Skip to content

Releases: doublegate/SPECTRE

v0.5.0 - Operation SHADOW: Cross-Platform GUI Application

07 Feb 00:07

Choose a tag to compare

SPECTRE v0.5.0 - Operation SHADOW Complete

Release Date: February 6, 2026
Status: Stable Production Release
Phase: 5 of 7 (Operation SHADOW) - ✅ COMPLETE


🎯 Overview

SPECTRE v0.5.0 marks the completion of Phase 5: Operation SHADOW, delivering a fully-featured, cross-platform desktop GUI application built with Tauri 2.10 and React 19. This release represents 8 sprints of development, culminating in a production-ready graphical interface for offensive security operations.

What's New

  • Cross-Platform Desktop Application - Native installers for Linux (x64), macOS (Intel/ARM64), and Windows (x64)
  • Visual Campaign Planning - Complete campaign lifecycle management with multi-phase workflows
  • Real-Time Scan Visualization - D3.js force-directed network graphs with live event updates
  • Comprehensive Dashboard - Statistics, charts, and activity timelines
  • Multi-Format Reports - Generate and export findings in 5 formats (CSV, JSON, XML, HTML, Markdown)
  • Advanced Settings - 8 configuration tabs with 5 visual themes
  • Full Accessibility - WCAG 2.1 AA compliant with keyboard navigation
  • Optimized Performance - 54.5% bundle size reduction, < 2s load times

📦 Installation

Quick Start

Download the appropriate installer for your platform from the assets below:

Linux

  • AppImage (Universal): SPECTRE_0.5.0_amd64.AppImage
  • Debian/Ubuntu: spectre_0.5.0_amd64.deb
  • Fedora/RHEL: spectre-0.5.0-1.x86_64.rpm
# AppImage
chmod +x SPECTRE_0.5.0_amd64.AppImage
./SPECTRE_0.5.0_amd64.AppImage

# Debian/Ubuntu
sudo dpkg -i spectre_0.5.0_amd64.deb
spectre-gui

# Fedora/RHEL
sudo rpm -i spectre-0.5.0-1.x86_64.rpm
spectre-gui

macOS

  • Intel (x64): SPECTRE_x64.dmg
  • Apple Silicon (ARM64): SPECTRE_aarch64.dmg
# Open the DMG and drag SPECTRE to Applications
open SPECTRE_*.dmg

Windows

  • MSI Installer: SPECTRE_0.5.0_x64_en-US.msi
  • NSIS Installer: SPECTRE_0.5.0_x64-setup.exe
# Run the MSI installer (recommended)
.\SPECTRE_0.5.0_x64_en-US.msi

System Requirements

Linux:

  • Ubuntu 20.04+, Fedora 36+, or equivalent
  • webkit2gtk-4.1, GTK 3.24+, libayatana-appindicator3
  • libpcap (for network scanning)

macOS:

  • macOS 10.15 (Catalina) or later
  • Intel x64 or Apple Silicon (ARM64)
  • libpcap (included)

Windows:

  • Windows 10 1809+ or Windows 11
  • WebView2 Runtime (bundled)
  • Optional: Npcap for network scanning

See PLATFORM-REQUIREMENTS.md for detailed requirements.


✨ Phase 5 Highlights

Sprint 5.1: Tauri 2.0 Setup (v0.5.0-alpha.1)

  • Initialized Tauri 2.10 project with modern desktop capabilities
  • Configured IPC (Inter-Process Communication) layer for frontend-backend communication
  • Set up state management with RwLock-based AppState
  • Implemented 22 IPC command handlers across 10 modules
  • Established security model with granular capability permissions

Sprint 5.2: React Frontend Foundation (v0.5.0-alpha.2)

  • React 19 + Vite 6 + TypeScript build pipeline
  • Tailwind CSS 4 for styling with 5 custom themes
  • Zustand state management (4 stores: scan, campaign, dashboard, ui)
  • Routing with TanStack Router
  • 12 shadcn/ui components integrated
  • IPC hooks for seamless backend communication

