Open Source Android Forensics Toolkit download

Welcome to OSAF! The OSAF-Toolkit was developed, as a senior design project, by a group of IT students from the University of Cincinnati, wanting to pioneer and pave the way for standardization of Android malware analysis. The OSAF-Toolkit is built from Ubuntu 11.10 and pre-compiled with all of the tools needed to rip apart applications for code review and malware analysis. Our primary goal with the toolkit is to be able to make application analysis as easy as possible. We also wanted to create a community where security professionals, analysts, developers and newcommers can learn, discuss and share methodologies with one another.

Follow us on Twitter @OSAF_Community
Follow us on Facebook http://www.facebook.com/OpenSourceAndroidForensics

Features

Hello everyone, sorry for the hiatus. Our team has been busy acquiring new jobs and starting our careers post graduation. However, we will be maintaining the project and updating the toolkit as much as we possibly can. We plan on creating an x64 version of the toolkit and we may drop the x86 version and focus our time on a high performing toolkit. Keep a lookout for updates on our site. BTW you guys are awesome! We are almost at 1000 downloads so far. Thanks for your support!
UPDATE!!! OSAF-TK RC2 is now available for download.. Click the download button up top ^^^^^^^^^^^^^^
IMPORTANT NEWS !!! As of 03/31/12 , OSAF-TK RC2 is complete. We will upload as soon as we have access to faster internet. Thanks for everyone's support.. Check back soon to download the latest version!!
Thanks to viaForensics for allowing us to distribute their free Android forensics tools in OSAF-TK RC2. You guys rock!
OSAF-TK RC2 will be available in the next week or so!!! Keep a look out for the latest release!!
updated the android sdk to latest version, updated dex2jar to latest version, working on getting androguard to play nice with the sdk to view dynamic processes.. If anyone has any requests or tools to add to the toolkit feel free to comment under user reviews.
Making changes to OSAF-TK. adding native alias' to the .bashrc file under the root account.. this allows the users to quickly open up programs without cd'ing into directories.
READ Carefully: I am not promoting the tool that i am about to describe, however, it can be useful to people who want to analyze applications without using an actual device, but rather through an Android Virtual Device. Go to this link (http://codekiem.com/2012/02/24/apk-downloader/) and find out what this tool does...

Project Samples

JDgui to analyze java code. In the main service file, there is an sms blocker thread. This is the malicious code that steals sms messages.

database not present in zeusbot data directory, confirming that it stores sms in a volatile array before sending to remote server

wireshark capture of sent sms messages to remote server (softthrifty.com no longer active))

Zeusbot for Android stealing inbound sms, storing it in an array and sending it to remote server

APKinspector static analysis of zeusbot for android

Project Activity

See All Activity >

Follow Open Source Android Forensics Toolkit

Open Source Android Forensics Toolkit Web Site

Other Useful Business Software

Paessler: Easy to Use With Enterprise Power. Free Trial

A low-code dashboard makes monitoring intuitive for any admin, while scripting and custom sensors give experts full control.

You shouldn't have to choose between a monitoring tool that's easy to use and one that's powerful enough for a complex environment. PRTG's low-code interface lets any admin build dashboards, set alerts and monitor devices without scripting, while custom sensors and full API access are there when your team needs deeper control. One platform, no compromise. Download a free 30-day trial now.

Get Free Download

Rate This Project

User Ratings

5.0 out of 5 stars

★★★★★

★★★★

★★★

★★

★

ease 1 of 5 2 of 5 3 of 5 4 of 5 5 of 5 5 / 5

features 1 of 5 2 of 5 3 of 5 4 of 5 5 of 5 5 / 5

design 1 of 5 2 of 5 3 of 5 4 of 5 5 of 5 5 / 5

support 1 of 5 2 of 5 3 of 5 4 of 5 5 of 5 5 / 5

User Reviews

Filter Reviews:

All

toan3000 Posted 2013-07-31
5 out of 5 stars

osaftoolkit is awsome! let's make it even better!
marcophoenix Posted 2013-06-07
5 out of 5 stars

Osaftoolkit is perfect! Thanks.
osaf-tk Posted 2012-02-22
5 out of 5 stars

Sorry for not adding this earlier.. the password to the OSAF user when using the toolkit is "forensics" without the quotes

Additional Project Details

Operating Systems

Android, Linux

Intended Audience

Developers, Government, Information Technology, Security, Security Professionals

User Interface

Gnome

Database Environment

SQLite

Registered

2012-02-22

Similar Business Software

Shift

Shift is a fully customizable browser where you can drag and drop apps, bars, and controls to create a central hub that adapts to however you work. Integrate 1,500+ apps, swap instantly between Spaces for work, side hustles or personal browsing, and stay logged into multiple accounts at once....

See Software for Shift
Wave Browser

Wave Browser is an efficient, eco-conscious browser that creates a cleaner, more organized, and more meaningful online experience while helping remove ocean plastic through its partnership with 4ocean. Built on the trusted Chromium foundation, Wave Browser brings essential tools directly into...

See Software for Wave Browser
Kasm Workspaces

Kasm Workspaces streams your workplace environment directly to your web browser…on any device and from any location. Kasm uses our high-performance streaming and secure isolation technology to provide web-native Desktop as a Service (DaaS), application streaming, and secure/private web...

See Software for Kasm Workspaces
Secure Eraser

What is deleted from the hard drive is far from gone. As long as the data is not overwritten, anyone can make it visible again at any time. This is particularly problematic when a computer is resold or given away. Secure Eraser utilizes recognized methods for data deletion and overwrites...

See Software for Secure Eraser
Diplomat MFT by Coviant Software

Diplomat MFT by Coviant Software is a secure, reliable managed file transfer solution designed to simplify and automate SFTP, FTPS, and HTTPS file transfers. Built for seamless integration, Diplomat MFT works across major cloud storage platforms, including AWS S3, Azure Blob, Google Cloud,...

See Software for Diplomat MFT by Coviant Software
Google Compute Engine

Compute Engine is Google's infrastructure as a service (IaaS) platform for organizations to create and run cloud-based virtual machines. Computing infrastructure in predefined or custom machine sizes to accelerate your cloud transformation. General purpose (E2, N1, N2, N2D) machines provide a...

See Software for Google Compute Engine