firerpa/lamda

Features

• Dynamic Instrumentation Injections - Injects scripts into running processes to hook Java interfaces and modify application behavior in real time.
• Traffic Proxying and Interception - Intercepts and modifies HTTP/S and SOCKS5 traffic on rooted devices using man-in-the-middle proxies.
• ADB Command-Line App Controls - Enables remote execution of tools and application controls from a local computer via ADB shell commands.
• Remote RPC Exposure - Maps script functions to HTTP endpoints to execute internal Java methods remotely via RPC.
• Internal Application Interfaces - Integrates custom hook scripts to expose internal application functions as programmable interfaces for remote control.
• Mobile Remote Input Control - Routes remote input events to a connected mobile device to simulate user interactions on the screen.
• WebSocket Control Protocols - Uses a bidirectional WebSocket to stream real-time screen data and transmit touch input events.
• Privileged Shell Executions - Executes shell commands and scripts as the root user to bypass OS sandboxing and access protected directories.
• Android Activity Control - Launches specific application activities with custom intents and flags or replays recent system activities.
• Android Automation Frameworks - A framework for automating user interfaces and system tasks on rooted Android devices via Python and ADB.
• UI State Inspection - Visualizes the real-time interface layout to identify element attributes for automation scripts.
• JSON-RPC Interfaces - Exposes internal script functions and device capabilities as network endpoints via the JSON-RPC protocol.
• Android Remote Control Interfaces - Provides a web-based gateway for real-time screen streaming and remote touch input control.
• Real-Time Screen Streaming - Streams real-time device screen updates using MJPEG or H.264 over WebSockets.
• Remote Desktop Streaming - Transmits low-latency video feeds of the device screen to remote clients with audio and clipboard support.
• Remote Method Invocation - Triggers exported script functions over the network using JSON-RPC or HTTP POST requests to execute logic on the device.
• Traffic Interception - Intercepts HTTP/S traffic from rooted devices by automatically configuring a global proxy.
• Traffic Proxying - Routes device network traffic through a man-in-the-middle proxy to analyze and modify HTTP/S requests.
• Embedded Root Shells - Provides an on-device root shell equipped with Linux utilities and libraries for deep system analysis.
• Frida-Based Instrumentation - Integrates a Frida server to inject scripts into running Android processes for dynamic instrumentation.
• Application Lifecycle Management - Manages the full application lifecycle, including starting, stopping, enabling, disabling, and uninstalling apps.
• Device and Environment Metadata - Retrieves critical system information including screen dimensions, hardware architecture, and current application packages.
• Device Control Interfaces - Exposes rooted device capabilities to external agents via a programmatic interface for security analysis and testing.
• Real-Time Modifications - Intercepts and alters request and response data on the fly using custom hook scripts.
• Android Device Management - Provides a programmatic remote API for controlling system settings and managing applications on rooted Android devices.
• Interactive Remote Shells - Provides administrative remote access to the device through integrated ADB and SSH interactive shells.
• Network Traffic Analysis - Restricts packet capture to specific package names to isolate application-specific network traffic for analysis.
• Hierarchy Inspection - Dumps the current window layout as XML to enable programmatic element location and structural analysis.
• Input Simulations - Simulates touch inputs, pinch-to-zoom, and keyboard typing for comprehensive device automation.
• UI Element Interactions - Executes actions like clicking and dragging on specific UI elements using resource IDs, text, or class names.
• UI Text Field Management - Sets, retrieves, or clears text within input fields and text-entry widgets.
• OCR-Based Locators - Identifies on-screen elements using optical character recognition to enable interactions.
• Image-Based - Locates on-screen elements using template matching and feature-point analysis when DOM selectors are unavailable.
• Multi-Touch Gesture Systems - Executes complex multi-finger touch operations by programmatically constructing or recording touch events.
• Visual Interaction Triggers - Monitors the screen in real-time to automatically execute clicks or key presses when specific selectors appear.
• Local On-Device AI - Executes machine learning tasks and semantic task executors directly on the Android device hardware.
• MCP Implementations - Exposes device capabilities to external AI clients using the standardized Model Context Protocol for tool-calling.
• Natural Language Command Translation - Translates natural language prompts into executable device actions using LLMs and the MCP protocol.
• Visual Template Matchers - Locates on-screen elements using image feature analysis and OCR when XML layout hierarchies are unavailable.
• Dynamic Behavioral Analysis - Analyzes application behavior and interactions with the operating system to identify security vulnerabilities.
• Injection Persistence - Ensures instrumentation scripts are automatically re-injected into target applications after process termination.
• MQTT Connectors - Publishes captured instrumentation data to MQTT topics using TLS and server certificate verification.
• External Data Connectors - Streams captured data from instrumentation scripts to external destinations such as HTTP endpoints, Redis, or RabbitMQ.
• Redis Sinks - Pushes captured data directly into a Redis queue using LPUSH for high-performance data collection.
• Wireless ADB Pairings - Establishes high-privilege ADB connections over WiFi without requiring the device's developer mode.
• Application Directory Locators - Retrieves the dedicated data directories and user folders for specific applications on the device.
• Natural Language Automation - Translates natural language prompts into executable device operations and tool calls using large language models.
• Debug Server Orchestration - Hosts a built-in server to manage low-level debugging sessions and IDE integration for device processes.
