Andriller Changelog

What's new in Andriller 3.6.0

Nov 1, 2021
  • GUI restructured
  • Bugfix with WA decoder
  • Dependencies updated
  • CI/CD pipelines changed to Github Actions
  • Minor FB decoding bugfix when no stickers column is present

New in Andriller 3.5.3 (Dec 7, 2020)

  • Bugfix related to file size retrieval from the remote device.
  • File pull bug using adb (with root), affecting Windows.
  • Improvements for backwards support on older Android versions.

New in Andriller 2.6.4 (Feb 20, 2017)

  • Some functions re-written and improved;
  • Facebook: Minor decoding bugs fixed;
  • WhatsApp: Minor decoding bugs fixed, added chat (expandable list in html) and separate column in Excel reporting;
  • Lockscreen cracking process hung bug fixed.

New in Andriller 2.6.3 (Dec 12, 2016)

  • Calendar (com.android.providers.calendar) support added;
  • Facebook backwards support improved;
  • Lockscreen password brute-force now has minimum and maximum length specification;
  • Gesture decoding bug fixed;
  • Clean exit and stopping of adb server upon App closure;
  • Linux compiled version added.

New in Andriller 2.6.2 (Oct 25, 2016)

  • GPS locations and metadata from media (images and videos) reporting, from package ID "com.google.android.apps.photos";
  • Screen Capture UX improved and bugs fixed;
  • Decoders menu items re-arranged;
  • Phonebook decoding option bug fixed;
  • Reporting on Excel is made prettier.

New in Andriller 2.6.1.1 (Aug 19, 2016)

  • Facebook decoder has been completely re-written. Greater stability and error handling. Messages will also include "shares", "stickers", and "attachments" in the HTML view mode.
  • AB extraction error fixed for Android versions 6.x;
  • Improved stability when decoding individual databases;
  • WhatsApp minor bugs fixed;
  • Facebook multiple database decoder deprecated.

New in Andriller 2.6.1 (Aug 12, 2016)

  • Facebook decoder has been completely re-written. Greater stability and error handling. Messages will also include "shares", "stickers", and "attachments" in the HTML view mode.
  • AB extraction error fixed for Android versions 6.x;
  • Improved stability when decoding individual databases;
  • WhatsApp minor bugs fixed;
  • Facebook multiple database decoder deprecated.

New in Andriller 2.6.0.1 (Jul 7, 2016)

  • WhatsApp crypt9, crypt10, crypt11, crypt12 decoding support;
  • WhatsApp data decoding improvements (full media path, etc.);
  • PIN/Password cracking GUI improvements;
  • Extracted files and databases are now saved into a "DataStore.tar" file;
  • Device detection feedback improved;
  • ADB extraction improvement via root and SU binary;
  • Version 2.6.0.1 includes minor bug fixes with multiple WhatsApp database decoder, Facebook messages decoding improvements, and Viber bugs fixes

New in Andriller 2.6.0.0 (Jul 6, 2016)

  • WhatsApp crypt9, crypt10, crypt11, crypt12 decoding support;
  • WhatsApp data decoding improvements (full media path, etc.);
  • PIN/Password cracking GUI improvements;
  • Extracted files and databases are now saved into a "DataStore.tar" file;
  • Device detection feedback improved;
  • ADB extraction improvement via root and SU binary;
  • Minor bug fixes.

New in Andriller 2.5.4.0 (May 17, 2016)

  • Maintenance release, bug fixes.

New in Andriller 2.5.3.1 (Feb 8, 2016)

  • Lockscreen PIN cracking bug fixed, where some numbers with leading zeros were not being tested.
  • Grindr decoding errors fixed.

New in Andriller 2.5.2 (Jan 11, 2016)

  • Screen Capture. New utility added under Tools menu. Allows taking screen captures from devices running Android version 4.x and above. Functionality to take many screen captures, add comments and generate a report.
  • WhatsApp. Decoding method was largely re-coded, improved performance and error handling. Group participants are now decoded; sender and recipients are reported.
  • License migration. Method re-coded, which improves stability and eliminates bugs.

New in Andriller 2.5.1 (Nov 23, 2015)

  • Added file system extraction of "Shared Storage". Supports Android versions 4.x and above. Generates a report with files, which can be viewed using a browser.
  • WhatsApp decoding minor issues solved.
  • Minor bugs causing crashes were fixed.
  • EULA agreement added.

New in Andriller 2.5.0.2 (Aug 31, 2015)

  • Multiple WhatsApp Databases decoder bugs fixed.

