GitHub - interplains/Zero-Breach-Toolkit: Free, open-source, offline checks for traces of known mercenary spyware. Works on Windows, macOS and Linux, Android phones and iPhone backups.
github.com
Free, open-source, offline checks for traces of known mercenary spyware. Works on Windows, macOS and Linux, Android phones and iPhone backups. - interplains/Zero-Breach-Toolkit

Zero Breach Toolkit

A free, open-source check for traces of known mercenary spyware (Pegasus, Predator, Graphite, Candiru and others) on computers, Android phones and iPhone backups.

  • Read-only. It does not modify source evidence or system settings. It writes only temporary database snapshots and the reports you ask for.

  • No network requests during a scan. It never looks up spyware addresses and has no upload feature. Python network calls are blocked and redirected paths are refused. This is not an operating-system network sandbox; see PRIVACY.md.

  • States its limits. Every report says what was found, how strong the evidence is, and what could not be checked. A clean result is never presented as proof that you are safe.

Repo:

https://github.com/interplains/Zero-Breach-Toolkit

Tweet:

https://nitter.meowing.monster/xIsraelExposedx/status/2115161198454866070#m

  • XiJinpingStanAccount@lemmy.ml
    0·
    13 days ago

    This is really new, and has a weird pace of development that makes me suspect it is vibe coded. I also doubt its code has actually been audited despite being open source. So while an interesting project I would not run this on your devices atleast as of yet.

    • Botzo@lemmy.world
      0·
      13 days ago

      The whole 1 post, no comments, 2 day old account thing doesn’t lend any credibility either.

      • taco_shale032@lemmy.ml
        0·
        13 days ago

        In addition to that, this whole project is only 5 days old and somehow has over 4k stars…? Sounds botted to me.

        • XiJinpingStanAccount@lemmy.ml
          0·
          13 days ago

          Yeah to put that in perspective I just checked and spot-dl an extremely well known and popular spotify downloader utility that is many years old has 26k. Thousands of stars is hard to get. it’s github not facebook.

      • XiJinpingStanAccount@lemmy.ml
        0·
        13 days ago

        Yeah it gets odder the more you look at it. It’s a very new repo and apparently got 4k stars. And a few days ago it had half that. It also has 400+ forks for some reason. Then you’ve got like really detailed proposals being put into issues by accounts like this: https://github.com/shadikiwan which have literally no activity after 2024 until now.

        This is what was posted by that account: https://github.com/interplains/Zero-Breach-Toolkit/issues/23

        It’s formatted cleanly, almost as if an AI made it.

        3 contributors to the project but basically everything is the one main account. https://github.com/interplains which has not done anything on github this year until a few days ago when this whole thing started to be put out there.