Sprint 5.3: Campaign Planning UI (v0.5.0-alpha.3)

  • 4-Step Campaign Creation Wizard
    • Name & Description
    • Objectives (Reconnaissance, Vulnerability Assessment, Exploitation, Persistence)
    • Target Input with CIDR parsing and validation
    • Review & Create
  • Campaign Management
    • 4 phases: Recon → Scanning → Analysis → Exfiltration
    • Phase timeline visualization with prerequisite tracking
    • CRUD operations (Create, List, Get, Advance, Archive)
    • Export/Import campaigns (JSON format)
  • Backend Integration
    • SQLite persistence for campaign storage
    • 7 IPC commands fully wired
    • Target parsing with scope validation
  • Testing: 10 new tests (3 frontend + 7 Rust)

Sprint 5.4: Scan Visualization (v0.5.0-alpha.4)

  • Network Topology Visualization
    • D3.js force-directed graphs
    • Real-time node updates via IPC events
    • Interactive host cards with port/service details
    • Color-coded severity indicators (red: critical, orange: high, yellow: medium, blue: low, gray: info)
  • Scan Configuration
    • 8 scan types (SYN, Connect, UDP, ACK, FIN, Xmas, Null, Comprehensive)
    • Timing templates (T0-T5: Paranoid to Insane)
    • Port range specification
    • Target input with real-time validation
  • Scan Management
    • Start/stop scan controls
    • Multi-scan support (track multiple concurrent scans)
    • Real-time progress tracking (hosts scanned, ports checked, findings discovered)
    • Results table with sort/filter capabilities
  • Event System
    • scan:progress - Real-time progress updates
    • scan:result - Individual host results with full port/service data
    • scan:complete - Scan completion notifications
    • scan:error - Error handling and reporting
  • Testing: Full scan lifecycle tested with IPC mocking

Sprint 5.5: Dashboard & Reports UI (v0.5.0-alpha.5)

  • Dashboard Page
    • 4 statistics cards (Hosts Scanned, Open Ports, Services Detected, Findings)
    • Severity distribution chart (Recharts PieChart)
    • Top services chart (Recharts BarChart)
    • Activity timeline with recent findings
    • Auto-refresh every 30 seconds
  • Reports Page
    • Findings table with advanced filtering
      • Severity filter (Critical, High, Medium, Low, Info)
      • Service filter (HTTP, SSH, FTP, etc.)
      • Port filter
      • Search input (host, description)
    • Sort by severity, host, port, service
    • Pagination support
    • Finding detail modal with CVE links
  • Export Functionality
    • 5 export formats: CSV, JSON, XML, HTML, Markdown
    • Report preview with DOMPurify sanitization
    • Export panel with format selection
  • Backend Integration
    • results.rs: 10 tests for dashboard stats and findings
    • report.rs: 21 tests for report generation and exports
    • Full IPC wiring for all operations
  • Testing: 31 backend tests + 15+ frontend component tests

Sprint 5.6: Settings, Analysis & Comms UI (v0.5.0-alpha.6)

  • Settings Page (8 Tabs)
    1. General: Application preferences, auto-updates
    2. Scan: Default timing template, port ranges, detection toggles
    3. Analysis: CyberChef integration settings
    4. Comms: WRAITH protocol configuration
    5. Output: Export formats, report templates
    6. Theme: 5 visual themes (Dark, Light, Tactical, Matrix, Hacker)
    7. Shortcuts: Keyboard shortcuts reference (11 shortcuts)
    8. About: Version info, component versions, license
  • Analysis Page
    • CyberChef operation integration (15 operations)
    • 4 categories: Encoding (Base64, Hex, URL), Encryption (AES, RSA), Hashing (MD5, SHA), Data (JSON, XML)
    • Input/output interface for data transformation
    • Operation history
  • Comms Page
    • WRAITH protocol interface (stubs)
    • Identity management (generate, view, export)
    • Peer management (add, list, remove)
    • Secure send/receive operations
  • Backend Integration
    • config.rs: 5 tests for get/set configuration
    • chef.rs: 7 tests for CyberChef operations
    • comms.rs: 3 tests for WRAITH operations
  • Testing: 23 new tests (15 frontend + 8 backend)

