
Santoku-Linux
Linux Distro for Mobile Security, Malware Analysis, and Forensics

Linux Distro for Mobile Security, Malware Analysis, and Forensics

This is the development tree. Production downloads are at:

Forensic collection and analysis toolkit for Android and iOS devices to identify potential compromise by known spyware using public and private…

Collaborative forensic timeline analysis platform for ingesting, searching, and annotating event logs to support incident response and DFIR…

Kernel module for volatile memory acquisition from Linux and Android devices, producing forensically sound captures to disk or over the network.

iOS Airborne vulnerabilities log artifact extractor from LogArchive CVE-2025-24252

Digital forensics engine that parses logs, files, and system artifacts to build super timelines, enabling chronological event correlation for…

Command-line and GUI tool for decompiling Android Dex and APK files into readable Java source code, with resource decoding, deobfuscation, and Smali…

Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law…

Android Logs Events And Protobuf Parser

Collection of forensic tools

Cellebrite Physical Analyzer python scripts to aid analysts with extended functionality

Frida-powered runtime mobile exploration toolkit for assessing iOS and Android app security. Bypass SSL pinning, dump keychains, manipulate heap…

Rule-based static and dynamic analysis tool that identifies capabilities in PE, ELF, .NET, and shellcode files, mapping them to MITRE ATT&CK…

QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.

Graphical forensic toolkit for parsing, decrypting, and extracting WhatsApp data from Android and iOS devices, including Google Drive and iCloud…

Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime