Agent skill · security · aradotso
yourvpndead-vpn-detection
Android app that detects VPN/proxy servers (VLESS/xray/sing-box) via local SOCKS5 vulnerability, exposing exit IPs and server configs without root
Why this skill is useful
Adds executable detection scripts for identifying VPNs and SOCKS5 vulnerabilities on Android devices that are not commonly documented.
What it needs
Requires adb installed locally. About 8k tokens when loaded. Last updated 2026-07-09. 70 stars on the source repository.
What this skill does
YourVPNDead — Android VPN Detection & SOCKS5 Vulnerability Scanner Skill by ara.so — Daily 2026 Skills collection. Android app (Kotlin + Jetpack Compose) demonstrating that any app — without root or special permissions — can detect VPN usage, identify the VPN client, and retrieve the VPN server's exit IP through unauthenticated SOCKS5 proxies exposed on localhost by popular VPN clients (v2rayNG, NekoBox, Hiddify, etc.). Build & Install Or download the pre-built APK from Releases. Required permissions (AndroidManifest.xml): Architecture Stack: Kotlin, Jetpack Compose, Material 3, Coroutines, MVVM (ViewModel + StateFlow) Key Detection Modules 1. Direct VPN Signs — DirectSignsChecker.kt Detects VPN via standard (and hidden) Android APIs: 2. VPN Interface Detection 3. /proc/net/tcp Scanner — ProcNetScanner.kt Reads listening ports without root: 4. Port Scanner — PortScanner.kt TCP connect scan on 127.0.0.1 and ::1: 5. SOCKS5 Probe — Socks5Probe.kt Identify proxy type and check for authentication: 6. Exit IP Resolution via SOCKS5 — ExitIPResolver.kt Get VPN server's real IP through unauthenticated SOCKS5: 7. Clash REST API Probe — ClashAPIProbe.kt sing-box/mihomo expose Clash API on localhost without auth by default: 8. VPN App Detection — DirectSignsChecker.kt Enumerate installed VPN apps (requires QUERYALLPACKAGES on Android 11+): 9. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/yourvpndead-vpn-detection