LSPosed/LSPatch

Security & Privacy

Patch Android APKs to load Xposed modules without root, for Android users and reverse engineers.

9,453
1,163
Java
GPL-3.0
5 years old

What it does

LSPatch is a rootless implementation of the LSPosed framework. Instead of hooking a device system-wide through root, it patches a target APK by inserting the Xposed API code and native libraries (dex and so) directly into the package, so the patched app can load Xposed modules without root. It builds on the LSPosed core, originates from the Xpatch fork, and uses Apkzlib for repacking LSPatch README.

Typical users are Android users who want Xposed modules on a non-rooted device, and developers or reverse engineers who need to inject hooking code into an APK and repackage it.

Quick start

There are two entry points, and both require Android 9 or later on the target device README lines 9–13.

Via the desktop jar:

  1. Download lspatch.jar from the latest release.
  2. Run:
java -jar lspatch.jar

Via the Android manager:

  1. Download and install manager.apk on the device from the same release page.
  2. Follow the instructions shown in the manager app README lines 20–29.

Stable builds are published on the releases page; canary and debug builds are only produced by GitHub Actions README lines 14–19. The README does not spell out the patching parameters for the jar or the exact manager screens, so those steps have to be followed from the app's own interface.

Constraints

  • Minimum Android version is 9; the maximum is, in theory, the same as LSPosed README lines 9–13.
  • Patching modifies and repacks the target APK, so the app you end up installing is not the original package; expect side effects from the insertions and repacking.
  • The project is licensed under GPL-3.0 README lines 40–42.

HotRepo's take

In the HotRepo daily Java-language ranking for 2026-11-01, LSPatch recorded 3 new stars and a best position of 3 on that Java list, with a total of 9,453 stars. That is a single-day, single-language snapshot, which places the project among the more visible Java repositories that day but says nothing about sustained growth; there is no all-language daily rank record for it. The technical draw is clear from the source alone: it removes the root requirement from the Xposed/LSPosed module ecosystem by patching APKs, which is the kind of capability that keeps drawing users on devices that cannot be rooted.

Written by AI from the project's README, updated . The project's own docs are the source of truth.