New in Andriller 2.5.0.1 (Aug 28, 2015)

  • Supports latest WhatsApp *.crypt8 decryption

New in Andriller 2.5.0 (Aug 9, 2015)

  • Improved data extraction by root via su binary for forensic soundness and integrity;
  • Decoders menu was re-written due to previous improvement had encountered a bug;
  • Improvements with data download and decoding, should result in more data being decoded with fewer errors;
  • Error reporting improved.

New in Andriller 2.4.5 (Jul 20, 2015)

  • WhatsApp messages decoder bug fixed so is backwards compatable with older databases;
  • Decoders shows feedback whilst decoding;
  • Internal code improvements and simplifications with decoders;
  • Spelling mistakes corrected;
  • SMS extraction improved;

New in Andriller 2.4.4.1 (Jun 12, 2015)

  • Download History added for extraction and decoding;
  • WhatsApp call records excluded from messages report (previously calls appeared in messages as empty messages);
  • WhatsApp messages multimedia items report Caption text;
  • Minor improvements user with registration process, various code improvements.
  • Self issue trial license bug fixed (v2.4.4.1)

New in Andriller 2.4.4 (Jun 2, 2015)

  • Download History added for extraction and decoding;
  • WhatsApp call records excluded from messages report (previously calls appeared in messages as empty messages);
  • WhatsApp messages multimedia items report Caption text;
  • Minor improvements user with registration process, various code improvements.

New in Andriller 2.4.3 (Apr 21, 2015)

  • Time Zones added for reporting. Go to File > Preferences, and change to your UTC offset for your timezone. Default UTC+00:00.
  • Customizable header and footer can be changed in Preferences. Use HTML tagging for customisations.
  • WhatsApp Calls support added (Beta).
  • Minor improvements to data extraction.

New in Andriller 2.4.2 (Mar 30, 2015)

  • Data Parse decoding improved, it can detect a few more databases and decode them.
  • Writing to Excel improved, which should result in fewer errors.
  • License migration is added. Valid licenses can be transferred onto other UID if needed.
  • Get salt from "locksettings.db-wal" (write ahead logs) for PIN/passwords cracking.
  • Minor attributions extraction improvements.

New in Andriller 2.4.1 (Mar 16, 2015)

  • In addition to data extraction and decoding, data parsing & decoding is added for Folder structure of '/data' filesystem, Tarball (nanddroid backups, such as 'data.tar' files) and Android Backup (AB - 'backup.ab' files), to generate an Andriller style report;
  • Facebook multiple database decoder duplicate removal improved;
  • BBM decoder #bugfix for time and decode decoding;
  • Minor miscelaneous bugfixes and improvements, such as better unicode handling.

New in Andriller 2.4.0 (Mar 5, 2015)

  • "Apps Utils" section with proprietry decrypting and decoding features;
  • Decode multiple Facebook databases and generate one report;
  • Decode multiple WhatsApp databases and generate one report;
  • WhatsApp decoding improved, bugs removed.

New in Andriller 2.3.10 (Feb 27, 2015)

  • Decryptor added for WhatsApp Crypt8 'msgstore.db.crypt8' database backups;
  • Gesture pattern lookup database generator added to Lockscreens (SQLite database);
  • AB (Android Backup) file decoding and conversion error handling improved;
  • Time and date decoding bugs fixed for out of range dates;
  • Accounts reporting bugs fixed.

New in Andriller 2.3.9 (Feb 26, 2015)

  • Gesture pattern rainbow table generator added to Lockscreens (SQLite database);
  • AB (Android Backup) file decoding and conversion error handling improved;
  • Time and date decoding bugs fixed for out of range dates;
  • Accounts reporting bugs fixed.

New in Andriller 2.3.8 (Feb 16, 2015)

  • Important bug fix! Latest Windows update had caused the Unique ID to change, that caused the license key not being recognised. This update will change your UID, and will prevent it from changing.

New in Andriller 2.3.7 (Jan 21, 2015)

  • Various usage bugs eliminated in Lockscreens decoders/crackers.
  • Reported bugs fixed.

New in Andriller 2.3.6 (Dec 17, 2014)

  • ChatOn messages support added for root extraction and decoders.
  • Improvements to Gesture pattern decoding: graphical design re-touched, visualisation of the pattern can be exported as a postscript file.
  • User experience: keyboard shortcuts activated for common actions (eg: Esc to exit), Function keys (F5-F7) to proceed to extraction.
  • Tool tips: new feature that displays helpful tips on mouse hover over items.
  • Themes option added to Preferences, where window layout styles can be changed.

