Releases: doublegate/SPECTRE
v0.5.0 - Operation SHADOW: Cross-Platform GUI Application
SPECTRE v0.5.0 - Operation SHADOW Complete
Release Date: February 6, 2026
Status: Stable Production Release
Phase: 5 of 7 (Operation SHADOW) - ✅ COMPLETE
🎯 Overview
SPECTRE v0.5.0 marks the completion of Phase 5: Operation SHADOW, delivering a fully-featured, cross-platform desktop GUI application built with Tauri 2.10 and React 19. This release represents 8 sprints of development, culminating in a production-ready graphical interface for offensive security operations.
What's New
- Cross-Platform Desktop Application - Native installers for Linux (x64), macOS (Intel/ARM64), and Windows (x64)
- Visual Campaign Planning - Complete campaign lifecycle management with multi-phase workflows
- Real-Time Scan Visualization - D3.js force-directed network graphs with live event updates
- Comprehensive Dashboard - Statistics, charts, and activity timelines
- Multi-Format Reports - Generate and export findings in 5 formats (CSV, JSON, XML, HTML, Markdown)
- Advanced Settings - 8 configuration tabs with 5 visual themes
- Full Accessibility - WCAG 2.1 AA compliant with keyboard navigation
- Optimized Performance - 54.5% bundle size reduction, < 2s load times
📦 Installation
Quick Start
Download the appropriate installer for your platform from the assets below:
Linux
- AppImage (Universal):
SPECTRE_0.5.0_amd64.AppImage - Debian/Ubuntu:
spectre_0.5.0_amd64.deb - Fedora/RHEL:
spectre-0.5.0-1.x86_64.rpm
# AppImage
chmod +x SPECTRE_0.5.0_amd64.AppImage
./SPECTRE_0.5.0_amd64.AppImage
# Debian/Ubuntu
sudo dpkg -i spectre_0.5.0_amd64.deb
spectre-gui
# Fedora/RHEL
sudo rpm -i spectre-0.5.0-1.x86_64.rpm
spectre-guimacOS
- Intel (x64):
SPECTRE_x64.dmg - Apple Silicon (ARM64):
SPECTRE_aarch64.dmg
# Open the DMG and drag SPECTRE to Applications
open SPECTRE_*.dmgWindows
- MSI Installer:
SPECTRE_0.5.0_x64_en-US.msi - NSIS Installer:
SPECTRE_0.5.0_x64-setup.exe
# Run the MSI installer (recommended)
.\SPECTRE_0.5.0_x64_en-US.msiSystem Requirements
Linux:
- Ubuntu 20.04+, Fedora 36+, or equivalent
- webkit2gtk-4.1, GTK 3.24+, libayatana-appindicator3
- libpcap (for network scanning)
macOS:
- macOS 10.15 (Catalina) or later
- Intel x64 or Apple Silicon (ARM64)
- libpcap (included)
Windows:
- Windows 10 1809+ or Windows 11
- WebView2 Runtime (bundled)
- Optional: Npcap for network scanning
See PLATFORM-REQUIREMENTS.md for detailed requirements.
