Skip to content

Magic Toolbox v1.0.2

Choose a tag to compare

View all tags
@MDMMagic MDMMagic released this 16 Oct 22:47
· 2 commits to main since this release
1.0.2
602aeb3
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

New Tools

Profile Signer
Sign .mobileconfig profiles and .pkg packages with your local code-signing certificate. Profiles are processed entirely on-device and never sent to a remote server. Select your signing certificate in Preferences.

Profile Unsigner
Strip CMS signing from .mobileconfig profiles and .pkg packages. Useful for editing locked profiles before re-signing. Also fully local.

Network Check
Test firewall connectivity to Jamf, Apple, Microsoft, and Google services in one click. Runs TCP/UDP reachability checks from this Mac against all required endpoints and shows pass/fail/latency per result. Add custom hosts alongside the built-in catalog. Results can be exported as an HTML report.

⸻

New Features

MDM Reporting Tool tile
The home screen now includes a tile for the MDM Reporting Tool. If you have it installed, point Magic Toolbox at it in Preferences → Third-Party Tools and the tile will launch it directly. If it isn't configured or can't be found, the tile opens mdmmagic.au/tools instead. The tile can be hidden from the same Preferences section if you'd prefer a cleaner home screen.

⸻

Improvements

PKG Inspector — Security hardening
The inspector now treats all data read from a package as untrusted. Numeric fields are parsed as unsigned integers, every offset and size is overflow-checked against the file bounds, loop iterations are capped, and decompression is streamed with a hard 512 MB output limit. Script content is now scanned for suspicious patterns and flagged inline.

Compare — Race condition fix
A scan token is now attached to each scan run. Results from a cancelled or stale scan can no longer overwrite state from a newer one. Case-insensitive name matching has also been added, and keychain save failures are now surfaced as an error rather than being silently dropped.

Operation safety lock
Tool switching and window close are now blocked while a write or destructive operation is in progress. Attempting either will prompt for confirmation, preventing operations from being torn down mid-run.

⸻

Bug Fixes

• Fixed unused SecTrustEvaluateWithError result in Profile Signer causing a compiler warning
• Fixed Swift 6 concurrency data race on the connection resume flag in Network Check

Assets 3
Loading