1 2<!doctype html> 3<html lang="en" class="no-js"> 4 <head> 5 6 <meta charset="utf-8"> 7 <meta name="viewport" content="width=device-width,initial-scale=1"> 8 9 <meta name="description" content="Mobile Verification Toolkit Documentation"> 10 11 12 13 14 15 <link rel="next" href="introduction/"> 16 17 18 19 20 21 <link rel="icon" href="assets/images/favicon.png"> 22 <meta name="generator" content="mkdocs-1.6.1, mkdocs-material-9.7.7"> 23 24 25 26 <title>Mobile Verification Toolkit</title> 27 28 29 30 <link rel="stylesheet" href="assets/stylesheets/main.ec1eaa64.min.css"> 31 32 33 34 35 36 37 38 39 40 41 42 43 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin> 44 <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto:300,300i,400,400i,700,700i%7CRoboto+Mono:400,400i,700,700i&display=fallback"> 45 <style>:root{--md-text-font:"Roboto";--md-code-font:"Roboto Mono"}</style> 46 47 48 49 <link rel="stylesheet" href="assets/_mkdocstrings.css"> 50 51
51<script>__md_scope=new URL(".",location),__md_hash=e=>[...e].reduce(((e,_)=>(e<<5)-e+_.charCodeAt(0)),0),__md_get=(e,_=localStorage,t=__md_scope)=>JSON.parse(_.getItem(t.pathname+"."+e)),__md_set=(e,_,t=localStorage,a=__md_scope)=>{try{t.setItem(a.pathname+"."+e,JSON.stringify(_))}catch(e){}}</script>
51 52 53 54 55 56 57
57<script async type="text/javascript" src="/_/static/javascript/readthedocs-addons.js"></script>
57<meta name="readthedocs-project-slug" content="mvt" /><meta name="readthedocs-version-slug" content="latest" /><meta name="readthedocs-resolver-filename" content="/" /><meta name="readthedocs-http-status" content="200" /></head> 58 59 60 <body dir="ltr"> 61 62 63 <input class="md-toggle" data-md-toggle="drawer" type="checkbox" id="__drawer" autocomplete="off"> 64 <input class="md-toggle" data-md-toggle="search" type="checkbox" id="__search" autocomplete="off"> 65 <label class="md-overlay" for="__drawer"></label> 66 <div data-md-component="skip"> 67 68 69 <a href="#mobile-verification-toolkit" class="md-skip"> 70 Skip to content 71 </a> 72 73 </div> 74 <div data-md-component="announce"> 75 76 </div> 77 78 79 80 81 82 83<header class="md-header md-header--shadow" data-md-component="header"> 84 <nav class="md-header__inner md-grid" aria-label="Header"> 85 <a href="." title="Mobile Verification Toolkit" class="md-header__button md-logo" aria-label="Mobile Verification Toolkit" data-md-component="logo"> 86 87 88 <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 8a3 3 0 0 0 3-3 3 3 0 0 0-3-3 3 3 0 0 0-3 3 3 3 0 0 0 3 3m0 3.54C9.64 9.35 6.5 8 3 8v11c3.5 0 6.64 1.35 9 3.54 2.36-2.19 5.5-3.54 9-3.54V8c-3.5 0-6.64 1.35-9 3.54"/></svg> 89 90 </a> 91 <label class="md-header__button md-icon" for="__drawer"> 92 93 <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M3 6h18v2H3zm0 5h18v2H3zm0 5h18v2H3z"/></svg> 94 </label> 95 <div class="md-header__title" data-md-component="header-title"> 96 <div class="md-header__ellipsis"> 97 <div class="md-header__topic"> 98 <span class="md-ellipsis"> 99 Mobile Verification Toolkit 100 </span> 101 </div> 102 <div class="md-header__topic" data-md-component="header-topic"> 103 <span class="md-ellipsis"> 104 105 Welcome 106 107 </span> 108 </div> 109 </div> 110 </div> 111 112 113