✨ Phase 5 Highlights
Sprint 5.1: Tauri 2.0 Setup (v0.5.0-alpha.1)
- Initialized Tauri 2.10 project with modern desktop capabilities
- Configured IPC (Inter-Process Communication) layer for frontend-backend communication
- Set up state management with RwLock-based AppState
- Implemented 22 IPC command handlers across 10 modules
- Established security model with granular capability permissions
Sprint 5.2: React Frontend Foundation (v0.5.0-alpha.2)
- React 19 + Vite 6 + TypeScript build pipeline
- Tailwind CSS 4 for styling with 5 custom themes
- Zustand state management (4 stores: scan, campaign, dashboard, ui)
- Routing with TanStack Router
- 12 shadcn/ui components integrated
- IPC hooks for seamless backend communication
Sprint 5.3: Campaign Planning UI (v0.5.0-alpha.3)
- 4-Step Campaign Creation Wizard
- Name & Description
- Objectives (Reconnaissance, Vulnerability Assessment, Exploitation, Persistence)
- Target Input with CIDR parsing and validation
- Review & Create
- Campaign Management
- 4 phases: Recon → Scanning → Analysis → Exfiltration
- Phase timeline visualization with prerequisite tracking
- CRUD operations (Create, List, Get, Advance, Archive)
- Export/Import campaigns (JSON format)
- Backend Integration
- SQLite persistence for campaign storage
- 7 IPC commands fully wired
- Target parsing with scope validation
- Testing: 10 new tests (3 frontend + 7 Rust)
Sprint 5.4: Scan Visualization (v0.5.0-alpha.4)
- Network Topology Visualization
- D3.js force-directed graphs
- Real-time node updates via IPC events
- Interactive host cards with port/service details
- Color-coded severity indicators (red: critical, orange: high, yellow: medium, blue: low, gray: info)
- Scan Configuration
- 8 scan types (SYN, Connect, UDP, ACK, FIN, Xmas, Null, Comprehensive)
- Timing templates (T0-T5: Paranoid to Insane)
- Port range specification
- Target input with real-time validation
- Scan Management
- Start/stop scan controls
- Multi-scan support (track multiple concurrent scans)
- Real-time progress tracking (hosts scanned, ports checked, findings discovered)
- Results table with sort/filter capabilities
- Event System
scan:progress- Real-time progress updatesscan:result- Individual host results with full port/service datascan:complete- Scan completion notificationsscan:error- Error handling and reporting
- Testing: Full scan lifecycle tested with IPC mocking
Sprint 5.5: Dashboard & Reports UI (v0.5.0-alpha.5)
- Dashboard Page
- 4 statistics cards (Hosts Scanned, Open Ports, Services Detected, Findings)
- Severity distribution chart (Recharts PieChart)
- Top services chart (Recharts BarChart)
- Activity timeline with recent findings
- Auto-refresh every 30 seconds
- Reports Page
- Findings table with advanced filtering
- Severity filter (Critical, High, Medium, Low, Info)
- Service filter (HTTP, SSH, FTP, etc.)
- Port filter
- Search input (host, description)
- Sort by severity, host, port, service
- Pagination support
- Finding detail modal with CVE links
- Findings table with advanced filtering
- Export Functionality
- 5 export formats: CSV, JSON, XML, HTML, Markdown
- Report preview with DOMPurify sanitization
- Export panel with format selection
- Backend Integration
- results.rs: 10 tests for dashboard stats and findings
- report.rs: 21 tests for report generation and exports
- Full IPC wiring for all operations
- Testing: 31 backend tests + 15+ frontend component tests
Sprint 5.6: Settings, Analysis & Comms UI (v0.5.0-alpha.6)
- Settings Page (8 Tabs)
- General: Application preferences, auto-updates
- Scan: Default timing template, port ranges, detection toggles
