Giter VIP home page Giter VIP logo

itunes_backup_reader's People

Contributors

jfarley248 avatar marvimalware avatar ydkhatri avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

itunes_backup_reader's Issues

Getting multiple errors, even with long paths enabled

NotADirectoryError: [WinError 267] The directory name is invalid: 'D:\\iosTEST\\Device_C6KCD8L4N72P_Folders\\Recreated_Structure\\Library/AddressBook/Family/REDACTED:1'
FileNotFoundError: [Errno 2] No such file or directory: 'D:\\iosTEST\\Device_C6KCD8L4N72P_Folders\\Recreated_Structure\\Library/Mobile Documents/com~apple~CloudDocs/Documents/REDACTED/REDACTED.mp3.icloud'
OSError: [WinError 123] The filename, directory name, or volume label syntax is incorrect: 'D:\\iosTEST\\Device_C6KCD8L4N72P_Folders\\Recreated_Structure\\Library/DeviceRegistry/FE90C671-4466-4143-9BFF-A733DA3CACA5/BulletinDistributor/attachments/REDACTED::snap'

Where is the exe?

I seem to be having numerous problems running the iTunes-Backup-Reader.py file, and I see mention of an .exe, but no such file exists in this github. Where is this file and would I possibly have different results?

I'm using Python3.8 to run the .py.

Dynamically choose folder delimiters

When I ran your script on Linux I noticed that you often use replace('/', '\\') to fix the paths for Windows (including some other occurrences when you concatenate). To get it working for every OS you could detect the OS (e.g. by using os.name) and then decide what the delimiter should be.

Edit:
I just replaced all static "\\" with a "/" and commented out all replaces like the one mentioned and what can I say? It works! :-D

I'm really glad because I tried a few different tools without any success though I got them to run (after some time I needed to get there). Thanks a lot!

P.S.: Here are my temporary changes: Fork of your repo

Add requirements file to repository

When I tried to run the script I was missing some dependencies that could be added to a requirements file:

  • pathlib_revised
  • construct
  • biplist

Thank you for sharing this.

Bug with \ and / when executed on a Linux

hello, I would like to inform you I think I meet a pb in the script. When it's eecuted on windows it's ok, but when it's executed in Linux there is a problem on the directory hierarchy, for example:

11-19 11:16 root         DEBUG    Trying to copy /mnt/apple/182066-MobileSync/Backup/9ef456a782d0c5619929d4c362b3cb7687e96cf4/5e/5ed69043ba53237d23941617e75e73af0e9fad4f to /mnt/apple/extract2/Recreated_File_Structure/Library\SMS\Attachments\42\02\4B306879-ACD1-49BF-B61C-47F27A53C6D9\4B306879-ACD1-49BF-B61C-47F27A53C6D9.pvt\IMG_3773.MOV
11-19 11:16 root         DEBUG    Successfully copied /mnt/2to/apple/182066-MobileSync/Backup/9ef456a782d0c5619929d4c362b3cb7687e96cf4/5e/5ed69043ba53237d23941617e75e73af0e9fad4f to /mnt/apple/extract2/Recreated_File_Structure/Library\SMS\Attachments\42\02\4B306879-ACD1-49BF-B61C-47F27A53C6D9\4B306879-ACD1-49BF-B61C-47F27A53C6D9.pvt\IMG_3773.MOV
11-19 11:16 root         DEBUG    Successfully recreated file: \Library/SMS/Attachments/42/02/4B306879-ACD1-49BF-B61C-47F27A53C6D9/4B306879-ACD1-49BF-B61C-47F27A53C6D9.pvt/IMG_3773.MOV from source file: 5ed69043ba53237d23941617e75e73af0e9fad4f

Does this/can this export the ItemID

I am having trouble using this due to Unicode errors, but before I spend too much time debugging that, can this script export Application ItemIDs?

For instance, Facebook is 284882215

Imazing used to be able to extract this into files that contained XML like:

<key>itemId</key>
<integer>284882215</integer>
<key>itemName</key>
<string>Facebook</string>

I would like to be able to use that to lookup an app on sites such as:

https://apps.apple.com/us/app/id284882215

Thanks!