113<script>var palette=__md_get("__palette");if(palette&&palette.color){if("(prefers-color-scheme)"===palette.color.media){var media=matchMedia("(prefers-color-scheme: light)"),input=document.querySelector(media.matches?"[data-md-color-media='(prefers-color-scheme: light)']":"[data-md-color-media='(prefers-color-scheme: dark)']");palette.color.media=input.getAttribute("data-md-color-media"),palette.color.scheme=input.getAttribute("data-md-color-scheme"),palette.color.primary=input.getAttribute("data-md-color-primary"),palette.color.accent=input.getAttribute("data-md-color-accent")}for(var[key,value]of Object.entries(palette.color))document.body.setAttribute("data-md-color-"+key,value)}</script>
113 114 115 116 117 118 119 <label class="md-header__button md-icon" for="__search"> 120 121 <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M9.5 3A6.5 6.5 0 0 1 16 9.5c0 1.61-.59 3.09-1.56 4.23l.27.27h.79l5 5-1.5 1.5-5-5v-.79l-.27-.27A6.52 6.52 0 0 1 9.5 16 6.5 6.5 0 0 1 3 9.5 6.5 6.5 0 0 1 9.5 3m0 2C7 5 5 7 5 9.5S7 14 9.5 14 14 12 14 9.5 12 5 9.5 5"/></svg> 122 </label> 123 <div class="md-search" data-md-component="search" role="dialog"> 124 <label class="md-search__overlay" for="__search"></label> 125 <div class="md-search__inner" role="search"> 126 <form class="md-search__form" name="search"> 127 <input type="text" class="md-search__input" name="query" aria-label="Search" placeholder="Search" autocapitalize="off" autocorrect="off" autocomplete="off" spellcheck="false" data-md-component="search-query" required> 128 <label class="md-search__icon md-icon" for="__search"> 129 130 <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M9.5 3A6.5 6.5 0 0 1 16 9.5c0 1.61-.59 3.09-1.56 4.23l.27.27h.79l5 5-1.5 1.5-5-5v-.79l-.27-.27A6.52 6.52 0 0 1 9.5 16 6.5 6.5 0 0 1 3 9.5 6.5 6.5 0 0 1 9.5 3m0 2C7 5 5 7 5 9.5S7 14 9.5 14 14 12 14 9.5 12 5 9.5 5"/></svg> 131 132 <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M20 11v2H8l5.5 5.5-1.42 1.42L4.16 12l7.92-7.92L13.5 5.5 8 11z"/></svg> 133 </label> 134 <nav class="md-search__options" aria-label="Search"> 135 136 <button type="reset" class="md-search__icon md-icon" title="Clear" aria-label="Clear" tabindex="-1"> 137 138 <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M19 6.41 17.59 5 12 10.59 6.41 5 5 6.41 10.59 12 5 17.59 6.41 19 12 13.41 17.59 19 19 17.59 13.41 12z"/></svg> 139 </button> 140 </nav> 141 142 </form> 143 <div class="md-search__output"> 144 <div class="md-search__scrollwrap" tabindex="0" data-md-scrollfix> 145 <div class="md-search-result" data-md-component="search-result"> 146 <div class="md-search-result__meta"> 147 Initializing search 148 </div> 149 <ol class="md-search-result__list" role="presentation"></ol> 150 </div> 151 </div> 152 </div> 153 </div> 154</div> 155 156 157 158 <div class="md-header__source"> 159 <a href="https://github.com/mvt-project/mvt" title="Go to repository" class="md-source" data-md-component="source"> 160 <div class="md-source__icon md-icon"> 161 162 <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"><!--! Font Awesome Free 7.1.0 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) Copyright 2025 Fonticons, Inc.--><path d="M439.6 236.1 244 40.5c-5.4-5.5-12.8-8.5-20.4-8.5s-15 3-20.4 8.4L162.5 81l51.5 51.5c27.1-9.1 52.7 16.8 43.4 43.7l49.7 49.7c34.2-11.8 61.2 31 35.5 56.7-26.5 26.5-70.2-2.9-56-37.3L240.3 199v121.9c25.3 12.5 22.3 41.8 9.1 55-6.4 6.4-15.2 10.1-24.3 10.1s-17.8-3.6-24.3-10.1c-17.6-17.6-11.1-46.9 11.2-56v-123c-20.8-8.5-24.6-30.7-18.6-45L142.6 101 8.5 235.1C3 240.6 0 247.9 0 255.5s3 15 8.5 20.4l195.6 195.7c5.4 5.4 12.7 8.4 20.4 8.4s15-3 20.4-8.4l194.7-194.7c5.4-5.4 8.4-12.8 8.4-20.4s-3-15-8.4-20.4"/></svg> 163 </div> 164 <div class="md-source__repository"> 165 GitHub 166 </div> 167</a> 168 </div> 169 170 </nav> 171 172</header> 173 