Bugaoshan is an open-source (AGPL-3.0-only) Android app by The-Brotherhood-of-SCU. The APK we host is 14 MB, it needs Android 8.0 or newer, and it declares 18 permissions.
The file on this page is Bugaoshan 2.5.3, 14.33 MB, and it installs on Android 8.0 and newer.
We compared the signing certificate of this build with the certificate recorded the first time io.github.the_brotherhood_of_scu.bugaoshan entered the site, and published both the file's SHA-256 and the certificate's fingerprint above so you can check the download yourself. That comparison says the file was not repackaged by someone else; it is not a review of what the app does.
The manifest inside the APK declares 18 permissions, none of which cover contacts, location, SMS, the camera or the microphone.
Its licence is AGPL-3.0-only. We took this build from F-Droid, and the source for this exact version is linked below.
F-Droid, who build and sign this package, flag it: it relies on a network service that is not open source. We pass that on as they recorded it — we have not tested the app ourselves.
We do not show a star rating or an install count for this page: we have no measured figure for either, and a number we cannot source is worth less than an empty field.
- Version
- 2.5.3
- Size
- 14.33 MB
- Requires Android
- API 26
- Package
- io.github.the_brotherhood_of_scu.bugaoshan
- Signature checked on
- Oct 28, 2026
- Where this file came from
- F-Droid
- Licence
- AGPL-3.0-only
- Source code
- Source for this version
File SHA-256: 0376b30a32fc2b7884dcb48f1f29abe5c7432c39a4eb4ff4aa7aff05b0d40fc4
Signing certificate (SHA-256): 1b0a09e3e7e3b3b9fadff06a7795bf7448a22e5803f2a18f62267dc2273be391
We check that this file carries the same signing certificate as earlier releases of the same package. That shows the APK was not repackaged by someone else — it is not a security review of the app.
Declared permissions
- INTERNET
- WRITE_EXTERNAL_STORAGE
- REQUEST_INSTALL_PACKAGES
- RECEIVE_BOOT_COMPLETED
- REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
- com.android.launcher.permission.INSTALL_SHORTCUT
- POST_NOTIFICATIONS
- POST_PROMOTED_NOTIFICATIONS
- SCHEDULE_EXACT_ALARM
- VIBRATE
- READ_EXTERNAL_STORAGE
- READ_MEDIA_IMAGES
- READ_MEDIA_VIDEO
- READ_MEDIA_AUDIO
- WAKE_LOCK
- ACCESS_NETWORK_STATE
- FOREGROUND_SERVICE
- io.github.the_brotherhood_of_scu.bugaoshan.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Screenshots


