Zero-Breach-Toolkit: Scan for Pegasus and other spyware traces offline
interplains/Zero-Breach-Toolkit
About the project
An open-source tool that checks for traces of known mercenary spyware such as Pegasus, Predator, Graphite, and Candiru for free. It supports Windows, macOS, and Linux desktops, as well as Android phones and iPhone backup files. It runs locally without a network connection and does not send data to external servers or look up addresses during scanning.
It operates in a read-only manner, without modifying system settings or original evidence. It only creates a temporary database snapshot and report files requested by the user. All reports specify findings, the strength of the evidence, and the scope that could not be inspected, designed to prevent 'clean' results from being misinterpreted as a guarantee of safety.
Unlike existing methods, inspection can be completed in approximately 20 minutes on a Windows or Mac computer without technical knowledge. Android is handled via USB connection, and iPhone via drag-and-drop of the local backup folder. If you suspect you are currently a target, we recommend seeking professional help first; this tool is positioned as a self-diagnostic tool for the stage prior to that.
interplains/Zero-Breach-Toolkit
Free, open-source, offline checks for traces of known mercenary spyware. Works on Windows, macOS and Linux, Android phones and iPhone backups.
Python
This introduction was generated automatically by AI. Check the original for the author's claims and context. Copyright belongs to the original author.
Our guide explains how the AI works. Report errors, attribution issues, or removal requests via Contact.