174 <div class="md-container" data-md-component="container"> 175 176 177 178 179 180 181 <main class="md-main" data-md-component="main"> 182 <div class="md-main__inner md-grid"> 183 184 185 186 <div class="md-sidebar md-sidebar--primary" data-md-component="sidebar" data-md-type="navigation" > 187 <div class="md-sidebar__scrollwrap"> 188 <div class="md-sidebar__inner"> 189 190 191 192 193<nav class="md-nav md-nav--primary" aria-label="Navigation" data-md-level="0"> 194 <label class="md-nav__title" for="__drawer"> 195 <a href="." title="Mobile Verification Toolkit" class="md-nav__button md-logo" aria-label="Mobile Verification Toolkit" data-md-component="logo"> 196 197 198 <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">
198<path d="M12 8a3 3 0 0 0 3-3 3 3 0 0 0-3-3 3 3 0 0 0-3 3 3 3 0 0 0 3 3m0 3.54C9.64 9.35 6.5 8 3 8v11c3.5 0 6.64 1.35 9 3.54 2.36-2.19 5.5-3.54 9-3.54V8c-3.5 0-6.64 1.35-9 3.54"/></svg> 199 200 </a> 201 Mobile Verification Toolkit 202 </label> 203 204 <div class="md-nav__source"> 205 <a href="https://github.com/mvt-project/mvt" title="Go to repository" class="md-source" data-md-component="source"> 206 <div class="md-source__icon md-icon"> 207 208 <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"><!--! Font Awesome Free 7.1.0 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) Copyright 2025 Fonticons, Inc.--><path d="M439.6 236.1 244 40.5c-5.4-5.5-12.8-8.5-20.4-8.5s-15 3-20.4 8.4L162.5 81l51.5 51.5c27.1-9.1 52.7 16.8 43.4 43.7l49.7 49.7c34.2-11.8 61.2 31 35.5 56.7-26.5 26.5-70.2-2.9-56-37.3L240.3 199v121.9c25.3 12.5 22.3 41.8 9.1 55-6.4 6.4-15.2 10.1-24.3 10.1s-17.8-3.6-24.3-10.1c-17.6-17.6-11.1-46.9 11.2-56v-123c-20.8-8.5-24.6-30.7-18.6-45L142.6 101 8.5 235.1C3 240.6 0 247.9 0 255.5s3 15 8.5 20.4l195.6 195.7c5.4 5.4 12.7 8.4 20.4 8.4s15-3 20.4-8.4l194.7-194.7c5.4-5.4 8.4-12.8 8.4-20.4s-3-15-8.4-20.4"/></svg> 209 </div> 210 <div class="md-source__repository"> 211 GitHub 212 </div> 213</a> 214 </div> 215 216 <ul class="md-nav__list" data-md-scrollfix> 217 218 219 220 221 222 223 224 225 226 <li class="md-nav__item md-nav__item--active"> 227 228 <input class="md-nav__toggle md-toggle" type="checkbox" id="__toc"> 229 230 231 232 233 234 <label class="md-nav__link md-nav__link--active" for="__toc"> 235 236 237 238 <span class="md-ellipsis"> 239 240 241 Welcome 242 243 244 245 </span> 246 247 248 249 <span class="md-nav__icon md-icon"></span> 250 </label> 251 252 <a href="." class="md-nav__link md-nav__link--active"> 253 254 255 256 <span class="md-ellipsis"> 257 258 259 Welcome 260 261 262 263 </span> 264 265 266 267 </a> 268 269 270 271<nav class="md-nav md-nav--secondary" aria-label="Table of contents"> 272 273 274 275 276 277 278 <label class="md-nav__title" for="__toc"> 279 <span class="md-nav__icon md-icon"></span> 280 Table of contents 281 </label> 282 <ul class="md-nav__list" data-md-component="toc" data-md-scrollfix> 283 284 <li class="md-nav__item"> 285 <a href="#resources" class="md-nav__link"> 286 <span class="md-ellipsis"> 287 288 Resources 289 290 </span> 291 </a> 292 293</li> 294 295 </ul> 296 297</nav> 298 299 </li> 300 301 302 303 304 305 306 307 308 309 <li class="md-nav__item"> 310 <a href="introduction/" class="md-nav__link"> 311 312 313 314 <span class="md-ellipsis"> 315 316 317 Introduction 318 319 320 321 </span> 322 323 324 325 </a> 326 </li> 327 328 329 330 331 332 333 334 335 336 <li class="md-nav__item"> 337 <a href="install/" class="md-nav__link"> 338 339 340 341 <span class="md-ellipsis"> 342 343 