Skip to content

v1.5.3

Choose a tag to compare

@safetylab safetylab released this 11 Aug 10:38

Download

Platform File
Windows (Intel/AMD) ShadowSecurityScanner-windows-amd64.exe
Windows (ARM) ShadowSecurityScanner-windows-arm64.exe
macOS (Apple Silicon) ShadowSecurityScanner-macos-arm64.dmg
Linux (Intel/AMD) ShadowSecurityScanner-linux-amd64
Linux (ARM) ShadowSecurityScanner-linux-arm64

No installation required — the desktop app is a single file.

What's in this release

The app now writes desktop.log next to its database, so if it fails to start
before the window appears it records why instead of closing silently.

Release builds switched to Wails' production configuration. Earlier downloads
were development builds and shipped developer tooling that end users never need;
the Windows binary is about 3 MB smaller as a result.

Built with Go 1.26.5.

Windows: the SmartScreen warning

These binaries are not code-signed. Windows attaches a "downloaded from the
internet" mark to the file and SmartScreen warns before running anything it has
no reputation for. The application is not modified in any way — this is what
Windows shows for any unsigned download.

To run it, click More info → Run anyway.

If nothing happens at all when you double-click, you are most likely signed in
as the built-in Administrator account. Windows cannot display the SmartScreen
dialog for that account and refuses the launch without showing anything. Clear
the mark and it will start:

Unblock-File -Path .\ShadowSecurityScanner-windows-amd64.exe

Some antivirus products also flag unsigned security tools heuristically. This
scanner contains thousands of CVE identifiers and references to public exploit
databases, which is exactly what it needs to do its job and exactly what
generic machine-learning detections react to.

macOS

The DMG is signed with a Developer ID and notarized by Apple, so it opens
normally with no Gatekeeper warning.

Linux

Mark the file executable before running it:

chmod +x ShadowSecurityScanner-linux-amd64
./ShadowSecurityScanner-linux-amd64

Requires GTK 4 and WebKitGTK 6.0.

Verifying your download (SHA-256)

a2eaefb078bd17409b8eddb5e0f1d7ab5f041b4d635a60d2fd9b0cf08829ca8f  ShadowSecurityScanner-windows-amd64.exe
a9c33d30417429e3ba21777aacbaf3715dc90d677b27f3b8b45fd9206573daaf  ShadowSecurityScanner-windows-arm64.exe
673b9a70d8e65e764fa00f485976f3bd8759d7248cbf2039af7fca971482bcc2  ShadowSecurityScanner-macos-arm64.dmg
93455f01d8a1612ed505f1ad64a04605ce82583ae87967a4af8492c69d657366  ShadowSecurityScanner-linux-amd64
5d7ba7216727fba5aaeddd5fcfc6be12865a699deff1c737f37129977f2b0237  ShadowSecurityScanner-linux-arm64

Windows: certutil -hashfile <file> SHA256
macOS / Linux: shasum -a 256 <file>