NekoBox
by Leeroy Makubaro · GPL-3.0-only · open source
A proxy client built on sing-box, for Shadowsocks, VMess, VLESS, Trojan and other protocols.
Needs:Your own proxy server · ARM64
2113 Apps is independent, not affiliated with or endorsed by Leeroy Makubaro. Official sources: source code on GitHub.
- Version
- 1.4.2
- Size
- 15.3 MB
- Requires
- Android 5.0+
- Updated
- 2026-02-09
Screenshots
Introduction
NekoBox for Android is a proxy client built on sing-box, a universal proxy core. You give it server configurations for protocols such as Shadowsocks, VMess, VLESS and Trojan, and it routes your phone’s traffic through them, either per app or for the whole device. It supports most of sing-box’s own features too.
It is a client only. You need your own server, or a subscription from a provider you trust.
Who uses it
Mostly people on networks where ordinary VPN protocols are blocked or throttled, and people who run their own proxy servers and want one app for several protocols. If you just want a commercial VPN, that provider’s own app is simpler.
What stands out in the APK
- No trackers.
- Camera is among the permissions that ask first, along with notifications and storage. Proxy clients usually use the camera to scan configuration QR codes, and you can decline it and paste configs instead.
- It declares ordinary permissions for network state, a system-exempted foreground service, starting at boot and asking for a battery-optimisation exemption. Together these keep the tunnel running.
- 15.3 MB, native code for arm64 only. A 32-bit-only phone can’t run it.
- Android 5.0 or newer, a much lower minimum than most current apps have.
Installing it
- Install the APK.
- Add a server: scan a QR code, paste a share link, or import a subscription URL.
- Start it. Android asks you to approve the VPN connection the first time. That is how the app captures traffic, and nothing goes through a third party’s server except the proxy you configured.
Worth knowing
The source code is on the MatsuriDayo/NekoBoxForAndroid repository, which is linked under More Information. Proxy tools are legal in most countries but restricted in some. Check the rules where you are.
What’s inside the APK
Trackers
No code matching the Exodus Privacy tracker signatures.
Native code
Needs a 64-bit ARM phone; 32-bit-only devices are not supported.
Android versions
Built for Android 15 (target API 35).
Permissions
4 of them need your approval first.
CPU types in this build: arm64-v8a (64-bit ARM, almost every phone since 2017).
Asks you first (4)
Android shows a prompt before the app can use these.
- Use the camera · CAMERA
- Show notifications (Android 13+) · POST_NOTIFICATIONS
- Read shared storage (Android 12 and older) · READ_EXTERNAL_STORAGE
- Write shared storage (Android 10 and older) · WRITE_EXTERNAL_STORAGE
Granted at install (12)
Low-risk permissions Android grants automatically, plus any we have not classified.
- ACCESS_NETWORK_STATE
- CHANGE_NETWORK_STATE
- EXPAND_STATUS_BAR
- FLASHLIGHT
- FOREGROUND_SERVICE
- FOREGROUND_SERVICE_SYSTEM_EXEMPTED
- INTERNET
- QUERY_ALL_PACKAGES
- RECEIVE_BOOT_COMPLETED
- REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
- VIBRATE
- WAKE_LOCK
Defined by other apps (3)
Permissions that belong to another app or to this app itself.
- com.android.permission.GET_INSTALLED_APPS
- moe.nb4a.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
- moe.nb4a.SERVICE
More Information
- Package name
- moe.nb4a
- Version
- 1.4.2 (build 230)
- File size
- 15.3 MB (15,252,519 bytes)
- Requires
- Android 5.0 or later
- Category
- Network & Privacy
- License
- GPL-3.0-only
- Developer
- Leeroy Makubaro
- Source code
- github.com/MatsuriDayo/NekoBoxForAndroid
- Released
- Feb 9, 2026
- Signer SHA-256
- 35762758ce86a6ec297d9ccac689469bc43b9fed8ae1b27f100a86bbac00a055
- File SHA-256
- d01e76feeb05e4701f3ae382cb71c0a3ebb77039005e5893f8817e1051f8ac28
- Checked
- , against the IzzyOnDroid index · how we check · verify it yourself
Common questions
Is this APK the official NekoBox release?
Yes. It is the developer’s own release of NekoBox 1.4.2, byte for byte as IzzyOnDroid distributes it. Its SHA-256 matches IzzyOnDroid’s signed index, and it is signed with the certificate IzzyOnDroid records for the app (SHA-256 35762758ce86a6ec297d9ccac689469bc43b9fed8ae1b27f100a86bbac00a055).
What Android version does NekoBox need?
Android 5.0 or later (API level 21). Version 1.4.2 is built for Android 15 (target API 35). Needs a 64-bit ARM phone; 32-bit-only devices are not supported.
Can NekoBox access the internet?
Yes. The APK requests Android’s internet permission. In total it declares 19 permissions, and 4 of them need your approval first.
Does NekoBox contain trackers?
No known trackers: our scan of version 1.4.2 found no code matching the Exodus Privacy tracker signatures. The scan covers known tracker libraries; it doesn’t show what data the app itself sends.
Is NekoBox open source?
Yes. NekoBox is released under the GPL-3.0-only licence, and its source code is published at https://github.com/MatsuriDayo/NekoBoxForAndroid.
Recent releases
| Version | Released | Size | Requires |
|---|---|---|---|
| v1.4.2 · this download | Feb 9, 2026 | 15.3 MB | Android 5.0+ |
| v1.4.1 | Oct 30, 2025 | 15.4 MB | Android 5.0+ |
Versions currently kept in the IzzyOnDroid repository. We host and check only the newest one.