344 Installation 345 346 347 348 </span> 349 350 351 352 </a> 353 </li> 354 355 356 357 358 359 360 361 362 363 <li class="md-nav__item"> 364 <a href="command_completion/" class="md-nav__link"> 365 366 367 368 <span class="md-ellipsis"> 369 370 371 Command Completion 372 373 374 375 </span> 376 377 378 379 </a> 380 </li> 381 382 383 384 385 386 387 388 389 390 <li class="md-nav__item"> 391 <a href="docker/" class="md-nav__link"> 392 393 394 395 <span class="md-ellipsis"> 396 397 398 Using Docker 399 400 401 402 </span> 403 404 405 406 </a> 407 </li> 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 <li class="md-nav__item md-nav__item--nested"> 423 424 425 426 <input class="md-nav__toggle md-toggle " type="checkbox" id="__nav_6" > 427 428 429 <label class="md-nav__link" for="__nav_6" id="__nav_6_label" tabindex="0"> 430 431 432 433 <span class="md-ellipsis"> 434 435 436 MVT for iOS 437 438 439 440 </span> 441 442 443 444 <span class="md-nav__icon md-icon"></span> 445 </label> 446 447 <nav class="md-nav" data-md-level="1" aria-labelledby="__nav_6_label" aria-expanded="false"> 448 <label class="md-nav__title" for="__nav_6">
449 <span class="md-nav__icon md-icon"></span> 450 451 452 MVT for iOS 453 454 455 </label> 456 <ul class="md-nav__list" data-md-scrollfix> 457 458 459 460 461 462 463 464 <li class="md-nav__item"> 465 <a href="ios/methodology/" class="md-nav__link"> 466 467 468 469 <span class="md-ellipsis"> 470 471 472 iOS Forensic Methodology 473 474 475 476 </span> 477 478 479 480 </a> 481 </li> 482 483 484 485 486 487 488 489 490 491 492 <li class="md-nav__item"> 493 <a href="ios/install/" class="md-nav__link"> 494 495 496 497 <span class="md-ellipsis"> 498 499 500 Install libimobiledevice 501 502 503 504 </span> 505 506 507 508 </a> 509 </li> 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 <li class="md-nav__item md-nav__item--nested"> 526 527 528 529 <input class="md-nav__toggle md-toggle " type="checkbox" id="__nav_6_3" > 530 531 532 <label class="md-nav__link" for="__nav_6_3" id="__nav_6_3_label" tabindex="0"> 533 534 535 536 <span class="md-ellipsis"> 537 538 539 Check an iTunes Backup 540 541 542 543 </span> 544 545 546 547 <span class="md-nav__icon md-icon"></span> 548 </label> 549 550 <nav class="md-nav" data-md-level="2" aria-labelledby="__nav_6_3_label" aria-expanded="false"> 551 <label class="md-nav__title" for="__nav_6_3"> 552 <span class="md-nav__icon md-icon"></span> 553 554 555 Check an iTunes Backup 556 557 558 </label> 559 <ul class="md-nav__list" data-md-scrollfix> 560 561 562 563 564 565 566 567 <li class="md-nav__item"> 568 <a href="ios/backup/itunes/" class="md-nav__link"> 569 570 571 572 <span class="md-ellipsis"> 573 574 575 Backup with iTunes app 576 577 578 579 </span> 580 581 582 583 </a> 584 </li> 585 586 587 588 589 590 591 592 593 594 595 <li class="md-nav__item"> 596 <a href="ios/backup/libimobiledevice/" class="md-nav__link"> 597 598 599 600 <span class="md-ellipsis"> 601 602 603 Backup with libimobiledevice 604 605 606 607 </span> 608 609 610 611 </a> 612 </li> 613 614 615 616 617 618 619 620 621 622 623 <li class="md-nav__item"> 624 <a href="ios/backup/check/" class="md-nav__link"> 625 626 627 628 <span class="md-ellipsis"> 629 630 631 Check a Backup with mvt-ios 632 633 634 635 </span> 636 637 638 639 </a> 640 </li> 641 642 643 644 645 </ul> 646 </nav> 647 648 </li> 649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 <li class="md-nav__item md-nav__item--nested"> 665 666 667 668 <input