SpyTV v1.1.1
Summary
Bug-fix release over v1.1.0: removes duplicate dashboard code, fixes f-string inconsistencies, and ships verified release artifacts.
Changes
| File |
Change |
c2_dashboard.html |
Removed duplicate tab-exploits div, duplicate nav item, duplicate JS function definitions (second set of loadProviderModels, generateExploitForCVE, generatePatchForCVE, loadExploits, updateCVEsFromFeed), duplicate switchTab override |
c2_dashboard.html |
Fixed typo: "Regate Exploit" -> "Regenerate Exploit" |
c2_cve_feed.py |
Fixed unnecessary f-string (f"CVE not found in database" -> "CVE not found in database") |
c2_cve_feed.py |
Fixed redundant cve.get("tv_type", cve.get("tv_type", "smart-tv")) -> cve.get("tv_type", "smart-tv") |
c2_server.py |
get_gateway_and_subnet() consistently returns dotted subnet mask |
android/app/src/main/assets/c2_dashboard.html |
Synced with root dashboard |
Release Artifacts
| Asset |
Size |
SpyTV.apk |
~6.1 MB |
SpyTV-C2-standalone.exe |
~17.2 MB |
SHA256 checksums are in the SHA256SUMS.txt file included in the repository.
Security
- npm audit: 8 moderate vulnerabilities from
sprintf-js (used transitively by electron-builder). All versions of sprintf-js are vulnerable with no patched release. The only fix via npm audit fix --force requires downgrading electron-builder, which is a breaking change and is explicitly forbidden by the project's security policy. These are documented as accepted risks in this release.
- pip-audit: No known vulnerabilities in Python dependencies (colorama, pyyaml, requests, urllib3, reportlab).
- GitHub Dependabot: All alerts on default branch resolved (10 alerts, all fixed).
- Hardcoded credentials: None found in tracked files.
Pipeline Summary (Phases 1-10)
| Phase |
Description |
Status |
| 1 |
Error-correction & refactor |
Completed |
| 2 |
Repo cleanup (remove junk dirs, extend .gitignore) |
Completed |
| 3 |
Regenerate file_structure.txt |
Completed |
| 4 |
Vulnerability sweep (pip-audit, npm audit, dependabot) |
Completed |
| 5 |
Test suite (pytest tests/) |
All passed |
| 6 |
Debug (port 8443 free, no Gradle races) |
Verified |
| 7 |
Build release assets (APK, EXE, SHA256SUMS) |
Completed |
| 8 |
Commit changes |
Committed (2ead0a6) |
| 9 |
Push to remote |
Pushed to main |
| 10 |
Tag & release |
Tagged v1.1.1 |
