bin/device_config set_sync_disabled_for_tests none; /system/bin/device_config put activity_manager max_phantom_processes 32
settings put global settings_enable_monitor_phantom_procs true

Further Readings and References about Process completed (signal 9) - press Enter error

Termux:Styling

Termux:Styling can be installed from F-Droid: https://f-droid.org/packages/com.termux.styling.

This plugin for Termux provides beautiful color schemes and powerline-ready fonts to customize the appearance of the terminal.

Long-press anywhere on the Termux terminal and use the "Style" menu entry to use after installation.

Read the official wiki: https://wiki.termux.com/wiki/Termux:Styling for more information.

Termux:Widget

Termux:Widget can be installed from F-Droid: https://f-droid.org/packages/com.termux.widget.

Add-on app which adds shortcuts to Termux scripts and commands on the home screen. Scripts should be placed in the $HOME/.shortcuts/ folder to allow quick access to frequently used commands without typing.

Read the official wiki: https://wiki.termux.com/wiki/Termux:Widget for more information.

Termux:Boot

Termux:Boot can be installed from F-Droid: https://f-droid.org/packages/com.termux.boot.

This plugin for Termux allows programs to be run at boot.

Instructions:

  • Start the Termux:Boot app once by clicking on its launcher icon.
  • This allow the app to be run at boot.
  • Create the ~/.termux/boot/ directory.
  • Put scripts you want to execute inside the ~/.termux/boot/ directory.
  • If there are multiple files, they will be executed in a sorted order.

Note that you may want to run termux-wake-lock as first thing want to ensure that the device is prevented from sleeping.

Read the official wiki: https://wiki.termux.com/wiki/Termux:Boot for more information.

Termux:Float

Termux:Float can be installed from F-Droid: https://f-droid.org/packages/com.termux.float.

This plugin for Termux provides a floating terminal window which is shown above other apps.

Long-press on the floating window to move or resize it and tap on the notification to temporarily hide it.

Read the official wiki: https://wiki.termux.com/wiki/Termux:Float for more information.

Termux:API

Termux:API can be installed from F-Droid: https://f-droid.org/packages/com.termux.api.

Expose basic Android functionality like sending SMS or accessing GPS data to the Termux app. This is an add-on which requires that the main Termux app is installed to use.

  • Read and send sms messages from your terminal.
  • Access device GPS location sensor from scripts.
  • Pipe the result of commands into the device text-to-speech engine.
  • Vibrate the device when something interesting happens.
  • Access the system clipboard from shell scripts.
  • List contacts from the system contact list.

Besides installing this app an additional package is required to install inside Termux:

apt install termux-api

Read the official wiki: https://wiki.termux.com/wiki/Termux:API for more information.

Termux Graphical Environment with VNC Server, and Fluxbox or Openbox Windows Manager or XFCE, LXQt, or MATE Desktop Environment

My main development about emulation (proot, proot-distro, qemu-system, box64, wine64, etc.) and developement tools in Termux has been moved to my another repository, termux-sh. Please refer to it for more scripts and instructions for Termux.

Enable the X11 Repository of Termux

X11 packages are available in a separate APT repository. You can enable it by running the following command:

pkg install x11-repo

It will automatically add appropriate sources.list file and PGP key. You can disable this repository by running the following command:

pkg uninstall x11-repo

VNC Server in Termux

In this section, you will learn how to set up a VNC server in Termux for graphical output.

Install TigerVNC

pkg install tigervnc

Start a VNC Server

Not specifying port:

vncserver -localhost

VNC server will start on unused port with the smallest positive integer number, like localhost:1 if port 1 is not used. Specifying port:

vncserver :1

VNC server will start on the port you specified. Specifying resolution:

vncserver :1 -geometry 1920x1080

You can specify resolution with -geometry. At first time, you will be prompted for setting up passwords:

You will require a password to access your desktops.

Password:
Verify:
Would you like to enter a view-only password (y/n)? n

Note that passwords are not visible when you are typing them and maximal password length is 8 characters. If everything is okay, you will see this message:

New 'localhost:1 ()' desktop is localhost:1

Creating default startup script /data/data/com.termux/files/home/.vnc/xstartup
Creating default config /data/data/com.termux/files/home/.vnc/config
Starting applications specified in /data/data/com.termux/files/home/.vnc/xstartup
Log file is /data/data/com.termux/files/home/.vnc/localhost:1.log

It means that the server is available on display localhost:1.

To make programs do graphical output to the display localhost:1, set environment variable like shown here (yes, without specifying localhost):

export DISPLAY=":1"

You may even put this variable to your bashrc or profile so you don't have to always set it manually unless display address will be changed.

Connect to the VNC server from a VNC viewer to view the output, you will not see anything except your mouse pointer if no windows manager or desktop environment is started.

Kill All VNC Servers

vncserver -kill localhost:1

Change the port with the actual port your VNC server started on.

Fluxbox in Termux

Install Fluxbox

pkg install fluxbox

Setup

nano ~/.vnc/xstartup

Copy below and paste to it:

#!/data/data/com.termux/files/usr/bin/sh

## Fluxbox desktop.

# Generate menu.
fluxbox-generate_menu

# Start fluxbox.
fluxbox &

Fluxbox will start automatically on VNC server startup.

Openbox in Termux

Install Openbox

pkg install openbox pypanel xorg-xsetroot

Setup

nano ~/.vnc/xstartup

Copy below and paste to it:

#!/data/data/com.termux/files/usr/bin/sh

# Start Openbox.
openbox-session &

Don't put any else command to the file ~/.vnc/xstartup but only the lines shown above since Openbox has its own autostart script, which is located at ${PREFIX}/etc/xdg/openbox/autostart.

nano ~/etc/xdg/openbox/autostart

Copy below and paste to it:

# Make background gray.
xsetroot -solid gray

# Launch PyPanel.
pypanel &

Openbox will start automatically on VNC server startup.

XFCE in Termux

Install XFCE

pkg install xfce4

Setup

nano ~/.vnc/xstartup

Copy below and paste to it:

#!/data/data/com.termux/files/usr/bin/sh
xfce4-session &

Don't put any other command to the file ~/.vnc/xstartup but only the lines shown above. XFCE will start automatically on VNC server startup.

Additional Recommended Packages for Installation

  • netsurf - Simple graphical web browser. Javascript is not supported.
  • xfce4-terminal - Terminal emulator for XFCE. It is not included as part of XFCE installation to allow use of aterm or st.

LXQt in Termux

Install LXQt

pkg install lxqt

Setup

nano ~/.vnc/xstartup

Copy below and paste to it:

#!/data/data/com.termux/files/usr/bin/sh
startlxqt &

Don't put any other command to the file ~/.vnc/xstartup but only the lines shown above.

LXQt will start automatically on VNC server startup.

Additional Recommended Packages for Installation

  • otter-browser - Free and open source web browser that aims to recreate aspects of Opera 12.x
  • qterminal - Terminal emulator for LXQt. It is not included as part of LXQt installation to allow use of aterm or st.

MATE in Termux

Install MATE

pkg install mate-* marco

Setup

nano ~/.vnc/xstartup

Copy below and paste to it:

#!/data/data/com.termux/files/usr/bin/sh
mate-session &

Don't put any other command to the file ~/.vnc/xstartup but only the lines shown above.

MATE will start automatically on VNC server startup.

Additional Recommended Packages for Installation

  • netsurf - Simple graphical web browser. Javascript is not supported.
  • mate-terminal - Terminal emulator for MATE. It is not included as part of MATE installation to allow use of aterm or st.

Further Readings and References about Termux Graphical Environment

PRoot-Distro with Termux: Install Linux Distributions in Termux (No Root Required)

My main development about emulation (proot, proot-distro, qemu-system, box64, wine64, etc.) and developement tools in Termux has been moved to my another repository, termux-sh. Please refer to it for more scripts and instructions for Termux.

Introduction of Chroot, PRoot, PRoot-Distro

  • Chroot is an operation on Unix and Unix-like operating systems that changes the apparent root directory for the current running process and its children. A program that is run in such a modified environment cannot name (and therefore normally cannot access) files outside the designated directory tree.
  • PRoot is a user-space implementation of chroot, mount --bind, and binfmt_misc. This means that users don't need any privileges or setup to do things like using an arbitrary directory as the new root file system, making files accessible somewhere else in the file system hierarchy, or executing programs built for another CPU architecture transparently through QEMU user-mode.
  • PRoot-Distro is a Bash script wrapper for PRoot. It provides a set of functions with standardized command line interface to let user easily manage Linux PRoot containers. By default it supports a number of well known Linux distributions such Alpine Linux, Debian or openSUSE. However it is possible to add others with a help of plug-ins.

PRoot-Distro Usage

  • Usage: proot-distro [COMMAND] [ARGUMENTS]
  • Commands:
    • help - Show this help information.
    • backup - Backup a specified distribution.
    • install - Install a specified distribution.
    • list - List supported distributions and their installation status.
    • login - Start login shell for the specified distribution.
    • remove - Delete a specified distribution. WARNING: this command destroys data!
    • rename - Rename installed distribution.
    • reset - Reinstall from scratch a specified distribution. WARNING: this command destroys data!
    • restore - Restore a specified distribution. WARNING: this command destroys data!
    • clear-cache - Clear cache of downloaded files.

Supported Distributions

Here are the supported distributions (alias: name):

  • alpine: Alpine Linux (edge)
  • archlinux: Arch Linux ARM
  • artix: Artix Linux (AArch64 only)
  • debian: Debian (stable)
  • deepin: Deepin (beige)
  • fedora: Fedora 39 (AArch64 only)
  • manjaro: Manjaro (AArch64 only)
  • openkylin: OpenKylin (Yangtze)
  • opensuse: OpenSUSE (Tumbleweed)
  • pardus: Pardus (yirmibir)
  • ubuntu: Ubuntu (23.10)
  • void: Void Linux

Hint to Install Linux OS with PRoot-Distro

Type command proot-distro list to get a list of the supported distributions.

Pick a distro alias and run the next command to install it:

proot-distro install <alias> [--override-alias <new alias>]

Runtime data is stored at this location:

/data/data/com.termux/files/usr/var/lib/proot-distro

If you have issues with proot during installation or login, try to set PROOT_NO_SECCOMP=1 environment variable.

Andronix with Termux: Install Linux Distributions in Termux (No Root Required)

My main development about emulation (proot, proot-distro, qemu-system, box64, wine64, etc.) and developement tools in Termux has been moved to my another repository, termux-sh. Please refer to it for more scripts and instructions for Termux.

Optional: Install Andronix App

Andronix can be installed from Google Play: https://play.google.com/store/apps/details?id=studio.com.techriz.andronix.