Can not read data if no Status.plist file is present

I have an incomplete backup that contains the "info.plist", "Manifest.mbdb", and "Manifest.plist" files, as well as the other long name files. It does not contain a "Status.plist" file. Other tools are able to pull data from it (In the trial), but this reader fails without the "Status.plist" file. Can you add a flag that allows the program to continue with the information it has?

error: unrecognized arguments

Ran the script on a newly encrypted backup and received this error.
moc os

local_user@Jasons-MBP iTunes_Backup_Reader % python3.9 iTunes_Backup_Reader.py -i /Users/local_user/Library/Application Support/MobileSync/Backup/2c2495e32d7f952bd91b9b98ec3f850cbf006e60 -o /Users/local_user/iTunes_Backup_Reader/Output -p IlMkA855813 -t db

iTunes backup file type 4 found in database

There are now type 4 files in my unencrypted Manifest.db backup database.
The script leaves this in my log file:
12-04 20:03 root INFO Found file with type of 4: timezone/localtime
12-04 20:03 root INFO Type 4 files aren't found in iTunes Backups... But we'll check anyway
12-04 20:03 root INFO Nope, file: timezone/localtime does not exist

iOS 13.4.1, iTunes 12.6.3, unencrypted backup

Manifest.db with over 200000 records, of which about 100+ are type 4

	fileID																domain										relativePath													flags	file

e3540e8d172fe75286c9fdbbd1159eed5ad AppDomain-a.pub.store.com Library/WebKit/WebsiteData/IndexedDB/v0 4
468f00eba85a38dae251df378bad0cded3b AppDomain-com.thomasjanson.wavewaveiOS Library/WebKit/WebsiteData/IndexedDB/v0 4
42d31fac7053af9a2d3a32cf66d62d07b38 AppDomain-com.microsoft.Office.Outlook Library/WebKit/WebsiteData/IndexedDB/v0 4
5811d93230a422edf0fdd1c8738a614ec08 AppDomain-com.tunein.TuneInRadio Library/WebKit/WebsiteData/IndexedDB/v0 4
2f0c607c43ee8872e91be750ee83c888dde AppDomain-com.merch-chicago.Reset Library/WebKit/WebsiteData/IndexedDB/v0 4
9a113be4506ea6de721d530af157c888f72 AppDomainPlugin-com.adobe.PSMobile.PSXPhotoExtension Library/WebKit/WebsiteData/IndexedDB/v0 4
28ac35d9a820bf08ca7b1ccdb1740d40b59 AppDomain-com.hammerandchisel.discord Library/WebKit/WebsiteData/IndexedDB/v0 4
33c73a2a2f1910e3b76d83df5203e03dff2 AppDomain-co.visualsupply.cam Library/WebKit/WebsiteData/IndexedDB/v0 4
0d2802e823cf97be769bc159c35350f815b AppDomain-com.yahoo.flickr Library/WebKit/WebsiteData/IndexedDB/v0 4
4ca64f2c55330a0aaa98a4d46d793c8a799 AppDomain-com.brave.ios.browser Library/WebKit/WebsiteData/IndexedDB/v0 4
a07e37911ebbc82d1e2c768bbc8ca0265cf AppDomain-com.google.Primer Library/WebKit/WebsiteData/IndexedDB/v0 4
2862c6bfd5960ee8debfe82c1a031cf5358 AppDomain-com.google.Maps Library/WebKit/WebsiteData/IndexedDB/v0 4
f88428cb8db0c63862d541ba0bea4f697ff AppDomain-com.google.Chromecast Library/WebKit/WebsiteData/IndexedDB/v0 4
8fe77737fb813d0e9751619c506b10a9c63 AppDomain-com.yelp.yelpiphone Library/WebKit/WebsiteData/IndexedDB/v0 4
ee63eedb82d869cceecd01a8d206cb0cfae AppDomain-com.adobe.Adobe-Reader Library/WebKit/WebsiteData/IndexedDB/v0 4
6c35bf0247e8655a4560df51d153f02c4fb AppDomain-com.masterkeygames.listeningmaster Library/WebKit/WebsiteData/IndexedDB/v0 4
9487ae5f215d64480b287d2b0e91e26afa1 AppDomain-com.assiainc.cloudcheck.wifisweetspots Library/WebKit/WebsiteData/IndexedDB/v0 4
2f55eb5e1046361f27619b26f1cdfebaa45 AppDomain-com.xe.XECurrency Library/WebKit/WebsiteData/IndexedDB/v0 4
00fd2e10102c6f354ef8f9741a2c5669fbf AppDomain-org.cloudcity.bodyenhancercamera Library/WebKit/WebsiteData/IndexedDB/v0 4
2663c3b344f8d092662c3f8a37013b311dd AppDomain-com.philips.lighting.hue2 Library/WebKit/WebsiteData/IndexedDB/v0 4
6e194452748ad358250ac971ec45eb2c76f AppDomain-com.apple.mobilemail Library/WebKit/WebsiteData/IndexedDB/v0 4
ae50fe9f8309cab5fe3d5bc9c01318070fd AppDomain-com.google.calendar Library/WebKit/WebsiteData/IndexedDB/v0 4
57a35793573c15e03a7696bf04fd77d5c1c AppDomainPlugin-com.dar-soft.WebToPDFiPad.WebToPDFExtension Library/WebKit/WebsiteData/IndexedDB/v0 4

