jezail - GitLite

KO | EN

gitlite — search

#javascript #python #typescript #go #golang #android #rust #deep-learning #linux #awesome-list #security #ios #mcp #openai

jezail

(★ 269)

Android pentesting toolkit with REST API, web terminal, screen mirroring, Frida, and full device control from your rooted device

파일 탐색기

최종 버전 다운로드 (.zip)

- .gitignore
- build.gradle.kts
- proguard-rules.pro
- - crosshair_logo.svg
  - hero.png
- - gallery.css
  - shared.css
  - styles.css
- - gallery.js
  - script.js
- - device_screenshot.png
  - webui_1.png
  - webui_2.png
  - webui_3.png
  - webui_4.png
  - webui_5.png
  - webui_6.png
  - webui_7.png
- _config.yml
- gallery.html
- index.html
- - gradle-wrapper.jar
  - gradle-wrapper.properties
- libs.versions.toml
.gitignore
build.gradle.kts
gradle.properties
gradlew
gradlew.bat
LICENSE
README.md
settings.gradle.kts
UI.md

# 설치 가이드

1. 코드 내려받기

git clone https://github.com/zahidaz/jezail

깃허브에서 프로젝트 코드 전체를 내 컴퓨터로 내려받습니다.

cd jezail

방금 내려받은 프로젝트 폴더 안으로 이동합니다.

2. Gradle (Java/Kotlin)

보통 추천

사전 준비물

Git GitHub에서 프로젝트 코드를 내려받으려면 필요합니다.
JDK (Java) Java/Kotlin 프로젝트를 빌드/실행하려면 필요합니다.
Gradle 레포에 포함된 gradlew(Gradle Wrapper)를 쓰면 Gradle을 따로 설치할 필요가 없습니다.

cd app

이 프로젝트의 관련 파일이 하위 폴더 안에 있어서, 먼저 그 폴더로 이동합니다.

./gradlew build

Gradle로 빌드를 진행합니다.

✅ BUILD SUCCESSFUL 메시지가 뜨면 성공입니다. build/ 폴더에 결과물이 생성됩니다.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

<div align="center">
  <br>

<img src="docs/assets/hero.png" alt="Jezail" width="95%">

<br>
  <br>

<p>
    <strong>Android Pentesting Toolkit</strong><br>
    <em>Transform your rooted device into a full security testing platform</em>
  </p>

<p>

[![License](https://img.shields.io/github/license/zahidaz/jezail?style=for-the-badge&logo=opensourceinitiative&logoColor=white&color=22c55e)](https://raw.githubusercontent.com/zahidaz/jezail/main/LICENSE)
  [![Platform](https://img.shields.io/badge/Android_7+-3DDC84?style=for-the-badge&logo=android&logoColor=white)](https://developer.android.com)
  [![Root](https://img.shields.io/badge/Root-Required-ef4444?style=for-the-badge&logo=magisk&logoColor=white)](https://github.com/topjohnwu/Magisk)
  [![Kotlin](https://img.shields.io/badge/Kotlin-7F52FF?style=for-the-badge&logo=kotlin&logoColor=white)](https://kotlinlang.org)
  [![Ktor](https://img.shields.io/badge/Ktor-087CFA?style=for-the-badge&logo=ktor&logoColor=white)](https://ktor.io)

</p>

<p>

[![Stars](https://img.shields.io/github/stars/zahidaz/jezail?style=flat-square&color=f59e0b)](https://github.com/zahidaz/jezail/stargazers)
  [![Issues](https://img.shields.io/github/issues/zahidaz/jezail?style=flat-square&color=3b82f6)](https://github.com/zahidaz/jezail/issues)
  [![Last Commit](https://img.shields.io/github/last-commit/zahidaz/jezail?style=flat-square&color=8b5cf6)](https://github.com/zahidaz/jezail/commits)
  [![Code Size](https://img.shields.io/github/languages/code-size/zahidaz/jezail?style=flat-square&color=06b6d4)](https://github.com/zahidaz/jezail)

</p>

</div>

---

Jezail is an all-in-one Android application that runs entirely on your rooted device. It exposes a rich **REST API** and serves an embedded [**web interface**](./UI.md), accessible from any browser on your network, giving you remote control over device management, system internals, and security tooling without any external dependencies.