Sprint 5.7: Cross-Platform Testing (v0.5.0-beta.1)

  • GitHub Actions CI/CD
    • Dedicated GUI workflow (gui.yml - 135 lines)
      • frontend-check job: TypeScript type checking + frontend tests
      • gui-build-matrix job: Multi-platform builds (4 platforms)
    • Updated release workflow (release.yml - +94 lines)
      • Automated installer generation with tauri-apps/tauri-action@v0
      • 6 installer formats (AppImage, deb, rpm, dmg Intel, dmg ARM, msi)
      • Artifact upload and release attachment
  • Platform Test Scripts
    • Linux: scripts/test-linux.sh (45 lines) - webkit2gtk-4.1 + GTK 3
    • macOS: scripts/test-macos.sh (50 lines) - Xcode CLT + arch detection
    • Windows: scripts/test-windows.ps1 (60 lines) - VS Build Tools + MSI build
  • Platform Requirements Documentation
    • Comprehensive 280-line guide
    • Installation commands for all major distributions
    • Troubleshooting for common issues
  • CI/CD Fixes
    • Tauri 2.x identifier field location (moved to root level)
    • macOS runner migration (macos-13 → macos-15-intel)
    • Rust cache invalidation (prefix-key versioning)
    • Explicit runner versions for reproducibility

Sprint 5.8: Polish & Release (v0.5.0 Stable)

  • Accessibility (WCAG 2.1 AA Compliance)
    • ARIA labels on all interactive elements
      • NetworkTopology: role="img", aria-label, aria-describedby
      • ScanConfigForm: id/htmlFor, aria-required, aria-invalid
      • FindingDetail: Descriptive titles, role="status" severity badges
    • Keyboard navigation
      • Alt+1-5: Navigate pages (Dashboard, Recon, Campaigns, Reports, Settings)
      • Ctrl+N: New Scan
      • Ctrl+F: Search
      • F1: Help
    • Focus management with Radix UI Dialog focus trapping
    • Screen reader support with semantic HTML
    • Color contrast ratios ≥ 4.5:1 (WCAG AA)
    • .sr-only utility for visually hidden text
    • :focus-visible outline styles (2px solid ring)
  • Performance Optimizations
    • Route-based code splitting with React.lazy() (9 pages)
    • Component memoization (NetworkTopology, SeverityChart, ServicesChart)
    • D3.js force simulation optimization
      • alphaDecay: 0.05 → 0.02 (faster convergence)
      • distanceMax(500) for Barnes-Hut optimization
      • Auto-stop at alpha < 0.01
      • Convergence: ~5s → < 2s (60% improvement)
    • Bundle size reduction: 650KB → 295.76KB gzipped (54.5% reduction)
    • Load time: 2.5s → 1.8s (28% improvement)
    • Memory usage: < 200MB at idle
  • User Documentation
    • GUI User Guide (850+ lines) - d...
Read more

SPECTRE v0.4.7 — Operation SPECTER (Phase 4 Complete)

06 Feb 01:23

Choose a tag to compare

Highlights

Phase 4 (Operation SPECTER) is now complete with the final CyberChef-MCP v1.9.0 integration, CI/CD pipeline hardening, and dependency security remediations.

