Zero Breach Toolkit 2.0.5 (pre-release)

Zero Breach Toolkit 2.0.5 (pre-release for testing). If nothing turns up during testing, it becomes the main release.

New

• macOS: the system's record of downloaded files is also searched. A file downloaded from a known spyware address is reported with its date; an address that is only mentioned is a reference. If the record is missing or can't be read, it's listed as not checked. Contributed by s3ba-b.

Safer updates

• The list of actively exploited software now has the same protection as the indicator lists: a download with fewer than half the entries this computer has seen before is refused, and the previous copy is kept.

More thorough

• Only this project's own published blocklist files are treated as filter lists. Anything else cached from our sites is searched like any other page.

Other

• The programs' checksums are signed with the release key; see VERIFYING.md.
• Tests no longer run twice for the same branch. Contributed by zaccromero.

Your antivirus may flag these programs. Antivirus products often wrongly flag new programs that are not code-signed yet, and some flag these. If you downloaded the file from this page, this is a false alarm and you can ignore it: the code is public, and each program has a public build record you can check. We have applied for free code signing and are reporting these false alarms to the antivirus companies. If the file came from anywhere else, do not run it and trust the warning.

Downloads and first-launch steps: see the README. Full list: CHANGELOG.

Verify before running

zero-breach-toolkit.py SHA-256: d3d50bda337d33536512d42f139fcb72f6c9bac212eae6b5ef8824cb06f62c96

Each program: gh attestation verify <file> --repo interplains/Zero-Breach-Toolkit. Their checksums are also GPG-signed: gpg --verify SHA256SUMS-programs.txt.asc SHA256SUMS-programs.txt, then sha256sum --ignore-missing -c SHA256SUMS-programs.txt. Signed with key C24E C92B 12D6 670A 2516 065F 9B4D 5754 99AF A53C.