dpejoh

specter

v1.5.0guide

Unified Play Integrity and root hiding stack for Android

★726 stars
•Root Management•by dpejoh•GPL-3.0•Updated Sep 12, 2026
Platforms:
✓ Magisk✓ KernelSU
Download v1.5.0Starting download...GitHub Source
specter-v1.5.0.zip

Overview

Developed by dpejoh, Specter is a next-generation attestation management and anti-detection suite for rooted Android devices.

Serving as a complete rewrite of the earlier Yurikey utility, Specter focuses on speed, stability, and a clean user experience. It provides automated maintenance for low-level Keystore simulation backends (such as TEESimulator, TEESimulator-RS, and TrickyStore), handling target synchronization, keybox rotation, and security patch alignment without terminal complexity.

Technical Architecture & How It Works

Inotify Target Monitoring & Multi-Backend Coordination

Specter operates as an orchestrator layer above low-level Keystore hooks:

  1. Backend Agnostic: Integrates natively with TrickyStore, TEESimulator, TEESimulator-RS, or OhMyKeymint.
  2. Inotify-Powered Target Watcher: Monitors application installation events in real-time. When a newly installed banking application or payment app is detected, Specter evaluates its manifest and adds it to /data/adb/tricky_store/target.txt automatically.
  3. Automated Boot Maintenance: Executes during early boot to reconcile security patch levels with installed Play Integrity Fix fingerprints and terminates stale Google Play Services processes.

Installation & Setup

  1. Install Play Integrity Fix or Play Integrity Fork.
  2. (Optional) Install TrickyStore or TEESimulator (Specter can auto-install TEESimulator-RS if none is found).
  3. Flash the latest Specter-v*.zip in Magisk, KernelSU, or APatch.
  4. Reboot your device.
  5. On first boot, Specter automatically runs its backup, target configuration, and keybox deployment routines.
  6. Open the WebUI from your root manager to review settings.

Configuration & Usage

  • WebUI Control Panel: Access Specter’s dashboard via KernelSU/APatch WebUI to manage custom keyboxes, view Google revocation states, and inspect active target apps.
  • Manual Target Declarations: Targeted package names can also be reviewed directly in: 
    /data/adb/tricky_store/target.txt

Troubleshooting & Common Issues

  • Google Revocation: If a certificate chain is flagged as revoked, use Specter’s WebUI catalog to switch to an alternative active keybox and trigger a process cleanup.

Frequently Asked Questions

What is the relationship between Specter and Yurikey?

Specter was created by dpejoh as a complete rewrite of what was originally developed as Yurikey. It replaces the legacy shell-heavy codebase with a clean, modern architecture, improved WebUI, and inotify-based automated app targeting.

Do I need to install TEESimulator before installing Specter?

No. If no existing Keystore interception module (TrickyStore, TEESimulator, or TEESimulator-RS) is detected during setup, Specter will automatically install TEESimulator-RS for you.