TGViewer
Channel Public Channel
LSPosed

LSPosed

@lsposed

Official webpage: lsposed.org
Discussion Group: @LSPosedDiscussion
CI Builds: @LSPosedArchives
Admin Log: @lsposed_log
Subscribers
197K
Photos
27
Videos
3
Links
59
Recent Posts 20 shown
Post #332 17.5K
Performance Comparision420.7 KB
This announcement formally introduces DexSQL, accessible via the following link: https://github.com/LSPosed/dexsql-release. The project facilitates the analysis of APK dex files using SQL, specifically for deobfuscation and the identification of hook points. Compared to tools such as JADX and similar counterparts like ASC, DexSQL offers significantly superior performance and memory consumption, as illustrated in the attached figures. Furthermore, it supports MCP servers, enabling AI agents to perform analysis and develop LSPosed modules efficiently while minimizing token usage. DexSQL will be integrated into LSPosed in the future, allowing users to utilize the libxposed API to locate hook points and support cross-version deobfuscation.

该公告正式介绍了 DexSQL,可通过以下链接访问:https://github.com/LSPosed/dexsql-release。该项目利用 SQL 分析 APK 的 dex 文件,专门用于去混淆和识别挂钩点。与 JADX 及 ASC 等类似工具相比,DexSQL 的性能内存占用显著优越,如附图。此外,它支持 MCP 服务器,使 AI 智能体能够高效地执行分析并开发 LSPosed 模块,同时最大限度地减少词元使用量。未来,DexSQL 将被集成到 LSPosed 中,允许用户使用 libxposed API 来定位挂钩点并支持跨版本去混淆。
  • 👍 259
  • ❤ 45
  • 🥰 28
  • 🔥 9
  • 🎉 9
  • 🤡 1
  • 💅 1
Post #331 27.4K
LSPosed The libxposed organization has been flagged by GitHub, to access the source code or java doc, you can download the relevant files from the Maven Central Repository. libxposed 组织已被 GitHub 封锁,如需查阅源代码或文档,可在 maven 中央仓库下载相关文件。 https://repo.maven.apache.org/ma…
https://x.com/realnullptr/status/2110025105338519970?s=20
X (formerly Twitter) RealNullptr (@realnullptr) on X Nearly a month ago, GitHub suspended my account Dr-TSNG and several open-source orgs I co-own: KernelSU-Module-Repo, Kernel-SU and libxposed. Important community infrastructure went offline. Appea…
  • 👍 258
  • ❤ 29
  • 😢 24
  • 😭 19
  • 🤣 4
  • 🫡 4
  • 👎 3
  • 🤝 3
  • 💅 3
  • 😁 2
  • 🤬 2
Post #330 109K
LSPosed v2.2.1
从本次更新开始,安装包使用 XZ 压缩以减小体积,2024 年 8 月后的所有 root 实现均已支持 XZ 压缩方式。
Starting with this update, installation packages use XZ compression to reduce their size. All root implementations released after August 2024 support XZ compression.
新增
- 恢复提供 riscv64 ABI 支持
- 支持 Android 17 QPR 3
- 提升 KernelSU 最低管理器版本要求到 1.0.1
- 新增开发者模式与命令行工具 lspctl,支持管理模块及作用域等功能
- 新增禁用安全模式的选项
- 新增横移返回手势开关

改进
- 大幅优化调用链性能,钩子执行成本约 27x speedup
- 优化框架启动和模块运行性能,降低日志记录开销
- 优化安全模式判定,更准确地识别系统界面反复崩溃,减少误触发
- 优化页面切换动画与悬浮底栏交互,支持记忆侧边导航栏的展开状态
- 改善恢复备份时的文件选择兼容性
- 优化安装包压缩,更新多语言文案

修复
- 修复一系列 UI 问题
- 修复部分荣耀设备上的框架启动问题
- 修复部分模拟器及 32 位应用兼容环境中的运行和模块加载问题
- 修复部分场景下模块重复加载、模块信息更新不及时的问题
- 修复部分模块共存时的冲突,以及模块运行过程中可能出现的失效或崩溃
- 修复长日志处理异常和部分安装包解压兼容性问题
- 修复 XposedHelpers 字段写入时部分基本类型拓宽转换失败的问题,包括 char 转 int、long 转 float 等

Added
- Restored riscv64 ABI support
- Added support for Android 17 QPR 3
- Raised the minimum manager version requirement of KernelSU to 1.0.1
- Added developer mode and CLI tool lspctl, with support for managing modules, scopes, etc
- Added a toggle to disable safe mode
- Added a toggle for the swipe-back gesture

