Skip to main content

Mobile Verification Toolkit

Project description

Mobile Verification Toolkit

Documentation Status CI Downloads

Mobile Verification Toolkit (MVT) is a collection of utilities to simplify and automate the process of gathering forensic traces helpful to identify a potential compromise of Android and iOS devices.

It has been developed and released by the Amnesty International Security Lab in July 2021 in the context of the Pegasus Project along with a technical forensic methodology. It continues to be maintained by Amnesty International and other contributors.

Note MVT is a forensic research tool intended for technologists and investigators. It requires understanding digital forensics and using command-line tools. This is not intended for end-user self-assessment. If you are concerned with the security of your device please seek reputable expert assistance.

Indicators of Compromise

MVT supports using public indicators of compromise (IOCs) to scan mobile devices for potential traces of targeting or infection by known spyware campaigns. This includes IOCs published by Amnesty International and other research groups.

Warning Public indicators of compromise are insufficient to determine that a device is "clean", and not targeted with a particular spyware tool. Reliance on public indicators alone can miss recent forensic traces and give a false sense of security.

Reliable and comprehensive digital forensic support and triage requires access to non-public indicators, research and threat intelligence.

Such support is available to civil society through Amnesty International's Security Lab or through our forensic partnership with Access Now’s Digital Security Helpline.

More information about using indicators of compromise with MVT is available in the documentation.

Installation

MVT can be installed from sources or from PyPI (you will need some dependencies, check the documentation):

pip3 install mvt

For alternative installation options and known issues, please refer to the documentation as well as GitHub Issues.

Usage

MVT provides two commands mvt-ios and mvt-android. Check out the documentation to learn how to use them!

License

The purpose of MVT is to facilitate the consensual forensic analysis of devices of those who might be targets of sophisticated mobile spyware attacks, especially members of civil society and marginalized communities. We do not want MVT to enable privacy violations of non-consenting individuals. In order to achieve this, MVT is released under its own license. Read more here.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

mvt-2.6.1.tar.gz (117.2 kB view details)

Uploaded Source

Built Distribution

mvt-2.6.1-py3-none-any.whl (212.9 kB view details)

Uploaded Python 3

File details

Details for the file mvt-2.6.1.tar.gz.

File metadata

  • Download URL: mvt-2.6.1.tar.gz
  • Upload date:
  • Size: 117.2 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.1.0 CPython/3.13.0

File hashes

Hashes for mvt-2.6.1.tar.gz
Algorithm Hash digest
SHA256 dc13033369048752f4a9d06d579c9748237871d51e91a0d1dc76abb0e47f0a92
MD5 844862cd096ba681825a9abbee5a9f25
BLAKE2b-256 de2232aad49d0f07702a0cef255304a21f54d9958cb1628f192cf7332e3e4af1

See more details on using hashes here.

File details

Details for the file mvt-2.6.1-py3-none-any.whl.

File metadata

  • Download URL: mvt-2.6.1-py3-none-any.whl
  • Upload date:
  • Size: 212.9 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.1.0 CPython/3.13.0

File hashes

Hashes for mvt-2.6.1-py3-none-any.whl
Algorithm Hash digest
SHA256 033a48c26376675442e697ed7c0333e0b61952700166b858f1e18cdac9aa192a
MD5 cabde0a6c8a60f9be30ece0d27a1c28b
BLAKE2b-256 91aa2946fe28c379263089b087323a7bad00d8da8839010c51f1d972017289d7

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page