github.com / AsInsideOut
AsInsideOut/ miunlocktool
Python·174 files·commit 8ed29d4·scanned 3h ago·cached ✓
14/100
LOW RISK
Minor findings consistent with the project type. Nothing reachable from install hooks.
scored by engine v9: rules have changed since, rescan for the current result
verdict accurate?
10% file coverage
threat-state: lowlive
FINDINGS ░▒▓
warningPython subprocess / os.system usageos.system() or subprocess with shell=True / suspicious commands can execute arbitrary shell commands. Plain pip/package installs are usually benign.sourcecode/cli/miunlock_cli.py
if sys.platform == "win32":
os.system("")
try:
if hasattr(sys.stdout, "reconfigure"):+4warningHigh-entropy string literalsFound 3 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.sourcecode/pc/res/api_handler.py+3
warningHigh-entropy string literalsFound 3 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.sourcecode/pc/res/settings_ui.py+3
infoSuspicious file in repoExecutable file (gradlew.bat) in repositorysourcecode/android/gradlew.bat+2
Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.
17 files scanned @ 8ed29d4 | 10/29/2026 | heuristic scan — always review manually
risk by category
code execution6
network & exfiltration0
file system access0
obfuscation6
supply chain2
owasp / injection0
telemetry
files 17/174rules hit 5engine v9commit 8ed29d4
github
AsInsideOut/miunlocktool
Universal tool for bootloader unlocking on Xiaomi devices
283
21
360d
174 files
17 scanned(10%)
8ed29d4
architecture░▒▓
entry (0) flagged (3) pkg (36)
52 nodes · 91 edgesscroll to zoom · click node to jump to finding