# XploitWizer-Community/XploitSPY

XploitSPY is an Android Monitoring Tool

Repository: https://github.com/XploitWizer-Community/XploitSPY
Canonical: https://ross.abutalabs.com/products/xploitspy
Language: Smali
License: NOASSERTION
License Family: other
Topics: xploitspy, xploitwizer, xploit-spy, android-monitoring
Last push: 2023-05-28T06:20:09+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 2426, "days_push": 1193, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1273, forks 554 (observed 2026-08-28T04:04:12.679777+00:00)

## What it is
XploitSPY is a self-hosted, cloud-based Android monitoring tool built on NodeJS that logs GPS, SMS, calls, notifications, microphone audio, and files from a target Android device via a web dashboard. It is a fork of D3VL's L3MON, written largely in Smali, and is explicitly labeled for educational purposes.

## Use cases
- monitor an android device's gps location remotely
- log sms and call history from a phone
- capture notifications from whatsapp and other apps
- record microphone audio on a target device
- remotely browse and download files from an android phone
- build a custom monitoring apk for a device

## When to choose
- you need a self-hosted android monitoring dashboard with no third-party cloud
- you want sms, call, gps, and notification logging in one tool
- you need a built-in apk builder for the client app

## When to avoid
- you need a legally compliant enterprise MDM solution - this lacks consent mechanisms and has a non-standard license
- you cannot host a server with a static IP and NodeJS/JRE 11
- you expect active development or security patches - releases have stalled since 2023
- monitoring devices without the owner's consent - this is illegal in most jurisdictions

## Facets
- artifact type: application
- maturity: maintenance
- function: monitoring, security, http-server
- domain: security, android-tools, privacy, osint
- platform: self-hosted
- tags: android-monitoring, spyware, parental-control, surveillance, sms-logging, gps-tracking, apk-builder, nodejs-server, android, nodejs, web-server, linux

## Member repositories
- XploitWizer-Community/XploitSPY (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:12.679777+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T05:03:11.536543+00:00, confidence not recorded.
  - readme: https://github.com/XploitWizer-Community/XploitSPY (fetched 2026-08-28T04:04:12.679777+00:00, sha 22cf2f3fed0f)
- Data as of 2026-08-30T08:39:29.467469+00:00.