android-forensics 话题在 GitHub 上没有填写简介，这里按 Star 数汇总最相关的热门仓库。
LockKnife: The Ultimate Android Security Research Tool. A unified TUI workspace and headless CLI for deep Android security research, built for researchers and hackers. Powered by Python orchestration and a Rust-accelerated core, enabling AI agent–driven hacking, credential recovery/cracking, APK analysis, intelligence gathering, runtime inspection.
Open-source desktop workbench for digital forensic analysis. Inspect ZIP/TAR/7z/UFDR archives, raw disk images/EWF, and iTunes/Android backups. Parse and view ABX, SQLite, SEGB, (B)PLIST, REALM, Protobuf, MMKV, Logs, hex, JSON, XML, images, audio/video, PDF, and more — all in one GUI.
Parse XML output from SMS Backup & Restore Android app
Forensic extraction for WhatsApp, Signal, and Telegram — 8-layer SQLite recovery, anti-forensics detection, court-ready reports.
Unified digital forensics platform bringing disk, RAM, container drift, logical acquisition, and backup analysis together for Windows, Linux, Docker, Android, and iOS.
Tool for recovering and decrypting ES File Explorer encrypted files (.eslock)
Forensic analysis of disk images, smartphone extractions (iPhone, Android) and drone flight logs, with an optional local, offline AI assistant. Sleuth Kit, plaso, libyal, iLEAPP/ALEAPP. Windows, Mac, Linux.
Dump's Victim Android Device Entirely to AWS Server. Backend Made in Spring boot. (Educational Purpose only)
Django-WebADB - ADB in browser but more powerful with Django 5, also can do some acquisition task and more
LEXIS — from raw extraction to complete analysis and portable-ready case. Multi-device Android & iOS forensics powered by the LEAPPs.
Useful tools for (not only) digital forensics
A comprehensive Model Context Protocol (MCP) server for Android device forensic data acquisition using Android Debug Bridge (ADB).
该项目在 GitHub 上没有填写描述
Evidence-preserving digital forensics primitives and composable workflows for analysts, automation systems, and autonomous agents.
Android Recovery 是一个只读命令行工具，用于通过 ADB 从非 root Android 设备获取可恢复的回收站项目并提取已删除媒体。它以 Android 的 shell 账户运行，仅写入主机计算机，不使用 root 或 UI 自动化。
Advanced Android Security, Threat Hunting & Digital Forensics Framework for authorized device auditing, APK analysis, YARA scanning, evidence-based threat assessment, and mobile DFIR.
Three mobile forensics examinations: iOS full filesystem analysis (Cellebrite), legacy mobile device artifact recovery (Autopsy/FTK), and Android APK static & dynamic analysis (JADX/PCAPdroid).
Android mobile forensic investigation project analyzing call logs, SMS, browser history, and device artifacts using standard digital forensic methodology. IFSO-oriented academic project.
Advanced Android digital forensics lab for acquisition planning, anti-forensics evaluation, memory triage, evidence integrity, and research-aligned casework.
For dissertation.