InstantLive Server

Turn your phone into a live web server

• Overview

Welcome to InstantLive Server — a lightweight, on-device web server for instant HTML preview and live sharing. Built for developers, ethical hackers, and learners.

Select any HTML file or folder, and share it over your local network — no cloud, no upload, no signup. The built-in WebView provides live preview with auto-reload, and a fullscreen Eruda console for real-time debugging.

• Features

• One-tap hosting — serve any .html file from your device over HTTP.
• Folder mode — select a folder and auto-host all files (CSS, JS, images).
• Live preview — built-in WebView with auto-reload on file changes.
• Fullscreen Eruda console — inspect DOM, network, storage, and logs on-device.
• Network sharing — any device on same WiFi/hotspot can access your page.
• Virtual filesystem — files served from RAM, fast and clean.
• Ad-supported — short interstitial before hosting; 2-minute grace period.
• Update checker — automatically checks GitHub for newer versions.
• Force update — triggers only on major bugs or critical updates, cannot be dismissed.
• Portrait-locked — clean, distraction-free interface.

• How I Made It

This project started as a simple idea: what if my phone could host a website?

• I designed the entire UI layout and application logic myself.
• AI assisted with code generation, debugging, and refactoring.
• I am learning Kotlin — the concept, design decisions, feature set, and architecture are entirely mine. AI helped translate my ideas into working code.

Tech Stack: Kotlin / NanoHTTPD v2.3.1 / Eruda / Google AdMob / Android Foreground Service

• Transparency

• Code origin — UI design and logic conceived by the author. Implementation with AI assistance. No code copied from other projects.
• AI disclosure — AI (LLM) used for code generation, debugging, compilation fixes, and refactoring. Author is learning Kotlin — AI is a development accelerator.
• No hidden tracking — app does not collect, store, or transmit any user data beyond what Google AdMob SDK collects.
• No backdoors — server binds 0.0.0.0 by design for local network access. No remote access, telemetry, or analytics beyond AdMob.
• Open source — full source available for audit. Report security concerns via GitHub Issues.

• Project Structure

app/src/main/
├── kotlin/app/techsetuapps/instantweb/
│   ├── MainActivity.kt            — Lifecycle, UI scaffold, notification
│   ├── MainActivityActions.kt     — File pick, hosting start/stop, AdMob
│   ├── MainActivityUI.kt          — App bar, tabs, host panel, output panel
│   ├── MainActivityDraw.kt        — Circles, rounded rects, gradients
│   ├── MainActivityNetwork.kt     — WiFi info, IP detection, update checker
│   ├── MainActivityPages.kt       — Help, privacy, terms, credits, settings
│   ├── ServerService.kt           — Foreground service, NanoHTTPD, notification
│   ├── LocalHttpServer.kt         — Serves VirtualFS, live reload, Eruda
│   └── VirtualFS.kt               — In-memory virtual filesystem (RAM)
│
├── AndroidManifest.xml            — Permissions, service, AdMob app ID
├── res/                           — Icons, values, themes
├── assets/                        — eruda.js (embedded DevTools)
├── build.gradle.kts               — App-level dependencies & SDK
└── proguard-rules.pro             — R8/ProGuard rules

Root-level:

├── build.gradle.kts       — Project-level Gradle config
├── settings.gradle.kts    — Module includes
├── gradle.properties      — JVM & AndroidX properties
├── LICENSE                — MIT License
└── README.md              — This file

• Privacy Policy

• No personal data collection. The app does not collect, store, or transmit any personal information.
• AdMob. Google AdMob displays interstitial ads. It may collect device advertising ID, IP address, and app interaction data for ad targeting. Governed by Google's Privacy Policy.
• Local server. HTTP server runs on your device, accessible only on your local network (WiFi/hotspot). No data leaves your network through this server.
• File access. The app reads only HTML/CSS/JS files you explicitly select. It does not scan or access other files.
• No analytics. No Firebase, no Google Analytics, no third-party telemetry beyond AdMob.

Privacy concerns? Open an Issue

• Terms of Use

• Local use only. This tool is for local development and testing. You are responsible for what you serve.
• No illegal content. Do not serve or distribute illegal, harmful, or copyrighted content without permission.
• Network exposure. When hosting, your content is accessible to all devices on the same network. Secure your hotspot/WiFi.
• Ads. Ads displayed via Google AdMob. Do not artificially click ads — this violates AdMob policies.
• As-is. Software provided "as is" without warranty. See the MIT License for full terms.
• Ethical use. This is a developer tool. Use it responsibly.

• Disclaimer

• This app binds an HTTP server on 0.0.0.0:7090 (configurable). Anyone on your local network can access served content. Use on trusted networks only.
• The server uses NanoHTTPD, a lightweight Java HTTP server. It is not hardened for production use — do not expose it to the public internet.
• No TLS/HTTPS. All traffic is served over plain HTTP. Do not transmit sensitive data through this server.
• The app is designed for development and learning purposes. It is not a production web server.
• The author is learning Kotlin. The code may not follow all Kotlin best practices. Improvements and suggestions are welcome.

• Credits

• NanoHTTPD v2.3.1 — nanohttpd/nanohttpd — BSD-3-Clause
• Eruda — liriliri/eruda — MIT
• Google AdMob SDK — Google LLC — Apache 2.0
• AndroidX / Jetpack — Google LLC — Apache 2.0
• Kotlin Stdlib — JetBrains — Apache 2.0

All other code is original work by TechSetuApps.

• Security

This project is open to security review. If you are an ethical hacker, security researcher, or developer and find security flaws, vulnerabilities, or bugs:

• Do not exploit them.
• Report via GitHub Issues — include steps to reproduce, impact, and suggested fix.
• I am learning security auditing — your reports help me improve both the app and my skills.

Known considerations:

• Server binds 0.0.0.0 by design (local network access required for sharing)
• No TLS/HTTPS — plain HTTP only
• No authentication on served content
• Foreground service uses WakeLock (max 4 hours)

• Author

TechSetuApps — Independent developer & ethical hacking enthusiast

• GitHub: TechSetuApps
• Email: techsetuapps@gmail.com
• License: MIT
• Version: 1.4.0 (Stable)

Concept and design by TechSetuApps. Code written with AI assistance while learning Kotlin. Learning security auditing — reports and suggestions welcome.

---

_{Built with curiosity. Open-sourced with transparency.}