Commit Graph

612 Commits

Author SHA1 Message Date
Daniel Kahn Gillmor 53adc05338 mvt-ios decrypt-backup: Enable pulling password from the environment.
Specifying the password on the command line with `--password XXX`
leaves the password itself visible to any process on the machine which
can scan the process table.

On some systems (including common GNU/Linux distributions) this
visibility is possible by default.

This change should make it possible to offer the password without
putting it into the process table; rather, the user puts the password
in the environment, and specifies the name of the environment
variable, like so:

```
$ export MVT_IOS_BACKUP_PASSWORD=WronglySconeRoundnessUnruffled
$ mvt-ios decrypt-backup -d /path/to/dest /path/to/data/XXXXXXXX-YYYYYYYYYYYYYYY/
$ unset MVT_IOS_BACKUP_PASSWORD
```

or you can do so using a prefixed env var, as described in the updated
check.md documentation.
2021-07-30 23:10:54 -04:00
Nex d7f29a4e88 Updated README 2021-07-30 21:26:48 +02:00
Nex 444e70a6eb Merge branch 'pkirkovsky-extract-key' 2021-07-30 18:47:05 +02:00
Nex b264ae946d Refactored to include functionality in existing DecryptBackup class 2021-07-30 18:46:45 +02:00
Nex bfcfb3aa06 Merge branch 'extract-key' of https://github.com/pkirkovsky/mvt into pkirkovsky-extract-key 2021-07-30 18:29:47 +02:00
Nex 3e7d85039a Merge branch 'EmilienCourt-fix_SMS_PATH' 2021-07-30 18:09:13 +02:00
Nex 632409c81d Using consistent constant names 2021-07-30 18:08:52 +02:00
Nex 6df6064370 Merge branch 'fix_SMS_PATH' of https://github.com/EmilienCourt/mvt into EmilienCourt-fix_SMS_PATH 2021-07-30 18:04:16 +02:00
Nex 99e80fd942 Updated documentation links 2021-07-30 17:59:17 +02:00
Nex 9451da4514 Removed duplicate title 2021-07-30 17:56:05 +02:00
Tek 5ac0025470
Merge pull request #137 from opsec-infosec/main
Update Dockerfile missing sqlite3
2021-07-30 14:34:07 +02:00
opsec-infosec 9a6c4d251e
Update Dockerfile
Add sqlite3 to Dockerfile for extraction of SMS messages
2021-07-30 16:13:06 +04:00
Nex eda1976518 Added missing space in workflow file 2021-07-30 11:43:52 +02:00
Nex c966eea7e6 Sorted imports 2021-07-30 11:40:09 +02:00
Nex abcbefe359 Added safety checks to workflow 2021-07-30 11:39:43 +02:00
Nex 22d090569c Disabled pytest until unit tests are available 2021-07-30 11:20:59 +02:00
Nex d490344142 Removed lint 2021-07-30 11:19:51 +02:00
Nex 7f361fb600
Create python-package.yml 2021-07-30 11:19:20 +02:00
Nex 18ed58cbf9 Removed unused dependency 2021-07-30 11:19:15 +02:00
Nex 3a6f57502e Merge branch 'febrezo-master' 2021-07-30 11:08:47 +02:00
Nex 490fb12302 Refactored creation of output folders 2021-07-30 11:08:32 +02:00
Nex e2d82b0349 Merge branch 'master' of https://github.com/febrezo/mvt into febrezo-master 2021-07-30 10:48:34 +02:00
Nex 1bf7f54c72
Merge pull request #131 from macmade/main
Chrome History - Cheking extracted URLs against indicators.
2021-07-29 13:48:34 +02:00
Nex 60a2dbb860 Added module to parse WebKit ResourceLoadStatistics observations.db (ref: #133) 2021-07-29 13:46:58 +02:00
macmade 5e03c28dbd
Chrome History - Cheking extracted URLs against indicators. 2021-07-29 02:33:32 +02:00
Nex 4fb6e204d1 Ordered iOS versions 2021-07-28 08:33:33 +02:00
Pavel Kirkovsky f4340bd4f9
Merge branch 'mvt-project:main' into extract-key 2021-07-27 17:15:37 -07:00
Nex 7947d413b5
Update lint-python.yml 2021-07-27 21:44:31 +02:00
Nex 45beb6eeda
Update lint-python.yml 2021-07-27 21:43:25 +02:00
Nex ad81d5c450
Delete python-publish.yml 2021-07-27 21:42:21 +02:00
Nex fe8c013b0f Bumped version 2021-07-27 21:40:15 +02:00
Nex caa5d8ee8c
Rename lint_python.yml to lint-python.yml 2021-07-27 21:37:26 +02:00
Nex 2baac1f52c
Create python-publish.yml 2021-07-27 21:37:06 +02:00
Nex dec7616a3d
Merge pull request #124 from cclauss/patch-1
GitHub Action to lint Python code
2021-07-27 21:30:11 +02:00
Nex b1ae777621 Fixed variable name 2021-07-27 21:29:14 +02:00
Nex 404edfee9a Merge branch 'main' of github.com:mvt-project/mvt 2021-07-27 21:28:36 +02:00
Nex 3bb0d5020c Fixed variable name 2021-07-27 21:27:43 +02:00
Christian Clauss b500ee9429
codespell 2021-07-27 12:11:31 +02:00
Christian Clauss 3f2058441a
bandit --recursive --skip B108,B112,B404,B602 . 2021-07-27 12:09:52 +02:00
Christian Clauss 9931edccc4
GitHub Action to lint Python code
Output:
2021-07-27 12:06:47 +02:00
tek 9e33ece3e9 Fixes issue with Manifest format 2021-07-27 01:23:22 +02:00
Nex 32aeaaf91c
Update README.md 2021-07-26 21:48:55 +02:00
Nex 8b253b5e7c
Update README.md 2021-07-26 21:39:49 +02:00
Nex 362bce7c76
Update README.md 2021-07-26 21:38:36 +02:00
Nex e821421ca7
Update README.md 2021-07-26 21:35:35 +02:00
Nex 95ab269671 Fixed some formatting 2021-07-26 19:33:12 +02:00
Tek 49f592ebe8
Merge pull request #116 from adamstiefel/patch-1
fix: readme grammar
2021-07-26 10:53:24 +02:00
Adam Stiefel 6b436f2057
fix: readme grammar
Changed "evidences" to "evidence". Changed "understanding basics" to "understanding the basics". Changed "command line" to "command-line"
2021-07-25 17:16:26 -04:00
Nex 13ce55f4ac Added some context to error message 2021-07-25 15:51:24 +02:00
Tek 2ca0081833
Merge pull request #110 from EmilienCourt/fix_whatsapp
[ADB] Fix WhatsApp database parsing (thumb_image)
2021-07-25 15:25:39 +02:00