Skip to content

Repository navigation

LEXIS - 1.2 LEAPPS Reader

Choose a tag to compare

View all tags
@G33KF G33KF released this 20 Oct 13:02
· 16 commits to main since this release
Lexis_V.1.2_First_Release
e511b75

LEXIS 1.2.0 — first public release

Connect the devices, read the story.
LEXIS is a multi-device mobile forensics workstation built on ALEAPP and iLEAPP. It runs as one portable Windows exe that is read-only by design. There is no Python, no install and no setup: download it, check the hash, and open your case.

Check Logics and Architecture here https://g33kf.github.io/LEXIS

Why LEXIS

  • One exe, two engines. ALEAPP (Android) and iLEAPP (iOS) are embedded. Open an existing LEAPP report or analyze a fresh extraction: folder, zip, tar, iTunes/Finder backup (encrypted too) or adb backup.
  • Multi-device by design. Investigation cases hold every phone of the case side by side, with a joint timeline, a joint map, co-presence (who was where, together) and common contacts across devices.
  • Read the data, not the tables.
    • Chats rendered as conversations, exportable to HTML reports.
    • A timeline of every datetime field.
    • A map with zones of interest.
    • A media gallery linked to the messages.
    • Statistics of user activity.
    • One search syntax across every device.
  • Down to the bytes. The Extraction Files browser has magic-byte typing and browses nested archives. A SQLite reader carves records from the WAL and free pages, and a plist reader resolves NSKeyedArchiver.
  • Indicators. STIX2 and hash sets, root and jailbreak traces, weakened security settings, and crypto addresses and seed phrases checked by their checksum.
  • Evidence-grade handover.
    • Tags and notes on anything.
    • Portable cases with the source or tagged files, each checked by SHA-256 and signed with the examiner's ECDSA key, with built-in package verification.
    • A log of every export.
  • AI, on your terms. Off by default and local first (Ollama, LM Studio, whisper.cpp). Every answer cites its records. An MCP server lets any MCP client read the open case.

Download

File
LEXIS-1.2.0-win-x64.exe The application (Windows 10/11 x64)
LEXIS-1.2.0-win-x64.exe.sha256 Checksum
LEXIS-presentation.pdf Features, forensic principles, modules and sources

To check the download:

Get-FileHash .\LEXIS-1.2.0-win-x64.exe -Algorithm SHA256
# fc4c4dadd14f1527585aa8faf68f41000839ebb564529e555cbe757aa9dd61b2

The exe is not code-signed, so SmartScreen may warn on first launch. Verify the hash, then choose More info → Run anyway.

Credits

Built on ALEAPP and iLEAPP by Alexis Brignoni and contributors (MIT). Every other source and licence is listed in the README.
LEXIS is an independent project, not affiliated with or endorsed by the LEAPP project.

Contact: info@gk-forensics.com · LinkedIn

Assets 6
Loading