class="md-nav__toggle md-toggle " type="checkbox" id="__nav_6_4" > 669 670 671 <label class="md-nav__link" for="__nav_6_4" id="__nav_6_4_label" tabindex="0"> 672 673 674 675 <span class="md-ellipsis"> 676 677 678 Check a Filesystem Dump 679 680 681 682 </span> 683 684 685 686 <span class="md-nav__icon md-icon"></span> 687 </label> 688 689 <nav class="md-nav" data-md-level="2" aria-labelledby="__nav_6_4_label" aria-expanded="false"> 690 <label class="md-nav__title" for="__nav_6_4"> 691 <span class="md-nav__icon md-icon"></span> 692 693 694 Check a Filesystem Dump 695 696 697 </label> 698 <ul class="md-nav__list" data-md-scrollfix> 699 700 701 702 703 704 705 706 <li class="md-nav__item"> 707 <a href="ios/filesystem/dump/" class="md-nav__link"> 708 709 710 711 <span class="md-ellipsis"> 712 713 714 Dumping the filesystem 715 716 717 718 </span> 719 720 721 722 </a> 723 </li> 724 725 726 727 728 729 730 731 732 733 734 <li class="md-nav__item"> 735 <a href="ios/filesystem/check/" class="md-nav__link"> 736 737 738 739 <span class="md-ellipsis"> 740 741 742 Check a Filesystem Dump with mvt-ios 743 744 745 746 </span> 747 748 749 750 </a> 751 </li> 752 753 754 755 756 </ul> 757 </nav> 758 759 </li> 760 761 762 763 764 765 766 767 768 769 770 <li class="md-nav__item"> 771 <a href="ios/sysdiagnose/" class="md-nav__link"> 772 773 774 775 <span class="md-ellipsis"> 776 777 778 Check a Sysdiagnose 779 780 781 782 </span> 783 784 785 786 </a> 787 </li> 788 789 790 791 792 793 794 795 796 797 798 <li class="md-nav__item"> 799 <a href="ios/records/" class="md-nav__link"> 800 801 802 803 <span class="md-ellipsis"> 804 805 806 Records extracted by mvt-ios 807 808 809 810 </span> 811 812 813 814 </a> 815 </li> 816 817 818 819 820 </ul> 821 </nav> 822 823 </li> 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838 <li class="md-nav__item md-nav__item--nested"> 839 840 841 842 <input class="md-nav__toggle md-toggle " type="checkbox" id="__nav_7" > 843 844 845 <label class="md-nav__link" for="__nav_7" id="__nav_7_label" tabindex="0"> 846 847 848 849 <span class="md-ellipsis"> 850 851 852 MVT for Android 853 854 855 856 </span> 857 858 859
860 <span class="md-nav__icon md-icon"></span> 861 </label> 862 863 <nav class="md-nav" data-md-level="1" aria-labelledby="__nav_7_label" aria-expanded="false"> 864 <label class="md-nav__title" for="__nav_7"> 865 <span class="md-nav__icon md-icon"></span> 866 867 868 MVT for Android 869 870 871 </label> 872 <ul class="md-nav__list" data-md-scrollfix> 873 874 875 876 877 878 879 880 <li class="md-nav__item"> 881 <a href="android/methodology/" class="md-nav__link"> 882 883 884 885 <span class="md-ellipsis"> 886 887 888 Android Forensic Methodology 889 890 891 892 </span> 893 894 895 896 </a> 897 </li> 898 899 900 901 902 903 904 905 906 907 908 <li class="md-nav__item"> 909 <a href="android/backup/" class="md-nav__link"> 910 911 912 913 <span class="md-ellipsis"> 914 915 916 Check an Android Backup (SMS messages) 917 918 919 920 </span> 921 922 923 924 </a> 925 </li> 926 927 928 929 930 931 932 933 934 935 936 <li class="md-nav__item"> 937 <a href="android/intrusion_logs/" class="md-nav__link"> 938 939 940 941 <span class="md-ellipsis"> 942 943 944 Check Android Intrusion Logs 945 946 947 948 </span> 949 950 951 952 </a> 953 </li> 954 955 956 957 958 </ul> 959 </nav> 960 961 </li> 962 963 964 965 966 967 968 969 970 971 <li class="md-nav__item"> 972 <a href="iocs/" class="md-nav__link"> 973 974 975 976 <span class="md-ellipsis"> 977 978 979 Indicators