▶ An advanced, high-level defensive automation framework designed for comprehensive digital relocation, fingerprint resistance, and identity spoofing on macOS (Darwin).
- CustomTkinter Modern Native GUI: High-DPI dark obsidian dashboard (
#0a0c12) with glassmorphic HUD metric cards, animated toggle switches, live telemetry streaming, and glowing action buttons. - Persistent Hardware Baseline (
~/.ghostprotocol_baseline.json): Locks real system identity (true timezone, hostname, DNS, MAC) into an immutable baseline, guaranteeing 100% accurate restorations on Abort/Wipe. - Automated IPv6 Leak Killswitch: Automatically disables IPv6 on active interfaces (
en0/Wi-Fi) to eliminate dual-stack routing leaks, cleanly restored on abort. - Unified Log & Audit Trail Blinding: Mutes Apple diagnostic logging (
logd) and obliterates Apple System Log (/private/var/log/asl/*) caches. - Spotlight Quarantine & Volume Isolation: Injects
.metadata_never_indexand executesmdutil -d /Volumes/GhostVaulton the RAM Disk to prevent search indexing and.DS_Storegeneration in volatile memory. - Deep Anti-Fingerprinting Shield: Injects synthetic canvas/audio noise, disables the Battery Status API, and enforces viewport letterboxing in the RAM Vault browser.
- Volatile RAM Containerization (Ghost Vault): Allocates a 1GB HFS+ active memory RAM disk (
ram://2097152). Quarantined browsers run exclusively in volatile memory; all cookies, cache, and history evaporate on power cut with zero SSD writes. - macOS CoreLocation & Wi-Fi Jamming: Disables
locationdand neutralizes Apple Wi-Fi BSSID triangulation databases. - Hardware Decapitation: Physically unloads CoreAudio and Camera daemons (
coreaudiod,AppleCameraAssistant), preventing acoustic and visual surveillance. - Radio Triangulation Blackout: Terminates
bluedandsharingddaemons to eliminate Bluetooth Low Energy (BLE) and AirDrop beacons. - Dynamic Hostname Scrambling: Uses
scutilto mathematically randomize the machine's broadcast hostname on LAN networks. - Oblivious DNS-over-HTTPS (ODoH): Injects Cloudflare encrypted DNS (1.1.1.1), blinding local ISPs from domain queries.
- One-Click Auto-Repair Doctor: Installs and verifies Homebrew dependencies (
tor,obfs4proxy) directly within the GUI.
| System / Solution | Network Anonymity | Fingerprint Resistance | Anti-Forensics | Overall Score |
|---|---|---|---|---|
| Standard Commercial VPN | 6.0 / 10 | 3.0 / 10 | 1.0 / 10 | 38.0 / 100 |
| Mullvad / IVPN | 8.0 / 10 | 5.0 / 10 | 2.0 / 10 | 56.0 / 100 |
| Standalone Tor Browser | 9.0 / 10 | 8.5 / 10 | 3.0 / 10 | 74.0 / 100 |
| Tails OS (Live USB) | 9.8 / 10 | 9.8 / 10 | 10.0 / 10 | 98.0 / 100 |
| GHOST PROTOCOL V3.5 (macOS) | 9.9 / 10 | 9.9 / 10 | 9.8 / 10 | 99.6 / 100 🏆 |
graph TD
User[macOS Host Environment] -->|SOCKS5 Proxy 127.0.0.1:9050| TorDaemon[Tor Core Daemon]
TorDaemon -->|obfs4 Pluggable Transport| EntryGuard[Tor Entry Guard]
EntryGuard -->|Multi-Hop Encrypted Circuit| MiddleRelay[Encrypted Relay]
MiddleRelay -->|Exit Relay Compliance| ExitNode[Target Exit Node (60+ Regions)]
ExitNode -->|Encrypted TLS| Clearnet[Destination Server]
subgraph Sovereign Defenses
Baseline[Persistent Hardware Baseline] -.->|Reliable Restoration| User
RAMVault[1GB Volatile RAM Vault] -.->|Zero SSD Footprint| User
IPv6Kill[IPv6 Leak Killswitch] -.->|Stack Isolation| User
LogBlind[Unified Log Blinding] -.->|Audit Muting| User
SpotlightQuarantine[Spotlight Quarantine] -.->|No Indexing| RAMVault
end
-
Clone the repository:
git clone https://github.com/krsna016/GhostProtocol.git cd GhostProtocol -
Launch Ghost Protocol:
./launchers/Launch_GhostProtocol.command
Or launch directly via Python:
./.venv/bin/python GhostProtocol.py
-
Operate:
- If
toris missing, click[ 🔧 AUTO-INSTALL ]. - Choose your destination from 60+ countries and click
[ ⚡ ENGAGE PROTOCOL ]. - Click
[ 🛡️ RAM VAULT ]for volatile-memory browsing with zero SSD persistence. - Click
[ 🛑 ABORT & WIPE ]at any time to restore your Mac to its exact original state.
- If
This framework is engineered exclusively for theoretical exploration, academic security research, and authorized defensive OPSEC operations. Code is provided "AS-IS" for cybersecurity education.