christopher-hopper · June 3, 2025 04:03 · christopher-hopper · May 21, 2025
diff --git a/README.md b/README.md
diff --git a/cylance-stop.sh b/cylance-stop.sh
 #!/usr/bin/env bash
 # vim: ai ts=2 sw=2 et sts=2 ft=sh

 # Exit on error unless '|| true'.
 #set -o errexit
 # Exit on error inside subshells functions.
 set -o errtrace
 # Do not use undefined variables.
 set -o nounset
 # Catch errors in piped commands.
 set -o pipefail

 # Allow empty globs.
 shopt -s nullglob

 IFS=$' '

 main ()
 {
  local _cylaunchd
  local _cyplist
  local _cykext
  local _procname

  _procname="cylance"

  # List launchd cylance services running.
  for _cylaunchd in $(launchctl list | grep -i "$_procname" | tail -r | cut -f 3); do
    echo -e "--- Remove: ${_cylaunchd}" 1>&2
    sudo launchctl stop "$_cylaunchd" || true
    sudo launchctl remove "$_cylaunchd" || true
  done

  # List launchd cyclance plist files.
  for _cyplist in /Library/LaunchDaemons/*"$_procname"*; do
    echo -e "--- Unload: ${_cyplist}" 1>&2
    sudo launchctl unload "$_cyplist" || true
  done

  echo -e "--- Kill: CylanceSvc" 1>&2
  killall CylanceSvc

  # List kextstat cylance kernel extensions.
  for _cykext in $(kextstat | grep -i "$_procname" | tr -s ' ' | tail -r | cut -d ' ' -f 7); do
    echo -e "--- Unload: ${_cykext}" 1>&2
    sudo kextunload -v 3 -b "$_cykext" || true
  done
 }

 main
diff --git a/netskope-stop.sh b/netskope-stop.sh
 #!/usr/bin/env bash
 # vim: ai ts=2 sw=2 et sts=2 ft=sh

 # Exit on error unless '|| true'.
 #set -o errexit
 # Exit on error inside subshells functions.
 set -o errtrace
 # Do not use undefined variables.
 set -o nounset
 # Catch errors in piped commands.
 set -o pipefail

 # Allow empty globs.
 shopt -s nullglob

 # Separator for expansion.
 IFS=$' '

 # Globals
 # Set variables for current file, directory.
 __dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 __file="${__dir}/$(basename "${BASH_SOURCE[0]}")"
 __base="$(basename "${__file}" .sh)"
 __invocation="$(printf %q "${__file}")$( (($#)) && printf ' %q' "$@")"

 main ()
 {
  local __launchd
  local __daemons_plist
  local __agents_plist
  local __proc_name
  __proc_name="netskope"

  # List launchd services running.
  for __launchd in $(launchctl list | grep -i "$__proc_name" | tail -r | cut -f 3); do
    echo -e "--- Remove: ${__launchd}" 1>&2
    sudo launchctl stop "$__launchd" || true
    sudo launchctl remove "$__launchd" || true
  done

  # List root LaunchDaemons plist files.
  for __daemons_plist in /Library/LaunchDaemons/*"$__proc_name"*; do
    echo -e "--- Unload: ${__daemons_plist}" 1>&2
    sudo launchctl unload "$__daemons_plist" || true
  done

  # List user LaunchAgents plist files.
  for __agents_plist in /Library/LaunchAgents/*"$__proc_name"*; do
    echo -e "--- Unload: ${__agents_plist}" 1>&2
    launchctl unload "$__agents_plist" || true
  done

  for __pid_num in $(sudo ps aux | grep -i "$__proc_name" | grep -v "$__base" | grep -v "grep" | tr -s ' ' | cut -d' ' -f 2); do
    echo -e "--- Kill: $__proc_name [$__pid_num]" 1>&2
    sudo kill -9 "$__pid_num" || true
  done
 }

 main
diff --git a/zscaler-stop.sh b/zscaler-stop.sh
 #!/usr/bin/env bash
 # vim: ai ts=2 sw=2 et sts=2 ft=sh

 # Exit on error unless '|| true'.
 #set -o errexit
 # Exit on error inside subshells functions.
 set -o errtrace
 # Do not use undefined variables.
 set -o nounset
 # Catch errors in piped commands.
 set -o pipefail

 # Enable case-insensitive globbing
 shopt -s nocaseglob
 # Allow empty globs.
 shopt -s nullglob

 IFS=$' '

 # Globals.
 export Z_PROC="Zscaler"
 export Z_APP="/Applications/Zscaler/Zscaler.app"
 export Z_BIN="${Z_APP}/Contents/MacOS/Zscaler"

