Последние посты
LSPosed
14 сент., 11:38
The libxposed organization has been flagged by GitHub, to access the source code or java doc, you can download the relevant files from the Maven Central Repository. libxposed 组织已被 GitHub 封锁，如需查阅源代码或文档，可在 maven 中央仓库下载相关文件。https://repo.maven.apache.org/maven2/io/github/libxposedLSPosed
10 сент., 13:07
libxposed future proposal: DexSQLDexSQL lets you query Android DEX files with SQL, it replaces the DexParser that was deprecated in libxposed API 100. It is now available for early access—feedback on slow or failing SQL statements is welcome.libxposed 新功能提案：DexSQLDexSQL 允许使用 SQL 语句查询 Android DEX 文件结构，它取代了libxposed API 100 中被废弃的DexParser。 现在可以抢先试用，欢迎反馈缓慢或者失败的SQL语句。https://dexsql.lsposed.org/dexsql.lsposed.orgdexsql notebook — SQL over a .dex/.apk in your browser (WebAssembly)Query Android DEX/APK metadata and bytecode with SQL, entirely in your browser. The file never leaves your device.LSPosed
9 сент., 01:14
We discovered a privileged process arbitrary code execution vulnerability in Android 17. This vulnerability was patched in Android 17 QPR1 but was not included in any security bulletin. Combined with the dirty frag vulnerability (CVE-2026-43284), we achievedGitHubGitHub - LSPosed/LSPromise: Android complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel…Android complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel, combination of CVE-2026-49881 and CVE-2026-43284 - LSPosed/LSPromiseLSPosed
3 сент., 05:19
Due to the increasing prevalence of AI and the accelerated submission of new modules, we plan to upgrade our module repository to an automated approval mode. Following the approach of the Maven Central Repository, submitters will need to prove they control the domain name to which the module package name belongs. If there is no domain name, you can use io.github.[user name].[module name], which will automatically approve the submission. Other package names will generally not be approved. This rule only applies to the approval of new modules and does not extend to existing modules, but we will begin checking whether the repository package name matches the released APK file.由于AI普及，新模块提交加速，我们计划把模块仓库升级为自动审批模式。 仿照 Maven 中央仓库做法，提交者需要证明能控制模块包名所属的域名。如果没有域名，可以使用io.github.[user name].[module name]，它会自动审批通过。其它包名原则上不会被批准。 该规则仅针对新模块审批，不溯及已有模块，但我们将开始检查仓库包名与发布的apk文件不符的情况。LSPosed
31 авг., 14:39изменён
另外系统自带 docker，在 /data/docker/dockerLSPosed
30 авг., 04:07изменён
v2.2.0 重要 - New XSharedPreferences 计划于 2.3.0 正式移除，模块页面已为有兼容风险的模块加入废弃警告。判断逻辑为 legacy 模块声明支持 nsp 并存在 others 可读 xml。升级到 libxposed 或将 xposedminversion 设置为 82 并删除 xposedsharedprefs 以移除警告。新增 - 支持注入 HyperOS Runtime 应用（需要兼容 Zygisk Next API 的 Zygisk 实现） - 在 A17 及以上以注入方式处理 dex2oat 包装器，避免挂载泄漏（需要兼容 Zygisk Next API 的 Zygisk 实现）改进 - 提升多进程应用中模块服务连接的稳定性 - 优化管理器中的兼容性状态展示与异常提示修复 - 修复资源 Hook XML 重写长期失效的问题 - 修复模块热重载失败后可能产生状态异常的问题 - 修复 Hook 链调用及参数类型转换问题 - 修复系统框架在模块作用域中的排序 - 修复安全模式计数未在正常启动后重置的问题 - 修复 Dex 混淆及模块服务相关的内存泄漏 ImportantLSPosed
4 авг., 16:29
We discovered a privileged process arbitrary code execution vulnerability in Android 17. This vulnerability was patched in Android 17 QPR1 but was not included in any security bulletin. Combined with the dirty frag vulnerability (CVE-2026-43284), we achievedLSPosed
4 авг., 16:28
We discovered a privileged process arbitrary code execution vulnerability in Android 17. This vulnerability was patched in Android 17 QPR1 but was not included in any security bulletin. Combined with the dirty frag vulnerability (CVE-2026-43284), we achieved full root privilege escalation on Android 17.0.The DirtyFrag vulnerability was disclosed 3 months ago but is still exploitabe, because Google has delayed the release frequency of vulnerability patches, changing from monthly to quarterly security bulletins. In the AI era, this behavior is completely incomprehensible. A large number of devices in the Android ecosystem are vulnerable to attacks due to the vulnerability details leaked in the Pixel system; even Pixel devices not participating in the beta program are not immune.Therefore, we used two "already patched" vulnerabilities to demonstrate full rooting on Google Pixel 10LSPosed
23 июл., 16:20
v2.1.1 新增 - 最低支持版本提升至 Android 9（API 28） - 高级隐藏功能现可支持 A12+ - 允许一键清空已选作用域改进 - 优化安全模式对 System UI 的检测阈值 - 恢复管理器中的模块数量徽标 - 改进错误报告发送流程修复 - 修复部分情况下无法启动守护进程的问题 - 修复 XposedHelpers.findField API 行为 - 修复 Android 17 下服务连接接口不兼容的问题 - 修复模块详情页弹出菜单显示层级异常的问题 - 修复 Markdown 样式在部分页面中显示异常的问题Added - Raised the minimum supported version to Android 9 (API 28)LSPosed
9 июл., 23:46
Successfully root my K90PM using CVE-2026-43499LSPosed
