beakthoven/TrickyStoreOSS

Health v2 · maintenance only

Adoption not part of the score

1325 stars · 116 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A fully open-source Magisk module that spoofs Android hardware keystore attestation, serving as a FOSS rewrite of the proprietary TrickyStore module. It supports leaf certificate hacking and certificate generation modes, configurable per target package, plus optional hardware keybox and security patch level spoofing.

Use cases

• pass Play Integrity or other attestation checks on a rooted Android device
• spoof key attestation results for specific apps
• replace the closed-source TrickyStore module with a FOSS alternative
• configure per-app attestation spoofing behavior
• set a custom reported security patch level for attestation
• use a hardware keybox for extended device integrity

When to choose

• you need open-source keystore attestation spoofing on Android 10+
• you want to avoid the proprietary TrickyStore module for licensing or trust reasons
• you need per-package control over spoofing mode (leaf hacking vs certificate generation)

When to avoid

• you need a supported, warranty-safe device without root
• you are not using Magisk or a compatible root solution
• you expect this to work on Android versions below 10

Facets

plugin · maturity active

security cryptography configuration-management security android-tools privacy developer-tools cli magisk-module root keystore-attestation device-spoofing play-integrity foss kotlin android

Member repositories

For agents

markdown · JSON · MCP: product_card(name="beakthoven/TrickyStoreOSS")