NOIR
手机隐私审计：用 adb 扫出 Android 应用的权限、上报端点与数据流向，并给出可回滚的处置。Desktop Android leak audit: permissions, endpoints, data flows, reversible fixes.
- adb
- android
- android-privacy
- android-security
- android-tools
- apk-analysis
- bloatware
- cli
- cross-platform
- debloat
- jadx
- kotlin
- kotlin-multiplatform
- privacy
- privacy-tools
- security-audit
- static-analysis
- telemetry
- terminal-ui
- tui
- Stars
- 1,305
- Forks
- 95
- + today
- +13
- Created
- 2d
Ranking data as of November 2, 2026 (UTC).
Star History
Today, hour by hour
Overview
手机隐私审计：用 adb 扫出 Android 应用的权限、上报端点与数据流向，并给出可回滚的处置。Desktop Android leak audit: permissions, endpoints, data flows, reversible fixes. It ranks #12 on GitTiger, gaining +13 stars on November 2, 2026 (UTC).
The project is written in Kotlin and has 95 forks. It was created 2d ago.
What it is
NOIR is a Kotlin project for auditing the privacy of an Android phone from a desktop computer. According to the repository description, it uses adb to find which apps have which permissions, where they report to, and how data may flow, then proposes reversible fixes. It is tagged as cross-platform, CLI, and debloat-related, and is released under the MIT license.
Capabilities described
- **Inventory:** lists apps that hold both network access and sensitive permissions, and what each one can reach. - **Endpoint extraction:** pulls URLs out of each APK's dex on the device itself using unzip and strings, sending back only a few KB rather than whole packages. - **Classification and scoring:** recognises vendors and categories (telemetry, ads, location, input methods) by package name and domain, and computes a risk score from permissions and endpoints. - **Data mapping:** translates permissions into data types (location, contacts, SMS, microphone, camera and so on) and pairs them with reporting domains. - **Shared UIDs:** flags packages that share a user ID such as android.uid.system and therefore a combined permission set.
Getting started
Install and usage steps were not supplied in the evidence. Check the README in the repository for requirements and commands.
git clone https://github.com/Verlintas/NOIR.git
cd NOIR
# see README for setupFrequently Asked Questions
What does NOIR do?
Per the repository description, it audits Android apps over adb, reporting permissions, reporting endpoints and data flows, and suggests reversible remediation.
Does it need me to copy APKs to my computer?
The README summary says endpoint extraction runs on the device with unzip and strings and returns only a few KB, so whole APKs are not pulled to the computer.
What language and license does it use?
The supplied metadata lists Kotlin as the language and MIT as the license.
How do I install it?
Install steps were not supplied. Follow the repository README.