Andronix is an app that lets you install Linux distributions like Ubuntu, Debian, Manjaro etc. in Termux on non-rooted Android devices with PRoot. Andronix provides paid, close-source modded OS too, which won't be mentioned in this tutorial.

Install an OS Following Andronix App Instructions

  1. Open Andronix app.
  2. Click the Linux Distribution card.
  3. Click on the Linux distribution you want to install. It is recommended to get started with Ubuntu or Debian if you are overwhelmed by the options.
  4. Click on the user interface you want. Graphical User Interface or GUI is the visual interface that you interact with to do things in your Linux distribution. Command Line Interface or CLI is the text-based interface that you interact with to execute commands and perform tasks in your Linux distribution.
  5. Desktop Environment: You can choose a Desktop Environment if you would like to use your mouse as well as your keyboard, or you've little or no experience with Linux.
  6. Window Manager: You can choose a Window Manager if you only want to use your keyboard to manage windows and other OS-level tasks. These are pretty light and fast, but do require some skill before getting productive.
  7. CLI Only: If you don't want a Graphical User-interface, you can go ahead with the Command Line Interface.
  8. Andronix will automatically copy the command to your clipboard.
  9. Paste and run in Termux.

Uninstall an Not Modded OS Following Andronix App Instructions

  1. Open Andronix app.
  2. Click the Linux Distribution card.
  3. Long press on the Linux distribution you want to uninstall.
  4. Select Uninstall.
  5. Andronix will automatically copy the command to your clipboard.
  6. Paste and run in Termux (Not inside that OS).

Sound Output from PRoot OS

Install and Setup Sound Output from PRoot OS

Run the following command in Termux (Not inside that OS):

pkg install wget && wget https://andronixos.sfo2.cdn.digitaloceanspaces.com/OS-Files/setup-audio.sh && chmod +x setup-audio.sh && ./setup-audio.sh

Start PulseAudio Server

pulseaudio --start

Example: Debian with XFCE Desktop Environment

Install Debian with XFCE

pkg update -y && pkg install wget curl proot tar -y && wget https://raw.githubusercontent.com/AndronixApp/AndronixOrigin/master/Installer/Debian/debian-xfce.sh -O debian-xfce.sh && chmod +x debian-xfce.sh &&  bash debian-xfce.sh

The file directory of the Debian OS will be debian-fs. You can read, write, and execute files in it both in Termux or in the Debian OS.

Turn on the OS (CLI)

./start-debian.sh

VNC Server

  1. Run vncserver-start in the OS to start the VNC server (default on port 1).
  2. Get a VNC viewer. AVNC is recommended for Android.
  3. Add a new connection with address localhost:1.
  4. View GUI of the OS from VNC viewer.
  5. Run vncserver-start in the OS to kill all VNC servers.

Example: Debian with CLI Only

Install Debian

pkg update -y && pkg install wget curl proot tar -y && wget https://raw.githubusercontent.com/AndronixApp/AndronixOrigin/master/Installer/Debian/debian.sh -O debian.sh && chmod +x debian.sh && bash debian.sh

The file directory of the Debian OS will be debian-fs. You can read, write, and execute files in it both in Termux or in the Debian OS.

Turn on the OS (CLI)

./start-debian.sh

Example: Uninstall Debian OS (Not Modded)

wget https://raw.githubusercontent.com/AndronixApp/AndronixOrigin/master/Uninstall/Debian/UNI-debian.sh && chmod +x UNI-debian.sh && bash UNI-debian.sh

Further Readings and References about Chroot, Proot, and Andronix

QEMU System Emulation with Termux: Full System Emulation of Multiple CPU Architectures and Operating Systems with ISO or QCOW2 Image

My main development about emulation (proot, proot-distro, qemu-system, box64, wine64, etc.) and developement tools in Termux has been moved to my another repository, termux-sh. Please refer to it for more scripts and instructions for Termux.

Install QEMU System Emulation for x86-64

Run the following command in Termux:

pkg update && pkg install qemu-utils qemu-common qemu-system-x86-64-headless wget -y

Install QEMU System Emulation for AArch64

Run the following command in Termux:

pkg update && pkg install qemu-utils qemu-common qemu-system-aarch64-headless wget -y

ISO and QCOW2 Image Methods

For more complex distribution like Debian and Ubuntu, using ISO image method is easier to encounter some issues like GRUB menu not showing on CLI or stuck in the middle of the installation process which QCOW2 image method usually doesn't cause.

Host Port Forwarding

Set hostfwd to set host port forwarding. Take hostfwd=tcp::2222-:22 for example, tcp specifies the TCP protocol for the forwarding rule, ::2222 indicates that on the host machine, TCP connections to port 2222 will be forwarded, and -:22 indicates that these connections will be forwarded to port 22 (the default SSH port) on the guest virtual machine.

Alpine Linux x86-64 ISO Image

Installation

size='5G'
memory='1024'
cpu='2'
pkg update && pkg install qemu-utils qemu-common qemu-system-x86-64-headless wget -y
mkdir ~/alpine-x86_64 && cd ~/alpine-x86_64
wget https://dl-cdn.alpinelinux.org/v3.21/releases/x86_64/alpine-virt-3.21.0-x86_64.iso
qemu-img create -f qcow2 alpine-x86_64.img $size
qemu-system-x86_64 -machine q35 -m $memory -smp cpus=$cpu -cpu qemu64 -drive if=pflash,format=raw,read-only=on,file=$PREFIX/share/qemu/edk2-x86_64-code.fd -netdev user,id=n1,dns=8.8.8.8,hostfwd=tcp::2222-:22 -device virtio-net,netdev=n1 -cdrom alpine-virt-3.21.0-x86_64.iso -drive file=alpine-x86_64.img,format=qcow2 -nographic

Run below in the Alpine Linux VM to setup:

setup-alpine

CLI Only

memory='1024'
cpu='2'
qemu-system-x86_64 -machine q35 -m $memory -smp cpus=$cpu -cpu qemu64 -drive if=pflash,format=raw,read-only=on,file=$PREFIX/share/qemu/edk2-x86_64-code.fd -netdev user,id=n1,dns=8.8.8.8,hostfwd=tcp::2222-:22 -device virtio-net,netdev=n1 -drive file=~/alpine-x86_64/alpine-x86_64.img,format=qcow2 -nographic

With VNC Display

memory='1024'
cpu='2'
qemu-system-x86_64 -machine q35 -m $memory -smp cpus=$cpu -cpu qemu64 -drive if=pflash,format=raw,read-only=on,file=$PREFIX/share/qemu/edk2-x86_64-code.fd -netdev user,id=n1,dns=8.8.8.8,hostfwd=tcp::2222-:22 -device virtio-net,netdev=n1 -drive file=~/alpine-x86_64/alpine-x86_64.img,format=qcow2 -vnc :0

Alpine Linux AArch64 ISO Image

Installation

size='5G'
memory='1024'
cpu='2'
pkg update && pkg install qemu-utils qemu-common qemu-system-aarch64-headless wget -y
mkdir ~/alpine-aarch64 && cd ~/alpine-aarch64
wget https://dl-cdn.alpinelinux.org/alpine/latest-stable/releases/aarch64/alpine-virt-3.21.0-aarch64.iso
qemu-img create -f qcow2 alpine-aarch64.img $size
qemu-system-aarch64 -machine virt -m $memory -smp cpus=$cpu -cpu cortex-a72 -drive if=pflash,format=raw,read-only=on,file=$PREFIX/share/qemu/edk2-aarch64-code.fd -netdev user,id=n1,dns=8.8.8.8,hostfwd=tcp::2222-:22 -device virtio-net,netdev=n1 -cdrom alpine-virt-3.21.0-aarch64.iso -drive file=alpine-aarch64.img,format=qcow2 -nographic

Run below in the Alpine Linux VM to setup:

setup-alpine

CLI Only

memory='1024'
cpu='2'
qemu-system-aarch64 -machine virt -m $memory -smp cpus=$cpu -cpu cortex-a72 -drive if=pflash,format=raw,read-only=on,file=$PREFIX/share/qemu/edk2-aarch64-code.fd -netdev user,id=n1,dns=8.8.8.8,hostfwd=tcp::2222-:22 -device virtio-net,netdev=n1 -drive file=~/alpine-aarch64/alpine-aarch64.img,format=qcow2 -nographic

With VNC Display

memory='1024'
cpu='2'
qemu-system-aarch64 -machine virt -m $memory -smp cpus=$cpu -cpu cortex-a72 -drive if=pflash,format=raw,read-only=on,file=$PREFIX/share/qemu/edk2-aarch64-code.fd -netdev user,id=n1,dns=8.8.8.8,hostfwd=tcp::2222-:22 -device virtio-net,netdev=n1 -drive file=~/alpine-aarch64/alpine-aarch64.img,format=qcow2 -vnc :0

Debian Linux AMD64 QCOW2 Image

Installation

size='5G'
memory='1024'
cpu='2'
pkg update && pkg install qemu-utils qemu-common qemu-system-x86-64-headless wget -y
mkdir ~/debian-amd64 && cd ~/debian-amd64
wget https://cloud.debian.org/images/cloud/bookworm/latest/debian-12-nocloud-amd64.qcow2
qemu-img resize debian-12-nocloud-amd64.qcow2 +$size
qemu-system-x86_64 -machine q35 -m $memory -smp cpus=$cpu -cpu qemu64 -drive if=pflash,format=raw,read-only=on,file=$PREFIX/share/qemu/edk2-x86_64-code.fd -netdev user,id=n1,dns=8.8.8.8,hostfwd=tcp::2222-:22 -device virtio-net,netdev=n1 -drive file=~/debian-amd64/debian-12-nocloud-amd64.qcow2,format=qcow2 -nographic

CLI Only

memory='1024'
cpu='2'
qemu-system-x86_64 -machine q35 -m $memory -smp cpus=$cpu -cpu qemu64 -drive if=pflash,format=raw,read-only=on,file=$PREFIX/share/qemu/edk2-x86_64-code.fd -netdev user,id=n1,dns=8.8.8.8,hostfwd=tcp::2222-:22 -device virtio-net,netdev=n1 -drive file=~/debian-amd64/debian-12-nocloud-amd64.qcow2,format=qcow2 -nographic

With VNC Display

memory='1024'
cpu='2'
qemu-system-x86_64 -machine q35 -m $memory -smp cpus=$cpu -cpu qemu64 -drive if=pflash,format=raw,read-only=on,file=$PREFIX/share/qemu/edk2-x86_64-code.fd -netdev user,id=n1,dns=8.8.8.8,hostfwd=tcp::2222-:22 -device virtio-net,netdev=n1 -drive file=~/debian-amd64/debian-12-nocloud-amd64.qcow2,format=qcow2 -vnc :0