## Features

<table>
<tr>
<td width="50%">

### Device Control
- Hardware info, battery, CPU, RAM, storage
- Screenshot capture & screen mirroring (WebSocket)
- Clipboard read/write/clear
- Hardware key simulation
- System properties & SELinux toggle
- Environment variables, proxy & DNS config

</td>
<td width="50%">

### Application Management
- List, install, uninstall packages
- Launch/stop apps with activity options
- Permissions management (grant/revoke)
- App ops configuration
- Debug status, signatures, process info
- Clear app data and cache

</td>
</tr>
<tr>
<td width="50%">

### Security Tools
- **Frida** server management & auto-install
- **ADB** server control & key management
- Certificate management (system/user)
- APK download, backup & XAPK install
- PIN-based auth with Bearer tokens
- **Refrida** Web IDE for live instrumentation

</td>
<td width="50%">

### System & Monitoring
- Log buffers (main, kernel, radio, crash, events)
- Live logcat streaming via WebSocket
- File system browsing with chmod/chown/chgrp
- File upload, download & directory zip
- Process listing & management
- Web-based terminal (xterm.js)

</td>
</tr>
</table>

## Quick Start

### Prerequisites

- **Rooted Android device** - [Magisk](https://github.com/topjohnwu/Magisk) recommended
- For emulators - [rootAVD](https://gitlab.com/newbit/rootAVD)

### Install

<div align="center">
  <a href="https://github.com/zahidaz/jezail/releases">
    <img src="https://img.shields.io/badge/Download_APK-22c55e?style=for-the-badge&logo=android&logoColor=white" alt="Download APK" height="40">
  </a>
  <br><br>
  <a href="https://github.com/zahidaz/jezail/releases">
    <img src="https://quickchart.io/qr?text=https://github.com/zahidaz/jezail/releases&dark=ffffff&light=000000&size=160&margin=1" alt="Download QR" width="140">
  </a>
  <br>
  <sub>Scan to download from Releases</sub>
</div>

<br>

```bash
adb install -g -r jezail.apk
```

Launch the app. The HTTP server starts automatically on port **8080**.

### Access

| Endpoint | Description |
|----------|-------------|
| `http://<device-ip>:8080/` | Web UI |
| `http://<device-ip>:8080/terminal` | Web Terminal |
| `http://<device-ip>:8080/mirror` | Screen Mirror |
| `http://<device-ip>:8080/refrida/` | Refrida IDE |
| `http://<device-ip>:8080/api/swagger` | Swagger Docs |
| `http://<device-ip>:8080/api/json` | OpenAPI JSON |

> [!TIP]
> **Running on an emulator?** Forward the port first: `adb forward tcp:8080 tcp:8080` then use `localhost:8080`

## API

Jezail exposes a complete REST API with OpenAPI documentation. Every feature available in the web UI is accessible programmatically.

```bash
curl http://<device-ip>:8080/api/device

curl http://<device-ip>:8080/api/device/screenshot -o screen.png

curl http://<device-ip>:8080/api/packages

curl http://<device-ip>:8080/api/frida
```

Full interactive documentation at `/api/swagger`.

## Screenshots

<div align="center">
  <img src="docs/screenshots/webui_1.png" width="30%">
  <img src="docs/screenshots/webui_2.png" width="30%">
  <img src="docs/screenshots/webui_3.png" width="30%">
</div>

<details>
<summary><strong>More screenshots</strong></summary>
<br>
<div align="center">
  <img src="docs/screenshots/webui_4.png" width="30%">
  <img src="docs/screenshots/webui_5.png" width="30%">
  <img src="docs/screenshots/webui_6.png" width="30%">
  <img src="docs/screenshots/webui_7.png" width="30%">
  <img src="docs/screenshots/device_screenshot.png" width="30%">
</div>
</details>

## Contributing

Contributions are welcome. Open an issue or submit a pull request.

## About the Name

The **Jezail** (جزایل) is a handcrafted long-barreled rifle from Afghanistan, renowned in 19th-century warfare for its exceptional range and precision. Its distinctive curved stock allowed marksmen to fire accurately from any position, whether standing, kneeling, or mounted on horseback. In battle, it consistently outranged contemporary military firearms, giving its wielders a decisive tactical advantage.

This toolkit carries the same philosophy: **precise, powerful, and effective at a distance**, delivering deep system-level control to your Android device from anywhere on the network.

> [!WARNING]
> Jezail is under active development and provided **as-is** without warranty. It is intended for authorized security testing and educational purposes only. Users assume full responsibility for how they use this toolkit.

## License

[MIT License](./LICENSE) - Copyright (c) 2025 Xahid