of Compromise 980 981 982 983 </span> 984 985 986 987 </a> 988 </li> 989 990 991 992 993 994 995 996 997 998 999 1000 1001 1002 1003 <li class="md-nav__item md-nav__item--nested"> 1004 1005 1006 1007 <input class="md-nav__toggle md-toggle " type="checkbox" id="__nav_9" > 1008 1009 1010 <label class="md-nav__link" for="__nav_9" id="__nav_9_label" tabindex="0"> 1011 1012 1013 1014 <span class="md-ellipsis"> 1015 1016 1017 Development 1018 1019 1020 1021 </span> 1022 1023 1024 1025 <span class="md-nav__icon md-icon"></span> 1026 </label> 1027 1028 <nav class="md-nav" data-md-level="1" aria-labelledby="__nav_9_label" aria-expanded="false"> 1029 <label class="md-nav__title" for="__nav_9"> 1030 <span class="md-nav__icon md-icon"></span> 1031 1032 1033 Development 1034 1035 1036 </label> 1037 <ul class="md-nav__list" data-md-scrollfix> 1038 1039 1040 1041 1042 1043 1044 1045 <li class="md-nav__item"> 1046 <a href="development/" class="md-nav__link"> 1047 1048 1049 1050 <span class="md-ellipsis"> 1051 1052 1053 Development Instructions 1054 1055 1056 1057 </span> 1058 1059 1060 1061 </a> 1062 </li> 1063 1064 1065 1066 1067 1068 1069 1070 1071 1072 1073 <li class="md-nav__item"> 1074 <a href="development/custom_commands/" class="md-nav__link"> 1075 1076 1077 1078 <span class="md-ellipsis"> 1079 1080 1081 Custom CLI Commands 1082 1083 1084 1085 </span> 1086 1087 1088 1089 </a> 1090 </li> 1091 1092 1093 1094 1095 1096 1097 1098 1099 1100 1101 <li class="md-nav__item"> 1102 <a href="development/plugin_configuration/" class="md-nav__link"> 1103 1104 1105 1106 <span class="md-ellipsis"> 1107 1108 1109 Plugin Configuration 1110 1111 1112 1113 </span> 1114 1115 1116 1117 </a> 1118 </li> 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 <li class="md-nav__item"> 1130 <a href="development/plugins/" class="md-nav__link"> 1131 1132 1133 1134 <span class="md-ellipsis"> 1135 1136 1137 Managing Plugins 1138 1139 1140 1141 </span> 1142 1143 1144 1145 </a> 1146 </li> 1147 1148 1149 1150 1151 </ul> 1152 </nav> 1153 1154 </li> 1155 1156 1157 1158 1159 1160 1161 1162 1163 1164 <li class="md-nav__item"> 1165 <a href="license/" class="md-nav__link"> 1166 1167 1168 1169 <span class="md-ellipsis"> 1170 1171 1172 License 1173 1174 1175 1176 </span> 1177 1178 1179 1180 </a> 1181 </li> 1182 1183 1184 1185 </ul> 1186</nav> 1187 </div> 1188 </div> 1189 </div> 1190 1191 1192 1193 <div class="md-sidebar md-sidebar--secondary" data-md-component="sidebar" data-md-type="toc" > 1194 <div class="md-sidebar__scrollwrap"> 1195 <div class="md-sidebar__inner"> 1196 1197 1198<nav class="md-nav md-nav--secondary" aria-label="Table of contents"> 1199 1200
1201 1202 1203 1204 1205 <label class="md-nav__title" for="__toc"> 1206 <span class="md-nav__icon md-icon"></span> 1207 Table of contents 1208 </label> 1209 <ul class="md-nav__list" data-md-component="toc" data-md-scrollfix> 1210 1211 <li class="md-nav__item"> 1212 <a href="#resources" class="md-nav__link"> 1213 <span class="md-ellipsis"> 1214 1215 Resources 1216 1217 </span> 1218 </a> 1219 1220</li> 1221 1222 </ul> 1223 1224</nav> 1225 </div> 1226 </div> 1227 </div> 1228 1229 1230 1231 <div class="md-content" data-md-component="content"> 1232 1233 <article class="md-content__inner md-typeset"> 1234 1235 1236 1237 1238 1239 1240 1241 1242<p align="center"> 1243 <img src="./mvt.png" width="300" /> 1244</p> 1245 1246<h1 id="mobile-verification-toolkit">Mobile Verification Toolkit</h1> 1247<p>Mobile Verification Toolkit (MVT) is a tool to facilitate the <a href="introduction/#consensual-forensics">consensual forensic analysis</a> of Android and iOS devices, for the purpose of identifying traces of compromise.