 ## Stop Zscaler
 #
 # This function prevents Zscaler from being executed or restarted by
 # changing the execute permissions of the Zscaler binary. It also
 # stops the Zscaler process if it is running.
 #
 stop ()
 {
  local _zslaunchd
  local _zsplist

  # Prevent Zscaler from being executed or restarted.
  echo -e "--- Disable: Zscaler app executable" 1>&2
  sudo chmod -vv a-x "${Z_BIN}"

  # List launchd zscaler services running.
  for _zslaunchd in $(launchctl list | grep -i "${Z_PROC}" | tail -r | cut -f 3); do
    echo -e "--- Remove: ${_zslaunchd}" 1>&2
    sudo launchctl stop "$_zslaunchd" || true
    sudo launchctl remove "$_zslaunchd" || true
  done

  # List launchd zscaler plugin plist files.
  for _zsplist in /Library/LaunchDaemons/*"${Z_PROC}"*; do
    # Skip non-existent files (nullglob).
    [[ -e "$_zsplist" ]] || continue
    echo -e "--- Unload: ${_zsplist}" 1>&2
    sudo launchctl unload "$_zsplist" 2>/dev/null || true
  done

  echo -e "--- Kill: Zscaler" 1>&2
  killall "${Z_PROC}" 2>/dev/null || true
 }

 ## Start Zscaler
 #
 # This function enables Zscaler to be executed or restarted by changing the
 # execute permissions of the Zscaler binary. It also restarts the Zscaler
 # process if it is running.
 #
 start ()
 {
  # Allow Zscaler to be executed or restarted.
  echo -e "--- Enable: Zscaler app executable" 1>&2
  sudo chmod -vv a+x "${Z_BIN}"

  echo -e "--- Restart: Zscaler app" 1>&2
  killall "${Z_PROC}" 2>/dev/null || true
  open -a "${Z_APP}" -g
 }

 ## Check Zscaler open network connections
 #
 # This function displays all open network connections used by Zscaler.
 #
 check ()
 {
  echo -e "--- Check: Zscaler open network connections" 1>&2
  sudo lsof +c0 -Pi -a -c "/${Z_PROC}/i"
  echo -e "" 1>&2

  echo -e "--- Check: Zscaler app binary" 1>&2
  if [[ -x "${Z_BIN}" ]]; then
    echo "ENABLED: ${Z_BIN}"
  else
    echo "DISABLED: ${Z_BIN}"
  fi
  echo -e "--- Check: end" 1>&2
  echo -e "" 1>&2
 }

 # Main entry point.
 #
 # This function is called with the arguments passed to the script.
 #
 # @param $@ The arguments passed to the script.
 #
 # @example
 #   ./zscaler-stop.sh stop
 #   ./zscaler-stop.sh start
 main ()
 {
  if [[ "${1:-stop}" = "stop" ]]; then
    check
    stop
  elif [[ "${1:-}" = "start" ]]; then
    start
  else
    check
    echo "Usage: $0 [stop|start]" 1>&2
    exit 1
  fi
 }

 main "$@"
	#!/usr/bin/env bash
	# vim: ai ts=2 sw=2 et sts=2 ft=sh

	# Exit on error unless '\|\| true'.
	#set -o errexit
	# Exit on error inside subshells functions.
	set -o errtrace
	# Do not use undefined variables.
	set -o nounset
	# Catch errors in piped commands.
	set -o pipefail

	# Allow empty globs.
	shopt -s nullglob

	IFS=$' '

	main ()
	{
	local _cylaunchd
	local _cyplist
	local _cykext
	local _procname

	_procname="cylance"

	# List launchd cylance services running.
	for _cylaunchd in $(launchctl list \| grep -i "$_procname" \| tail -r \| cut -f 3); do
	echo -e "--- Remove: ${_cylaunchd}" 1>&2
	sudo launchctl stop "$_cylaunchd" \|\| true
	sudo launchctl remove "$_cylaunchd" \|\| true
	done

	# List launchd cyclance plist files.
	for _cyplist in /Library/LaunchDaemons/"$_procname"; do
	echo -e "--- Unload: ${_cyplist}" 1>&2
	sudo launchctl unload "$_cyplist" \|\| true
	done

	echo -e "--- Kill: CylanceSvc" 1>&2
	killall CylanceSvc

	# List kextstat cylance kernel extensions.
	for _cykext in $(kextstat \| grep -i "$_procname" \| tr -s ' ' \| tail -r \| cut -d ' ' -f 7); do
	echo -e "--- Unload: ${_cykext}" 1>&2
	sudo kextunload -v 3 -b "$_cykext" \|\| true
	done
	}

	main