GitHub 上的新仓库 interplains/Zero-Breach-Toolkit，创建 3 天，已有 1769 星（平均每天 612 星）。 Free, open-source, offline checks for traces of known mercenary spyware. Works on Windows, macOS and Linux, Android phones and iPhone backups. 语言：Python

README：

Zero Breach Toolkit

A free, open-source check for traces of known mercenary spyware (Pegasus, Predator, Graphite, Candiru and others) on computers, Android phones and iPhone backups.

• Read-only. It does not modify source evidence or system settings. It writes only temporary database snapshots and the reports you ask for.
• No network requests during a scan. It never looks up spyware addresses and has no upload feature. Python network calls are blocked and redirected paths are refused. This is not an operating-system network sandbox; see PRIVACY.md.
• States its limits. Every report says what was found, how strong the evidence is, and what could not be checked. A clean result is never presented as proof that you are safe.

Made by archivegenocide. Built on Zero Breach.

If you think you are being targeted right now, get expert help first. You do not need to run this tool before asking. Journalists, activists, human-rights defenders and civil society can contact the Access Now Digital Security Helpline (free, 24/7, many languages) or Amnesty International's Security Lab.

---

Step-by-step guide (no technical experience needed)

You do not need a GitHub account or any technical knowledge. You need a Windows or Mac computer and about 20 minutes. Phones are checked by connecting them to the computer.

What do you want to check? This Windows computer · This Mac · An Android phone · An iPhone

Windows

Set up (only the first time)

1. Go to python.org/downloads and click the yellow Download Python button. Open the downloaded file.
2. On the first screen of the installer, tick "Add python.exe to PATH" at the bottom, then click Install Now. Wait until it says "Setup was successful".
3. On this page, click the green Code button near the top, then Download ZIP.
4. Open your Downloads folder, right-click Zero-Breach-Toolkit-main.zip and choose Extract All, then Extract.

Run the check

5. Close your web browsers and chat apps (Chrome, Edge, WhatsApp, Signal…).
6. Open the Zero-Breach-Toolkit-main folder (if there is another folder with the same name inside, open that one too), then the scan folder, and double-click run-scan.cmd. If Windows shows a warning, click Run (or More info, then Run anyway).
7. A menu appears. Type the number next to Update the indicator lists and press Enter, then type y and press Enter. When it finishes, press Enter.
8. Press Enter again to start This computer - standard check. It takes about 15 minutes.
9. Read the result at the end (see What the result means). A copy is saved in the findings folder inside Zero-Breach-Toolkit-main.

Mac

Set up (only the first time)

1. Go to python.org/downloads, click Download Python, open the downloaded file and follow the installer.
2. On this page, click the green Code button, then Download ZIP. It appears in your Downloads folder as Zero-Breach-Toolkit-main (if it is still a .zip file, double-click it).
3. Open System Settings → Privacy & Security → Full Disk Access, click +, choose Applications → Utilities → Terminal, and turn it on. Without this, macOS hides Safari's records from the check.

Run the check

4. Close your web browsers and chat apps.
5. Open Terminal (press Cmd+Space, type Terminal, press Enter). Copy this line, paste it into Terminal and press Enter:

   cd ~/Downloads/Zero-Breach-Toolkit-main && python3 -X utf8 scan/zero-breach-toolkit.py
   

6. A menu appears. Type the number next to Update the indicator lists and press Enter, then type y and press Enter. When it finishes, press Enter.
7. Press Enter again to start This computer - standard check. It takes about 15 minutes.
8. To keep a copy of the result, type 3 and press Enter, type report.txt and press Enter. It is saved in the Zero-Breach-Toolkit-main folder. Type 0 to finish.

On Linux, follow the Mac steps without step 3.

Android phone

First do the Set up steps for Windows or Mac above.

On the phone

1. Open Settings → About phone and tap Build number seven times, until it says you are a developer. (On Samsung: Settings → About phone → Software information → Build number.)
2. Go back to Settings, open Developer options (often under System) and turn on USB debugging.
3. Connect the phone to the computer with a USB cable that carries data (some cables only charge). Unlock the phone. When it asks Allow USB debugging?, tick Always allow and tap Allow.

On the computer

4. Start Zero Breach (Windows: double-click run-scan.cmd; Mac: step 5 of the Mac guide).

5. In the menu, type the number next to A phone and press Enter, then type 2 (Collect from an Android phone connected by USB now) and press Enter.

6. Press Enter to save the collection on your Desktop, then type YES and press Enter.

7. The collector asks a few questions. Use the arrow keys and Enter to answer:

   It asks	Choose
   Backup	Only SMS
   Download copies of apps	Only non-system packages
   Remove copies of apps signed with a trusted certificate	No
   Intrusion Logs	No
   Hash files	No
   Anything else	No

8. If the phone shows Back up my data, tap it (leave the password empty). Keep the phone unlocked until the collection finishes.

9. The check starts by itself and shows the result.

10. When you are done, turn USB debugging off again on the phone.

iPhone

First do the

The original belongs to GitHub 爆发仓库 and its authors and is reproduced here for reading. To have it removed, write to support@aisa.one.