</p> 1248<p>It has been developed and released by the <a href="https://securitylab.amnesty.org">Amnesty International Security Lab</a> in July 2021 in the context of the <a href="https://forbiddenstories.org/about-the-pegasus-project/">Pegasus Project</a> along with <a href="https://www.amnesty.org/en/latest/research/2021/07/forensic-methodology-report-how-to-catch-nso-groups-pegasus/">a technical forensic methodology</a>. It continues to be maintained by Amnesty International and other contributors.</p> 1249<p>In this documentation you will find instructions on how to install and run the <code>mvt-ios</code>, <code>mvt-android</code> and <code>mvt</code> commands, and guidance on how to interpret the extracted results.</p> 1250<h2 id="resources">Resources</h2> 1251<p><a class="md-button md-button--primary" href="https://github.com/mvt-project/mvt"><span class="twemoji"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><!--! Font Awesome Free 7.1.0 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) Copyright 2025 Fonticons, Inc.--><path d="M173.9 397.4c0 2-2.3 3.6-5.2 3.6-3.3.3-5.6-1.3-5.6-3.6 0-2 2.3-3.6 5.2-3.6 3-.3 5.6 1.3 5.6 3.6m-31.1-4.5c-.7 2 1.3 4.3 4.3 4.9 2.6 1 5.6 0 6.2-2s-1.3-4.3-4.3-5.2c-2.6-.7-5.5.3-6.2 2.3m44.2-1.7c-2.9.7-4.9 2.6-4.6 4.9.3 2 2.9 3.3 5.9 2.6 2.9-.7 4.9-2.6 4.6-4.6-.3-1.9-3-3.2-5.9-2.9M252.8 8C114.1 8 8 113.3 8 252c0 110.9 69.8 205.8 169.5 239.2 12.8 2.3 17.3-5.6 17.3-12.1 0-6.2-.3-40.4-.3-61.4 0 0-70 15-84.7-29.8 0 0-11.4-29.1-27.8-36.6 0 0-22.9-15.7 1.6-15.4 0 0 24.9 2 38.6 25.8 21.9 38.6 58.6 27.5 72.9 20.9 2.3-16 8.8-27.1 16-33.7-55.9-6.2-112.3-14.3-112.3-110.5 0-27.5 7.6-41.3 23.6-58.9-2.6-6.5-11.1-33.3 2.6-67.9 20.9-6.5 69 27 69 27 20-5.6 41.5-8.5 62.8-8.5s42.8 2.9 62.8 8.5c0 0 48.1-33.6 69-27 13.7 34.7 5.2 61.4 2.6 67.9 16 17.7 25.8 31.5 25.8 58.9 0 96.5-58.9 104.2-114.8 110.5 9.2 7.9 17 22.9 17 46.4 0 33.7-.3 75.4-.3 83.6 0 6.5 4.6 14.4 17.3 12.1C436.2 457.8 504 362.9 504 252 504 113.3 391.5 8 252.8 8M105.2 352.9c-1.3 1-1 3.3.7 5.2 1.6 1.6 3.9 2.3 5.2 1 1.3-1 1-3.3-.7-5.2-1.6-1.6-3.9-2.3-5.2-1m-10.8-8.1c-.7 1.3.3 2.9 2.3 3.9 1.6 1 3.6.7 4.3-.7.7-1.3-.3-2.9-2.3-3.9-2-.6-3.6-.3-4.3.7m32.4 35.6c-1.6 1.3-1 4.3 1.3 6.2 2.3 2.3 5.2 2.6 6.5 1 1.3-1.3.7-4.3-1.3-6.2-2.2-2.3-5.2-2.6-6.5-1m-11.4-14.7c-1.6 1-1.6 3.6 0 5.9s4.3 3.3 5.6 2.3c1.6-1.3 1.6-3.9 0-6.2-1.4-2.3-4-3.3-5.6-2"/></svg></span> GitHub</a> <a class="md-button" href="https://pypi.org/project/mvt"><span class="twemoji"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"><!--! Font Awesome Free 7.1.0 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) Copyright 2025 Fonticons, Inc.--><path d="M439.8 200.5c-7.7-30.9-22.3-54.2-53.4-54.2h-40.1v47.4c0 36.8-31.2 67.8-66.8 67.8H172.7c-29.2 0-53.4 25-53.4 54.3v101.8c0 29 25.2 46 53.4 54.3 33.8 9.9 66.3 11.7 106.8 0 26.9-7.8 53.4-23.5 53.4-54.3v-40.7H226.2v-13.6h160.2c31.1 0 42.6-21.7 53.4-54.2 11.2-33.5 10.7-65.7 0-108.6M286.2 444.7a20.4 20.4 0 1 1 0-40.7 20.4 20.4 0 1 1 0 40.7M167.8 248.1h106.8c29.7 0 53.4-24.5 53.4-54.3V91.9c0-29-24.4-50.7-53.4-55.6-35.8-5.9-74.7-5.6-106.8.1-45.2 8-53.4 24.7-53.4 55.6v40.7h106.9v13.6h-147c-31.1 0-58.3 18.7-66.8 54.2-9.8 40.7-10.2 66.1 0 108.6 7.6 31.6 25.7 54.2 56.8 54.2H101v-48.8c0-35.3 30.5-66.4 66.8-66.4m-6.6-183.4a20.4 20.4 0 1 1 0 40.8 20.4 20.4 0 1 1 0-40.8"/></svg></span> Python Package</a></p> 1252 1253 1254 1255 1256 1257 1258 1259 1260 1261 1262 1263 1264 1265 </article> 1266 </div> 1267 1268
