
iLEAPP
Parses iOS and iPadOS forensic extractions into HTML, TSV, timeline, KML, and LAVA reports with modular artifact discovery and encrypted iTunes…

Parses iOS and iPadOS forensic extractions into HTML, TSV, timeline, KML, and LAVA reports with modular artifact discovery and encrypted iTunes…

Radare2 and Frida better together.

QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.

Kernel module for volatile memory acquisition from Linux and Android devices, producing forensically sound captures to disk or over the network.

Android Logs Events And Protobuf Parser

Manage WhatsApp .crypt12, .crypt14 and .crypt15 files.

The goal of this repo is to archive artifacts from all versions of various OS's and categorizing them by type. This will help with artifact…

Cross-platform memory dumper using Frida to extract accessible memory from iOS, Android, and Windows applications for forensic analysis and…

Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux

Analyze, extract and visualize features, artifacts and IoCs of files and memory dumps (Windows, Linux, Android, iPhone, Blackberry, macOS binaries,…

Curated reference for Android forensic artifacts and log paths, with links to CTF writeups, research papers, and mobile device analysis tooling.

Encrypted peer-to-peer mesh VPN for remote mobile forensics, enabling wireless ADB and libimobiledevice acquisition, network monitoring, and…

Linux Distro for Mobile Security, Malware Analysis, and Forensics

GUI forensic tool for acquiring and analyzing Telegram data from Android devices. Parses messages, media, and metadata; generates integrity-verified…

Gallery Vault dump recovery tool with automated discovery, key derivation and automatic media restoration.

A robust digital forensics tool for extracting and analyzing Google Chrome artifacts from Android devices

Open source Android Forensics app and framework

Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsing history, and bookmarks