Skip to content
forked from den4uk/andriller

Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.

License

Notifications You must be signed in to change notification settings

Teicu/andriller

 
 

Repository files navigation

Andriller CE (Community Edition)

Build Status License PyPI Version

Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices. It has features, such as powerful Lockscreen cracking for Pattern, PIN code, or Password; custom decoders for Apps data from Android (some Apple iOS & Windows) databases for decoding communications. Extraction and decoders produce reports in HTML and Excel formats.

Features

  • Automated data extraction and decoding
  • Data extraction of non-rooted without devices by Android Backup (Android versions 4.x, varied/limited support)
  • Data extraction with root permissions: root ADB daemon, CWM recovery mode, or SU binary (Superuser/SuperSU)
  • Data parsing and decoding for Folder structure, Tarball files (from nanddroid backups), and Android Backup (backup.ab files)
  • Selection of individual database decoders for Android apps
  • Decryption of encrypted WhatsApp archived databases (.crypt to .crypt12, must have the right key file)
  • Lockscreen cracking for Pattern, PIN, Password (not gatekeeper)
  • Unpacking the Android backup files
  • Screen capture of a device's display screen

Python Requirements

  • 3.6+

System Dependencies

  • adb
  • python3-tk

Install from Terminal (Ubuntu/Debian based):

$ sudo apt-get install android-tools-adb python3-tk

Installation (from PYPI, recommended)

$ pip install andriller -U

Installation (from source, editable)

$ pip install -e .

Quick Start (run GUI)

$ python -m andriller

License

MIT License

About

Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages

  • Python 87.4%
  • HTML 12.6%