GithubHelp home page GithubHelp logo

jfarley248 / meat Goto Github PK

View Code? Open in Web Editor NEW
127.0 9.0 17.0 1.09 MB

This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices

License: GNU General Public License v3.0

Python 100.00%
dfir ios forensics incident-response ediscovery

meat's People

Contributors

jfarley248 avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

meat's Issues

._m2crypto import failed

error

System:

  • Microsoft Surface
  • Windows 10 Pro
  • Python 3.7.4
  • All items in requirements.txt installed via pip -r with no problems.

Logical acquisition fails on Ubuntu 18.04

The serial number in pymobiledevice2/usbmux/usbmux.py is returned as a byte array so string split fails with a stack dump. The following patch fixes it for me but may break other platforms. It is probable that checking the returned type of serial and doing the decode if it is a byte array is the correct fix.

diff --git a/pymobiledevice2/usbmux/usbmux.py b/pymobiledevice2/usbmux/usbmux.py
index 2b0741f..707c18c 100644
--- a/pymobiledevice2/usbmux/usbmux.py
+++ b/pymobiledevice2/usbmux/usbmux.py
@@ -108,7 +108,7 @@ class BinaryProtocol(object):
             return {'Number': struct.unpack("I", payload)[0]}
         elif resp == self.TYPE_DEVICE_ADD:
             devid, usbpid, serial, pad, location = struct.unpack("IH256sHI", payload)
-            serial = serial.split("\0")[0]
+            serial = serial.decode("utf-8").split("\0")[0]
             return {'DeviceID': devid,
                     'Properties': {'LocationID': location, 'SerialNumber': serial, 'ProductID': usbpid}}
         elif resp == self.TYPE_DEVICE_REMOVE:

Full file system extraction - Timestamps are updated to extraction time

HI Jack. I used MEAT to perform a full file system extraction on an iPhone 7 Plus. I am using Checkra1n for my JB. I processed the extraction using two commercial tools. It looks like timestamps for certain directories and files are set to the time I extracted the data. For example, directories and files under the Media category have all timestamps set to yesterday, when I did the extraction. Time stamps for records pulled from databases, like KnowledgeC or call logs, are not updated to extraction time. Please let me know what other information I can provide about this issue, to help resolve it.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.