Debian Linux ARM64 QCOW2 Image

Installation

size='5G'
memory='1024'
cpu='2'
pkg update && pkg install qemu-utils qemu-common qemu-system-aarch64-headless wget -y
mkdir ~/debian-arm64 && cd ~/debian-arm64
wget https://cloud.debian.org/images/cloud/bookworm/latest/debian-12-nocloud-arm64.qcow2
qemu-img resize debian-12-nocloud-arm64.qcow2 +$size
qemu-system-aarch64 -machine virt -m $memory -smp cpus=$cpu -cpu cortex-a72 -drive if=pflash,format=raw,read-only=on,file=$PREFIX/share/qemu/edk2-aarch64-code.fd -netdev user,id=n1,dns=8.8.8.8,hostfwd=tcp::2222-:22 -device virtio-net,netdev=n1 -drive file=~/debian-arm64/debian-12-nocloud-arm64.qcow2,format=qcow2 -nographic

CLI Only

memory='1024'
cpu='2'
qemu-system-aarch64 -machine virt -m $memory -smp cpus=$cpu -cpu cortex-a72 -drive if=pflash,format=raw,read-only=on,file=$PREFIX/share/qemu/edk2-aarch64-code.fd -netdev user,id=n1,dns=8.8.8.8,hostfwd=tcp::2222-:22 -device virtio-net,netdev=n1 -drive file=~/debian-arm64/debian-12-nocloud-arm64.qcow2,format=qcow2 -nographic

With VNC Display

memory='1024'
cpu='2'
qemu-system-aarch64 -machine virt -m $memory -smp cpus=$cpu -cpu cortex-a72 -drive if=pflash,format=raw,read-only=on,file=$PREFIX/share/qemu/edk2-aarch64-code.fd -netdev user,id=n1,dns=8.8.8.8,hostfwd=tcp::2222-:22 -device virtio-net,netdev=n1 -drive file=~/debian-arm64/debian-12-nocloud-arm64.qcow2,format=qcow2 -vnc :0

Check Image Info

In host, run:

qemu-img info <image>

Check VM Disk

Inside guest, run:

df -h

and for partition, run:

lsblk

Resize Image

In host, run:

qemu-img resize <image> +5G

+5G indicates increasing 5GB disk image. You can adjust the size as needed.

Resize Partition in Debian AMD64

In Debian guest, run:

sudo apt update
sudo apt install parted e2fsprogs -y
sudo parted /dev/sda

In (parted), run:

print
fix
resizepart 1 100%
quit

and then in Debian guest run:

sudo resize2fs /dev/sda1

Resize Partition in Debian ARM64

In Debian guest, run:

sudo apt update
sudo apt install parted e2fsprogs -y
sudo parted /dev/vda

In (parted), run:

print
fix
resizepart 1 100%
quit

and then in Debian guest run:

sudo resize2fs /dev/vda1

Further Readings and References about QEMU

AVNC: A VNC Client for Android

Install AVNC

You can install AVNC from F-Droid: https://f-droid.org/packages/com.gaurav.avnc.

Connect a VNC Server

  • Tap the + sign in the lower right corner,
  • Input Name (arbitrary name), Host address (localhost for localhost), and Port, input Username and Password if needed, adjust ADVANCED options if needed, and then tap SAVE.
  • Tap the Server name to connect to it.
  • If you encounter incorrect mouse display or recieving, going to Settings > Input > Mouse and toggling on Hide local pointer may help.

Features of AVNC

  • Gesture styles: Automatic, Touchscreen (Do actions at touch-point), or Touchpad mode (Do actions at pointer).
  • Material Design: Dark theme and light theme.
  • Configurable gestures: Configure the meaning of each gesture.
  • Tight encoding.
  • Virtual Keys: Go to Settings => Input => Virtual keys => Customize keys to customize Virtual Key layout.
  • Picture-in-Picture mode.
  • View-only mode.
  • Zeroconf Server Discovery.
  • TLS support: AnonTLS and VeNCrypt.
  • SSH tunnel: VNC over SSH.
  • Import/Export servers.
  • VNC Repeater support.
  • Clipboard Sync with server.
  • Pause update in background.
  • Automatic reconnection.
  • Automatically find supported servers.

Shizuku, SystemUI Tuner, and aShell: Use Local ADB of Android Device on Terminals Such as Termux without Another Device with Shizuku, Leave Developer Options off When Doing So with SystemUI Tuner, and Use ADB with Features like Autocomplete Suggestion with aShell

Install Shizuku

Shizuku from installed from Google Play: https://play.google.com/store/apps/details?id=moe.shizuku.privileged.api.

Introduction of ADB and Shizuku

  • The Android Debug Bridge (ADB) is a programming tool used for the debugging of Android-based devices. The daemon on the Android device connects with the server on the host PC over USB or TCP, which connects to the client that is used by the end-user over TCP. Made available as open-source software under the Apache License by Google, its features include a shell and the possibility to make backups. The ADB software is available for many devices such as Windows, Linux and macOS. It has been misused by botnets and other malware, for which mitigations were developed such as RSA authentication and device whitelisting.
  • Shizuku is an open-source app for serving multiple apps that require root/adb. If your "root required app" only needs adb permission, you can easily expand the audience by using Shizuku. Also, Shizuku is significantly faster than root shell.

Connect Shizuku to Wireless ADB

  1. Grant Shizuku notification permission.
  2. Tap Pairing in Start via Wireless debugging block in Shizuku.
  3. Connect to a WiFi you trust. You don't need to log in to the WiFi though. You just need to let your phone think that you're connected to WiFi.
  4. In phone's Settings or something similar, go to About Phone > Software Information or something similar, and tap the Version Number seven times to enable Developer Options. Some phones may have different methods to enable Developer Options.
  5. In the Developer Options, enable Wireless ADB and tap Pair with a pairing code.
  6. Input the pairing code in the notification of Shizuku.
  7. In the Developer Options, togle on Disable adb authorization timeout if you don't want to do all the above again every few times using Shizuku. If the connection is disconnected due to whatever reason, follow Reconnect Shizuku in Case it Stops with SystemUI Tuner to reconnect if you're using SystemUI Tuner, or follow above guide again to reconnect.
  8. Back to Shizuku and tap Start in Start via Wireless debugging block. You all see Shizuku is running on the top of the app interface of Shizuku.

Use Shizuku in a Terminal Application for the First Time (Termux for Example)

  1. Tap Use Shizuku in terminal applications in Shizuku and export files rish and rish_shizuku.dex to somewhere on your phone.
  2. Use a text editor to replace PKG in rish with the package name of your terminal application. Take Termux for example, Termux's package name is com.termux. Run termux-setup-storage and tap Allow to grant Termux storage permission.
  3. Open your terminal application and move the exported files to somewhere it can access (with mv old_location new_location). The root directory of the main storage of Android is usually /storage/emulated/0. The home directory of Termux is /data/data/com.termux/home, which is abbreviated as $PREFIX or ~ in Termux.
  4. Go to the directory you moved the exported files to with cd directory (assumed ~/shizuku below) and run sh rish.
  5. ~ $ should become <device>:/ $ (such as e2q:/ $) if sh rish succeeded. Write ADB commands here. Note that there is no need to use adb or adb shell prefixes before commands and that devices command gets /system/bin/sh: devices: inaccessible or not found.
  6. You can turn WiFi off after ADB is connected. The notification of Shizuku may say Paring failed after that, but you can check Shizuku app to check whether there's a block that reads Shizuku is running on the top.
  7. Optionally, create a .sh file (nano ~/shizuku.sh for example), paste cd shizuku && sh rish, save it, and make it executable with chmod +x shizuku.sh so that you can run this shortcut to start Shizuku on your terminal afterward.
  8. Note: It is recommended to use Termux's F-Droid version: https://f-droid.org/packages/com.termux and avoid using Google Play version because the latter is depreciated.

Install SystemUI Tuner

SystemUI Tuner (pub: Zachary Wander) can be installed from Google Play: https://play.google.com/store/apps/details?id=com.zacharee1.systemuituner.

To Leave Developer Options off When Using Shizuku to Connect to ADB with SystemUI Tuner

WARNING: In Android 14's latest update, now Enable ADB can't be persistently on unless USB connected.

Some apps (such as many financial apps) may require Developer Options to be off when using them. This section is the tutorial about how to turn Developer Options off while still using ADB Shell with Shizuku.

  1. Run adb shell command pm grant com.zacharee1.systemuituner android.permission.WRITE_SECURE_SETTINGS (you can do it with Shizuku and a terminal such as Termux or aShell).
  2. Connect to a WiFi. You don't need to log in or have real WiFi access, just make your phone believes you are connected to WiFi.
  3. Turn off Developer Options if it's on. The toggle switch is usually on the top of Developer Options.
  4. In SystemUI Tuner, go to Developer and turn on Enable ADB and Enable Wireless ADB.
  5. In SystemUI Tuner, go to Persistent Options and select Enable ADB.
  6. Press Start on Shizuku.
  7. Turn off WiFi. Enable Wireless ADB will be turned off automatically by system settings. You can check that in SystemUI Tuner.

Reconnect Shizuku in Case it Stops with SystemUI Tuner

  1. Connect to a WiFi. You don't need to log in or have real WiFi access, just make your phone believes you are connected to WiFi.
  2. Turn off Developer Options if it's on. The toggle switch is usually on the top of Developer Options.
  3. In SystemUI Tuner, go to Developer and turn on Enable Wireless ADB.
  4. Press Start on Shizuku.
  5. Turn off WiFi. Enable Wireless ADB will be turned off automatically by system settings. You can check that in SystemUI Tuner.

Other SystemUI Tuner Usage

SystemUI Tuner exposes some hidden options in Android. You can set them, add them to Persistent Options to keep them on, etc. Different manufacturers may remove or change these options, which SystemUI Tuner may not work around.

You may need to run the following adb shell command (you can do it with Shizuku and a terminal such as Termux or aShell) in order to change the settings:

pm grant com.zacharee1.systemuituner android.permission.WRITE_SECURE_SETTINGS
pm grant com.zacharee1.systemuituner android.permission.PACKAGE_USAGE_STATS
pm grant com.zacharee1.systemuituner android.permission.DUMP

aShell

Install aShell

aShell can be installed from F-Droid: https://f-droid.org/packages/in.sunilpaulmathew.ashell.

aShell has features like autocomplete suggestions and optional log.

