Changelog
Full History of XeraX
Every update from day one to now — features, fixes, and improvements.
Jun 6, 2026
v2.5
Install Script + Multi-Device Switching
- NEWOne-command installer at xeraxapp.com/install.sh — downloads, configures, and starts in 90 seconds
- NEW72 scripts bundled at xeraxapp.com/surveillance.tar.gz — no git repo needed
- NEWMulti-device switching inside Telegram — /devices shows all devices with tap-to-switch buttons
- NEWAdmin Telegram notifications — receive a message instantly on every sale and device registration
- IMPDevice registration accepts client-provided device ID — no duplicates on reinstall
- IMPHTML branded email template with install command embedded
Jun 6, 2026
v2.4
Mobile-Responsive Overhaul
- IMPAll 12 inner pages: hamburger menu with 44×44px touch targets, slide-down mobile nav drawer
- IMPviewport-fit=cover on all pages — proper notch and Dynamic Island support
- IMPFooter links flex-wrap — no horizontal overflow on any screen size
- IMPSticky CTA safe-area padding for iPhone home bar
- IMPSocial proof toasts repositioned above sticky bar on small screens
- FIXPortal login 500 error — members table uses status='active' not active=1
- FIXdisown error in bot subshells — replaced with setsid
- FIXBattery cache mv error — only writes when termux-battery-status returns output
- FIXDevice heartbeats going to old domain — restarted daemon to pick up xeraxapp.com
Jun 6, 2026
v2.3
Extreme Features + Full Website
- NEW17 extreme scripts fully wired: MITM, DNS poison, follow mode, self-destruct, input inject, password dump, anti-detect, decoy, email reader, smart geofence, burst photos, ring phone, airplane toggle, screen timeout, app launch, notification reader, data usage
- NEW💥 Extreme + 🛠 Utils menus in Telegram bot with 20+ new /text commands
- NEW15 website pages: /features, /blog (10 posts), /affiliate, /compare, /use-cases, /privacy-policy, /terms, /status, /changelog, /install-guide
- NEWAnnual/monthly pricing toggle, coupon codes, exit intent popup, countdown timer, social proof toasts, guarantee badge, media bar, scroll progress, back-to-top, sticky CTA
- NEWAdmin dashboard: Revenue (MRR), Leads, and Coupons tabs
- NEWDB tables: email_leads, affiliates, coupons
- IMPtg_proxy.py BrokenPipe fix — stopped flooding log with 25k errors per session
Jun 5, 2026
v2.2
PayPal + Domain + Homepage Redesign
- NEWLive PayPal JS SDK checkout with server-side capture and amount verification
- NEWMigrated to xeraxapp.com — Let's Encrypt SSL on apex + www, auto-renews
- NEWToken shown on-screen in success modal immediately after payment
- IMPFull homepage redesign: Why XeraX, Bot Preview, Testimonials, Comparison Table, FAQ accordion, Final CTA banner, 4-column footer, cookie banner, trust seals
- NEWSEO: robots.txt, sitemap.xml, full Open Graph meta, JSON-LD structured data, FAQ schema
Jun 4, 2026
v2.1
SaaS Platform + Persistence
- NEWFlask server deployed to Hetzner VPS — multi-tenant SQLite DB
- NEWCustomer portal (/portal) — token login, device dashboard, live status
- NEWAdmin dashboard (/dashboard) — device list, member management, command queue
- NEWDevice heartbeat API — 90s pings with battery, GPS, WiFi, IP, Android version
- NEWMagisk service.d watchdog — runs as root, survives Termux kill
- NEWOOM protection, Android Doze exemption, stealth notification suppressor
- FIXAdmin dashboard logout on refresh — ADMIN_KEY now persisted in localStorage
- FIXBot.sh crash not detected — added BOT_PID health check, restarts within 2s
Jun 3, 2026
v1.4
Telegram Proxy + Speed
- NEWtg_proxy.py — persistent HTTPS connection via Unix socket, ~300ms vs ~800ms per API call
- NEW_proxy_alive() — actual socket connectivity check, not just file-exists check
- IMPtg_answer backgrounded in parallel with menu edit — instant button response
- IMPAll termux-* API calls wrapped with timeout 8 — no more infinite hangs in loops
- FIXStale proxy socket — old socket file from prev session no longer blocks startup
- FIXcurl -d @- with closed Magisk stdin — changed to curl -d "$VAR" (heartbeat was always empty)
- FIXOnline threshold 120s → 300s — device no longer flips offline between 90s pings
Jun 2, 2026
v1.3
Script Compatibility Fixes
- FIXface_detect.sh — replaced OpenCV (no ARM64 build) with Pillow pixel-diffing
- FIXpush_to_talk.sh — replaced ffplay/aplay with termux-media-player
- FIXsound_trigger.sh — replaced sox with ffmpeg PCM + Python RMS analysis
- FIXdns_log.sh — tcpdump ran in background, output never saved; rewrote to write pcap then read back
- FIXbt_scanner.sh — replaced missing hcitool with svc + cmd bluetooth_manager + logcat parser
- FIXproximity_alert.sh — same svc+logcat approach for BT MAC detection
- IMPAll 19 scripts unconditionally set TMPDIR — Android /tmp is read-only
Jun 1, 2026
v1.2
Persistence Layers
- NEWMagisk service.d watchdog — root process, 30s loop, outside Termux cgroup
- NEWTermux:Boot backup — secondary autostart, skips if Magisk already running
- NEWtermux-wake-lock — prevents Termux from being suspended
- NEWOOM score -1000 in daemon + watchdog — survives Android memory pressure
- NEWAndroid Doze whitelist — dumpsys deviceidle exemption applied on every start
- NEWStealth suppressor loop — hides Termux notifications + camera/mic indicators every 60s
May 28, 2026
v1.1
Core Feature Expansion
- NEWAnti-theft system: intruder detection, GPS tracking, alarm, brick/unbrick, factory wipe
- NEWUnlock alert, SIM swap alert, USB alert, app monitor
- NEWCall recorder, push-to-talk, two-way audio streaming
- NEWScheduled commands, IFTTT engine, recurring tasks
- NEWngrok tunnel for remote access behind NAT
- NEWGeofencing with entry/exit alerts
- NEWKeylogger, screenshot, screen record (root), WhatsApp/Chrome/Signal data extraction (root)
- NEWClipboard monitor, accounts dump, Bluetooth scanner
May 20, 2026
v1.0
Initial Release
- NEWCore daemon (daemon.sh) running silently in Termux
- NEWTelegram bot (bot.sh) with full inline keyboard menu UI
- NEWGPS tracking, remote camera, microphone recording
- NEWSMS and call log reading, file browser
- NEWLive audio/video streaming, motion trigger, sound trigger, face detection
- NEWWiFi info, battery status, operator data, upload system
- NEWNo app icon, no notification, zero visible footprint