newsMobius Forensic Toolkit - News

 
 

Mobius Forensic Toolkit v2.15 Released

Item posted by Eduardo Aguiar <aguiar> on Sun 01 Jun 2025 06:34:13 PM UTC.

Hi!

Mobius Forensic Toolkit v2.15 has been released. This release features full migration from Autotools to CMake, Restructured Source Code Organization and New µTorrent C++ Extension.

# Mobius Forensic Toolkit 2.15 Release Notes

## Major Changes

### Project Structure Reorganization

  - Restructured source code organization:
        - src/mobius renamed to libmobius_core
        - src/mobius/framework renamed to libmobius_framework
        - src/python/mobius renamed to libmobius_python
        - Module src/python/pymobius moved to src
        - Module src/python removed

### Build System Migration

  - Complete migration from Autotools to CMake:
        - All libraries now use CMake build system
        - All tools now use CMake build system
        - Created include module structure with proper headers organization

### File Extensions Standardization

  - All source files renamed from .h/.cc to .hpp/.cpp for consistency across:
        - libmobius_python
        - libmobius_core
        - libmobius_framework
        - src/tools

## New Features

### uTorrent Support

  - Added new C++ extension "app-utorrent".

        - app-utorrent decodes the following µTorrent config files:
                - dht.dat/dht.dat.old
                - settings.dat/settings.dat.old
                - resume.dat/resume.dat.old

        - app-utorrent loads the following evidences:
                - User accounts
                - IP Addresses (external IP addresses used by users)
                - Local files
                - P2P remote files
                - Received files
                - Sent files
                - Shared files

  - Added new tools:
        - utorrent_dht_dat
        - utorrent_resume_dat
        - utorrent_settings_dat

### Core Library Enhancements

  - New walker methods for improved file navigation:
        - walker::get_entries_with_names
        - walker::get_files_with_names
        - walker::get_folders_with_names
  - Added data manipulation improvements:
        - New method pod::map::pop
        - New class value_selector for handling value precedence
        - New class is_empty_checker for type-specific emptiness detection
        - New method pod::map::empty
        - Added evidence_flag::to_string method to framework

## Removals

  - Removed pymobius.ant.evidence.vfs.ip_addresses module
  - Removed uTorrent support from pymobius.ant.evidence.vfs.account

## Migration Notes
With the complete transition to CMake and the standardized file naming convention, developers will need to update any custom build scripts or direct include references to match the new structure.

You can download this release at https://www.nongnu.org/mobiusft.

Please, visit our Github repository at: https://github.com/eduardoaguiar-oss/mobiusft.

Please, support this project. Here are the ways you can make a donation:
  * Buy me a coffee at https://buymeacoffee.com/mobiusft
  * Send any amount of crypto coins to one of the addresses listed at https://www.nongnu.org/mobiusft

Best regards,
Eduardo Aguiar

Back to the top

Powered by Savane 3.15-26b0.
Corresponding source code