Skip to content

SpyTV v1.0.9 - Default Self-Hosted C2 + Mode Selection

Choose a tag to compare

@ProjectZeroDays ProjectZeroDays released this 07 Oct 23:03
· 38 commits to main since this release

SpyTV v1.0.9 - Default Self-Hosted C2 + Mode Selection

All platforms now default to Self-Hosted C2 mode with a clear mode selection dialog when the app opens:

  1. Self-Hosted: This device runs the full C2 server. Dashboard at http://localhost:8443/ (or http://:8443/ on Android). This is the default.
  2. Connect-Remote: Connect this device to an existing C2 server on another machine by entering its URL.

What changed

  • APK: First-run dialog shows Setup C2 Server with Self-Hosted | Connect-Remote buttons. Self-Hosted is now the default mode. Mode toggle in settings (top-right switch).
  • EXE: run_c2.bat shows mode selection menu. c2_server.py adds interactive prompt.
  • Web: python c2_server.py shows mode selection prompt.

Security fixes

  • Fixed moderate vulnerability: urllib3 pinned to >=2.8.0 (was 2.7.0)
  • requests pinned to >=2.32.0
  • Added .github/dependabot.yml for automated dependency updates
  • Replaced os.system shell calls with shutil.which() in core/exploit_dispatcher.py, families/webos/install.py, families/tizen/install.py

Release assets

Asset Description
SpyTV.apk Android APK (Self-Hosted + Connect-Remote modes)
SpyTV-C2-standalone.exe Windows EXE (bundled Python, Self-Hosted C2)
SHA256SUMS.txt Checksum manifest

Full Changelog