Usage of aShell

  1. Give aShell the permission moe.shizuku.manager.permission.API_V23.
  2. Connect to ADB.
  3. Use aShell.

Further Readings and References about ADB and Shizuku

Tor Browser

Install Tor Browser

You can install Tor Browser from Google Play: https://play.google.com/store/apps/details?id=org.torproject.torbrowser.

Introduction of Tor

Tor is a free overlay network for enabling anonymous communication. Built on free and open-source software and more than seven thousand volunteer-operated relays worldwide, users can have their Internet traffic routed via a random path through the network.

Using Tor makes it more difficult to trace a user's Internet activity by preventing any single point on the Internet (other than the user's device) from being able to view both where traffic originated from and where it is ultimately going to at the same time. This conceals a user's location and usage from anyone performing network surveillance or traffic analysis from any such point, protecting the user's freedom and ability to communicate confidentially.

Key Features of Tor:

  • Anonymity: Tor allows users to browse the internet anonymously by routing their internet traffic through a network of volunteer-operated servers called nodes or relays. Each relay only knows the IP address of the previous and next node, making it difficult to trace the origin of the traffic.
  • Onion Routing: The name "Onion Router" comes from the way data is encrypted in layers, similar to the layers of an onion. When data is sent through the Tor network, it is encrypted multiple times, and each node decrypts a layer before passing it on to the next, protecting user privacy.
  • Access to .onion Sites: Tor allows users to access hidden services with .onion domain names, which are not reachable through standard web browsers. These sites often provide additional privacy and anonymity.
  • Bypass Censorship: Tor can help users bypass censorship and access restricted content by routing traffic through nodes in different countries.
  • Privacy Tools: The Tor Browser, based on Mozilla Firefox, comes preconfigured with privacy enhancements, making it easier for users to maintain anonymity while browsing.

The Tor Browser for Android is a mobile version of the Tor Browser that utilizes Mozilla Firefox for Android codebase.

Some services may crash when routing traffic through Tor, changing the Exit nodes may help.

NoScript Security Suite

NoScript (or NoScript Security Suite) is a free and open-source extension for Firefox- and Chromium-based web browsers, written and maintained by Giorgio Maone, a software developer and member of the Mozilla Security Group. By default, NoScript blocks active (executable) web content, which can be wholly or partially unblocked by allowlisting a site or domain from the extension's toolbar menu or by clicking a placeholder icon. It is recommended to enable NoScript for all Tor sites unless you fully trust it.

TrackerControl and InviZible Pro: Route Traffic through Tor, Block DNS over UDP, Set DNS Server, Block Trackers, etc.

Install InviZible Pro

InviZible Pro can be installed from F-Droid: https://f-droid.org/packages/pan.alexander.tordnscrypt.stable or Google Play: https://play.google.com/store/apps/details?id=pan.alexander.tordnscrypt.gp.

Install TrackerControl

TrackerControl (also known as TC) can be installed from F-Droid: https://f-droid.org/packages/net.kollnig.missioncontrol.fdroid.

WARNING: Please avoid use the Google Play version because it doesn't have the feature like trackers blocking in order to comply with Google's terms.

  • Blocking trackers can be used independently or with proxy (such as Prxoy mode of InviZible Pro).
  • TrackerControl has a Traffic log feature for free, which can help a lot in identifying which trackers should be unblocked when the services crash.
  • This tutorial section, including the setting .xml, can be used in NetGuard as well because TrackerControl uses NetGuard's code. However, Traffic log feature is not available in NetGuard's free version but only available in Pro version. NetGuard is available on F-Droid: https://f-droid.org/packages/eu.faircode.netguard or Google Play: https://play.google.com/store/apps/details?id=eu.faircode.netguard.
  • You have to disable monitoring of apps route traffic through Tor itself within TrackerControl, such as Tor Browser, and Termux if you're using tor, torsocks, or similar things.

Configure TrackerControl to Block Trackers without InviZible Pro

  • Block unwanted trackers in the main interface of the apps.
  • TrackerControl categorizes trackers by port, corporation, category, etc. You can easily block and allow connections. You may have to try several time to figure out what trackers to allow in order to prevent apps from crashing in few cases.
  • Turn on TrackerControl as the VPN service of the device.

Configure TrackerControl and InviZible Pro for DNSCrypt and Tor

Configure TrackerControl

  1. Turn on TrackerControl as the VPN service of the device.
  2. Go to TrackerControl.
  3. Disable Monitoring of InviZible Pro (pan.alexander.tordnscrypt.stable).
  4. Go to the Settings > Advanced options.
  5. Turn on Block Trackers on UDP.
  6. Set the SOCKS5 address to 127.0.0.1.
  7. Set the SOCKS port to the port you've configured Tor to use in InviZible Pro (9050 by default).
  8. Enable the Use SOCKS5 proxy option.
  9. Tap Port forwarding.
  10. Tap ⊕. Set protocol as UDP, Source port to 53, Destination address to 127.0.0.1, Destination port to the port you configure DNSCrypt of InviZible pro to listen to (5354 by default), and Destination app to nobody.
  11. Tap ⊕. Set protocol as TCP, Source port to 53, Destination address to 127.0.0.1, Destination port to the port you configure DNSCrypt of InviZible pro to listen to (5354 by default), and Destination app to nobody.
  12. Set first (above) VPN DNS as 9.9.9.9.
  13. Set second (below) VPN DNS as 149.112.112.112.
  14. Set where to validate the internet connection in Validate at if you want, www.f-droid.org for example.
  15. Block unwanted trackers and set other things if you want.

If you export settings and import it on another device, the blocklist may not be able to be configured as that in the previous device. You can apply some of the above settings with the .xml below (assuming the configuration of Invizible Pro is as in this tutorial) by coping it, storing it in a .xml file and going to Settings > Backup > Import settings of TrackerControl to import this file. However, it just contains some of the settings, you have to configure others yourself and test whether your applications work as normal because things may vary from case to case.

<?xml version='1.0' encoding='UTF-8' standalone='yes' ?>
<trackercontrol>
  <application>
    <setting key="dns2" type="string" value="149.112.112.112" >
    <setting key="filter_udp" type="boolean" value="true" >
    <setting key="domain_based_blocking" type="boolean" value="true" >
    <setting key="dark_theme" type="boolean" value="true" >
    <setting key="dns" type="string" value="9.9.9.9" >
    <setting key="hosts_url_new" type="string" value="https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts" >
    <setting key="wifi_homes" type="set" value="" >
    <setting key="traffic_blocked" type="boolean" value="true" >
    <setting key="hosts_url" type="string" value="https://www.netguard.me/hosts" >
    <setting key="socks5_addr" type="string" value="127.0.0.1" >
    <setting key="socks5_port" type="string" value="9050" >
    <setting key="proto_tcp" type="boolean" value="true" >
    <setting key="manage_system" type="boolean" value="true" >
    <setting key="validate" type="string" value="www.f-droid.org" >
    <setting key="update_check" type="boolean" value="true" >
    <setting key="socks5_enabled" type="boolean" value="true" >
    <setting key="filter" type="boolean" value="true" >
  </application>
  <apply>
    <setting key="com.termux" type="boolean" value="false" >
    <setting key="pan.alexander.tordnscrypt.stable" type="boolean" value="false" >
  </apply>
  <forward>
    <port pkg="nobody" protocol="17" dport="53" raddr="127.0.0.1" rport="5354" >
    <port pkg="nobody" protocol="6" dport="53" raddr="127.0.0.1" rport="5354" >
  </forward>
</trackercontrol>

Configure InviZible Pro

  1. Change to Proxy mode by tapping the ⋮ button in the upper right corner and select that option.
  2. Go to Fast settings.
  3. Turn on Autostart DNSCrypt and Autostart Tor if you want.
  4. Set Delay, DNSCrypr servers, Bridges, whether to Spoof SNI, etc. if needed.
  5. Go to Common Settings and turn on Prevent device sleep if needed.
  6. Go to DNSCrypt Settings.
  7. Go to Listen port and set it to the port TrackerControl forwarding UDP and TCP of port 53 to (5354 by default).
  8. Set Require DNSSEC, Require no log, and Require no filter if you want.
  9. Turn on Force TCP because Tor doesn't support UDP.
  10. Turn on SOCKS proxy > Outbound proxy.
  11. Set Proxy port as the port you want to configure Tor to use in InviZible Pro (9050 by default).
  12. Turn on Query logging and Suspicious logging if you want.
  13. Go to Tor settings.
  14. Set Nodes, Proxy, etc. if you want. Make sure the SOCKS port is coordinated with the SOCKS proxy in TrackerControl and the DNS port is coordinated with the Forwarding rules in DNSCrypt Settings (onion 127.0.0.1:5400 by default).
  15. Set other things if you want.
  16. Turn on DNSCrypt and Tor.

You can apply some of the above settings with the files below (assuming the configuration of TrackerControl is as in this tutorial). However, they just contain some of the settings, you have to configure others yourself and test whether your applications work as normal because things may vary from case to case.

