Enhanced fork of Tricky Addon - Update Target List with automatic target management, Xposed detection, and auto-fetch keybox
Enhanced fork of Tricky Addon - Update Target List with automatic target management, Xposed detection, and auto-fetch keybox
⚡ Tricky Addon Enhanced
Automated TrickyStore & TEESimulator Management
Flash once. Forget forever.
[!NOTE] This is a personal project built for automation enthusiasts — flash and forget.
It was never planned for public release, but enough people wanted it, so here it is. It's open-source because sharing is good — not because anyone is owed support, features, or responses on a timeline. If something breaks, report it on Telegram. PRs are welcome. Entitlement is not.
Do NOT report issues to TrickyStore, TEESimulator, or any upstream project. They have nothing to do with this module. All support goes through one place: the SuperPowers Telegram.
A native Rust daemon that manages TrickyStore and TEESimulator silently in the background — keybox rotation, security patch spoofing, VBHash injection, attestation engine monitoring, and target list management — all running as a single process with zero user intervention after install.
This is a clean-room rewrite. The original concept drew from several community projects, but every line of backend logic has been rebuilt from scratch in Rust with a completely different architecture — a single native daemon replacing 6 shell processes, inotify replacing poll loops, in-memory config replacing fork-per-read patterns. No commits were squashed or rebased from any other project. This is new code.
The previous shell-based approach worked, but it was fragile. Config reads forked a new process every time. App detection polled in a sleep loop. Six separate scripts competed for resources. The result was hundreds of thousands of unnecessary wakeups per day, constant JVM spawns, and race conditions that caused intermittent failures users couldn't diagnose.
The Rust rewrite eliminates all of that:
| Metric | Shell | Rust |
|---|---|---|
| Wakeups/day | 884,449 | ~100 (timer fires only) |
| JVM spawns/day | 20,170 | ~200 (only for pm when inotify can't detect) |
| Processes | 6 | 1 |
| Background CPU | ~28 min/day | |
| Build options |
| Flag | Effect |
|---|---|
| (none) | Bump version, cross-compile, package |
--no-bump |
Build without incrementing version |
--no-build |
Package only (skip Rust compile) |
--clean |
Remove old ZIPs before packaging |
All settings are configurable from the WebUI (open from your root manager) or via CLI:
ta-enhanced config get keybox.source
ta-enhanced config set keybox.interval 3600Config lives at /data/adb/tricky_store/config.toml and is preserved across reinstalls.
Config Reference
| Key | Default | Description |
|---|---|---|
keybox.enabled |
true |
Auto keybox fetching |
keybox.source |
yurikey |
Primary source (yurikey, upstream, custom) |
keybox.interval |
300 |
Seconds between fetch attempts |
security_patch.auto_update |
true |
Auto patch date updates |
security_patch.interval |
86400 |
Seconds between patch checks |
automation.enabled |
true |
Auto target.txt population |
automation.use_inotify |
true |
Use inotify for instant app detection |
health.enabled |
true |
Attestation engine health monitor |
health.interval |
10 |
Seconds between health checks |
conflict.enabled |
true |
Conflicting module detection |
vbhash.enabled |
true |
VBHash spoofing |
File Locations
/data/adb/tricky_store/
├── config.toml # Module configuration
├── target.txt # Apps to protect
├── keybox.xml # Current keybox
├── keybox.xml.bak # Keybox backup
├── security_patch.txt # Patch dates
├── .health_state # Health monitor state
/data/adb/Tricky-addon-enhanced/logs/
├── daemon.log # Unified daemon log
└── conflict.log # Conflict detection
/data/adb/boot_hash # Persisted VBHashFingerprint enrollment fails after install
On Snapdragon-class devices, the runtime VBMeta digest spoof can prevent enrollment of new fingerprints. Existing prints keep working; only adding new ones fails. Two escape hatches, available from the WebUI under Automation → Compatibility, or via terminal:
touch /data/adb/disable_vbmeta_digest_spoof — keeps Play Integrity spoofing, drops only the digest rewrite. Try this first.touch /data/adb/disable_prop_handler — disables the entire boot-state spoof. Use only if the first doesn't help.Reboot after either change. Remove the file to restore the spoof.
$ ta-enhanced --connect
███████╗██╗ ██╗██████╗ ███████╗██████╗
██╔════╝██║ ██║██╔══██╗██╔════╝██╔══██╗
███████╗██║ ██║██████╔╝█████╗ ██████╔╝
╚════██║██║ ██║██╔═══╝ ██╔══╝ ██╔══██╗
███████║╚██████╔╝██║ ███████╗██║ ██║
╚══════╝ ╚═════╝ ╚═╝ ╚══════╝╚═╝ ╚═╝
POWERS
[✓] SIGNAL ──→ t.me/superpowers9
[✓] UPLINK ──→ bug reports · feature drops · dev updates
[✓] STATUS ──→ OPEN — all operators welcomeThis project is licensed under the GNU General Public License v3.0.
⚡ Flash once. Forget forever.
No open issues yet, or sync has not completed.