What's new in KnockKnock 2.5.0
Oct 1, 2023
- New Plugin: Dock Tile Plugins
New in KnockKnock 2.4.2 (Jul 9, 2023)
- Error reporting (via Sentry.io), removed.
- Reasoning: Error reporting made the build process more involved, introduced external dependencies, and was causing crashes on older versions of macOS. Plus, though anonymized/sanitized, error reports, raised some GDPR concerns.
New in KnockKnock 2.4.1 (Jul 6, 2023)
- Improved Background Task Management (BTM) plugin (#22 )
New in KnockKnock 2.4.0 (Jun 27, 2023)
- New Plugin: Background Task Management (BTM) items (#21)
New in KnockKnock 2.3.0 (Mar 5, 2021)
- Added plugin: system extensions
New in KnockKnock 2.2.1 (Feb 28, 2021)
- Icon++
- Improved Big Sur compatibility
New in KnockKnock 2.2.0 (Feb 26, 2021)
- Native support for M1
- Improved Big Sur compatibility
- Improved plugin: browser extensions (Safari, via pluginkit)
New in KnockKnock 2.1.1 (Jan 6, 2020)
- Cmd+h now hides app
- Additional error checking in user enumeration(s)
New in KnockKnock 2.1.0 (Nov 21, 2019)
- added 'save' icon to main window
- added plugin: quicklook plugins (@theevilbit)
- added plugin: directory services plugins (@CodeColorist)
- improved Catalina compatability (request for full disk access)
New in KnockKnock 2.0.5 (Jan 31, 2019)
- Improved (automatic) update check
New in KnockKnock 2.0.4 (Jan 31, 2019)
- Escape characters (n, etc) for JSON output
New in KnockKnock 2.0.3 (Jan 31, 2019)
New in KnockKnock 2.0.2 (Dec 20, 2018)
- Notarized (by Apple)
- No icon shown when run w/ cmdline options
- 'Check for Updates' added to main app menu
New in KnockKnock 2.0.1 (Dec 20, 2018)
- Integrated version checking
- Improved parsing of JSON output
- Restored compatibility with OSX 10.10 & before
New in KnockKnock 2.0.0 (Dec 20, 2018)
- View contents of property lists directly in app
- Improved whitelisting (via path + code signing cert)
- Integrated Senty.io error reporting
- Improved mojave support:
- Privacy checks
- Dark mode support
- Command line interface (-h for options):
- Outputs JSON to stdout
- Run as root (scan all users)
New in KnockKnock 1.9.3 (Mar 30, 2018)
- improved plugin: library inserts (logic bug/memory usage)
- improved plugin: browser extensions (support for newer versions of Chrome)
- minor UI fixes
New in KnockKnock 1.9.2 (Mar 26, 2018)
- added plugin: event monitor actions
- Fixed auto-layout issues on older versions of macOS
New in KnockKnock 1.9.1 (Mar 23, 2018)
- Improved parsing of launch item plists
- key search now case insensitive (credit: @i0n1c)
- type of 'Program' label now checked (credit: @i0n1c)
New in KnockKnock 1.9.0 (Jul 25, 2016)
- Added plugin: extensions and widgets (Finder Syncs, etc)
New in KnockKnock 1.8.0 (Jun 7, 2016)
- Improved UI to show if persistent binaries are packed or 'OS X'-encrypted
- Launch Daemon/Agent plugin extended to lists items with 'StartInterval'/'StartCalendarInterval' keys
- Launch Daemon/Agent improved to use 'Program' key (over 'ProgramArguments') when both are present
- Compliled in latest mach-O parser (bug fixes, etc)
- Signing authorities now ignored if code signing checks fail
- Updated hashes & whitelisting for OS X 10.11.5
New in KnockKnock 1.7.1 (Mar 29, 2016)
- Fixed bug when processing VirusTotal results in plugins that enumerate files & commands
New in KnockKnock 1.7.0 (Mar 28, 2016)
- Added plugin: period scripts
- Added plugin: OS startup scripts (/etc/rc*, etc)
- Improved browser extension plugin for newer versions of Firefox & Safari
- Improved login/out hook plugin as payload can be file *or* command
- Improved code signing checks (flags: kSecCSCheckNestedCode|kSecCSStrictValidate)
- Updated whitelist for El Capitan
- UI fixes, such as file name extraction (via Info.plist when possible, etc.
New in KnockKnock 1.6.1 (Oct 9, 2015)
- updated crontab plugin, so it would ignore commented out jobs
New in KnockKnock 1.6.0 (Oct 6, 2015)
- made application fully resizable
- improved 'inserted dylibs' plugin (now checks for __XPC_DYLD_INSERT_LIBRARIES)
- added self verification check so malicious modifications (e.g. whitelists) may be detected
- updated whitelist hashes for El Capitan
- fixed bug where VirusTotal timeout could trigger crash
New in KnockKnock 1.5.0 (Aug 21, 2015)
- added Cron Job plugin
- added Login/Logout Hook plugin
- improved Launch Daemon/Agent plugin (now includes items with'OnDemand' set to False)
- apple-signed binaries now shown with green 'signed' icon
- fixed issue with copy & paste (via NSApplicationKeyEvents subclass)
- updated whitelist to include various Apple binaries (kexts)
- when saving results, user can now specify name and location of output
- network availability now checked before trying to connect to VirusTotal
- other minor UI tweaks/improvement (e.g. fixed text color issue in unselected rows, etc.)
- extra error checking to improve stability
New in KnockKnock 1.3.1 (May 19, 2015)
- made preferences persistence
- fixed logic bug where re-scans might hang
- added extra error checking in launch item plugin
New in KnockKnock 1.3.0 (May 15, 2015)
- added ability to enumerate login items, installed by sandboxed apps
- improved vertical scrollbars, so they'd always be rendered in 'modern' style
- other minor UI tweaks (e.g. pref window clipping)
New in KnockKnock 1.2.4 (May 5, 2015)
- added timeout to injected dylib scanning plugin
- improvided logic for making windows modal (e.g. window checks)
New in KnockKnock 1.2.3 (May 1, 2015)
- improved VirusTotal logic (e.g. when an signed OS file was flagged) tweaked UI to be more compatible with OS X 10.9
New in KnockKnock 1.2.2 (Apr 30, 2015)
- browser extensions plugin now supports enumerating extensions in older versions of Safari
- improved JSON output & fixed bug when saving JSON when file hash or signature was nil
- recompiled with updated/improved (shared) MachO parser
- fixed issue where on multiple scans, result popup was not properly updated
- improved UI to display item's plist (when applicable) into the item's row
- listed items in item table are now selectable
New in KnockKnock 1.2.1 (Apr 28, 2015)
- Improved DYLD_INSERT_LIBRARIES plugin to report path to applications' Info.plist as string (instead of URL)
- Fixed issue in DYLD_INSERT_LIBRARIES plugin, where NSInvalidArgumentException would result if enviro var was string