d8a8f171ef637c4075e8a944421a1789107 DatabaseDomain timezone/localtime 4

60fd0c85032836420969d2f3b1a3016b83b AppDomain-com.yourcompany.PPClient Library/WebKit/WebsiteData/IndexedDB/v0 4
a3ae1cba12d5308d65968005f5b6fe90b43 AppDomain-com.smoothmobile.gifcreator Library/WebKit/WebsiteData/IndexedDB/v0 4
ad6ef41a9ae86594f17f4f7f9d3f395fad9 AppDomain-Concrete-Calc Library/WebKit/WebsiteData/IndexedDB/v0 4
5238f758f884a7dfdc2dae72ccb3ff0f00d AppDomain-com.examobile.altimeter Library/WebKit/WebsiteData/IndexedDB/v0 4
4045d415cf099b4530d9b442a3717429456 AppDomain-com.amazon.Drive Library/WebKit/WebsiteData/IndexedDB/v0 4
39fd5616a5882a4852f12945a4be8f1a0e8 AppDomain-com.udemy Library/WebKit/WebsiteData/IndexedDB/v0 4
c74075c99869ce30e0b6d1c996ef590877b AppDomain-banggood.shop Library/WebKit/WebsiteData/IndexedDB/v0 4
3b81eb58b81bf71d16327049a640f65eb93 AppDomain-com.scribd.iscribd Library/WebKit/WebsiteData/IndexedDB/v0 4
ef95b025a98af0e9db5ed1d488094754739 AppDomain-com.tennisaustralia.ao2010 Library/WebKit/WebsiteData/IndexedDB/v0 4
b34202acb1670febf13693cbe447f1b324a AppDomain-com.google.photos Library/WebKit/WebsiteData/IndexedDB/v0 4
3fa569f2e950b1b1fdda59c5fd4e2e91a75 AppDomain-com.picture.collage.sb Library/WebKit/WebsiteData/IndexedDB/v0 4
92c30ac9342a8c42bed0b3aad8375a7f15f AppDomain-com.quora.app.mobile Library/WebKit/WebsiteData/IndexedDB/v0 4
09478a0fcb5356680c6b8393cf182167e68 AppDomainPlugin-com.sugarmo.ScrollClip.WebSnapshot Library/WebKit/WebsiteData/IndexedDB/v0 4
3cc09304e3b908376781c2e45df44ea4f3d AppDomain-com.pentaloop.torbrowser Library/WebKit/WebsiteData/IndexedDB/v0 4
227e417f05223e1a56978e8496ac4706b58 AppDomain-com.brainiumstudios.solitairefree Library/WebKit/WebsiteData/IndexedDB/v0 4
af03ca0ee30919a2c0183c9f88419ff0845 AppDomain-com.apple.MailCompositionService Library/WebKit/WebsiteData/IndexedDB/v0 4
a4a6ac2f5f6b0ffec72aa49407bd212f7a7 AppDomain-net.skyscanner.iphone Library/WebKit/WebsiteData/IndexedDB/v0 4
e393dd00eebee109f723b3d8043f5c80ebc AppDomain-com.weplaydots.twodots Library/WebKit/WebsiteData/IndexedDB/v0 4
9273a592b8854bff921700282d51ad42070 AppDomain-com.blum.pai037 Library/WebKit/WebsiteData/IndexedDB/v0 4
2517e47baee07fc8b55a7d48f3f394971cd AppDomain-com.wpointspay.pointspay Library/WebKit/WebsiteData/IndexedDB/v0 4
a38bc5733de280a388dd4f3c5d652d9a187 AppDomain-com.hypercalc.graphing Library/WebKit/WebsiteData/IndexedDB/v0 4
e5191c67183811d2e656d9a2d5b2672d9d4 AppDomain-com.area120.Grasshopper.prod Library/WebKit/WebsiteData/IndexedDB/v0 4
2d9076ab8340759813b262d83d8b9f4f9cd AppDomain-com.expedia.booking Library/WebKit/WebsiteData/IndexedDB/v0 4
