Spectre

Spectre

Radio frequency scanner with recon and offensive capabilities

Thomas Giudici Network Analyzer Security

Download (3.3 MB)

Description

Spectre is an Android app for observing and interacting with the wireless environment around you. It monitors signals from Bluetooth devices, Wi-Fi access points, cellular towers, and GNSS satellites, and features a growing set of pentesting tools, constrained by Android's security model.

Features:

• Live RF exposure gauge: a single dBm figure for the total received RF power across cellular, Wi-Fi, and Bluetooth
• Cellular: serving and neighbor cells on 5G, 4G, 3G, and 2G with operator, identifiers, bands, reference measurements, and a timing-advance distance estimate where available
• Wi-Fi: access points on the 2.4, 5, and 6 GHz bands with vendor, security, cipher, channel, width, and a distance estimate, including true 802.11mc FTM ranging where the hardware supports it
• Bluetooth LE: advertising devices with name, MAC, vendor, RSSI, address type, PHY, service UUIDs, and decoded manufacturer data including iBeacon
• GNSS: multi-constellation tracking with dual-frequency support, carrier-to-noise, elevation, azimuth, used-in-fix status, and a computed sub-satellite ground point
• Local-network scan: host discovery via TCP-connect probes and SSDP/UPnP, with banner grabbing, service fingerprinting, and reverse DNS, plus mDNS/DNS-SD service discovery
• GATT inspector: connect to a BLE device, enumerate its services and characteristics, read and decode their values, and write to writable ones
• iBeacon broadcast: broadcast as an iBeacon with configurable UUID, major, minor, and measured power

Spectre requests location, Bluetooth, and phone-state permissions because Android gates Wi-Fi scan results, BLE scans, and cell identities behind them. Everything runs on-device. There are no ads, no trackers, and no Google dependencies. Network access is used only to probe devices on your own local network.

What’s new (0.1.2)

• Cellular: correct channel frequencies (incl. 3G), all neighbor cells, dual-SIM
• Wi-Fi: accurate WPA3/OWE labels, Wi-Fi 7 (320 MHz) and 6 GHz, cipher/vendor info, vendor filter
• Bluetooth: extended BLE scanning, address-type filter, fuller device names, steadier GATT inspector
• GNSS: fixed BeiDou orbit; range-rate, ephemeris and almanac; per-satellite view
• Local network scan (renamed) with Android 17 support

Versions

Version Date Size Requires Android Download
0.1.2 current
8d50fb4b5136777c…
 2026-07-13 3.3 MB API 31

Permissions

What the app asks the system for. Android only grants sensitive access after you confirm it.

  • Phone stateDetect ongoing calls and read device information.
  • Precise locationDetermine the location via GPS.
  • Approximate locationDetermine the location via the network.
  • Wi-Fi stateRead information about the Wi-Fi connection.
  • Change Wi-FiTurn Wi-Fi on and off or switch networks.
  • Bluetooth scanSearch for nearby Bluetooth devices.
  • Bluetooth connectionConnect to paired Bluetooth devices.
  • BLUETOOTH_ADVERTISE
Show 8 more permissions
  • NotificationsShow notifications.
  • Internet accessSend and receive data over the internet.
  • Network stateCheck whether and how the device is connected.
  • ACCESS_LOCAL_NETWORK
  • Foreground serviceKeep running in the background, visible in the status bar.
  • FOREGROUND_SERVICE_SPECIAL_USE
  • FOREGROUND_SERVICE_LOCATION
  • spectre.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Comments