KextViewer icon

KextViewer

Free

KextViewer is a professional security utility that enables real-time detection, enumeration, and monitoring of all kernel extensions (KEXT) drivers loaded on a Mac system. It helps users promptly identify suspicious drivers and potential security threats, effectively enhancing the security of macOS.

KextViewr: macOS Kernel Extension Viewer Tool

Overview

KextViewr is a practical utility designed to view all loaded kernel modules (i.e., kexts) in the macOS system kernel. It offers a user-friendly graphical interface, eliminating the need for command-line operations, and allows you to intuitively understand the current state of your system kernel.

Features

📋 Comprehensive Information Display

  • Module Identification: Clearly distinguishes between Apple system kernel modules and third-party kernel modules.
  • Detailed Data: Displays the following information for each loaded kext:
    • Module name
    • Bundle identifier
    • Full path
    • Collection it belongs to
    • Address
    • Size
    • Architecture

🔎 Intelligent Filtering & Search

  • Quick Filtering: Use the "Filter Kexts" search box at the top to real-time filter modules by name, path, or other content.
  • Tag-Based Filtering:
    • #apple: Shows only Apple system modules.
    • #nonapple: Shows only non-Apple (third-party) modules.
  • One-click Hide System Modules: Uncheck "Show OS Kexts" to quickly focus on third-party loaded extensions.

💾 Data Export & Refresh

  • One-click Refresh: Reload and display the latest list of kernel modules at any time.
  • JSON Export: Export the current view results as a complete JSON file for later analysis or archival.

Advantages

🖥️ Visual User Experience

Compared to the system’s built-in kmutil command-line tool, KextViewr provides a more intuitive and user-friendly graphical interface, lowering the barrier to use.

🛠️ Optimized for Modern macOS

  • Fully supports macOS 11 (Big Sur) and later versions.
  • Adapts to modern macOS kernel features: kernel modules have transitioned from single-file format to being stored within kernel collections; KextViewr correctly parses and displays this information.

🔓 Open Source & Transparent

Provides complete source code and is fully open-source, ensuring transparency and trustworthiness of the tool.

System Requirements & Download

  • Supported OS: macOS 11.0 or later
  • Current Version: 2.0.0

(For use on older macOS versions, download version 1.1.0)

Usage Instructions

  1. Download the ZIP package from the official website.
  2. Extract it and double-click to run KextViewr.app.
  3. Upon launch, the tool automatically queries and lists all loaded kernel modules.

Notes & Disclaimer

  • Permission Limitation: Retrieving kernel module information requires the com.apple.private.kernel.get-kext-info permission, which is not available to third-party applications. Therefore, KextViewr indirectly achieves this functionality by invoking system tools.
  • View-Only Purpose: This tool is intended for viewing kernel module status only and does not provide management or uninstallation features.

With KextViewr, whether you're a developer debugging or a regular user wanting to understand your system kernel’s state, you can obtain the necessary information in a clearer and more convenient way.

All software data on this site is synchronized from the Awesome mac project. Copyright belongs to original authors.

Recommended Apps

KnockKnock icon

KnockKnock

KnockKnock is a macOS security tool designed to detect malware and suspicious launch items. By scanning persistent entries, it helps users gain a comprehensive understanding of system startup processes and effectively defend against potential security threats.

LinkLiar icon

LinkLiar

LinkLiar is a macOS tool specifically designed to protect network privacy by modifying and spoofing MAC addresses, preventing device tracking and deception detection within local networks. It enhances user anonymity and security while browsing, making it ideal for individuals and enterprises with high network privacy requirements.

LuLu icon

LuLu

LuLu is a free, open-source macOS firewall that monitors network connections in real time, blocks unauthorized outbound communication, and protects your system from malware and privacy breaches.

Murus icon

Murus

Murs is a firewall tool specifically designed for macOS, offering an intuitive graphical interface to precisely control application network access, monitor network traffic in real time, and enhance system security. It is ideal for users requiring detailed network management.

OverSight icon

OverSight

OverSight is a free macOS security tool that monitors camera and microphone usage in real time. It immediately alerts you when any application accesses the camera or microphone, helping protect your privacy from malicious software eavesdropping.

RansomWhere? icon

RansomWhere?

RansomWhere? is a ransomware protection tool specifically designed for macOS, detecting threats by monitoring file encryption activities in real-time. It employs a behavior-based, generic detection mechanism that does not rely on virus signature databases, enabling identification of unknown ransomware variants. Open-source and transparent, it consumes minimal system resources, offering instant alerts and user-controlled response options.