
iCloudKitExtractor
Experimental .NET/WPF forensic toolkit for iCloud auth, CloudKit/MMCS backup download, and Octagon/PCS recovery (ADP, Recovery Key, Lockdown Mode).…

Experimental .NET/WPF forensic toolkit for iCloud auth, CloudKit/MMCS backup download, and Octagon/PCS recovery (ADP, Recovery Key, Lockdown Mode).…

A Android malware analysis tool that creates comprehensive runtime profiles by hooking into application behavior across cryptography, file systems,…

Extracts decrypted IPA files from jailbroken iOS devices using Frida for reverse engineering, security analysis, and mobile app pentesting.

Digital forensics engine that parses logs, files, and system artifacts to build super timelines, enabling chronological event correlation for…

Collaborative forensic timeline analysis platform for ingesting, searching, and annotating event logs to support incident response and DFIR…

Forensic collection and analysis toolkit for Android and iOS devices to identify potential compromise by known spyware using public and private…

QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.

ELEGANTBOUNCER is a detection tool for file-based mobile exploits.

Android Connections Forensics

Tool for recovering and decrypting ES File Explorer encrypted files (.eslock)

This is the development tree. Production downloads are at:



Extract a concerning amount of user information from Unisoc ZTE devices using CVE-2022-38694.

Scan for evidence of CVE-2021-30860 (FORCEDENTRY) exploit

privacy-first, open-source and free idevice management tool written in Rust and Qt

Gallery Vault dump recovery tool with automated discovery, key derivation and automatic media restoration.

Automated mobile application security testing framework for Android, iOS, and Windows. Performs static and dynamic analysis, malware detection, and…