Showing posts with label iosforensic. Show all posts
Showing posts with label iosforensic. Show all posts

Tuesday, March 7, 2017

OWASP iOSForensic Tool to help in forensics analysis on iOS

OWASP iOSForensic Tool to help in forensics analysis on iOS



OWASP iOSForensic is a python tool to help in forensics analysis on iOS.
It get files, logs, extract sqlite3 databases and uncompress .plist files in xml.

OWASP iOSForensic provides:
  • Applications files
  • Conversion of .plist files in XML
  • Extract all databases
  • Conversion of binary cookies
  • Applications logs
  • A List of all packages
  • Extraction multiple packages

Options

  • -h --help : show help message
  • -a --about : show informations
  • -v --verbose : verbose mode
  • -i --ip : local ip address of the iOS terminal
  • -p --port : ssh port of the iOS terminal (default 22)
  • -P --password : root password of the iOS terminal (default alpine)
Examples:
./iOSForensic.py -i 192.168.1.10 [OPTIONS] APP_NAME.app INCOMPLETE_APP_NAME APP_NAME2_WITHOUT_DOT_APP
./iOSForensic.py -i 192.168.1.10 -p 1337 -P pwd MyApp.app angry MyApp2


Download OWASP iOSForensic

Go to link download

Read more »