
andriller
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive…

📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive…

Curated reference for Android forensic artifacts and log paths, with links to CTF writeups, research papers, and mobile device analysis tooling.

Encrypted peer-to-peer mesh VPN for remote mobile forensics, enabling wireless ADB and libimobiledevice acquisition, network monitoring, and…

ELEGANTBOUNCER is a detection tool for file-based mobile exploits.

Extract WhatsApp private key from any non-rooted Android device (Android 7+ supported)

Bash script to extract data from a "chekcra1ned" iOS device

Tool for recovering and decrypting ES File Explorer encrypted files (.eslock)

A Android malware analysis tool that creates comprehensive runtime profiles by hooking into application behavior across cryptography, file systems,…

Extract a concerning amount of user information from Unisoc ZTE devices using CVE-2022-38694.

A robust digital forensics tool for extracting and analyzing Google Chrome artifacts from Android devices

Free, open-source, offline checks for traces of known mercenary spyware. Works on Windows, macOS and Linux, Android phones and iPhone backups.