Please do not publish an exploit or sensitive scan output in a public issue. Use GitHub's private vulnerability reporting for this repository when available, or contact the maintainer privately through the repository profile.

Include the affected version or commit, reproduction steps, impact, and any suggested mitigation. Remove real credentials, APKs, and third-party data from the report.

droidHunter is a local security-testing tool, not a multi-user service. It does not implement API authentication or tenant isolation. Keep the API and UI bound to loopback, keep data/ private, and place an authenticated reverse proxy in front of both services if remote access is unavoidable.

Only scan targets you are authorized to assess. Treat generated reports as sensitive because they can contain internal project identifiers, local filesystem paths, and security findings.