Andriller 2.4.1

Andriller - is software tool that bundles a collection of forensic tools for smartphones. It achieves read-only, forensically sound, non-destructive acquisition from Android devices. It has other useful features, such as strong Lockscreen cracking for Pattern, Password, or PIN code; custom decoders for Application data from Android (and some Apple iOS) databases for decoding communications. Extraction and decoders are generating reports in HTML or Excel (.xlsx) formats.

Basic Setup

Andriller includes a small setup installer for Windows (Vista, XP, 8, 7). It only needs Microsoft Visual C++ 2010 Redistributable Package (x86) installed on your computer, USB drivers for your Android device, and a web browser for displaying the results.

Features:

- Automatic data extraction and decoding
- Data extraction of non-rooted outside the devices by Android Backup (Android versions 4.x)
- Data extraction with root authorizations: CWM recovery mode, root ADB daemon, or SU binary (Superuser/SuperSU)
- Data parsing and decoding for folder structures, Android Tarball files (from nanddroid backups), Backup ('backup.ab' files).
- Selection of particular database decoders for Android or Apple
- Decryption of encrypted WhatsApp archived databases (msgstore.db.crypt, msgstore.db.crypt8, msgstore.db.crypt5, msgstore.db.crypt7,)
- Lockscreen cracking for Pattern, Password, PIN
- Unpacking the Android backup files