  • dns-proxy.toml: Copy the text in the below block, tap Edit dns-proxy.toml in DNSCrypt Settings, and paste.
ipv4_servers = true
ipv6_servers = true
require_dnssec = true
require_nolog = false
require_nofilter = false
block_ipv6 = false
force_tcp = true
server_names = ['adguard-dns', 'adguard-dns-ipv6', 'ahadns-doh-la', 'brahma-world-ipv6', 'dnsforge.de', 'mullvad-base-doh', 'sfw.scaleway-fr']
disabled_server_names = []
listen_addresses = ['127.0.0.1:5354', '[::1]:5354']
max_clients = 250
#user_name = '0'
dnscrypt_servers = true
doh_servers = true
odoh_servers = true
timeout = 5000
keepalive = 30
netprobe_timeout = -1
log_level = 2
log_file = '/data/user/0/pan.alexander.tordnscrypt.stable/logs/DnsCrypt.log'
use_syslog = false
cert_refresh_delay = 240
dnscrypt_ephemeral_keys = false
tls_disable_session_tickets = false
bootstrap_resolvers = ['9.9.9.9:53', '[2620:fe::fe]:53']
netprobe_address = '9.9.9.9:53'
block_unqualified = true
block_undelegated = true
reject_ttl = 10
ignore_system_dns = false
http3 = true
log_files_max_size = 1
log_files_max_age = 7
log_files_max_backups = 1
cache = true
cache_size = 4096
cache_min_ttl = 2400
cache_max_ttl = 86400
cache_neg_ttl = 60
cache_neg_max_ttl = 600
forwarding_rules = 'forwarding-rules.txt'
cloaking_rules = 'cloaking-rules.txt'
proxy = 'socks5://127.0.0.1:9050'
[captive_portals]
map_file = 'captive-portals.txt'
[dns64]
#prefix = ['64:ff9b::/96']
[local_doh]
#listen_addresses = ['127.0.0.1:3000']
#path = '/dns-query'
#cert_file = 'localhost.pem'
#cert_key_file = 'localhost.pem'
[query_log]
format = 'tsv'
file = '/data/user/0/pan.alexander.tordnscrypt.stable/cache/query.log'
ignored_qtypes = ['DNSKEY', 'NS']
[nx_log]
format = 'tsv'
file = '/data/user/0/pan.alexander.tordnscrypt.stable/cache/nx.log'
[blocked_names]
blocked_names_file = 'blacklist.txt'
[blocked_ips]
blocked_ips_file = 'ip-blacklist.txt'
[allowed_names]
allowed_names_file = 'whitelist.txt'
[sources]
[sources.'public-resolvers']
urls = ['https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/public-resolvers.md', 'https://download.dnscrypt.info/resolvers-list/v3/public-resolvers.md', 'https://ipv6.download.dnscrypt.info/resolvers-list/v3/public-resolvers.md']
minisign_key = 'RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3'
cache_file = 'public-resolvers.md'
refresh_delay = 72
prefix = ''
[sources.'relays']
urls = ['https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/relays.md', 'https://download.dnscrypt.info/resolvers-list/v3/relays.md', 'https://ipv6.download.dnscrypt.info/resolvers-list/v3/relays.md']
cache_file = 'relays.md'
minisign_key = 'RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3'
refresh_delay = 72
prefix = ''
[sources.'odoh-servers']
urls = ['https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/odoh-servers.md', 'https://download.dnscrypt.info/resolvers-list/v3/odoh-servers.md', 'https://ipv6.download.dnscrypt.info/resolvers-list/v3/odoh-servers.md']
cache_file = 'odoh-servers.md'
minisign_key = 'RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3'
refresh_delay = 72
prefix = ''
[sources.'odoh-relays']
urls = ['https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/odoh-relays.md', 'https://download.dnscrypt.info/resolvers-list/v3/odoh-relays.md', 'https://ipv6.download.dnscrypt.info/resolvers-list/v3/odoh-relays.md']
cache_file = 'odoh-relays.md'
minisign_key = 'RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3'
refresh_delay = 72
prefix = ''
[broken_implementations]
fragments_blocked = ['cisco', 'cisco-ipv6', 'cisco-familyshield', 'cisco-familyshield-ipv6', 'cleanbrowsing-adult', 'cleanbrowsing-adult-ipv6', 'cleanbrowsing-family', 'cleanbrowsing-family-ipv6', 'cleanbrowsing-security', 'cleanbrowsing-security-ipv6']
[anonymized_dns]
skip_incompatible = false
routes = [
{ server_name = 'adguard-dns', via=['anon-kama', 'anon-scaleway', 'anon-tiarap'] },
{ server_name = 'sfw.scaleway-fr', via=['anon-kama', 'anon-serbica', 'anon-tiarap'] },
{ server_name = 'adguard-dns-ipv6', via=['anon-ams-ipv6', 'anon-scaleway-ams-ipv6', 'anon-tiarap-ipv6'] }
]
[static]
  • tor.conf: Copy the text in the below block, tap Edit tor.conf in Tor Settings, and paste.
RunAsDaemon 0
AvoidDiskWrites 1
AutomapHostsOnResolve 1
AutomapHostsSuffixes .exit, .onion
#ExcludeExitNodes
TransPort 9040
DNSPort 127.0.0.1:5400
DNSPort [::1]:5400
SOCKSPort 127.0.0.1:9050
SOCKSPort [::1]:9050
HardwareAccel 1
Schedulers Vanilla
#Socks5Proxy 127.0.0.1:1080
ClientOnly 1
ExitPolicy reject *:*
ExitPolicy reject6 *:*
GeoIPFile /data/user/0/pan.alexander.tordnscrypt.stable/app_data/tor/geoip
GeoIPv6File /data/user/0/pan.alexander.tordnscrypt.stable/app_data/tor/geoip6
DataDirectory /data/user/0/pan.alexander.tordnscrypt.stable/tor_data
VirtualAddrNetworkIPv4 10.192.0.0/10
VirtualAddrNetworkIPv6 [FC00::]/8
Log notice file /data/user/0/pan.alexander.tordnscrypt.stable/logs/Tor.log
ConnectionPadding 1
ReducedConnectionPadding 1
#ExcludeNodes
ExitNodes {AU},{AT},{GB},{US},{DE},{SE},{CH},{LU},{NL},{NZ},{CA},{JP},{TW},{KR},{BE},{KY},{DK},{FI},{GL},{GR},{IS},{HU},{IE},{IT},{ES},{PT},{PL},{HR},{EE},{LV},{NO},{PH},{SG},{FR}
#EntryNodes
StrictNodes 0
#ReachableAddresses *:80,*:443
NewCircuitPeriod 30
MaxCircuitDirtiness 600
EnforceDistinctSubnets 1
HTTPTunnelPort 8118
DormantCanceledByStartup 1
DormantClientTimeout 15 minutes
CircuitsAvailableTimeout 86400
ClientUseIPv4 1
ClientUseIPv6 1
UseBridges 0

Some services may crash when routing traffic through Tor, changing the Exit nodes in InviZible Pro may help; otherwise, you may try to disable monitoring that app or toggle off Use SOCKS5 proxy in TrackerControl, which however compromise your privacy to some degree.

Configure TrackerControl and InviZible Pro for DNSCrypt Only

To use DNSCrypt but not Tor of InviZible Pro with TrackerControl, there are below differences in the configuration compared with both DNSCrypt and Tor in above section.

Configure TrackerControl

  1. Turn on TrackerControl as the VPN service of the device.
  2. Go to TrackerControl.
  3. Disable Monitoring of InviZible Pro (pan.alexander.tordnscrypt.stable).
  4. Go to the Settings > Advanced options.
  5. Turn on Block Trackers on UDP.
  6. Tap Port forwarding.
  7. Tap ⊕. Set protocol as UDP, Source port to 53, Destination address to 127.0.0.1, Destination port to the port you configure DNSCrypt of InviZible pro to listen to (5354 by default), and Destination app to nobody.
  8. Tap ⊕. Set protocol as TCP, Source port to 53, Destination address to 127.0.0.1, Destination port to the port you configure DNSCrypt of InviZible pro to listen to (5354 by default), and Destination app to nobody.
  9. Set first (above) VPN DNS as 9.9.9.9.
  10. Set second (below) VPN DNS as 149.112.112.112.
  11. Set where to validate the internet connection in Validate at if you want, www.f-droid.org for example.
  12. Block unwanted trackers and set other things if you want.

Configure InviZible Pro

  1. Change to Proxy mode by tapping the ⋮ button in the upper right corner and select that option.
  2. Go to Fast settings.
  3. Turn on Autostart DNSCrypt if you want.
  4. Set Delay, DNSCrypr servers, Bridges, whether to Spoof SNI, etc. if needed.
  5. Go to Common Settings and turn on Prevent device sleep if needed.
  6. Go to DNSCrypt Settings.
  7. Go to Listen port and set it to the port TrackerControl forwarding UDP and TCP of port 53 to (5354 by default).
  8. Set Require DNSSEC, Require no log, and Require no filter if you want.
  9. Turn on Force TCP if you want.
  10. Turn on Query logging and Suspicious logging if you want.
  11. Turn on DNSCrypt.

Configure TrackerControl and InviZible Pro for Tor Only

To use Tor but not DNSCrypr of InviZible Pro with TrackerControl, there are below differences in the configuration compared with both DNSCrypt and Tor in above section.

Configure TrackerControl

  1. Turn on TrackerControl as the VPN service of the device.
  2. Go to TrackerControl.
  3. Disable Monitoring of InviZible Pro (pan.alexander.tordnscrypt.stable).
  4. Go to the Settings > Advanced options.
  5. Turn on Block Trackers on UDP.
  6. Set the SOCKS5 address to 127.0.0.1.
  7. Set the SOCKS port to the port you've configured Tor to use in InviZible Pro (9050 by default).
  8. Enable the Use SOCKS5 proxy option.
  9. Tap Port forwarding.
  10. Tap ⊕. Set protocol as UDP, Source port to 53, Destination address to 127.0.0.1, Destination port to the Forwarding rules in DNSCrypt Settings of InviZible Pro (5400 by default), and Destination app to nobody.
  11. Tap ⊕. Set protocol as TCP, Source port to 53, Destination address to 127.0.0.1, Destination port to the Forwarding rules in DNSCrypt Settings of InviZible Pro (5400 by default), and Destination app to nobody.
  12. Set first (above) VPN DNS as 9.9.9.9.
  13. Set second (below) VPN DNS as 149.112.112.112.
  14. Set where to validate the internet connection in Validate at if you want, www.f-droid.org for example.
  15. Block unwanted trackers and set other things if you want.

Configure InviZible Pro

  1. Change to Proxy mode by tapping the ⋮ button in the upper right corner and select that option.
  2. Go to Fast settings.
  3. Turn on Autostart Tor if you want.
  4. Set Delay, DNSCrypr servers, Bridges, whether to Spoof SNI, etc. if needed.
  5. Go to Common Settings and turn on Prevent device sleep if needed.
  6. Go to Tor settings.
  7. Set Nodes, Proxy, etc. if you want. Make sure the SOCKS port is coordinated with the SOCKS proxy in TrackerControl and the DNS port is coordinated with the Port forwarding rules in TrackerControl.
  8. Set other things if you want.
  9. Turn on Tor.

Check Whether the Tor Route Setup Is Successful

  • Go to https://check.torproject.org to check if your Tor route succeeded. If yes, you will see "Congratulations. This browser is configured to use Tor." or similar massage in other languages.
  • Go to https://whatismyipaddress.com (not open source), https://ipcheck.ing, or other IP checking websites to see wether it's your device's IP. If not, your Tor route is probably successful.
  • Go to https://www.dnsleaktest.com (not open source), https://ipcheck.ing, or other DNS leak testing websites to check if there is a DNS leak. You will see the DNS servers you set in DNSCrypt Settings in InviZible Pro instead of your ISP's servers if there's no DNS leak.

Configure InviZible Pro to Block Trackers without TrackerControl

  • Change to VPN mode by tapping the ⋮ button in the upper right corner and select that option.
  • Settings for DNSCRypt and Tor, DNSCrypr only, and Tor only remain the same as the above counterparts that is used with TrackerControl except that those parts coordinated with Port forwarding of TrackerControl are no longer needed.

