Skip to content

PZ-ModGuard v2.8.0 - User-Defined SHA-256 Exceptions & Integrity Pinning

Choose a tag to compare

View all tags
@KodeMannn KodeMannn released this 03 Oct 22:27
· 10 commits to main since this release
v2.8.0
d3dc965

What's Changed in v2.8.0

Based on community feedback from Alexa Altez, PZ-ModGuard v2.8.0 introduces a cryptographic User Exceptions System with SHA-256 hash pinning. This allows players to safely suppress known benign warnings (such as Project Remnants connecting to an external LLM server) while maintaining cryptographic protection against tampering and unauthorized updates.

🔐 Cryptographic SHA-256 Exception Pinning

  • Container & Class-Level Pinning: Pin either an entire container (.jar, .dll) or an individual .class\ bytecode entry by its exact SHA-256 cryptographic hash.
  • Automatic Expiration on Update/Tamper: If a mod receives an update on Steam Workshop, or if any byte in the target file or class is changed or tampered with, the exception automatically expires, alerts the player with an expiration notice, and re-triggers the warning.
  • Tier 1 Security Guard: Wildcard pattern (*) exceptions are strictly forbidden for Tier 1 Critical threats (Discord webhooks, token stealers, reverse shells) to prevent accidental trojan bypasses.

🖥️ Seamless User Experience

  • Interactive 1-Click Post-Scan Prompt: After any interactive scan that finds warnings, ModGuard prompts:
    \Would you like to save any detected warning(s) as a trusted SHA-256 exception? [Y/N]
    Allowing you to trust the finding with a single keystroke.
  • **Dedicated Management Menu [8] User Exceptions**:
    • List all active exceptions with target names, class entries, API patterns, and SHA-256 hashes.
    • Add exceptions manually by typing a path or dragging and dropping a file.
    • Remove individual exceptions or clear all.
    • Inspect the raw JSON configuration.

🌐 Cross-Platform Parity & Storage

  • Windows: Persisted in %LOCALAPPDATA%\PZ-ModGuard\pzmg_exceptions.json\ (survives updates and works seamlessly with Steam Auto-Scan).
  • Linux & SteamOS: Persisted in ~/.local/share/pz-modguard/pzmg_exceptions.json.
  • Portable: Supports portable drop-in ./pzmg_exceptions.json.
  • 100% Feature Parity: Supported identically in both Windows (\PZ-ModGuard.bat) and Linux/SteamOS (\pz_modguard.py).

Full Changelog: v2.7.0...v2.8.0

Assets 5
Loading