- Analysis: CyberChef integration settings
- Comms: WRAITH protocol configuration
- Output: Export formats, report templates
- Theme: 5 visual themes (Dark, Light, Tactical, Matrix, Hacker)
- Shortcuts: Keyboard shortcuts reference (11 shortcuts)
- About: Version info, component versions, license
- Analysis Page
- CyberChef operation integration (15 operations)
- 4 categories: Encoding (Base64, Hex, URL), Encryption (AES, RSA), Hashing (MD5, SHA), Data (JSON, XML)
- Input/output interface for data transformation
- Operation history
- Comms Page
- WRAITH protocol interface (stubs)
- Identity management (generate, view, export)
- Peer management (add, list, remove)
- Secure send/receive operations
- Backend Integration
- config.rs: 5 tests for get/set configuration
- chef.rs: 7 tests for CyberChef operations
- comms.rs: 3 tests for WRAITH operations
- Testing: 23 new tests (15 frontend + 8 backend)
Sprint 5.7: Cross-Platform Testing (v0.5.0-beta.1)
- GitHub Actions CI/CD
- Dedicated GUI workflow (gui.yml - 135 lines)
- frontend-check job: TypeScript type checking + frontend tests
- gui-build-matrix job: Multi-platform builds (4 platforms)
- Updated release workflow (release.yml - +94 lines)
- Automated installer generation with tauri-apps/tauri-action@v0
- 6 installer formats (AppImage, deb, rpm, dmg Intel, dmg ARM, msi)
- Artifact upload and release attachment
- Dedicated GUI workflow (gui.yml - 135 lines)
- Platform Test Scripts
- Linux:
scripts/test-linux.sh(45 lines) - webkit2gtk-4.1 + GTK 3 - macOS:
scripts/test-macos.sh(50 lines) - Xcode CLT + arch detection - Windows:
scripts/test-windows.ps1(60 lines) - VS Build Tools + MSI build
- Linux:
- Platform Requirements Documentation
- Comprehensive 280-line guide
- Installation commands for all major distributions
- Troubleshooting for common issues
- CI/CD Fixes
- Tauri 2.x identifier field location (moved to root level)
- macOS runner migration (macos-13 → macos-15-intel)
- Rust cache invalidation (prefix-key versioning)
- Explicit runner versions for reproducibility
Sprint 5.8: Polish & Release (v0.5.0 Stable)
- Accessibility (WCAG 2.1 AA Compliance)
- ARIA labels on all interactive elements
- NetworkTopology:
role="img",aria-label,aria-describedby - ScanConfigForm:
id/htmlFor,aria-required,aria-invalid - FindingDetail: Descriptive titles,
role="status"severity badges
- NetworkTopology:
- Keyboard navigation
- Alt+1-5: Navigate pages (Dashboard, Recon, Campaigns, Reports, Settings)
- Ctrl+N: New Scan
- Ctrl+F: Search
- F1: Help
- Focus management with Radix UI Dialog focus trapping
- Screen reader support with semantic HTML
- Color contrast ratios ≥ 4.5:1 (WCAG AA)
.sr-onlyutility for visually hidden text:focus-visibleoutline styles (2px solid ring)
- ARIA labels on all interactive elements
- Performance Optimizations
- Route-based code splitting with React.lazy() (9 pages)
- Component memoization (NetworkTopology, SeverityChart, ServicesChart)
- D3.js force simulation optimization
- alphaDecay: 0.05 → 0.02 (faster convergence)
- distanceMax(500) for Barnes-Hut optimization
- Auto-stop at alpha < 0.01
- Convergence: ~5s → < 2s (60% improvement)
- Bundle size reduction: 650KB → 295.76KB gzipped (54.5% reduction)
- Load time: 2.5s → 1.8s (28% improvement)
- Memory usage: < 200MB at idle
- User Documentation
- GUI User Guide (850+ lines) - d...
SPECTRE v0.4.7 — Operation SPECTER (Phase 4 Complete)
Highlights
Phase 4 (Operation SPECTER) is now complete with the final CyberChef-MCP v1.9.0 integration, CI/CD pipeline hardening, and dependency security remediations.
