PiRogue evidence collector

A set of tools to collect digital evidence from mobile devices.

Licenses: GPLv3, MIT

Website | Documentation | Support

Overview

This package defines and installs a set of commands to collect digital evidence from mobile devices. It defines the following commands:

• pirogue-android to interact with an Android device and run commands on it.
• pirogue-file-drop to expose a web server allowing the user to upload files from their device to the PiRogue.
• pirogue-save-metadata to extract metadata of a file and save it separately in [original file name].metadata.json.
• pirogue-timestamp to time stamp files using a 3rd-party RFC3161 service.
• pirogue-intercept-[gated|single] to instrument an Android application to analyze its network traffic.

Licensing

This work is licensed under multiple licences. Here is a summary that's reflect the file debian/copyright.

• All the code in this repository is licensed under the GPLv3 license.
  • Copyright: 2024 U+039b [email protected]
  • Copyright: 2024 Defensive Lab Agency [email protected]
• The file frida-scripts-src/dynamic_hook_injector.js is licensed under the MIT license.
  • Copyright: 2024 Pôle d'Expertise de la Régulation Numérique - PEReN [email protected]