OpenSSL: Secure Sockets Layer (SSL) and Transport Layer Security (TLS) Protocols and Cryptography Library Implementation

Introduction of OpenSSL

OpenSSL is an open-source library that provides a comprehensive suite of cryptographic tools for securing communications over computer networks. It implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols and includes a general-purpose cryptographic library that supports a variety of encryption algorithms, hashing functions, digital signatures, key generation, certificate management, and secure random number generation.

Install OpenSSL in Termux

pkg install openssl openssl-tool

Install of OpenSSL in Debian Derivatives

sudo apt install openssl libssl-dev

RSA (Rivest-Shamir-Adleman)

Introduction of RSA

RSA is a widely used asymmetric encryption algorithm that underpins many security protocols. Its strength lies in the difficulty of factoring large prime numbers. The algorithm involves key generation, encryption, and decryption processes utilizing a pair of keys: a public key, shared openly, and a private key, kept secret.

  1. Key Generation: The algorithm begins by selecting two large prime numbers. The totient function, equal to the product of the decrements of the two large prime numbers by one, is computed. A public exponent, typically 65537, is chosen, which is coprime to the totient function of the product of the two large prime numbers. The public key is the array of the product of the two large prime numbers and the public exponent. The private exponent is calculated such that the product of the public exponent and the private exponent is congruent to 1 modulo the totient function of the product of the two large prime numbers. The private key is the array of the product of the two large prime numbers and the private exponent. RSA's security relies on the ease of multiplying primes and the difficulty of factoring their product.
  2. Public Encryption and Private Decryption (Communication): After generating the keys, RSA can be used for secure communication. To encrypt a message, which should be less than the product of the two large prime numbers, the sender uses the recipient's public key with the formula that the ciphertext equals the message to the power of the public exponent modulo the product of the two large prime numbers. Only the intended recipient, with the private key, can decrypt it using the formula that the message equals the cyphertext to the power of the private exponent modulo the product of the two large prime numbers.
  3. Private Encryption and Public Decryption (Signature): RSA can also create digital signatures for authenticity and non-repudiation. The sender encrypts a hash of the message with their private key with the formula that the signature equals the hash to the power of the private exponent modulo the product of the two large prime numbers. The signature is sent accompanying the original message. The recipient verifies the signature by decrypting it with the sender's public key with the formula that the hash equals the signature to the power of the public exponent modulo the product of the two large prime numbers. If hash obtained from the formula matches the hash of the received message, it confirms the message's authenticity.

Applications:

  • RSA is employed in various applications that require secure communication and data integrity:
  • Secure Web Communications (HTTPS): RSA is commonly used in SSL/TLS protocols to establish secure connections between web browsers and servers.
  • Email Encryption: Services like PGP (Pretty Good Privacy) use RSA for encrypting emails, ensuring only intended recipients can read them.
  • Digital Signatures: RSA is used to sign software and documents, verifying the identity of the sender and ensuring the content hasn't been altered.
  • Secure Key Exchange: RSA can facilitate the secure exchange of symmetric keys for faster encryption methods, allowing secure communication without the need for shared secrets.

Generate New Private Key

openssl genrsa -out /path/privatekeyfilename.pem 2048

2048 means 2048 iterations, change the number as needed.

Generate Public Key from Private Key

openssl rsa -pubout -in /path/privatekeyfilename.pem -out /path/publickeyfilename.pem

Encrypt with Public Key

openssl pkeyutl -in /path/filename.txt -out /path/publickeyencryptedfilename.txt -inkey /path/publickeyfilename.pem -pubin -encrypt

Decrypt with Public Key

openssl pkeyutl -in /path/publickeyencryptedfilename.txt -out /path/filename.txt -inkey /path/privatekeyfilename.pem -decrypt

Encrypt with Private Key

openssl pkeyutl -in /path/filename.txt -out /path/privatekeyencryptedfilename.txt -inkey /path/privatekeyfilename.pem -encrypt

Decrypt with Private Key

openssl pkeyutl -in /path/privatekeyencryptedfilename.txt -out /path/filename.txt -inkey /path/publickeyfilename.pem -pubin -decrypt

Sign a Raw File

openssl pkeyutl -in filename.txt -rawin -out signed_filename.txt -inkey keyfile/privatekeyfile.pem -sign

Sign a Hex File

openssl pkeyutl -in hexfilename.txt -out signed_filename.txt -inkey keyfile/privatekeyfile.pem -sign

Verify a Signature Against a Raw File

openssl pkeyutl -in filename.txt -rawin -out verification.txt -sigfile signed_filename.txt -inkey keyfile/publickeyfile.pem -pubin -verify

Verify a Signature Against a Hex File

openssl pkeyutl -in hexfilename.txt -rawin -out verification.txt -sigfile signed_filename.txt -inkey keyfile/publickeyfile.pem -pubin -verify

All Command Options of Pkeyutl from Official Doc

openssl pkeyutl [-help] [-in file] [-rawin] [-digest algorithm] [-out file] [-sigfile file] [-inkey filename|uri] [-keyform DER|PEM|P12|ENGINE] [-passin arg] [-peerkey file] [-peerform DER|PEM|P12|ENGINE] [-pubin] [-certin] [-rev] [-sign] [-verify] [-verifyrecover] [-encrypt] [-decrypt] [-derive] [-kdf algorithm] [-kdflen length] [-pkeyopt opt:value] [-pkeyopt_passin opt[:passarg]] [-hexdump] [-asn1parse] [-engine id] [-engine_impl] [-rand files] [-writerand file] [-provider name] [-provider-path path] [-propquery propq] [-config configfile]

DESCRIPTION: This command can be used to perform low-level public key operations using any supported algorithm.

OPTIONS:

  • -help: Print out a usage message.
  • -in filename: This specifies the input filename to read data from or standard input if this option is not specified.
  • -rawin: This indicates that the input data is raw data, which is not hashed by any message digest algorithm. The user can specify a digest algorithm by using the -digest option. This option can only be used with -sign and -verify and must be used with the Ed25519 and Ed448 algorithms.
  • -digest algorithm: This specifies the digest algorithm which is used to hash the input data before signing or verifying it with the input key. This option could be omitted if the signature algorithm does not require one (for instance, EdDSA). If this option is omitted but the signature algorithm requires one, a default value will be used. For signature algorithms like RSA, DSA and ECDSA, SHA-256 will be the default digest algorithm. For SM2, it will be SM3. If this option is present, then the -rawin option must be also specified.
  • -out filename: Specifies the output filename to write to or standard output by default.
  • -sigfile file: Signature file, required for -verify operations only.
  • -inkey filename|uri: The input key, by default it should be a private key.
  • -keyform DER|PEM|P12|ENGINE: The key format; unspecified by default. See openssl-format-options (1) for details.
  • -passin arg: The input key password source. For more information about the format of arg see openssl-passphrase-options (1).
  • -peerkey file: The peer key file, used by key derivation (agreement) operations.
  • -peerform DER|PEM|P12|ENGINE: The peer key format; unspecified by default. See openssl-format-options (1) for details.
  • -pubin: By default a private key is read from the key input. With this option a public key is read instead. If the input contains no public key but a private key, its public part is used.
  • -certin: The input is a certificate containing a public key.
  • -rev: Reverse the order of the input buffer. This is useful for some libraries (such as CryptoAPI) which represent the buffer in little endian format.
  • -sigfile file: Signature file, required for -verify operations only.
  • -inkey filename|uri: The input key, by default it should be a private key.
  • -keyform DER|PEM|P12|ENGINE: The key format; unspecified by default. See openssl-format-options (1) for details.
  • -passin arg: The input key password source. For more information about the format of arg see openssl-passphrase-options (1).
  • -peerkey file: The peer key file, used by key derivation (agreement) operations.
  • -peerform DER|PEM|P12|ENGINE: The peer key format; unspecified by default. See openssl-format-options (1) for details.
  • -pubin: By default a private key is read from the key input. With this option a public key is read instead. If the input contains no public key but a private key, its public part is used.
  • -certin: The input is a certificate containing a public key.
  • -rev: Reverse the order of the input buffer. This is useful for some libraries (such as CryptoAPI) which represent the buffer in little endian format.
  • -sign: Sign the input data (which must be a hash) and output the signed result. This requires a private key.
  • -verify: Verify the input data (which must be a hash) against the signature file and indicate if the verification succeeded or failed.
  • -verifyrecover: Verify the input data (which must be a hash) and output the recovered data.
  • -encrypt: Encrypt the input data using a public key.
  • -decrypt: Decrypt the input data using a private key.
  • -derive: Derive a shared secret using the peer key.
  • -kdf algorithm: Use key derivation function algorithm. The supported algorithms are at present TLS1-PRF and HKDF. Note: additional parameters and the KDF output length will normally have to be set for this to work. See EVP_PKEY_CTX_set_hkdf_md (3) and EVP_PKEY_CTX_set_tls1_prf_md (3) for the supported string parameters of each algorithm.
  • -kdflen length: Set the output length for KDF.
  • -pkeyopt opt:value: Public key options specified as opt:value. See NOTES below for more details.
  • -pkeyopt_passin opt[:passarg]: Allows reading a public key option opt from stdin or a password source. If only opt is specified, the user will be prompted to enter a password on stdin. Alternatively, passarg can be specified which can be any value supported by openssl-passphrase-options (1).
  • -hexdump: hex dump the output data.
  • -asn1parse: Parse the ASN.1 output data, this is useful when combined with the -verifyrecover option when an ASN1 structure is signed.
  • -engine id: See "Engine Options" in openssl (1). This option is deprecated.
  • -engine_impl: When used with the -engine option, it specifies to also use engine id for crypto operations.
  • -rand files, -writerand file: See "Random State Options" in openssl (1) for details.
  • -provider name: See "Provider Options" in openssl (1), provider (7), and property (7).
  • -provider-path path: See "Provider Options" in openssl (1), provider (7), and property (7).
  • -propquery propq: See "Provider Options" in openssl (1), provider (7), and property (7).
  • -config configfile: See "Configuration Option" in openssl (1).

Symmetric Encryption

Introduction of Symmetric Encryption

Symmetric encryption uses the same key for both encryption and decryption, requiring both parties to possess and keep the key confidential.

Features:

  • Single Key: Both parties use the same key, making key management critical. If the key is compromised, the encrypted data is at risk.
  • Speed: Symmetric algorithms are faster than asymmetric ones, making them ideal for encrypting large amounts of data, particularly in real-time applications.
  • Confidentiality: Only authorized parties with the correct key can decrypt the data, maintaining its confidentiality.