Improved
- Significantly optimize call chain performance, with 27x speedup on hook execution cost
- Optimized framework startup and module runtime performance, reducing logging overhead
- Optimized safe mode detection, more accurately identifying repeated System UI crashes and reducing false triggers
- Optimized page transition animations and floating bottom bar interactions, with support for remembering the expanded state of the side navigation bar
- Improved file selection compatibility when restoring backups
- Optimized package compression, updated multilingual copy

Fixed
- Fixed a series of UI issues
- Fixed framework startup issues on some Honor devices
- Fixed runtime and module loading issues in some emulators and 32-bit app compatibility environments
- Fixed issues with modules being loaded repeatedly and module information not being updated promptly in some scenarios
- Fixed conflicts when some modules coexist, as well as possible failures or crashes during module runtime
- Fixed issues with long log processing errors and compatibility when extracting some packages
- Fixed failures in widening conversions for some primitive types when writing fields with XposedHelpers, including char to int、long to float etc.
  • 👍 707
  • ❤ 116
  • 🔥 60
  • 😡 22
  • 👎 17
  • 🌚 14
  • 🗿 10
  • 💅 7
  • 👏 6
  • 💯 6
  • 🌭 4
Post #329 136K
The libxposed organization has been flagged by GitHub, to access the source code or java doc, you can download the relevant files from the Maven Central Repository.
libxposed 组织已被 GitHub 封锁,如需查阅源代码或文档,可在 maven 中央仓库下载相关文件。

https://repo.maven.apache.org/maven2/io/github/libxposed
  • 😭 892
  • 👍 111
  • 😱 74
  • ❤ 60
  • 🤣 24
  • 🍾 23
  • 🤨 21
  • 🔥 14
  • 💯 6
  • 💘 6
  • 💅 5
Post #328 145K
libxposed future proposal: DexSQL

DexSQL lets you query Android DEX files with SQL, it replaces the DexParser that was deprecated in libxposed API 100.
It is now available for early access—feedback on slow or failing SQL statements is welcome.

libxposed 新功能提案:DexSQL

DexSQL 允许使用 SQL 语句查询 Android DEX 文件结构,它取代了libxposed API 100 中被废弃的DexParser。
现在可以抢先试用,欢迎反馈缓慢或者失败的SQL语句。

https://dexsql.lsposed.org/
dexsql.lsposed.org dexsql — browse, disassemble and SQL an Android .dex/.apk in your browser (WebAssembly) Browse Android DEX/APK files like a desktop reverse-engineering tool — class tree, disassembly, IR-level pseudo-Java, cross-references and SQL — entirely in your browser, on dexsql's own engine in WebAssembly. The file never leaves your device.
  • 👍 231
  • ❤ 67
  • 🔥 34
  • 🍾 8
  • 🥰 6
  • 🤗 4
  • 😭 1
Post #327 147K
LSPosed We discovered a privileged process arbitrary code execution vulnerability in Android 17. This vulnerability was patched in Android 17 QPR1 but was not included in any security bulletin. Combined with the dirty frag vulnerability (CVE-2026-43284), we achieved…
https://github.com/LSPosed/LSPromise
GitHub GitHub - LSPosed/LSPromise: Android complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel… Android complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel, combination of CVE-2026-49881 and CVE-2026-43284 - LSPosed/LSPromise
  • 👍 240
  • 🔥 43
  • ❤ 40
  • 🥰 14
  • 👏 8
  • 💯 4
  • ❤‍🔥 2
Post #326 142K
Due to the increasing prevalence of AI and the accelerated submission of new modules, we plan to upgrade our module repository to an automated approval mode.
Following the approach of the Maven Central Repository, submitters will need to prove they control the domain name to which the module package name belongs. If there is no domain name, you can use io.github.[user name].[module name], which will automatically approve the submission. Other package names will generally not be approved.
This rule only applies to the approval of new modules and does not extend to existing modules, but we will begin checking whether the repository package name matches the released APK file.

