Bugbane

about

description

<b>Bugbane</b> is an open-source Android application designed to help users perform basic forensic self-triage on their own devices. It uses Wireless ADB to collect the same type of data that tools like <a href="https://github.com/mvt-project/androidqf">AndroidQF</a> or <a href="https://github.com/mvt-project/mvt">MVT</a> would extract, but without requiring external computers, cables, or command-line expertise. <b>Requirements</b> <ul> <li>Wireless ADB must be available on your device (Android 11+).</li> <li>A Wi-Fi connection to pair the device locally.</li> <li>Basic understanding that this tool is for self-triage and <i>cannot</i> guarantee detection.</li> </ul> <b>Features</b> <ul> <li>A step-by-step wizard to guide you through enabling developer options, pairing ADB, and preparing for acquisition.</li> <li>One-click forensic acquisition of relevant device logs and configurations.</li> <li>Encrypted export options through system dialogs, Signal, or email.</li> <li>Ability to delete or rename existing acquisitions locally.</li> <li>Indicators of compromise are periodically updated from <a href="https://github.com/mvt-project/mvt-indicators/blob/main/indicators.yaml">mvt-indicators</a>.</li> <li>Ability to keep acquisitions on device, and scan them multiple times using new indicators, to detect past compromises.</li> </ul> <b>Security and Privacy</b> <p>Bugbane does not transmit your data automatically. All exports remain on-device until you decide to share them with trusted organizations or analysts.</p> <b>Planned Improvements</b> <ul> <li>Streamlined workflows for collaborating organizations.</li> <li>Localization and accessibility enhancements.</li> <li>Automated rescan of past acquisitions after each indicators update.</li> </ul> <b>Translations</b> <p>Help us improve translations and documentation by contributing via our <a href="https://github.com/osservatorionessuno/bugbane">GitHub repository</a>.</p> <b>Important Notice</b> <p>Bugbane is intended for individuals who suspect their device may be compromised by stalkerware, spyware, or non-consensual forensics, however no app can confirm if your phone is clean. If you have strong reasons to believe your device is compromised, consider using a separate trusted device and consult with professionals.</p>

publisher

78ce6faa72264387284e647ba6938995735ec8c7d5c5a65737e55130f026307d

first seen

2026-10-09T09:39:07.257192+00:00

last event

2026-08-31 07:44 UTC

install

zapstore.dev or any Zapstore-compatible client

source & build

repository

https://github.com/osservatorionessuno/bugbane

arch flags

android-arm64-v8a

manifest

missing

releases (kind 30063)

1 release indexed; latest 0.2.3.

assets & verification

Every app, release and asset event is schnorr-verified (NIP-01 id + signature) before it enters the catalog, and assets are content-addressed by sha256. We subscribe read-only to the catalog relay — never write to it.

0.2.3 — org.osservatorionessuno.bugbane.beta_9.apk

sha256

a5012464d1193a21dab9f9167e5f0f52e6ba6e53e9a3516d276b58118e5a44a5

size

5.7 MB

archs

android-arm64-v8a

version code

9

apk cert sha256

8d301b7e49106b30011fe36d869ffd313ce8115a44f4c4abdfd48f8507b42c50

download

org.osservatorionessuno.bugbane.beta_9.apk

Showing the newest 1 asset descriptor; the full set is in /api/apps/78ce6faa…