Skip to content

Architecture

Jump to bottom
N0K71RN4L edited this page Apr 21, 2026 · 1 revision

Architecture

Overview

Mac Hacker Toolkit is a native macOS application built with SwiftUI, providing a graphical interface for 150+ security tools with AI-powered analysis.

System Architecture

┌─────────────────────────────────────────────────────────────────┐
│                    Mac Hacker Toolkit UI                        │
│  ┌─────────┐ ┌──────────┐ ┌─────────┐ ┌────────┐ ┌──────────┐  │
│  │Dashboard│ │  AI Hub  │ │ Network │ │Wireless│ │Forensics │  │
│  └────┬────┘ └────┬─────┘ └────┬────┘ └───┬────┘ └────┬─────┘  │
└───────┼───────────┼────────────┼──────────┼───────────┼────────┘
        │           │            │          │           │
┌───────┴───────────┴────────────┴──────────┴───────────┴────────┐
│                      Service Layer                              │
│  ┌─────────────┐  ┌─────────────┐  ┌─────────────────────────┐ │
│  │ToolManager  │  │AIOrchestrator│ │  HardwareMonitor        │ │
│  │(150+ tools) │  │(Ollama/CoreML)│ │(WiFi/BT/GPU/SDR)       │ │
│  └─────────────┘  └─────────────┘  └─────────────────────────┘ │
│  ┌─────────────┐  ┌─────────────┐  ┌─────────────────────────┐ │
│  │AuditLogger  │  │PluginManager│  │  UpdateManager          │ │
│  │(AES-256)    │  │(Sandboxing) │  │  (Auto-update)          │ │
│  └─────────────┘  └─────────────┘  └─────────────────────────┘ │
└─────────────────────────────────────────────────────────────────┘

Core Components

Services

Service Description
ToolManager Tool execution engine with sandboxing
AIOrchestrator Ollama API client, CoreML manager
HardwareMonitor Wi-Fi/Bluetooth/SDR monitoring
AuditLogger AES-256 encrypted audit logging
PluginManager Plugin system with sandboxing
UpdateManager Auto-update with GitHub Releases

Data Models

  • SecurityTool - Tool definition with parameters
  • ToolCategory - Organized categories
  • ToolJob - Tool execution state
  • AIInsight - AI-generated findings

Views

All views follow SwiftUI best practices:

  • @StateObject for local state
  • @EnvironmentObject for shared state
  • @MainActor for thread safety

Security

Audit Logging

All operations are logged with:

  • AES-256-GCM encryption
  • HMAC-SHA256 integrity
  • PII redaction

Sandboxed Execution

Tools run with:

  • Limited filesystem access
  • Network restrictions
  • Resource limits

See Also

Clone this wiki locally