• Remote Debugger Connectivity - Establishes network connections between a remote debugger and specific application processes using package names.
• Screen Capture Tools - Takes full-screen or region-specific screenshots for workflow recording and image recognition.
• Remote Shell Interfaces - Provides a WebSocket-based bidirectional channel for executing shell commands and receiving real-time output.
• System Settings Managers - Provides programmatic interfaces to read and write device-wide system settings.
• Agent-to-Server Bridges - Translates natural language prompts into device actions by mapping LLM tool calls to a standardized protocol.
• Metadata Inspection - Retrieves package IDs, version information, launch activities, and currently running processes for APKs.
• Recurring Job Scheduling - Executes scripts and administrative commands on a fixed timetable using standard crontab syntax with root privileges.
• File-Based Script Deployment - Loads and updates dynamic instrumentation scripts from local device files using YAML configurations.
• Element-Specific Captures - Takes images of specific UI elements individually without requiring a full-screen capture and crop.
• mDNS Device Discovery - Uses Multicast DNS to automatically locate and retrieve metadata for devices on a local network.
• Developer Mode Activation - Programmatically triggers the device to enter a debuggable state via a soft reboot.
• VPN - Configures the device to establish secure VPN connections automatically upon startup.
• HTTP Data Forwarding - Posts captured device data to custom HTTP services using metadata query parameters and automatic retry logic.
• System Proxy Configurators - Automatically updates operating system network settings to route all traffic through a specified proxy.
• Traffic Routing Proxies - Forwards captured traffic through an external HTTP proxy and DNS server for international network analysis.
• Network Traffic Routing - Routes external traffic through specific device network interfaces, such as mobile data, to act as a proxy.
• P2P Device Tunneling - Connects to distributed devices from remote locations using tunneling clients or P2P bridging.
• Remote Port Forwarding - Establishes network connections to remote devices via VPN or port forwarding for remote control.
• Device Proxy Servers - Turns a mobile device into an HTTP proxy server to route traffic through specific network interfaces.
• SOCKS5 Proxies - Installs a SOCKS5 proxy server on the device to route network traffic through a specific gateway.
• NAT Traversal Routings - Maps local service ports to a public server to enable remote access from outside the local network.
• System Proxy Forwarders - Forwards all device communication traffic through a specified HTTP or SOCKS5 proxy server automatically on startup.
• Personal VPN Deployments - Initializes and runs a VPN service on the device to establish secure remote connections.
• VPN Interception Tools - Routes all device network traffic through a VPN tunnel to analyze and modify requests via a proxy.
• VPN Tunnels - Routes device traffic through secure OpenVPN tunnels using configurable encryption and authentication.
• Application Sandboxing Clones - Creates and manages multiple isolated instances of the same application to run concurrently on a single device.
• Binary Disassembly - Converts machine code into human-readable assembly using embedded disassembly libraries and CPU simulation.
• Reverse Engineering Tools - Ships a pre-installed suite for analyzing compiled application logic, including dynamic instrumentation and system call tracing.
• Intent Monitoring - Captures and monitors system intent broadcasts to track activity transitions on the device.
• System Property Management - Reads and modifies system properties, including read-only properties usually inaccessible via standard commands.
• Remote Hardware Key Simulation - Triggers navigation keys and text input by sending formatted requests to the remote interface.
• Emulated Linux Environments - Executes a full Debian Linux distribution within Android to provide package management and native compilation.
• Android Permission Management - Lists, grants, revokes, and verifies system permissions for installed applications on rooted devices.
• Remote Certificate Authority Installations - Enables encrypted traffic inspection by installing root certificate authorities on the remote device.
• Detection Evasions - Employs stealth modes and touch backend adjustments to evade automation and root detection.
• Enforcement Mode Toggling - Checks SELinux status and toggles the system state between enforcing and permissive modes.
• Integrated Analysis Toolsets - Provides integrated modules for disassembly, APK parsing, and traffic analysis.
• SELinux Domain Management - Manages SELinux security domains, including creation and toggling between enforcing and permissive modes.
• Service Communication Security - Generates unique service certificates to secure and encrypt remote desktop and SSH communication.
• Kernel Security Policy Rules - Defines granular SELinux allow and disallow rules by specifying source and target contexts.
• Binary Patching Utilities - Modifies compiled binaries by replacing byte sequences with hexadecimal patterns to alter program behavior.
• State Resetting - Clears application cache or wipes all stored user data and account information to reset application state.
• Notification Shade Control - Provides programmatic control to open the Android notification shade and quick settings panel.
• System Task Scheduling - Automates system-level administrative actions including reboots, software updates, and scheduled cron jobs.
• Gesture Sequence Persistence - Saves recorded touch sequences to disk and loads them back into sessions for reuse.
• Hardware Key Simulations - Triggers system-level hardware keys and specific keycodes to navigate or control the device.
• UI Element Collection Accessors - Provides utilities to iterate through multiple matching UI elements or retrieve specific items by index.
• Element Property Inspection - Allows retrieving metadata for UI elements, including text, dimensions, and screen coordinates.
• Rectangular Area Definitions - Specifies exact coordinates or rectangular areas on the screen to target interactions and captures.
• UI State Synchronization - Pauses execution until a specific element appears or disappears from the interface within a defined timeout.

Star history