AI summary
Proof-of-concept tool that sends raw network packets without root or CAP_NET_RAW. Uses Shizuku shell privileges and an AOSP test TAP interface with Ethernet tethering to construct and egress arbitrary L3/L4 packets from userspace. Includes a TCP SYN test to verify end-to-end connectivity.
Generated by AI. May contain inaccuracies.
About this app
PoC for packet-level Internet egress through an AOSP test TAP and Android Ethernet tethering using Shizuku.
PoC for packet-level Internet egress through an AOSP test TAP and Android Ethernet tethering using Shizuku.
The original proof of concept was completed on August 16, 2026. This writeup was prepared later after cleaning up the code, adding a few diagnostic checks, and documenting the technique.
No root.
No CAP_NET_RAW.
Arbitrary L3/L4 packet construction & egress.
The shell-privileged part of the PoC runs as an ADB-backed Shizuku UserService under the Android shell UID 2000. The app itself does not obtain CAP_NET_RAW or raw-socket access; packets are constructed in userspace and forwarded through a framework-managed test TAP + tethering path.
As an end-to-end check, the PoC sends a TCP SYN with a fixed sequence number (0x12345678) and observes the remote SYN-ACK acknowledging 0x12345679.
About this version
- Version
- 1.0 (1)
- Size
- 13.5 MB
- Requires Android
- 11
- Target SDK
- 30
- Architecture
- universal
- Downloads
- 17
- Updated
- Aug 30, 2026
- Package
- com.example.rootlesspacketpoc
Similar apps
Ratings & reviews
- 50
- 40
- 30
- 20
- 10