839aed6188a05807393bf45ba09996eab2c AppDomain-com.geomagik.pocketearth Library/WebKit/WebsiteData/IndexedDB/v0 4
44b9f1aea799b3027f03f71b48d6c9024ef AppDomain-com.adobe.PSMobile Library/WebKit/WebsiteData/IndexedDB/v0 4
0657a7a6b79110789c03fb50d7cf7940ad8 AppDomain-com.apple.supportapp Library/WebKit/WebsiteData/IndexedDB/v0 4
0117e021dad6b09d3559a42f478d346b400 AppDomain-de.2kit.cast-browser-lg Library/WebKit/WebsiteData/IndexedDB/v0 4
d7be4284c15a9863660b4ac793339e4c3f2 AppDomain-com.tuya.smartlife Library/WebKit/WebsiteData/IndexedDB/v0 4
6a7fe7320fd70a88c43d1839c239f01df24 AppDomain-com.dailymotion.dailymotion Library/WebKit/WebsiteData/IndexedDB/v0 4
414bfd2350a6eb9668005ac20277195189a AppDomain-com.artemisK.SafeSwiss Library/WebKit/WebsiteData/IndexedDB/v0 4
bde4e5b944c390b1215bfca57195a782a34 AppDomain-com.pandora Library/WebKit/WebsiteData/IndexedDB/v0 4
4c6b5d4f7b3e9360a7d11bf736d336d0c8b AppDomain-com.tuya.smart Library/WebKit/WebsiteData/IndexedDB/v0 4
eb790888fffd0556332ff292cdda4888315 AppDomain-com.FenderDigital.Play Library/WebKit/WebsiteData/IndexedDB/v0 4
8918211c9d86dc45d64ea52d12c918ba7c6 AppDomain-com.imesart.USBDisk Documents/Welcome.html 4
c324fe9164f68c1fe806b899954f976b50d AppDomain-com.yourcompany.TestWithCustomTabs Library/WebKit/WebsiteData/IndexedDB/v0 4
17876c13dc81ae56dc3ac5a5e779f06baf2 AppDomain-com.woo-interactive.Artech Library/WebKit/WebsiteData/IndexedDB/v0 4
2b459e125cfd7b027511f3e4c9b924046e7 AppDomain-com.google.GoogleMobile Library/WebKit/WebsiteData/IndexedDB/v0 4
84cce78e5eb129da9f235322362491fa598 AppDomain-overlook.fing Library/WebKit/WebsiteData/IndexedDB/v0 4
04d262a79fa2c9b9c960334bb615cbe717e AppDomain-com.apple.store.Jolly Library/WebKit/WebsiteData/IndexedDB/v0 4
6c920d951a9d8fb96560e37e5143bb7228d AppDomain-it.twsweb.Nextcloud Library/WebKit/WebsiteData/IndexedDB/v0 4
4a21c8bcea8a8c97bd92922c94a0688a6ad AppDomain-HM.wristband Library/WebKit/WebsiteData/IndexedDB/v0 4
e85f2aec451a3ece65076c47477b9b5b08b AppDomain-com.ubercab.UberClient Library/WebKit/WebsiteData/IndexedDB/v0 4
7e2ccc854d76fe6f43257c578c1e48c46d6 AppDomain-com.nordvpn.NordVPN Library/WebKit/WebsiteData/IndexedDB/v0 4
3ecfb5aca96e38e2868f65a5fc92aaefa82 AppDomain-me.myLanguage.Vocre Library/WebKit/WebsiteData/IndexedDB/v0 4
1854b59894af919cb474783385ed1cdaea7 AppDomain-com.moobidigittech.WebCast Library/WebKit/WebsiteData/IndexedDB/v0 4
4c44d525923ed747f67d0c341ced8a84b2d AppDomain-com.microsoft.Office.Excel Library/WebKit/WebsiteData/IndexedDB/v0 4