15 июн., 10:43изменён
v2.1.0 新增 实现 libxposed API 102 适配 Android 17 QPR1 Beta 4维护 原计划 2.1.0 废弃 New XSharedPreferences 推迟到 2.2.0，强烈建议 legacy 模块尽快迁移到 libxposed改进 大幅提升被 hook 方法的性能 优化还原内联钩子逻辑 优化 dex 优化器包装的挂载逻辑 优化一系列的 UI 体验修复 修复 XposedBridge.unhookMethod 行为异常 修复了一个全局检测点 修复 TalkBack 重复朗读、未朗读勾选状态等无障碍问题AddedLSPosed
1 июн., 16:16изменён
Changes since latest release: Added - Provided high-speed CDN for the module repository. If you dislike ads, please switch to backup CDN in settings - Added SystemUI safe modeImproved - Enhanced hook compatibility and performance - Improved homepage device name recognitionFixed - Fixed Android 17 QPR1 Beta 3 crash issues - Fixed a series of M3E theme-related issues - Fixed Markdown WebView reload handling issues 自上次更新以来的改动： 新增 - 提供模块仓库高速 CDN，若不喜欢广告请在设置切换备用 CDN - 新增 SystemUI 安全模式改进 - 提升 hook 兼容性和性能LSPosed
29 мая, 07:21
libxposed API 102 is now under RFC. Please give us suggestions regarding the API design. https://github.com/libxposed/api/pull/62GitHubRFC for API 102 by Dr-TSNG · Pull Request #62 · libxposed/apilibxposed API 102 This PR introduces API 102 across the libxposed module API, service API, annotations, and lint checks. Module API Added hot reload lifecycle callbacks. Hot reload is supported on...LSPosed
28 мая, 12:51изменён
libxposed API 102 snapshots are now available. Join our internal test program to get LSPosed with API 102 support so you can test it. Please note that it's NOT final so NEVER use snapshots in production. Open an issue on GitHub if you have any suggestion.Usage: add snapshot maven to settings.gradle.kts maven { url = uri("https://central.sonatype.com/repository/maven-snapshots/") mavenContent { snapshotsOnly() } content { includeGroup("io.github.libxposed") } } Use snapshot builds: compileOnly("io.github.libxposed:api:102.0.0-SNAPSHOT") implementation("io.github.libxposed:service:102.0.0-SNAPSHOT")LSPosed
20 мая, 11:22изменён
v2.0.3 released: Major Behavioral Changes - Legacy modules are no longer allowed to call libxposed API; modules with targetApiVersion ≥ 102 will not be allowed to call legacy API; 101 modules are unaffectedNew Features - Introduced Material 3 Expressive style manager - Enhanced theme-related settings to support dynamic color schemes and dark mode, and improved the display of cards, menus, bottom navigation, and dialogsImprovements - Improved log display and error logging; parsed view now correctly displays excessively long error stacks without fragmentation - Attempted to improve hook performanceFixes - Fixed an issue where scope recommendations were displayed incorrectly in some legacy modules - Fixed several issues with libxposed API implementationsRemovals - Removed the old MD3 manager - Removed support for the 32-bit x86 architectureLSPosed
16 мая, 07:54
LSPosed-v2.0.2-7668-release.zipLSPosed
10 мая, 16:13
переслано из @magiskalpha
无法规避的Magisk识别方案已经公开：https://github.com/eltavine/Duck-Detector-Refactoring/pull/22 检测方法说明和概念验证app：https://github.com/LSPosed/DirtySepolicyLSPosed
23 апр., 14:13изменён
Changes since last release: Added Enabled dynamic blur based on device state (e.g. power saving mode, performance class) Added collapsing for long module descriptions Added tapjacking mitigation toggle and hint Hid the "install to other user" option when the module is already installedImproved Reduced per-method callback count to limit crash propagation caused by faulty modules Ensured Xposed service is re-delivered after module updates Sent binder to daemon earlier during system boot to reduce initialization race conditions Removed the need to force stop when switching manager Updated LSPlant to fix various injection issues Updated MIUIX to address known issues Optimized memory usage during manager startup and repository loading for low-RAM devicesFixed Fixed incorrect "install to user" behavior in the new manager Fixed module configuration not being removed on uninstall Fixed rareLSPosed
31 мар., 07:28изменён
我们也同步发布了 libxposed api 101.0.1 版本，带来了更详细的行为规范和开发文档。 We also released libxposed api version 101.0.1, which brings more detailed behavior specifications and development documentation. https://github.com/libxposed/apiLSPosed
31 мар., 07:19изменён
自 v1.9.2 以来的主要更新：新增 - 支持 Android 8.1 至 Android 17 Beta 3 - 新增完整的 libxposed API 101 支持 - 新增 miuix 版本管理器并默认启用 - 新增可按应用配置的还原内联钩子功能 - 新增对 libxposed 相关类启用 API 调用保护 - 新增安全模式 - 新增 action.sh 支持，可从 action.sh 打开管理器 - 重构 dex2oat 包装器，支持在 Android 12+ 重新优化系统框架 - 新增 16K page size 支持 - 支持注入系统自定义 resolver 的进程 - 支持重置作用域请求设置 - 支持将日志转发至守护进程改进 - 大幅度增强对被注入的应用的隐藏能力 - 适配新版 Android 上的反射限制与部分系统行为变化 - 改进软件包与模块解析逻辑