由于AI普及,新模块提交加速,我们计划把模块仓库升级为自动审批模式。
仿照 Maven 中央仓库做法,提交者需要证明能控制模块包名所属的域名。如果没有域名,可以使用io.github.[user name].[module name],它会自动审批通过。其它包名原则上不会被批准。
该规则仅针对新模块审批,不溯及已有模块,但我们将开始检查仓库包名与发布的apk文件不符的情况。
  • 👍 529
  • ❤ 115
  • 😍 19
  • 🔥 11
  • 🤗 7
  • 🥰 6
  • 🎉 5
  • 🍾 5
  • 🏆 4
  • ❤‍🔥 3
Post #324 211K
v2.2.0
重要
- New XSharedPreferences 计划于 2.3.0 正式移除,模块页面已为有兼容风险的模块加入废弃警告。判断逻辑为 legacy 模块声明支持 nsp 并存在 others 可读 xml。升级到 libxposed 或将 xposedminversion 设置为 82 并删除 xposedsharedprefs 以移除警告。

新增
- 支持注入 HyperOS Runtime 应用(需要兼容 Zygisk Next API 的 Zygisk 实现)
- 在 A17 及以上以注入方式处理 dex2oat 包装器,避免挂载泄漏(需要兼容 Zygisk Next API 的 Zygisk 实现)

改进
- 提升多进程应用中模块服务连接的稳定性
- 优化管理器中的兼容性状态展示与异常提示

修复
- 修复资源 Hook XML 重写长期失效的问题
- 修复模块热重载失败后可能产生状态异常的问题
- 修复 Hook 链调用及参数类型转换问题
- 修复系统框架在模块作用域中的排序
- 修复安全模式计数未在正常启动后重置的问题
- 修复 Dex 混淆及模块服务相关的内存泄漏

Important
- New XSharedPreferences is scheduled for official removal in version 2.3.0. Deprecation warnings have been added to the module page for modules at risk of compatibility issues. The probe logic identifies legacy modules that declare support for nsp and contain an XML file with others readable permission. To eliminate the warning, upgrade to libxposed or set xposedminversion to 82 and remove xposedsharedprefs.

Added
- Support for injecting into HyperOS Runtime apps (requires Zygisk implementation which is compatible with Zygisk Next API)
- Handles the dex2oat wrapper via injection on A17 and above to prevent mount leaks (requires Zygisk implementation which is compatible with Zygisk Next API)

Improved
- Improved stability of module service connections in multi-process apps
- Optimized the display of compatibility status and error prompts in the Manager

Fixed
- Fixed an issue where resource hook XML rewriting had been failing for an extended period
- Fixed an issue where a status exception might occur after a module hot reload failed
- Fixed issues with hook chain calls and parameter type conversions
- Fixed the sorting of the system framework within the module scope
- Fixed an issue where the safe mode count was not reset after a normal startup
- Fixed memory leaks related to DEX obfuscation and module services
  • 👍 458
  • ❤ 117
  • 🔥 24
  • 🤩 24
  • 🥰 15
  • ❤‍🔥 12
  • 🍾 6
  • 👏 5
  • 🎉 3
  • 🏆 2
Post #323 222K
LSPosed We discovered a privileged process arbitrary code execution vulnerability in Android 17. This vulnerability was patched in Android 17 QPR1 but was not included in any security bulletin. Combined with the dirty frag vulnerability (CVE-2026-43284), we achieved…
我们在 Android 17.0 中发现了一个特权进程任意代码执行漏洞。该漏洞已在 Android 17 QPR1 中修复,但 AOSP 安全公告中并未提及。结合 dirty frag 漏洞(CVE-2026-43284),我们在 Android 17.0 上成功实现了完整的 root 权限提升。

这是一个典型的 1day 漏洞。尽管补丁已发布,但用户无法获得漏洞修复,因此仍面临被攻击的风险:任何人都可以通过对比分析发现该漏洞的细节。而 dirty frag 漏洞虽已于三个月前披露,但至今仍可被利用。这是因为谷歌推迟了漏洞补丁的发布频率,将安全公告从每月一次改为每季度一次。在 AI 时代,这种做法不可理喻。由于 Pixel 系统镜像中泄露的漏洞细节,Android 生态中的大量设备都容易受到攻击,未参与 Beta 测试计划的 Pixel 设备也无法幸免。

因此,我们利用两个“已经”修复过的漏洞,演示了对安装有最新安全补丁的 CP2A.260705.006 稳定版系统 Google Pixel 10 设备获取 root 权限的操作,以此作为警示,敦促 Google 改变其做法并及时发布漏洞补丁。
  • 👍 1.1K
  • ❤ 220
  • 🤩 57
  • ❤‍🔥 27
  • 🍾 18
  • 🔥 15
  • 🤗 13
  • 👏 10
  • 💯 10
  • 🎉 4
  • 🥰 3
Post #322 190K
We discovered a privileged process arbitrary code execution vulnerability in Android 17. This vulnerability was patched in Android 17 QPR1 but was not included in any security bulletin. Combined with the dirty frag vulnerability (CVE-2026-43284), we achieved full root privilege escalation on Android 17.0.