CyberChef-MCP v1.9.0 Integration
- Submodule updated from v1.8.0 to v1.9.0 (CyberChef v10.20.0 upstream sync)
- New
ChefClient::worker_stats()trait method for querying worker thread pool statistics WorkerStatstype:enabled,threads,completed,waiting,utilizationMcpChefClient::connect()passesENABLE_WORKERS,WORKER_MAX_THREADS,ENABLE_STREAMINGenv vars to Docker container- New
spectre chef worker-statsCLI subcommand - 689 CyberChef-MCP tests (was 563)
CI/CD Hardening
- Fixed recursive submodule checkout failure caused by orphaned nested submodule in CyberChef-MCP v1.9.0 (
ref-proj/CyberChefgitlink with no.gitmodulesentry) - Replaced
submodules: recursivewith explicitgit submodule update --init --depth 1across all 6 CI jobs + release workflow - Modernized release workflow: replaced deprecated
actions/create-release@v1andactions/upload-release-asset@v1withsoftprops/action-gh-release@v2 - All 9 CI jobs passing
Release Build Fixes (3 Platform Failures Resolved)
- musl (
x86_64-unknown-linux-musl): Addedvendored-opensslfeature to compile OpenSSL from source — musl targets lack system OpenSSL headers - aarch64 cross-compilation (
aarch64-unknown-linux-gnu): Addedvendored-opensslfeature —crossDocker container lacks target OpenSSL dev packages - Windows (
x86_64-pc-windows-msvc): AddedLIBenv var pointing to Npcap SDKLib\x64directory — linker couldn't findPacket.lib - Feature chain:
spectre-cli/vendored-openssl→spectre-core/vendored-openssl→prtip-scanner/vendored-openssl→native-tls/vendored - Conditional
--features vendored-opensslin build commands via matrix expression - Conditional LICENSE packaging (Unix and Windows) for defensive robustness
Dependency & Security Remediations
- MSRV bumped from 1.88 to 1.92 (
Cargo.toml,clippy.toml, CI workflow, README) - time crate: 0.3.46 → 0.3.47 (fixes stack exhaustion DoS vulnerability in RFC 2822 parsing)
- codecov/codecov-action: v4 → v5
Release Artifacts
| Platform | Target | Archive |
|---|---|---|
| Linux x86_64 | x86_64-unknown-linux-gnu |
spectre-linux-x86_64.tar.gz |
| Linux x86_64 (static) | x86_64-unknown-linux-musl |
spectre-linux-x86_64-musl.tar.gz |
| Linux aarch64 | aarch64-unknown-linux-gnu |
spectre-linux-aarch64.tar.gz |
| macOS x86_64 | x86_64-apple-darwin |
spectre-macos-x86_64.tar.gz |
| macOS Apple Silicon | aarch64-apple-darwin |
spectre-macos-aarch64.tar.gz |
| Windows x86_64 | x86_64-pc-windows-msvc |
spectre-windows-x86_64.zip |
Test Summary
| Component | Tests |
|---|---|
| SPECTRE | 980 (44 CLI + 618 core + 268 TUI + 5 doc + 45 integration) |
| ProRT-IP | 2,557 |
| CyberChef-MCP | 689 |
| WRAITH-Protocol | 2,957 |
| Combined | 7,183 |
Codebase Metrics
- 122 Rust source files across 5 crates (~35,000 lines)
- Zero clippy warnings (standard + pedantic + nursery)
- Zero doc warnings (
RUSTDOCFLAGS="-D warnings") - MSRV: Rust 1.92
Component Versions
| Component | Version | Capability |
|---|---|---|
| ProRT-IP | v1.0.0 | 10M+ pps network reconnaissance |
| CyberChef-MCP | v1.9.0 | 463 operations via MCP protocol |
| WRAITH-Protocol | v2.3.7 | 10+ Gbps E2E encrypted comms |
Architecture
All three components use a 3-layer adapter pattern:
- Trait (public interface):
Scanner,ChefClient,CommsClient - Real adapter:
PrtipScanner,McpChefClient,WraithNode - Stub for testing:
StubScanner,McpClient,StubCommsClient
What's Next
- Phase 5: Operation SHADOW (v0.5.x) — GUI application (Tauri 2.0)
- Phase 6: Operation WRAITH (v0.6.x) — MCP server implementation
- Phase 7: Operation GENESIS (v1.0.0) — Production release
Full Changelog: https://github.com/doublegate/SPECTRE/blob/v0.4.7/CHANGELOG.md