Mobile Verification Toolkit
Mobile Verification Toolkit (MVT) is a collection of utilities to simplify and automate the process of gathering forensic traces helpful to identify a potential compromise of Android and iOS devices.
It has been developed and released by the Amnesty International Security Lab in July 2021 in the context of the Pegasus project along with a technical forensic methodology and forensic evidence.
Warning: MVT is a forensic research tool intended for technologists and investigators. Using it requires understanding the basics of forensic analysis and using command-line tools. This is not intended for end-user self-assessment. If you are concerned with the security of your device please seek expert assistance.
Installation
MVT can be installed from sources or conveniently using:
pip3 install mvt
You will need some dependencies, so please check the documentation.
Alternatively, you can decide to run MVT and all relevant tools through a Docker container.
Usage
MVT provides two commands mvt-ios and mvt-android with the following subcommands available:
mvt-ios:check-backup: Extract artifacts from an iTunes backupcheck-fs: Extract artifacts from a full filesystem dumpcheck-iocs: Compare stored JSON results to provided indicatorsdecrypt-backup: Decrypt an encrypted iTunes backupextract-key: Extract decryption key from an iTunes backup
mvt-android:check-backup: Check an Android Backupdownload-apks: Download all or non-safelisted installed APKs
Check out the documentation to see how to use them.
License
The purpose of MVT is to facilitate the consensual forensic analysis of devices of those who might be targets of sophisticated mobile spyware attacks, especially members of civil society and marginalized communities. We do not want MVT to enable privacy violations of non-consenting individuals. Therefore, the goal of this license is to prohibit the use of MVT (and any other software licensed the same) for the purpose of adversarial forensics.
In order to achieve this, MVT is released under an adaptation of Mozilla Public License v2.0. This modified license includes a new clause 3.0, "Consensual Use Restriction" which permits the use of the licensed software (and any "Larger Work" derived from it) exclusively with the explicit consent of the person/s whose data is being extracted and/or analysed ("Data Owner").
Release files for mvt 1.0.15
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| mvt-1.0.15.tar.gz | 45.5 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| mvt-1.0.15-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 208.8 kB
Release files / mvt-1.0.15.tar.gz
| Download URL | mvt-1.0.15.tar.gz |
|---|---|
| Size | 45.5 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
b33283a63e68024f49c20a18844fd3ea7eeb545517bf84690001a4d3b553f7bd
|
|
BLAKE2b-256 checksum How to use checksums |
e4ef63061619aa1275fa11d5f6ed9d211abd68e3c9aa9af581f631e9ed916ac2
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/3.4.2 importlib_metadata/4.6.1 pkginfo/1.7.1 requests/2.26.0 requests-toolbelt/0.9.1 tqdm/4.61.2 CPython/3.9.2
|
Release files / mvt-1.0.15-py3-none-any.whl
| Download URL | mvt-1.0.15-py3-none-any.whl |
|---|---|
| Size | 163.3 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
8b3ac1fc9f6a9bc3981e073bfbaa46c7e0e6a6ca6c8937ea5957e55cb6901642
|
|
BLAKE2b-256 checksum How to use checksums |
99d0f52c2a29ad1726b8705c5c261e3fb5413fb96f9d4aefd3ba0378ec6447fc
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/3.4.2 importlib_metadata/4.6.1 pkginfo/1.7.1 requests/2.26.0 requests-toolbelt/0.9.1 tqdm/4.61.2 CPython/3.9.2
|
