Reiki is a spiritual, vibrational healing practice used to promote balance throughout the human system. Reiki does not involve physical manipulation or the ingestion or application of any substances, but works with the subtle vibrational field thought to surround and penetrate the body. Reiki is a method of stress reduction and relaxation that also promotes healing. The technique was developed in Japan and is administered by the laying on of hands. It is based on the idea that all living things have a special energy flowing through them called life energy. Id card maker software, free download for mac. Reiki is a Japanese technique for stress reduction and relaxation that also promotes healing. It is administered by 'laying on hands' and is based on the idea that an unseen 'life force energy' flows through us and is what causes us to be alive.
Malware and other applications may install persistent keyboard 'event taps' to intercept your keystrokes. ReiKey can scan, detect, and monitor for such taps!
compatibility: OS X 10.13+
current version: 1.4.2 (change log)
zip's sha-1: 02BE472FAD11187E3B95A57E9F369774E552B421
current version: 1.4.2 (change log)
zip's sha-1: 02BE472FAD11187E3B95A57E9F369774E552B421
Special mahalo to Jonathan Zdziarski for inspiring the creation of this tool! 🙏
The majority of macOS malware that contains keylogger logic (to capture keypresses) does so via CoreGraphics 'event taps.'
ReiKey was designed to detect such keyboard taps, alerting you anytime a new tap is installed. In other words its goal is generically detect (the most common type of) macOS keyloggers.
Note:
For details about macOS keyloggers and 'event taps' checkout the following:
To install ReiKey, first download the zip archive containing the installer application. Depending on your browser, you may need to manually unzip the application by double-clicking on the zipped archive.
Then, simply double-click on 'ReiKey Installer.app' and click 'Install' to install the tool:
Reiki Practitioner
The installer will then launch the main application which will display several informational and configuration screens:These screens will allow you to configure various aspects of ReiKey, such as how it starts, and whether or not it displays an icon in the status bar menu.
Note:
These preferences can be changed later, via the application's preference pane.
These preferences can be changed later, via the application's preference pane.
After these introductory screens, ReiKey is ready for use! You can either directly re-run application, or ReiKey.app access its capabilities via it's drop-down menu in the status menu bar:
ReiKey has two main capabilities: scanning for existing keyboard 'event taps', and alerting alerting whenever a new keyboard event tap is activated. Running the application (ReiKey.app), or clicking 'Scan..' in the application's status bar menu, will scan your system for existing keyboard 'event taps':
Note:
Various system components and system applications install keyboard 'event taps' (such as Siri), in order to filter and/or listen to keypresses for benign reasons.
This is normal, and does not mean Apple is spying on you!
Various system components and system applications install keyboard 'event taps' (such as Siri), in order to filter and/or listen to keypresses for benign reasons.
This is normal, and does not mean Apple is spying on you!
The scan window displays the following information:
- the process that installed the keyboard event tap
- the target of the event tap (which is normally global, for all processes)
- the type of keyboard event tap; either 'passive listener' or 'active filter'
Starting with version 1.2.0, 'command-click' on any item (event tap) in the scan window to display a context menu that provides the following capabilities:
- toggle alerts for the selected process
- reveal the selected process in Finder
ReiKey will provide continual protection against keyloggers (that attempt to capture keystrokes via CoreGraphics 'event taps.').
In a nutshell, ReiKey registers for the 'com.apple.coregraphics.eventTapAdded' (kCGNotifyEventTapAdded) notification, which is broadcast anytime a new (keyboard) 'event tap' is added to the system:
//register 'kCGNotifyEventTapAdded' notification notify_register_dispatch(kCGNotifyEventTapAdded, ¬ifyToken,
dispatch_get_global_queue(DISPATCH_QUEUE_PRIORITY_HIGH, 0), ^(int token){
//(re)enumerate event taps to detect new one(s)
});
dispatch_get_global_queue(DISPATCH_QUEUE_PRIORITY_HIGH, 0), ^(int token){
//(re)enumerate event taps to detect new one(s)
});
When it detects a new keyboard 'event tap', it will generate an alert, thru the macOS' notification center:
Clicking on the 'Details' button on the alert, will open the Scan window, with the newly installed keyboard 'event tap' highlighted.
ReiKey's preferences can be accessed either via the application's main menu, or via it's status bar menu:
The preferences pane allows you to configure various (self-explanatory) aspects of ReiKey:
By default, ReiKey will check to see if a new version of the application is available. To disable this feature, select the 'Disable Update Checks' button:
Commandline Interface
ReiKey can also be run via the commandline, to scan a system for any processes that have installed keyboard 'event tap'.
Execute the ReiKey binary (note: specify the full path to the ReiKey binary within its application bundle) with -h or -help to display information about the self-explanatory commandline options:
The -scan commandline flag will generate a (JSON) list of all active keyboard 'event taps' on a system: Reikey Macos
Note:
To capture the output from ReiKey, (as it writes to STDOUT), simply pipe it to a file out of your choice:
$ ./ReiKey.app/Contents/MacOS/ReiKey -scan > /path/to/some/file.json
To capture the output from ReiKey, (as it writes to STDOUT), simply pipe it to a file out of your choice:
$ ./ReiKey.app/Contents/MacOS/ReiKey -scan > /path/to/some/file.json
Riley Green
Reiki Definition
Q: Why does ReiKey show detect various Apple/macOS binaries?
A: If the 'Ignore Apple Programs' preference is not selected, various system components and system applications may generate alerts or show up in a scan. Not to fear! Apple components (e.g. Siri) sometimes install keyboard event taps in order to filter and/or listen to keypresses for benign reasons.
This is normal, and does not mean Apple is spying on you!
Q: Scan ReiKey detect all macOS keyloggers?
A: No. By design, ReiKey simply scans and alerts on programs that install CoreGraphics keyboard 'event taps.' While this is the most common technique (ab)used by macOS keyloggers, there are other techniques that malware may use to capture keystrokes.
Q: Why does ReiKey access the network?
A: When ReiKey is started, it connects to Objective-See.com to check if there is a new version of the product. Specifically, it reads the file products.json, which contains the latest version number of ReiKey. No user or product information is collected nor transmitted. Note that you can disable this automated update check via the application's preferences.
ReiKey also utilizes Sentry.io for crash detection which may generate network traffic related to (anonymized) error/crash reporting.
A: If the 'Ignore Apple Programs' preference is not selected, various system components and system applications may generate alerts or show up in a scan. Not to fear! Apple components (e.g. Siri) sometimes install keyboard event taps in order to filter and/or listen to keypresses for benign reasons.
This is normal, and does not mean Apple is spying on you!
Q: Scan ReiKey detect all macOS keyloggers?
A: No. By design, ReiKey simply scans and alerts on programs that install CoreGraphics keyboard 'event taps.' While this is the most common technique (ab)used by macOS keyloggers, there are other techniques that malware may use to capture keystrokes.
Q: Why does ReiKey access the network?
A: When ReiKey is started, it connects to Objective-See.com to check if there is a new version of the product. Specifically, it reads the file products.json, which contains the latest version number of ReiKey. No user or product information is collected nor transmitted. Note that you can disable this automated update check via the application's preferences.
ReiKey also utilizes Sentry.io for crash detection which may generate network traffic related to (anonymized) error/crash reporting.