Yourvpndead Vpn Detection

This is a security research tool that demonstrates a serious localhost vulnerability in popular Android VPN clients like v2rayNG, NekoBox, and Clash. Any app with basic INTERNET permission can scan localhost ports, detect unauthenticated SOCKS5 proxies exposed by these VPN apps, and tunnel through them to reveal your real exit IP and server config. The implementation is thorough: it fingerprints VPN clients by port patterns (10808/10809 for xray, 7890/9090 for Clash), reads /proc/net/tcp to find listening ports without root, checks hidden Android capabilities like IS_VPN, and does MTU analysis. If you're building VPN clients or need to audit mobile privacy assumptions, this shows exactly how exposed localhost services become attack surfaces. The full detection pipeline runs 14 phases from interface detection to geolocation.

skills.sh installs: 364
GitHub stars: 26
last updated: Jun 3, 2026

View on GitHub

Install

$ npx -y skills add aradotso/trending-skills --skill yourvpndead-vpn-detection --agent claude-code

Installs into .claude/skills of the current project.

Files

YourVPNDead — Android VPN Detection & SOCKS5 Vulnerability Scanner

Skill by ara.so — Daily 2026 Skills collection.

Android app (Kotlin + Jetpack Compose) demonstrating that any app — without root or special permissions — can detect VPN usage, identify the VPN client, and retrieve the VPN server's exit IP through unauthenticated SOCKS5 proxies exposed on localhost by popular VPN clients (v2rayNG, NekoBox, Hiddify, etc.).

Build & Install

git clone https://github.com/loop-uh/yourvpndead.git
cd yourvpndead
./gradlew assembleDebug
# Output: app/build/outputs/apk/debug/app-debug.apk
adb install app/build/outputs/apk/debug/app-debug.apk

Or download the pre-built APK from Releases.

Required permissions (AndroidManifest.xml):

<uses-permission android:name="android.permission.INTERNET" />
<uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" />
<uses-permission android:name="android.permission.QUERY_ALL_PACKAGES" />

Architecture

SKILL.md on GitHub

Details

Repository: github.com/aradotso/trending-skills
First seen: Jun 3, 2026