Nex
27847bf16c
Added counter for loaded indicators
2021-08-18 13:18:34 +02:00
Nex
48810af83d
Fixed creation of Indicators instance
2021-08-18 13:12:37 +02:00
Nex
6a63256b5c
Added ability to import multiple STIX2 indicators files
2021-08-18 13:08:32 +02:00
Nex
cbdbf41e1e
Restructured modules folders
2021-08-15 13:14:18 +02:00
Nex
cf630f7c2b
Fixed unused imports
2021-08-14 18:56:33 +02:00
Nex
88e2576334
Copying plist files too when decrypting a backup
2021-08-14 18:25:41 +02:00
Nex
8a91e64bb9
Catching gracefully if indicators file parse fails
2021-08-12 20:17:37 +02:00
Nex
88324c7c42
Standardized to logging format
2021-08-12 12:48:29 +02:00
Daniel Kahn Gillmor
1288f8ca53
handle error cases better
2021-08-10 22:57:15 -04:00
Nex
f011fd19e8
More explicit copyright and licensing notes
2021-08-01 21:11:08 +02:00
Nex
be24680046
Enforcing double quotes
2021-08-01 19:50:04 +02:00
Nex
b2e210e91c
Removed unused import
2021-08-01 14:16:28 +02:00
Nex
bc3634bf30
Specifying it is a password prompt
2021-07-31 10:27:44 +02:00
Nex
ad9ab1aeba
Switched to using rich Prompt
2021-07-31 10:13:18 +02:00
Daniel Kahn Gillmor
270e002f1b
mvt-ios extract-key: enable pulling password from the environment
...
This enables automated use of extract-key without requiring a password
to be placed in the command line, where it might leak.
2021-07-30 23:10:54 -04:00
Daniel Kahn Gillmor
53adc05338
mvt-ios decrypt-backup: Enable pulling password from the environment.
...
Specifying the password on the command line with `--password XXX`
leaves the password itself visible to any process on the machine which
can scan the process table.
On some systems (including common GNU/Linux distributions) this
visibility is possible by default.
This change should make it possible to offer the password without
putting it into the process table; rather, the user puts the password
in the environment, and specifies the name of the environment
variable, like so:
```
$ export MVT_IOS_BACKUP_PASSWORD=WronglySconeRoundnessUnruffled
$ mvt-ios decrypt-backup -d /path/to/dest /path/to/data/XXXXXXXX-YYYYYYYYYYYYYYY/
$ unset MVT_IOS_BACKUP_PASSWORD
```
or you can do so using a prefixed env var, as described in the updated
check.md documentation.
2021-07-30 23:10:54 -04:00
Nex
b264ae946d
Refactored to include functionality in existing DecryptBackup class
2021-07-30 18:46:45 +02:00
Nex
bfcfb3aa06
Merge branch 'extract-key' of https://github.com/pkirkovsky/mvt into pkirkovsky-extract-key
2021-07-30 18:29:47 +02:00
Nex
c966eea7e6
Sorted imports
2021-07-30 11:40:09 +02:00
Nex
490fb12302
Refactored creation of output folders
2021-07-30 11:08:32 +02:00
Nex
e2d82b0349
Merge branch 'master' of https://github.com/febrezo/mvt into febrezo-master
2021-07-30 10:48:34 +02:00
Pavel Kirkovsky
9fbcce4340
Add extract-key command
2021-07-22 23:52:52 -07:00
Nex
3004690fd1
Merge pull request #21 from pkirkovsky/prompt-password
...
Prompt for password if none is given
2021-07-21 11:20:24 +02:00
Tyler Kellogg
967eb75e7c
[iOS CLI] Remove non-existent SYSDIAGNOSE_MODULES reference
2021-07-20 15:01:09 -07:00
Pavel Kirkovsky
695555f26f
Prompt for password if none is given
2021-07-20 05:44:36 -07:00
febrezo
732db070f2
Add implicit creation of output folders
2021-07-20 03:09:53 +02:00
Nex
065a62cee1
First commit
2021-07-16 08:05:01 +02:00