Common Algorithms:

  • AES: Secure and efficient, with key sizes of 128, 192, or 256 bits.
  • DES: Uses a 56-bit key; now considered insecure.
  • 3DES: Applies DES three times with different keys but slower than AES.
  • Blowfish: A fast cipher with key lengths of 32 to 448 bits.
  • Twofish: A more advanced version of Blowfish, supporting keys up to 256 bits.
  • RC4: A stream cipher known for speed but now insecure in many uses.

Applications:

  • Data Encryption: Secures data in storage and transmission (e.g., SSL/TLS).
  • VPNs: Encrypts data over public networks to protect privacy.
  • Disk Encryption: Protects data on devices, ensuring confidentiality if lost or stolen.
  • Secure Communications: Used in messaging apps and secure protocols.
  • Cloud Storage Security: Encrypts data in the cloud, protecting it from unauthorized access.

AES-256-CBC Encryption

openssl enc -aes-256-cbc -in file.rar -out encfile.rar -pass pass:1234567890123456789012345678901234567890123456789012345678901234 -base64 -iv 12345678901234567890123456789012 -S 1234567890123456 -md sha-256 -iter 2048 -pbkdf2 -p

AES-256-CBC Decryption

openssl enc -aes-256-cbc -in encfile.rar -out file.rar -pass pass:1234567890123456789012345678901234567890123456789012345678901234 -d -base64 -iv 12345678901234567890123456789012 -S 1234567890123456 -md sha-256 -iter 2048 -pbkdf2

All Command Options of Enc / Cipher

openssl enc|cipher [-cipher] [-help] [-list] [-ciphers] [-in filename] [-out filename] [-pass arg] [-e] [-d] [-a] [-base64] [-A] [-k password] [-kfile filename] [-K key] [-iv IV] [-S salt] [-salt] [-nosalt] [-z] [-md digest] [-iter count] [-pbkdf2] [-saltlen size] [-p] [-P] [-bufsize number] [-nopad] [-v] [-debug] [-none] [-engine id] [-rand files] [-writerand file] [-provider name] [-provider-path path] [-propquery propq]

DESCRIPTION: The symmetric cipher commands allow data to be encrypted or decrypted using various block and stream ciphers using keys based on passwords or explicitly provided. Base64 encoding or decoding can also be performed either by itself or in addition to the encryption or decryption.

OPTIONS:

  • -help: Print out a usage message.
  • -list: List all supported ciphers.
  • -ciphers: Alias of -list to display all supported ciphers.
  • -in filename: The input filename, standard input by default.
  • -out filename: The output filename, standard output by default.
  • -pass arg: The password source. For more information about the format of arg see "Pass Phrase Options" in openssl (1).
  • -e: Encrypt the input data. This is the default.
  • -d: Decrypt the input data.
  • -a: Base64 process the data. This means that if encryption is taking place the data is base64 encoded after encryption. If decryption is set then the input data is base64 decoded before being decrypted.
  • -base64: Same as -a.
  • -A: If the -a option is set then base64 process the data on one line.
  • -k password: The password to derive the key from. This is for compatibility with previous versions of OpenSSL. Superseded by the -pass argument.
  • -kfile filename: Read the password to derive the key from the first line of filename. This is for compatibility with previous versions of OpenSSL. Superseded by the -pass argument.
  • -md digest: Use the specified digest to create the key from the passphrase. The default algorithm is sha-256.
  • -iter count: Use a given number of iterations on the password in deriving the encryption key. High values increase the time required to brute-force the resulting file. This option enables the use of PBKDF2 algorithm to derive the key.
  • -pbkdf2: Use PBKDF2 algorithm with a default iteration count of 10000 unless otherwise specified by the -iter command line option.
  • -saltlen: Set the salt length to use when using the -pbkdf2 option. For compatibility reasons, the default is 8 bytes. The maximum value is currently 16 bytes. If the -pbkdf2 option is not used, then this option is ignored and a fixed salt length of 8 is used. The salt length used when encrypting must also be used when decrypting.
  • -nosalt: Don't use a salt in the key derivation routines. This option SHOULD NOT be used except for test purposes or compatibility with ancient versions of OpenSSL.
  • -z: Compress or decompress encrypted data using zlib after encryption or before decryption. This option exists only if OpenSSL was compiled with the zlib or zlib-dynamic option.
  • -none: Use NULL cipher (no encryption or decryption of input).
  • -rand files, -writerand file: See "Random State Options" in openssl (1) for details.
  • -provider name: See "Provider Options" in openssl (1), provider (7), and property (7).
  • -provider-path path: See "Provider Options" in openssl (1), provider (7), and property (7).
  • -propquery propq: See "Provider Options" in openssl (1), provider (7), and property (7).
  • -engine id: See "Engine Options" in openssl (1). This option is deprecated.

Supported ciphers:

  • aes-128-cbc
  • aes-128-cfb
  • aes-128-cfb1
  • aes-128-cfb8
  • aes-128-ctr
  • aes-128-ecb
  • aes-128-ofb
  • aes-192-cbc
  • aes-192-cfb
  • aes-192-cfb1
  • aes-192-cfb8
  • aes-192-ctr
  • aes-192-ecb
  • aes-192-ofb
  • aes-256-cbc
  • aes-256-cfb
  • aes-256-cfb1
  • aes-256-cfb8
  • aes-256-ctr
  • aes-256-ecb
  • aes-256-ofb
  • aes128
  • aes128-wrap
  • aes128-wrap-pad
  • aes192
  • aes192-wrap
  • aes192-wrap-pad
  • aes256
  • aes256-wrap
  • aes256-wrap-pad
  • aria-128-cbc
  • aria-128-cfb
  • aria-128-cfb1
  • aria-128-cfb8
  • aria-128-ctr
  • aria-128-ecb
  • aria-128-ofb
  • aria-192-cbc
  • aria-192-cfb
  • aria-192-cfb1
  • aria-192-cfb8
  • aria-192-ctr
  • aria-192-ecb
  • aria-192-ofb
  • aria-256-cbc
  • aria-256-cfb
  • aria-256-cfb1
  • aria-256-cfb8
  • aria-256-ctr
  • aria-256-ecb
  • aria-256-ofb
  • aria128
  • aria192
  • aria256
  • bf
  • bf-cbc
  • bf-cfb
  • bf-ecb
  • bf-ofb
  • blowfish
  • camellia-128-cbc
  • camellia-128-cfb
  • camellia-128-cfb1
  • camellia-128-cfb8
  • camellia-128-ctr
  • camellia-128-ecb
  • camellia-128-ofb
  • camellia-192-cbc
  • camellia-192-cfb
  • camellia-192-cfb1
  • camellia-192-cfb8
  • camellia-192-ctr
  • camellia-192-ecb
  • camellia-192-ofb
  • camellia-256-cbc
  • camellia-256-cfb
  • camellia-256-cfb1
  • camellia-256-cfb8
  • camellia-256-ctr
  • camellia-256-ecb
  • camellia-256-ofb
  • camellia128
  • camellia192
  • camellia256
  • cast
  • cast-cbc
  • cast5-cbc
  • cast5-cfb
  • cast5-ecb
  • cast5-ofb
  • chacha20
  • des
  • des-cbc
  • des-cfb
  • des-cfb1
  • des-cfb8
  • des-ecb
  • des-ede
  • des-ede-cbc
  • des-ede-cfb
  • des-ede-ecb
  • des-ede-ofb
  • des-ede3
  • des-ede3-cbc
  • des-ede3-cfb
  • des-ede3-cfb1
  • des-ede3-cfb8
  • des-ede3-ecb
  • des-ede3-ofb
  • des-ofb
  • des3
  • des3-wrap
  • desx
  • desx-cbc
  • id-aes128-wrap
  • id-aes128-wrap-pad
  • id-aes192-wrap
  • id-aes192-wrap-pad
  • id-aes256-wrap
  • id-aes256-wrap-pad
  • id-smime-alg-CMS3DESwrap
  • idea
  • idea-cbc
  • idea-cfb
  • idea-ecb
  • idea-ofb
  • rc2
  • rc2-128
  • rc2-40
  • rc2-40-cbc
  • rc2-64
  • rc2-64-cbc
  • rc2-cbc
  • rc2-cfb
  • rc2-ecb
  • rc2-ofb
  • rc4
  • rc4-40
  • seed
  • seed-cbc
  • seed-cfb
  • seed-ecb
  • seed-ofb
  • sm4
  • sm4-cbc
  • sm4-cfb
  • sm4-ctr
  • sm4-ecb
  • sm4-ofb

OpenSSH, SCP, SFTP, and Material Files: Secure Remote Access

Introduction of SSH and OpenSSH

  • SSH provides a secure way for accessing remote hosts and replaces tools such as telnet, rlogin, rsh, ftp.
  • OpenSSH (also known as OpenBSD Secure Shell) is a suite of secure networking utilities based on the Secure Shell (SSH) protocol, which provides a secure channel over an unsecured network in a client–server architecture.
  • Default SSH port in Termux is 8022.
  • Default SSH port in Linux is usually 22.

OpenSSH Server

Install in Debian Derivatives

sudo apt install openssh-server

Install in Termux

pkg install openssh

Edit Configuration

sudo nano /etc/ssh/sshd_config
Listening Port

Edit

#Port 22

line to change the listening port.

Note that you may need to set it to higher port in VMs.

Ports Listening to

Edit

#AddressFamily any
#ListenAddress 0.0.0.0
#ListenAddress ::

lines to change ports listening to.

PermitRootLogin

Change the PermitRootLogin line to

PermitRootLogin yes

if you want to permit login as root. In Termux, this is common, but in normal Linux, this is not discouraged.

PasswordAuthentication

Change the PasswordAuthentication line to

PasswordAuthentication yes

to permit password authentication. Password can be set by running passwd.

Usage in Linux with Systemctl

sudo systemctl start ssh
sudo systemctl enable ssh
sudo systemctl restart ssh
sudo systemctl status ssh
sudo systemctl disable ssh

Usage in Termux

Start
sshd
Stop
pkill sshd

Deny

nano /etc/hosts .deny

Ubuntu Firewall

sudo ufw enable
sudo ufw allow ssh

OpenSSH Client

Install in Debian Derivatives

sudo apt install openssh-client

Install in Termux

pkg install openssh

Connect

ssh [user]@[ssh_server] -p [port] -L [local_port]:[remote_host]:[remote_port]
  • -p: Port. Default is 22.
  • -L: Local port forwarding.

Key

ssh-keygen -R [localhost]:2222

You need to delete the original key if the server is reset.

If you're using password authentication, you won't need to generate key.

SCP (Secure Copy Protocol)

You can use scp on the client side to transfer files between the server side and the client side.

