Check file origin and cryptographic signing details from Finder with this macOS utility.
Dylib Hijack Scanner is a utility that scans a computer for applications that may be vulnerable to dylib hijacking.
About DHS
Dylib Hijack Scanner (DHS) is a utility from Objective-See that scans a macOS computer for applications that may be vulnerable to dylib hijacking or have already been hijacked. It supports macOS 11 and later, with version 1.6.0 available as of the source material. DHS is designed to prioritize reporting potential security risks over suppressing false negatives, which may result in legitimate dylibs being flagged as false positives. The tool provides guidance for reviewing flagged items, including a reference list of known false positives.
Key features
- Scans for applications vulnerable to dylib hijacking
- Detects already hijacked applications on macOS
- Optional full filesystem scan mode
- Weak hijacker detection option
- Saves scan results as JSON log files
- Includes known false positives reference list
Best for: macOS users seeking to identify applications vulnerable to or affected by dylib hijacking.
Good for
- Designed to minimize false negatives for security risks
- Provides actionable guidance for reviewing flagged items
- Includes reference list of known false positives
Watch out for
- May flag legitimate dylibs as potential threats
- No per-application patches available for detected vulnerabilities
- Only supports macOS 11 and later
DHS at a glance
- Category
- Privacy & Security › Desktop & OS Privacy
- Type
- Website
- Pricing
- Not confirmed. Check the site
- Platforms
- macOS, Web
- Open source
- Not stated
- Last checked
- Oct 6, 2026 · Online when checked
- Listed
- Oct 5, 2026
DHS alternatives
Tools and sites you could use instead, ranked by how closely they match.
View details about kernel modules loaded on macOS with KextViewr, a utility from Objective-See.
Qubes OS is a free, open-source operating system for personal computers that uses compartmentalization as a security approach.
Hear when a computer sends requests to Google with Googerteller, which provides audible feedback about browsing activity.
Open source
24 alternatives
Check which software is persistently installed on a Mac with KnockKnock, a tool for inspecting startup items.
Tunnelblick is free, open-source macOS software for controlling OpenVPN connections, with downloads and support information on its site.
Popular in Desktop & OS Privacy
Well-known listings from the same topic.
wBlockapps.apple.com/app/wblock/id6746388723uBO Lite Safariapps.apple.com/app/ublock-origin-lite/id674534…Stayapps.apple.com/app/stay-for-safari/id1591620171Lockdown Privacylockdownprivacy.comTor Browsertorproject.orgFirejailfirejail.wordpress.com
DHS FAQ
DHS found vulnerable applications, should I be worried?
No. These applications can only be abused by an attacker who has already compromised the computer.
Are patches available for the vulnerable applications DHS finds?
No per-application patches exist, as dylib hijacks abuse core macOS functionality. Future OS-level security features may mitigate the issue.
DHS found a hijacked application, what should I do?
First check if the flagged dylib is on the known false positives list. If not, submit it to VirusTotal, search its hash, or contact the developer for assistance.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.