The DirtyFrag vulnerability was disclosed 3 months ago but is still exploitabe, because Google has delayed the release frequency of vulnerability patches, changing from monthly to quarterly security bulletins. In the AI ​​era, this behavior is completely incomprehensible. A large number of devices in the Android ecosystem are vulnerable to attacks due to the vulnerability details leaked in the Pixel system; even Pixel devices not participating in the beta program are not immune.

Therefore, we used two "already patched" vulnerabilities to demonstrate full rooting on Google Pixel 10 with the latest patches as a warning, urging Google to change its practices and release vulnerability patches promptly.
  • 👍 334
  • ❤ 140
  • 🔥 37
  • 👏 16
  • ❤‍🔥 7
  • 💯 7
  • 🥰 5
  • 🍾 5
  • 🏆 4
  • 🤗 4
  • 🎉 2
Post #321 325K
v2.1.1
新增
- 最低支持版本提升至 Android 9(API 28)
- 高级隐藏功能现可支持 A12+
- 允许一键清空已选作用域

改进
- 优化安全模式对 System UI 的检测阈值
- 恢复管理器中的模块数量徽标
- 改进错误报告发送流程

修复
- 修复部分情况下无法启动守护进程的问题
- 修复 XposedHelpers.findField API 行为
- 修复 Android 17 下服务连接接口不兼容的问题
- 修复模块详情页弹出菜单显示层级异常的问题
- 修复 Markdown 样式在部分页面中显示异常的问题

Added
- Raised the minimum supported version to Android 9 (API 28)
- Advanced hiding is now supported on Android 12 and above
- Added an option to clear all selected scope apps

Improved
- Optimized the System UI detection threshold in safe mode
- Restored the module count badge in the manager
- Improved the error report submission process

Fixed
- Fixed an issue that could prevent the daemon from starting
- Fixed the behavior of the XposedHelpers.findField API
- Fixed service connection incompatibility on Android 17
- Fixed incorrect popup menu layering on the module details page
- Fixed Markdown styles being displayed incorrectly on some pages
  • ❤ 767
  • 👍 151
  • ❤‍🔥 35
  • 🤩 22
  • 🔥 17
  • 🥰 17
  • 🏆 16
  • 🎉 15
  • 🍾 15
  • 👏 12
Post #319 261K
Successfully root my K90PM using CVE-2026-43499
  • ❤ 699
  • 👍 115
  • 🔥 82
  • 👏 32
  • 🍾 24
  • 🏆 23
  • 🤗 13
  • ❤‍🔥 12
  • 🥰 12
  • 💯 9
  • 🎉 6
Post #318 424K
v2.1.0
新增
实现 libxposed API 102
适配 Android 17 QPR1 Beta 4

维护
原计划 2.1.0 废弃 New XSharedPreferences 推迟到 2.2.0,强烈建议 legacy 模块尽快迁移到 libxposed

改进
大幅提升被 hook 方法的性能
优化还原内联钩子逻辑
优化 dex 优化器包装的挂载逻辑
优化一系列的 UI 体验

修复
修复 XposedBridge.unhookMethod 行为异常
修复了一个全局检测点
修复 TalkBack 重复朗读、未朗读勾选状态等无障碍问题

Added
Implemented libxposed API 102
Adapted for Android 17 QPR1 Beta 4

Maintaince
Postponed the planned deprecation of New XSharedPreferences in version 2.1.0 to 2.2.0. We strongly recommend migrating legacy modules to libxposed as soon as possible

Improved
Significantly improved the performance of hooked methods
Optimized invalidate inline hooks logic
Optimized the mount logic of dex optimizer wrapper
Optimized a range of UI experiences

Fixed
Fixed abnormal behavior of XposedBridge.unhookMethod
Fixed a global detection point
Fixed accessibility issues such as TalkBack repeating text and failing to read checked items

下载 / Download
  • 👍 819
  • ❤ 205
  • 🔥 42
  • 🤩 33
  • ❤‍🔥 26
  • 🥰 20
  • 😍 20
  • 🍾 16
  • 🏆 11
  • 🤗 8
  • 🎉 6
Post #317 524K
LSPosed-v2.0.4-7741-release.zip8.4 MB
Changes since latest release:
Added
- Provided high-speed CDN for the module repository. If you dislike ads, please switch to backup CDN in settings
- Added SystemUI safe mode