87a002e758b45f73c102590dd1f930d730d AppDomain-com.autodesk.ios.fusion360 Library/WebKit/WebsiteData/IndexedDB/v0 4
9a242100b12208faec4ecd75230ee0819a9 AppDomain-sk.halmi.Swift-Currency-Converter Library/WebKit/WebsiteData/IndexedDB/v0 4
9cfe3c377dcefd9a83a93f5ce46644b87dd AppDomain-com.adobe.lens Library/WebKit/WebsiteData/IndexedDB/v0 4
dc5a531b40a600d943f6eea98e57ad74638 AppDomain-imgurmobile Library/WebKit/WebsiteData/IndexedDB/v0 4
fdc6c672a111674eb262a83b0ce7c95a509 AppDomain-app.homey Library/WebKit/WebsiteData/IndexedDB/v0 4
29cf622b38f0c652b820f6586118e3fdfb9 AppDomainPlugin-com.mozkan.pdfsearchios.PDFSearchImportAction Library/WebKit/WebsiteData/IndexedDB/v0 4
db9094ee9f4466ea7cada4b057b40928881 AppDomain-org.wikimedia.wikipedia Library/WebKit/WebsiteData/IndexedDB/v0 4
bf7c836f23d46be8ec5e446ceafd2ab6bce AppDomain-com.soundcloud.TouchApp Library/WebKit/WebsiteData/IndexedDB/v0 4
860ab40b455500bf8d21faf02694be8a853 AppDomain-com.booking.BookingApp Library/WebKit/WebsiteData/IndexedDB/v0 4
8d34fb6e7275981b040b296ff613373a066 AppDomain-com.google.ios.youtubemusic Library/WebKit/WebsiteData/IndexedDB/v0 4
52cb2774fe5fd9a74afe44a5d7a0d9da40b AppDomain-com.bhphotovideo.iphone Library/WebKit/WebsiteData/IndexedDB/v0 4
e7bebd1abdeae58508048ed18be38889a48 AppDomain-com.xiaomi.mihome Library/WebKit/WebsiteData/IndexedDB/v0 4
32fbe38f8c260f6488cebb3cb465d15882a AppDomain-com.bornneet.Edhita Library/WebKit/WebsiteData/IndexedDB/v0 4
643c1d0380a6ad34f8ea480f1a09d44afa5 AppDomain-mobi.digitalminds.itunerfree Library/WebKit/WebsiteData/IndexedDB/v0 4
7844f65e5d96656068dd30b282b94d306fb AppDomain-de.onieper.GPSTracker Library/WebKit/WebsiteData/IndexedDB/v0 4
aaa9b63a690034b4574d055052f552f867a AppDomain-com.BarefootForLife.MapMyDrive Library/WebKit/WebsiteData/IndexedDB/v0 4
bd15e895ba4a524bade16fc2b7287e46d18 AppDomain-com.google.Tachyon Library/WebKit/WebsiteData/IndexedDB/v0 4
5a95f167f7aa768ccbfab646ddca15f3e3e AppDomain-com.ookla.speedtest Library/WebKit/WebsiteData/IndexedDB/v0 4
41a67524f64537971b637ac7515eeba32ca AppDomain-com.spotify.client Library/WebKit/WebsiteData/IndexedDB/v0 4
4b9b2b6c6887d036aad118d98efd5b254cf AppDomain-com.google.Gmail Library/WebKit/WebsiteData/IndexedDB/v0 4
bd6235be2aa17107906cf7bd1ef241d5705 AppDomain-com.google.ios.ytcreator Library/WebKit/WebsiteData/IndexedDB/v0 4
524b7f420035f48228bb4f8121e24e82ef2 AppDomain-com.Marz-Software.iPush-Up-Counter-Pro Library/WebKit/WebsiteData/IndexedDB/v0 4
62afc3535f5ab359ca0181ff30d0fd4a92a AppDomain-com.qualtie.minesweeperarcade Library/WebKit/WebsiteData/IndexedDB/v0 4
