RKNHardering

RKNHardering

Detects VPN and proxy usage on Android using RKN methodology

xtclovver Network Analyzer Security

Download (14 MB)

Screenshots

Screenshot of RKNHardering Screenshot of RKNHardering Screenshot of RKNHardering Screenshot of RKNHardering Screenshot of RKNHardering Screenshot of RKNHardering Screenshot of RKNHardering

Description

RKNHardering is an Android application that detects VPN and proxy usage on a device, implementing the Russian Federal Service for Supervision of Communications (RKN) methodology for identifying circumvention tools.

The app runs nine independent detection modules in parallel and produces a combined verdict:

- GeoIP — checks the public IP against GeoIP databases and hosting/proxy signal providers
- IP Comparison — compares responses from RU and non-RU public IP checkers
- Direct Signs — inspects NetworkCapabilities, system proxy settings, and installed VPN apps
- Indirect Signs — analyzes network interfaces, routing table, DNS, dumpsys VPN output, and localhost proxy listeners
- Location Signals — reads MCC/SIM/cell/Wi-Fi data and queries BeaconDB for geolocation
- Bypass Check — scans localhost for open SOCKS5/HTTP proxies, Xray gRPC API endpoints, and detects underlying network leaks
- CDN Pulling — sends HTTPS requests to trace endpoints to determine the apparent public IP
- Call Transport — checks STUN and MTProto availability to detect traffic tunneling
- Native Signs — performs JNI-level checks of interfaces, routes, /proc/self/maps hook markers, and root indicators

The final verdict (NOT DETECTED / NEEDS REVIEW / DETECTED) is calculated by VerdictEngine using a weighted combination of the module results.

Minimum Android version: 8.0 (API 26).
Source code: https://github.com/xtclovver/RKNHardering

What’s new (2.10.0)

1. Added a deep native VPN detector with interface, routing, socket, sysfs, /proc, netlink, PMTU/MSS and environment probes. Permission-limited probes are reported as unavailable instead of crashing.
2. Added Simple, Normal and Advanced result display modes. Advanced mode records bounded, sanitized technical diagnostics in memory and keeps them out of JSON/Markdown exports.
3. Improved verdict handling and diagnostics with new native evidence categories, structured trace capture, safer cancellat

Anti-features

Properties of this app that are worth knowing about before installing.

  • TetheredNet

Versions

Version Date Size Requires Android Download
2.10.0 current
0b8029b3eef0c7f0…
 2026-07-12 14 MB API 26
2.9.0
69407319289c25f4…
 2026-06-13 14 MB API 26
2.8.1
f51363948bb3a0b9…
 2026-05-29 14 MB API 26

Permissions

What the app asks the system for. Android only grants sensitive access after you confirm it.

  • Internet accessSend and receive data over the internet.
  • Network stateCheck whether and how the device is connected.
  • Wi-Fi stateRead information about the Wi-Fi connection.
  • Change Wi-FiTurn Wi-Fi on and off or switch networks.
  • Approximate locationDetermine the location via the network.
  • Precise locationDetermine the location via GPS.
  • NEARBY_WIFI_DEVICES
  • Phone stateDetect ongoing calls and read device information.
Show 2 more permissions
  • Installed appsSee which apps are installed.
  • rknhardering.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Comments