1269<script>var target=document.getElementById(location.hash.slice(1));target&&target.name&&(target.checked=target.name.startsWith("__tabbed_"))</script>
1269 1270 </div> 1271 1272 </main> 1273 1274 <footer class="md-footer"> 1275 1276 <div class="md-footer-meta md-typeset"> 1277 <div class="md-footer-meta__inner md-grid"> 1278 <div class="md-copyright"> 1279 1280 <div class="md-copyright__highlight"> 1281 Copyright © 2021-2023 MVT Project Developers 1282 </div> 1283 1284 1285 Made with 1286 <a href="https://squidfunk.github.io/mkdocs-material/" target="_blank" rel="noopener"> 1287 Material for MkDocs 1288 </a> 1289 1290</div> 1291 1292 1293<div class="md-social"> 1294 1295 1296 1297 1298 1299 1300 1301 1302 <a href="https://github.com/mvt-project/mvt" target="_blank" rel="noopener" title="github.com" class="md-social__link"> 1303 <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><!--! Font Awesome Free 7.1.0 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) Copyright 2025 Fonticons, Inc.--><path d="M173.9 397.4c0 2-2.3 3.6-5.2 3.6-3.3.3-5.6-1.3-5.6-3.6 0-2 2.3-3.6 5.2-3.6 3-.3 5.6 1.3 5.6 3.6m-31.1-4.5c-.7 2 1.3 4.3 4.3 4.9 2.6 1 5.6 0 6.2-2s-1.3-4.3-4.3-5.2c-2.6-.7-5.5.3-6.2 2.3m44.2-1.7c-2.9.7-4.9 2.6-4.6 4.9.3 2 2.9 3.3 5.9 2.6 2.9-.7 4.9-2.6 4.6-4.6-.3-1.9-3-3.2-5.9-2.9M252.8 8C114.1 8 8 113.3 8 252c0 110.9 69.8 205.8 169.5 239.2 12.8 2.3 17.3-5.6 17.3-12.1 0-6.2-.3-40.4-.3-61.4 0 0-70 15-84.7-29.8 0 0-11.4-29.1-27.8-36.6 0 0-22.9-15.7 1.6-15.4 0 0 24.9 2 38.6 25.8 21.9 38.6 58.6 27.5 72.9 20.9 2.3-16 8.8-27.1 16-33.7-55.9-6.2-112.3-14.3-112.3-110.5 0-27.5 7.6-41.3 23.6-58.9-2.6-6.5-11.1-33.3 2.6-67.9 20.9-6.5 69 27 69 27 20-5.6 41.5-8.5 62.8-8.5s42.8 2.9 62.8 8.5c0 0 48.1-33.6 69-27 13.7 34.7 5.2 61.4 2.6 67.9 16 17.7 25.8 31.5 25.8 58.9 0 96.5-58.9 104.2-114.8 110.5 9.2 7.9 17 22.9 17 46.4 0 33.7-.3 75.4-.3 83.6 0 6.5 4.6 14.4 17.3 12.1C436.2 457.8 504 362.9 504 252 504 113.3 391.5 8 252.8 8M105.2 352.9c-1.3 1-1 3.3.7 5.2 1.6 1.6 3.9 2.3 5.2 1 1.3-1 1-3.3-.7-5.2-1.6-1.6-3.9-2.3-5.2-1m-10.8-8.1c-.7 1.3.3 2.9 2.3 3.9 1.6 1 3.6.7 4.3-.7.7-1.3-.3-2.9-2.3-3.9-2-.6-3.6-.3-4.3.7m32.4 35.6c-1.6 1.3-1 4.3 1.3 6.2 2.3 2.3 5.2 2.6 6.5 1 1.3-1.3.7-4.3-1.3-6.2-2.2-2.3-5.2-2.6-6.5-1m-11.4-14.7c-1.6 1-1.6 3.6 0 5.9s4.3 3.3 5.6 2.3c1.6-1.3 1.6-3.9 0-6.2-1.4-2.3-4-3.3-5.6-2"/></svg> 1304 </a> 1305 1306</div> 1307 1308 </div> 1309 </div> 1310</footer> 1311 1312 </div> 1313 <div class="md-dialog" data-md-component="dialog"> 1314 <div class="md-dialog__inner md-typeset"></div> 1315 </div> 1316 1317 1318 1319 1320 1321
1321<script id="__config" type="application/json">{"annotate": null, "base": ".", "features": ["tabs"], "search": "assets/javascripts/workers/search.2c215733.min.js", "tags": null, "translations": {"clipboard.copied": "Copied to clipboard", "clipboard.copy": "Copy to clipboard", "search.result.more.one": "1 more on this page", "search.result.more.other": "# more on this page", "search.result.none": "No matching documents", "search.result.one": "1 matching document", "search.result.other": "# matching documents", "search.result.placeholder": "Type to start searching", "search.result.term.missing": "Missing", "select.version": "Select version"}, "version": null}</script>
1321 1322 1323 1324
1324<script src="assets/javascripts/bundle.d7400e89.min.js"></script>
1324 1325 1326 1327 </body> 1328</html>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.