mvt
Mobile Verification Toolkit, a set of forensic tools for finding signs of compromise on Android and iOS devices. Built by Amnesty International's Security Lab for technologists and investigators.
Pick a small issue you can reproduce, then fix it with your AI coding agent.
Share on XCustom license (see repository)
Overview
Mobile Verification Toolkit (MVT) is a set of command-line utilities that gather forensic traces to help identify a possible compromise of Android and iOS devices. Amnesty International Security Lab released it in July 2021 during the Pegasus Project, and it is still maintained by Amnesty and other contributors. It can check collected data against public indicators of compromise. A recent v3 merge introduced breaking changes to output that scripts may depend on.
Key features
- Collects forensic traces from Android and iOS devices
- Supports checking against public indicators of compromise
- Built by Amnesty International Security Lab
- Command-line tools for technologists and investigators
Best for
Technologists and investigators with digital forensics knowledge. The authors say it is not meant for end-user self-checks, so worried users should seek expert help.
- Upstream
- mvt-project/mvt
- Fork on GitHub
- Guo-astro/mvt
- Upstream stars
- 15k
- Category
- Security and networking
- Language
- Python
- License
- Custom license (see repository)
- Forked
- 2026-09-22
- Sync status
- In syncLast synced 2026-10-20
More in Security and networking
A ProxyPin script for rewriting Apple WLOC location responses in authorized iOS tests. It helps QA teams reproduce network-based location scenarios using selected coordinates.
Forked 2026-10-18Last synced 2026-10-20License: MITSecurity and networkingGitHub
Scripts that query crt.name Certificate Transparency records to find subdomains, with Bash and Python command-line tools for collecting results and saving them to a file.
Forked 2026-10-14Last synced 2026-10-20License: MITSecurity and networkingGitHub
A practical guide to running a personal Xray proxy on a VPS, with Hysteria2 as the main entry point and optional backup entries. Route selected AI traffic through WARP and, if needed, Claude or Anthropic through a fixed SOCKS5 exit.
Forked 2026-10-12Last synced 2026-10-20License: MITSecurity and networkingGitHub
Clearcam adds object detection, tracking, event search, and notifications to security camera feeds. Run its Python NVR locally and optionally use the iOS app for remote viewing and alerts.
Forked 2026-10-12Last synced 2026-10-20License: GPL-3.0Security and networkingGitHub