New in Andriller 2.3.5 (Dec 5, 2014)

  • Skype Calls and Messages decoders added for Extraction (AB method only) and Decoders menu for parsing the "main.db" database;
  • Decrypt now includes decryption for archived WhatsApp databases encrypted with .crypt5 extentions;
  • Configurations: Window resize to fit smaller screens (eg: netbooks);
  • Configurations UI improved;
  • Minor code improvements to improve usability and stability.

New in Andriller 2.3.4 (Nov 28, 2014)

  • Lockscreen password cracking for #Samsung type passwords (using wordlists);
  • Decrypt now decrypts WhatsApp encrypted databases with .crypt7 extentions;
  • Lockscreen password cracking tried words count does not reset after pause;
  • Menu for lockscreens re-arranged by groups.

New in Andriller 2.3.3 (Nov 10, 2014)

  • Password cracking - minor improvements for reading dictionary file.
  • Pattern cracking - the gesture pattern can now be drawn in a visual representation.
  • Minor improvements for decoding Calls, WhatsApp contacts, Tinder matches.
  • Extraction of data while the device is in RECOVERY MODE (ClockWorkMod, etc.) with root privilleges and /system and /data partitions mounted.
  • Configutation now has Offline Mode, which skipps the version check on startup.

New in Andriller 2.3.2 (Nov 10, 2014)

  • Lockscreen Gesture pattern decoding is now performed locally without the need to submit a hash value online. Import the 'gesture.key' file directly or input the hash value. Depending on CPU, the gesture hash is usually decoded within a few seconds.
  • Lockscreen Brute force cracker now has procentage and time remaining for completion; also includes minor improvements.
  • Configurations menu added under File. Minor miscelaneous options can be defined by the end user, these include: defining the default Output directory; setting the password cracking update rate (after how many password tries the update should be visualised).
  • Configurations; last used path is now remembered from Decoders and other locations.
  • Licensing issues; if upgrading a newly generated unique id will be issued.

New in Andriller 2.3.1 (Nov 10, 2014)

  • Bugfix for root(su) extractions
  • Bugfix for decoding build properties
  • Bugfix for calls decoding
  • Bugfix for contacts decoding
  • Bugfix for default browser history decoding
  • New WhatsApp decryptor for encrypted database backups
  • Improved BBM decoder for newer versions of the App

New in Andriller 2.3.0 (Nov 10, 2014)

  • Licensing. The method of obtaining a Unique ID (UID) has changed, now it derives from a more stable source. Your UID may result in being different when you first run this version of Andriller. A new license key will be automatically re-issued and saved.
  • No longer a user is required to sign up for a trial license - it is issued automatically.
  • Calls Logs. Differentiated between incoming records for 'Unknown' or 'Withheld' entries.
  • Emails. Attachments can decoded (filenames); can be decoded through 'Decoders'.

New in Andriller 2.2.2 (Nov 10, 2014)

  • New support for Dolphin Web Browser History decoding added (via extraction and decoders);
  • 'Login Data' of Google Chrome decoder was causing Andriller to crash and not produce an Excel report #BUGFIX.

New in Andriller 2.2.1 (Nov 10, 2014)

  • All Decoders were fundamentally re-coded, where existing and potential bugs were eliminated.

New in Andriller 2.2.0 (Nov 10, 2014)

  • Data reporting in Excel (.xlsx) format for extractions and database decoders. During extractions a REPORT.xlsx file will be created with all data in it. When using decoders an Excel will created in the same location where the HTML file was outputted.
  • Error handling added for logging technical data to the "log.errors.log" file when running full extraction.
  • Error handling added for logging technical data to the text field when dunning individual decoders.
  • Fixed decoding Facebook and WhatsApp databases where extra folders are created. This may have affected when decoding through Decoders menu, and folders/files were already present in the temp directory.
  • Debuggers were accidentally left in previous versions on some decoders, fixed now.
  • Facebook notifications #bugfix for decoding.

New in Andriller 2.1.4 (Nov 10, 2014)

  • Brute force password lockscreen with personalised combinations of lowercase, uppercase, digits, and custom characters.
  • Before databases are decoded, a copy is created in a "__backup__" folder.
  • SQLite journal files are also downloaded during extraction. Additional data could be recovered from them.
  • Local and UTC times are displayed on startup.
  • WhatsApp messages decoder #bugfix for media thumbnails
  • Some time and date stamp decoding was fixed #bugfix.

New in Andriller 2.1.3 (Nov 10, 2014)

  • MeowChat messages support added;
  • Some wording (and spelling) were re-visited and corrected.

New in Andriller 2.1.2 (Nov 10, 2014)

  • Added Tinder matches and messages support
  • Minor usage improvements