Specter is a root module that coordinates keybox management, Play Integrity helpers, app targeting, and related configuration from a single WebUI.
Attestation Tools in One Interface
The project builds on Yurikey and integrates with an existing attestation stack.
Keybox tools
Selects catalog or custom keyboxes, checks revocation data, and supports backup and restore.
App targeting
Manages target packages and watches for newly installed apps.
Feature controls
Provides switches for security patch, ROM properties, PIF actions, detection cleanup, and conflict handling.
Dependencies and first boot
Specter requires Magisk, KernelSU, or APatch plus a compatible TrickyStore, TEESimulator, TEESimulator-RS, or OhMyKeymint setup. Its README also requires Play Integrity Inject or Play Integrity Fork. The installer can add TEESimulator-RS when no compatible implementation is detected. On the first reboot, Specter backs up relevant state and runs its target, security patch, and keybox pipeline.
Installation
- Prepare one supported key attestation implementation and install Play Integrity Inject or Play Integrity Fork.
- Install the Specter release ZIP through Magisk, KernelSU, or APatch.
- Reboot so the initial backup and configuration pipeline can run.
- Open the WebUI and review its keybox, targeting, and control settings before changing defaults.
Version 1.5.0 interface
The release adds dedicated Material 3 subpages for theme, language, keybox selection, file browsing, and ROM cleanup. Its logs page separates action, boot, and live output. PIF controls can choose a fixed Pixel Canary target or exclude models from random selection.
Limits
Keyboxes can be revoked and Google evaluates integrity verdicts on its servers. Specter's settings do not guarantee strong integrity or acceptance by a particular application. Because the module can modify several properties and companion configurations, keep backups and avoid enabling overlapping options in other attestation modules at the same time.