The syntax of scp is the same as that of cp, but with the username@host: added before the path to copy to or from the server. For example:

scp -r root@localhost:/root/Desktop /data/data/com.termux/files/home/

Use SFTP server mount if you encounter errors in this method.

SFTP Server Mound on Material Files

Introduction of SFTP

SFTP, or Secure File Transfer Protocol, is a secure network protocol used for transferring files over a secure connection. It is an extension of the SSH (Secure Shell) protocol, which means it provides the same level of security and encryption that SSH offers. Here are some key points about SFTP:

  • Security: SFTP encrypts both commands and data. This makes it more secure than traditional FTP (File Transfer Protocol).
  • Authentication: SFTP supports various password-based and key-based authentication.
  • File Management: SFTP allows for various file management operations, such as listing files, changing directories, and deleting files.
  • Port: SFTP typically operates over the same port used by SSH.
  • Cross-Platform: SFTP is supported on various platforms, making it a versatile option for file transfers across different systems.

Install Material Files

You can install Material Files from Google Play: https://play.google.com/store/apps/details?id=me.zhanghai.android.files or F-Droid: https://f-droid.org/packages/me.zhanghai.android.files.

Mount SFTP Server

  • Connect to the SSH server with Termux or other clients on your Android device.
  • Open the left menu.
  • Tap Add storage ….
  • Tap SFTP server.
  • Input necessary information. Hostname, Port, etc. means those of the SSH server. Leave path empty to mount the whole file system of the server side.
  • You can manage the file system of the SSH server like managing local storage now.

Further Readings and References about OpenSSH with Linux and Termux

droidVNC-NG: VNC Server App for Android That Does Not Require Root Privileges

Install droidVNC-NG

You can install droidVNC-NG on:

Features of droidVNC-NG

Remote Control & Interaction

  • Screen Sharing: Share your device's screen over the network, with optional scaling on the server side for better performance.
  • Remote Control: Use your VNC client to control your device, including mouse and basic keyboard input. To enable this, you must activate the Accessibility API Service on your device.
  • Special Key Functions: Remotely trigger key functions like 'Recent Apps,' Home button, and Back button.
  • Text Copy & Paste: Support for copying and pasting text from your device to the VNC client. Note: Copying text from the client to the device isn't supported due to Android security restrictions.
  • Multiple Mouse Pointers: Display different mouse pointers for each connected client on your device.

Comfort Features

  • Web Browser Access: Control your device’s shared screen directly from a web browser, without needing a separate VNC client.
  • Auto-Discovery: Advertise the VNC server using Zeroconf/Bonjour for easy discovery by native clients.

Security & Configuration

  • Password Protection: Protect your VNC connection with a password.
  • Custom Port Settings: Choose which port the VNC server uses for connections.
  • Startup on Boot: Automatically start the VNC service when your device boots up.
  • Default Configuration: Load a default configuration from a JSON file.

Advanced VNC Features

  • Reverse VNC: Allow your device to initiate the VNC connection to a client.
  • Repeater Support: Connect to a repeater that supports UltraVNC-style Mode-2 for more flexible networking.

SD Maid SE: A File Management Tool and System Cleaner

Install SD Maid SE

You can install SD Maid SE on:

Introduction of SD Maid SE

SD Maid SE (also known as SD Maid 2 or SD Maid 2/SE) is a file management tool and system cleaner for Android that specializes in maintenance, freeing up space, and removing unwanted data.

Features include:

  • CorpseFinder - Removing data that belongs to apps that are no longer installed
  • SystemCleaner: User configurable filters for random files
  • AppControl - Controling/disabling apps
  • StorageAnalyzer - Storage overview
  • Root and Shizuku support

Use SD Maid SE with Shizuku

Linux Command Library

Introduction of Linux Command Library

The app has 6056 manual pages, 22+ basic categories and a bunch of general terminal tips about Linux (retrieved Sep. 27, 2024). It works 100% offline, doesn't need an internet connection and has no tracking software. Some of the commands available in Linux are available in Termux too, such as cp, mv, ls, mkdir, apt, and apt-get.

Install and Use Linux Command Library

You can install Linux Command Library in Google Play: https://play.google.com/store/apps/details?id=com.inspiredandroid.linuxcommandbibliotheca or F-Droid: https://f-droid.org/packages/com.inspiredandroid.linuxcommandbibliotheca, or browse it on its official website: https://linuxcommandlibrary.com.

PipePipe: A FLOSS Android App to Let You Browse YouTube, NicoNico and BiliBili Freely.

Install PipePipe

PipePipe can be installed from F-Droid: https://f-droid.org/packages/InfinityLoop1309.NewPipeEnhanced or GitHub: https://github.com/InfinityLoop1308/PipePipe release.

Note that because YouTube is trying to block third-party clients, especially for anonymous access, PipePipe sometimes has to be updated frequently to address issues that arise. You can receive the latest update from GitHub release without waiting for F-Droid update building process.

Features of PipePipe

  • Browse YouTube, YouTube Music, BiliBili, NicoNico, SoundCloud, media.ccc.de, FramaTube, and Bandcamp.
  • Watch videos at different resolutions up to 4K.
  • Watch live streams.
  • Show or hide subtitles.
  • Search videos, audios, channels, playlists, etc. with language, channel, etc. filters.
  • Enqueue videos.
  • Comments page, Related items page, and Description page.
  • Search videos, audios, channels, playlists, albums, etc.
  • Subscribe to channels without or with account logged in.
  • Get notifications about new videos from channels you're subscribed to.
  • Create, edit, search, and sort channel groups.
  • Browse feeds generated from your channel groups.
  • Save or don't save history.
  • Search and watch playlists.
  • Create and edit local playlists.
  • Download videos, audios, subtitles etc. with different format and quality.
  • Login to watch restricted and premium contents.
  • SponsorBlock and ReturnYouTubeDislike.
  • Bullet comments and Live Chats.
  • Filter out unwanted items by keywords, channels, etc.
  • Music player mode, Background playing, and Popup mode (floating player, aka Picture-in-Picture).
  • Sleep timer.
  • Configurable fullscreen, volume, and brightness gestures.
  • Auto-translation captions.
  • Open in browser.

VLC for Android: Open Source Media Player and Multimedia Engine

Introduction of VLC

VLC is a libre and open source media player and multimedia engine, focused on playing everything, and running everywhere.

VLC can play most multimedia files, discs, streams, devices and is also able to convert, encode, stream and manipulate streams into numerous formats.

VLC is available on Windows, macOS, Linux, BSD, Android, iOS, and Haiku.

Install VLC for Android

VLC for Android can be installed from F-Droid: https://f-droid.org/packages/org.videolan.vlc or Google Play: https://play.google.com/store/apps/details?id=org.videolan.vlc.

Promoted or Related Works, References, and Bibliography

Termux by Fredrik Fornwall / Termux / termux

Termux:Styling by Fredrik Fornwall / Termux / termux

Termux:Widget by Fredrik Fornwall / Termux / termux

Termux:Boot by Fredrik Fornwall / Termux / termux

Termux:Float by Fredrik Fornwall / Termux / termux

Termux:API by Fredrik Fornwall / Termux / termux

Andronix by Devriz Technologies LLP / Andronix App /AndronixApp

Shizuku by Xingchen & Rikka / RikkaApps

SystemUI Tuner by Zachary Wander / zacharee

Invizible Pro by Garmatin Oleksandr / Oleksandr Garmatin / Gedsh

TrackerControl / TC by TrackerControl / Oxford HCC

NetGuard by Marcel Bokhorst / M66B / Marcel Bokhorst, FairCode BV

DontKillMyApp / DontKillMyApp: Make apps work by Urbandroid Team / urbandroid-team / Petr Nálevka (Urbandroid)

aShell by Sunil Paul Mathew M. / sunilpaulmathew

QEMU by Qemu Project / QEMU

Tor and Tor Browser by The Tor Project

MyIP / IPCheck.ing by Jason Ng / jason5ng32

Debian

Linux Command Library by Simon Schubert / SimonSchubert

OpenSSL by OpenSSL / openssl

ANC by Gaurav Ujwal / gujjwal00

Material Files / MaterialFiles by Hai Zhang / zhanghai

SD Maid SE / SD Maid 2/SE - System Cleaner / sdmaid-se by d4rken / d4rken-org / darken / darken development

droidVNC-NG / droidVNC-NG VNC Server by Christian Beier / bk138

PipePipe by InfinityLoop1309 / InfinityLoop1308

NewPipe by Team NewPipe / TeamNewPipe

VLC for Android / vlc-android by Videolabs / VLC Mobile Team / VideoLAN / videolan

Others

Contribution

We welcome contributions to this project! Please fork the repository and submit a pull request for your contributions. For clarity and convenience, we recommend making one pull request per revised section or added feature.

License

Copyright (C) 2024 Willie169.

This project is licensed under the terms of either:

  • GNU Free Documentation License, Version 1.3 (GFDL 1.3)
  • Creative Commons Attribution-ShareAlike 4.0 International License (CC BY-SA 4.0)

GNU Free Documentation License, Version 1.3 (GFDL 1.3)

Permission is granted to copy, distribute, and/or modify this document under the terms of the GNU Free Documentation License, Version 1.3 or any later version published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts.

You should have received a copy of the GNU Free Documentation License along with this document. If not, see https://www.gnu.org/licenses/fdl-1.3.html.

Creative Commons Attribution-ShareAlike 4.0 International License (CC BY-SA 4.0)

You are free to:

  • Share — copy and redistribute the material in any medium or format
  • Adapt — remix, transform, and build upon the material for any purpose, even commercially.

The licensor cannot revoke these freedoms as long as you follow the license terms.

Under the following terms:

  • Attribution — You must give appropriate credit, provide a link to the license, and indicate if changes were made. You may do so in any reasonable manner, but not in any way that suggests the licensor endorses you or your use.
  • ShareAlike — If you remix, transform, or build upon the material, you must distribute your contributions under the same license as the original.

No additional restrictions — You may not apply legal terms or technological measures that legally restrict others from doing anything the license permits.

You should have received a copy of the Creative Commons Attribution-ShareAlike 4.0 International License along with this program. If not, see https://creativecommons.org/licenses/by-sa/4.0.

About

Open-source tools for non-root Android functionality, security, privacy, and customization, such as Termux, Shizuku, Tor, TrackerControl, InviZible Pro, and QEMU.

Resources

Readme
Activity

Stars

13 stars

Watchers

2 watching

Forks

0 forks
Report repository

Releases 1

Version 2.0.0 release Latest
Feb 1, 2025

Packages

No packages published

Languages