Skip to main content

Bugbane: Simplifying consensual Android forensics

UB4.132 | Day 2 | 09:25 - 09:50 | Speakers: Giulio B, Davide `thezero`

Bugbane: Simplifying consensual Android forensics
A picture of a devroom at FOSDEM 2024
Open in browser

Notes

Abstract

Bugbane is an open-source Android application that simplifies consensual forensics by building on Amnesty TechLab's Mobile Verification Toolkit (MVT). Bugbane makes MVT's capabilities accessible to everyone through a user-friendly interface, allowing users to self-test in just a few minutes without needing a second device. It also enables periodic data acquisitions, supporting the analysis of past acquisitions with updated IoCs in an "acquire-now, detect-later" workflow. Bugbane reliably extracts and decodes key artifacts like installed apps, backups, and system logs, and allows users users to export AndroidQF-compatible age-encrypted archives.

The goal is to expand access and usage, helping users and supporting organizations work more efficiently, and reaching a broader audience, including less-technical individuals and communities currently outside civil-society support. In the longer term, Bugbane aims to strengthen the collection of open threat intelligence that can be shared with researchers, analysts, and civil-society organizations.

  • https://github.com/osservatorionessuno/bugbane
  • https://osservatorionessuno.org/blog/2025/09/bugbane-simplifying-consensual-android-forensics/

Notice: The placeholder video image is licensed under CC BY-SA 4.0. The original image can be found hereChanges made to the image are: Cropped the image to a new ratio, part of the image was cut off.