CyberChef-MCP v1.9.0 Integration

  • Submodule updated from v1.8.0 to v1.9.0 (CyberChef v10.20.0 upstream sync)
  • New ChefClient::worker_stats() trait method for querying worker thread pool statistics
  • WorkerStats type: enabled, threads, completed, waiting, utilization
  • McpChefClient::connect() passes ENABLE_WORKERS, WORKER_MAX_THREADS, ENABLE_STREAMING env vars to Docker container
  • New spectre chef worker-stats CLI subcommand
  • 689 CyberChef-MCP tests (was 563)

CI/CD Hardening

  • Fixed recursive submodule checkout failure caused by orphaned nested submodule in CyberChef-MCP v1.9.0 (ref-proj/CyberChef gitlink with no .gitmodules entry)
  • Replaced submodules: recursive with explicit git submodule update --init --depth 1 across all 6 CI jobs + release workflow
  • Modernized release workflow: replaced deprecated actions/create-release@v1 and actions/upload-release-asset@v1 with softprops/action-gh-release@v2
  • All 9 CI jobs passing

Release Build Fixes (3 Platform Failures Resolved)

  • musl (x86_64-unknown-linux-musl): Added vendored-openssl feature to compile OpenSSL from source — musl targets lack system OpenSSL headers
  • aarch64 cross-compilation (aarch64-unknown-linux-gnu): Added vendored-openssl feature — cross Docker container lacks target OpenSSL dev packages
  • Windows (x86_64-pc-windows-msvc): Added LIB env var pointing to Npcap SDK Lib\x64 directory — linker couldn't find Packet.lib
  • Feature chain: spectre-cli/vendored-opensslspectre-core/vendored-opensslprtip-scanner/vendored-opensslnative-tls/vendored
  • Conditional --features vendored-openssl in build commands via matrix expression
  • Conditional LICENSE packaging (Unix and Windows) for defensive robustness

Dependency & Security Remediations

  • MSRV bumped from 1.88 to 1.92 (Cargo.toml, clippy.toml, CI workflow, README)
  • time crate: 0.3.46 → 0.3.47 (fixes stack exhaustion DoS vulnerability in RFC 2822 parsing)
  • codecov/codecov-action: v4 → v5

Release Artifacts

Platform Target Archive
Linux x86_64 x86_64-unknown-linux-gnu spectre-linux-x86_64.tar.gz
Linux x86_64 (static) x86_64-unknown-linux-musl spectre-linux-x86_64-musl.tar.gz
Linux aarch64 aarch64-unknown-linux-gnu spectre-linux-aarch64.tar.gz
macOS x86_64 x86_64-apple-darwin spectre-macos-x86_64.tar.gz
macOS Apple Silicon aarch64-apple-darwin spectre-macos-aarch64.tar.gz
Windows x86_64 x86_64-pc-windows-msvc spectre-windows-x86_64.zip

Test Summary

Component Tests
SPECTRE 980 (44 CLI + 618 core + 268 TUI + 5 doc + 45 integration)
ProRT-IP 2,557
CyberChef-MCP 689
WRAITH-Protocol 2,957
Combined 7,183

Codebase Metrics

  • 122 Rust source files across 5 crates (~35,000 lines)
  • Zero clippy warnings (standard + pedantic + nursery)
  • Zero doc warnings (RUSTDOCFLAGS="-D warnings")
  • MSRV: Rust 1.92

Component Versions

Component Version Capability
ProRT-IP v1.0.0 10M+ pps network reconnaissance
CyberChef-MCP v1.9.0 463 operations via MCP protocol
WRAITH-Protocol v2.3.7 10+ Gbps E2E encrypted comms

Architecture

All three components use a 3-layer adapter pattern:

  1. Trait (public interface): Scanner, ChefClient, CommsClient
  2. Real adapter: PrtipScanner, McpChefClient, WraithNode
  3. Stub for testing: StubScanner, McpClient, StubCommsClient

What's Next

  • Phase 5: Operation SHADOW (v0.5.x) — GUI application (Tauri 2.0)
  • Phase 6: Operation WRAITH (v0.6.x) — MCP server implementation
  • Phase 7: Operation GENESIS (v1.0.0) — Production release

Full Changelog: https://github.com/doublegate/SPECTRE/blob/v0.4.7/CHANGELOG.md