RansomWhere? is a macOS utility that analyzes file entropy to identify encryption activity and detect untrusted processes creating encrypted files. It suspends suspect processes and alerts the user, who can allow or block them. It runs on macOS 10.15 and later.
An ArchWiki page describing how to securely wipe a disk by writing new data over every bit. It covers common uses such as wiping all data before a device is given away or sold, and preparing a drive for block device encryption using random data.
Dylib Hijack Scanner (DHS) is a macOS utility that scans a computer for applications susceptible to dylib hijacking or already hijacked. It supports macOS 11+ and favors reporting false positives over suppressing false negatives; scan options include full scan, weak hijacker detection and saving results as JSON.
Shufflecake is a Free/Libre and open-source Linux tool for creating multiple hidden encrypted volumes on a storage device, scrambled across existing storage space and indistinguishable from random noise when not decrypted. It aims to provide plausible deniability for hidden filesystems. The software is experimental and the project advises against relying on its security for important use.
LuLu is a free, open-source macOS firewall that blocks unknown outgoing network connections. It alerts users when a new or unauthorized outgoing connection is created, which may indicate a newly installed application or malware. Installation requires manual approval of its System Extension and Network Filter through macOS, and it runs from the status bar, starting automatically at login.
KnockKnock is a macOS application that lists persistently installed software to reveal malware that installs itself persistently. It enumerates known locations where persistent software may be installed. Signed Apple binaries are filtered out by default, and legitimate third-party software is also displayed. It requires macOS 10.15 or later and can optionally use a VirusTotal API key.
Tunnelblick is free, open-source software for controlling OpenVPN VPNs on macOS. It is distributed as a ready-to-use application bundling the necessary binaries and drivers, including OpenVPN, easy-rsa, and tun/tap drivers; users add their own OpenVPN configuration and need access to a VPN server. It is licensed under the GNU General Public License, version 2.
Community notes
Be the first to share how this project worked for you.
Sign in with a verified account to leave a review or join the discussion.
Sign in to reviewKeep exploring
An ArchWiki page describing how to securely wipe a disk by writing new data over every bit. It covers common uses such as wiping all data before a device is given away or sold, and preparing a drive for block device encryption using random data.
Dylib Hijack Scanner (DHS) is a macOS utility that scans a computer for applications susceptible to dylib hijacking or already hijacked. It supports macOS 11+ and favors reporting false positives over suppressing false negatives; scan options include full scan, weak hijacker detection and saving results as JSON.
Shufflecake is a Free/Libre and open-source Linux tool for creating multiple hidden encrypted volumes on a storage device, scrambled across existing storage space and indistinguishable from random noise when not decrypted. It aims to provide plausible deniability for hidden filesystems. The software is experimental and the project advises against relying on its security for important use.
LuLu is a free, open-source macOS firewall that blocks unknown outgoing network connections. It alerts users when a new or unauthorized outgoing connection is created, which may indicate a newly installed application or malware. Installation requires manual approval of its System Extension and Network Filter through macOS, and it runs from the status bar, starting automatically at login.
KnockKnock is a macOS application that lists persistently installed software to reveal malware that installs itself persistently. It enumerates known locations where persistent software may be installed. Signed Apple binaries are filtered out by default, and legitimate third-party software is also displayed. It requires macOS 10.15 or later and can optionally use a VirusTotal API key.
Tunnelblick is free, open-source software for controlling OpenVPN VPNs on macOS. It is distributed as a ready-to-use application bundling the necessary binaries and drivers, including OpenVPN, easy-rsa, and tun/tap drivers; users add their own OpenVPN configuration and need access to a VPN server. It is licensed under the GNU General Public License, version 2.