Improved
- Enhanced hook compatibility and performance
- Improved homepage device name recognition

Fixed
- Fixed Android 17 QPR1 Beta 3 crash issues
- Fixed a series of M3E theme-related issues
- Fixed Markdown WebView reload handling issues

自上次更新以来的改动:
新增
- 提供模块仓库高速 CDN,若不喜欢广告请在设置切换备用 CDN
- 新增 SystemUI 安全模式

改进
- 提升 hook 兼容性和性能
- 增强首页设备名称识别

修复
- 修复 Android 17 QPR1 Beta 3 崩溃问题
- 修复一系列 M3E 主题相关问题
- 修复 Markdown WebView 重载处理问题
  • 👍 725
  • ❤ 244
  • 🔥 33
  • ❤‍🔥 27
  • 🥰 23
  • 💯 23
  • 🏆 19
  • 🎉 18
  • 🍾 14
  • 🤗 10
  • 🤩 4
Post #315 272K
libxposed API 102 snapshots are now available. Join our internal test program to get LSPosed with API 102 support so you can test it. Please note that it's NOT final so NEVER use snapshots in production. Open an issue on GitHub if you have any suggestion.

Usage: add snapshot maven to settings.gradle.kts
maven {
url = uri("https://central.sonatype.com/repository/maven-snapshots/")
mavenContent {
snapshotsOnly()
}
content {
includeGroup("io.github.libxposed")
}
}

Use snapshot builds:
compileOnly("io.github.libxposed:api:102.0.0-SNAPSHOT")
implementation("io.github.libxposed:service:102.0.0-SNAPSHOT")
  • ❤ 253
  • 👏 25
  • 👍 23
  • 🔥 17
  • ❤‍🔥 8
  • 🤩 7
  • 🥰 6
  • 🏆 4
  • 🎉 3
Post #314 358K
v2.0.3 released:
Major Behavioral Changes
- Legacy modules are no longer allowed to call libxposed API; modules with targetApiVersion ≥ 102 will not be allowed to call legacy API; 101 modules are unaffected

New Features
- Introduced Material 3 Expressive style manager
- Enhanced theme-related settings to support dynamic color schemes and dark mode, and improved the display of cards, menus, bottom navigation, and dialogs

Improvements
- Improved log display and error logging; parsed view now correctly displays excessively long error stacks without fragmentation
- Attempted to improve hook performance

Fixes
- Fixed an issue where scope recommendations were displayed incorrectly in some legacy modules
- Fixed several issues with libxposed API implementations

Removals
- Removed the old MD3 manager
- Removed support for the 32-bit x86 architecture


v2.0.3 发布:
重大行为变更
- Legacy 模块不再允许调用 libxposed API;targetApiVersion ≥ 102 的模块不再允许调用 Legacy API,101 模块不受影响

新增
- 引入 Material 3 Expressive 风格管理器
- 完善主题相关设置,支持动态配色和深色模式,改进卡片、菜单、底部导航和对话框的显示效果

改进
- 改进日志显示和错误记录,现在解析视图能够正确显示超长错误栈而不被分片
- 尝试改进 hook 性能

修复
- 修复部分旧模块作用域推荐显示错误的问题
- 修复一些 libxposed API 实现问题

移除
- 移除旧的 MD3 管理器
- 移除 32 位 x86 架构支持


Download / 下载:
  • ❤ 625
  • 👍 99
  • 🎉 36
  • 🔥 26
  • 🥰 14
  • 😍 12
  • 💯 12
  • 🍾 12
  • 👏 11
  • ❤‍🔥 6
  • 🏆 6
Post #313 210K
LSPosed LSPosed-v2.0.2-7668-release.zip
kind reminder: you can also use lsposed.zip to download the latest public lsposed.
  • ❤ 308
  • 👍 52
  • ❤‍🔥 15
  • 🎉 14
  • 💯 10
  • 🤩 7
  • 🔥 6
  • 🍾 6
  • 🏆 2
Older posts →

About this channel

How can I read @lsposed without a Telegram account?
TGViewer shows the public web preview Telegram publishes for LSPosed: recent posts, photos, videos and the subscriber count, with no app, login or account.
How many subscribers does LSPosed have?
LSPosed (@lsposed) has 197K subscribers on Telegram, refreshed roughly every 30 minutes.
Does LSPosed know I viewed it here?
No. Public channel previews carry no viewer identity, and TGViewer has no accounts or tracking of what you look up.
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →