SN512A · ANDROID FIRST · AUTHORIZED DEVICE ENROLLMENT

Mobile installer
and recovery workbench

Reconnect the phone, install the local Termux controller, enroll a private VPN and pair Shizuku or wireless ADB. Your original SN512A firmware and exploit research stays private.

Install SN512A controller Open Codespaces IDE

Live services: Cloudflare Gateway encrypted DNS + restricted official-release metadata relay. They do not grant Android root, expose an ADB port or bypass carrier enrollment.

Connection profiles

Wi-Fi, mobile APN review, Bluetooth, USB and Private DNS. Start with a trusted Wi-Fi connection or carrier-enabled cellular data.

Offline-first

Private DNS

Cloudflare Gateway location assigned specifically to SN512A.

uazda8rfs6.cloudflare-gateway.com

Official update relay

Restricted HTTPS metadata proxy for official Termux and Shizuku releases. No arbitrary upstream URLs or remote shell.

Relay configuration · Termux releases

Cloud image lab

GitHub Codespaces for read-only Android image inspection, hashes and reviewed release candidates. No unattended flash or device-management changes.

Private source repository

Install on your Android phone

STEP 1 · BRING NETWORK ONLINE

Wi-Fi or mobile first

Open Android Settings → Network & internet. Connect Wi-Fi or use a valid carrier cellular connection. Set Wi-Fi proxy: None and Private DNS: Automatic while restoring HTTPS connectivity. A carrier-managed APN or disabled radio may require AT&T authorization.

STEP 2 · GET TERMUX

Install the mobile terminal

Download Termux from F-Droid or Termux from its official releases, then open it and authorize Android's requested permissions. If no internet is available, copy the official APK and the installer files from a computer or SD card.

STEP 3 · INSTALL VERIFIED CONTROLLER

Download the installer

Download both files to the same phone folder. The installer pins the controller SHA-256, so it refuses unexpected changes.

Download install.sh Download snctl.sh SHA-256 manifest

termux-setup-storage
cd ~/storage/downloads
sha256sum -c SHA256SUMS
bash install.sh
snctl onboard

If Chrome saves the files elsewhere, move all three to Downloads first. Offline installation works with both scripts in the same folder; no connection is needed to install the local controller.

STEP 4 · SET PRIVATE DNS

Use the Cloudflare Gateway location

After network connectivity works: Android Settings → Private DNS → Private DNS provider hostname. Paste uazda8rfs6.cloudflare-gateway.com. To roll back a DNS failure, choose Automatic.

Alternative public malware-filtering resolver: security.cloudflare-dns.com. A Cloudflare Gateway DNS policy is configured to block known malware, phishing, botnets, spyware and other threat categories. Device-level verification is still needed.

STEP 5 · VPN AND PRIVILEGED TOOLING

Approve your private VPN and pair Android

Install official Tailscale Android or Cloudflare WARP, sign in, and approve the Android VPN prompt. Install Shizuku separately if it is allowed by device policy.

snctl network
snctl dns
snctl vpn
snctl setup
snctl shizuku
snctl audit

For wireless ADB, enable Developer options → Wireless debugging and pair with the code displayed on the device. Android prompts cannot be accepted by a website. Shizuku requires separate authorization.

STEP 6 · LINUX AND CLOUD IMAGES

Optional Debian / Alpine

After networking is functional and packages have been installed, install Linux userlands without rooting Android.

snctl linux install debian
snctl linux install alpine
snctl linux login debian

Security boundary: this is an owner-approved installer, not an Android APK store or an automatic remote control service. It does not silently install disabled apps, modify APN provisioning, release AT&T MDM, patch verified boot, expose public TCP ADB or accept untrusted commands. Preserve original research offline, along with hashes and backups.