67a789af8a92f90fc8647548ef50c6f01cf AppDomain-com.alibaba.iAliexpress Library/WebKit/WebsiteData/IndexedDB/v0 4
9b57d7531a4f42e04fea29cf2d0ea78b43d AppDomain-com.swiss.launcher Library/WebKit/WebsiteData/IndexedDB/v0 4
abb06e438f5aa2e77b7b5b3d662c8c2ee8c AppDomain-com.dayananetworks.myaltitude Library/WebKit/WebsiteData/IndexedDB/v0 4
29c500b6cc172af6b381142f6ebb4d0684f AppDomain-com.comcsoft.iZip Library/WebKit/WebsiteData/IndexedDB/v0 4
bb9954bedec7359ebf7135cf2c28e1f5114 AppDomainPlugin-com.readdle.PrinterPro.PrinterProExtension Library/WebKit/WebsiteData/IndexedDB/v0 4
535074d6ac5a6385c97a376a579eceb5679 AppDomainPlugin-com.apple.shortcuts.Run-Workflow Library/WebKit/WebsiteData/IndexedDB/v0 4
36db107626a08da68579ed60874728dc052 AppDomain-com.flydubai.app.booking Library/WebKit/WebsiteData/IndexedDB/v0 4
41c8f51ee67e79db5cd3ab4a8232012a47d AppDomain-com.skype.skype Library/WebKit/WebsiteData/IndexedDB/v0 4
52b480cc014b9a4d1b62b87d6a8f81375d1 AppDomain-com.ebay.iphone Library/WebKit/WebsiteData/IndexedDB/v0 4
01ab0d7aa330bd2eddad93fe3756a8652ef AppDomain-slowmo.video.app.com Library/WebKit/WebsiteData/IndexedDB/v0 4
35adfaf59aaa90140deb3ad4d066153cf62 AppDomain-com.windytv.ios Library/WebKit/WebsiteData/IndexedDB/v0 4
3394334e2e5a8643e2fe1954aac77122388 AppDomain-com.blackpawn.sketchclub Library/WebKit/WebsiteData/IndexedDB/v0 4
5f1a89e958acd731bff6b3ddc4a88351e22 AppDomain-net.techet.netanalyzerlite Library/WebKit/WebsiteData/IndexedDB/v0 4
8d6bbb7ea01914301f12c36298fdf6f78f1 AppDomain-com.opera.OperaTouch Library/WebKit/WebsiteData/IndexedDB/v0 4
3bed08748887674a32fb95abce62a266986 AppDomain-lwbrands.stormTracker Library/WebKit/WebsiteData/IndexedDB/v0 4
f45fff3b190114133ce10071871447a864a AppDomain-self.edu.Kompressor Library/WebKit/WebsiteData/IndexedDB/v0 4
9aedb5bda2bb942113d8278dbb249384fad AppDomain-com.lge.remoteapp.webos14 Library/WebKit/WebsiteData/IndexedDB/v0 4
74ff99a015094484877c16387fa22cbe069 AppDomain-cc.coolkit.ios.cn Library/WebKit/WebsiteData/IndexedDB/v0 4
19503e0cce19fcbab5f039a6d42106a36d9 AppDomain-com.google.OPA Library/WebKit/WebsiteData/IndexedDB/v0 4
0f20cc06b9f4a86bb5d233182ff29d0c60a AppDomain-com.dar-soft.WebToPDFiPad Library/WebKit/WebsiteData/IndexedDB/v0 4
6a293f7c9d187852bacded911e08902028a AppDomain-com.shabzco.memecreator Library/WebKit/WebsiteData/IndexedDB/v0 4
86676bfe2507bccaa4dae0dc581d92d761e AppDomain-com.vimeo Library/WebKit/WebsiteData/IndexedDB/v0 4
c59e2030b9ca97d9282bb12cf1ffb2df223 AppDomain-com.mttnow.iphone.etihad Library/WebKit/WebsiteData/IndexedDB/v0 4
d9cc97c9d49dcdfc5dc20973182c4429cf2 AppDomain-com.google.ios.youtube Library/WebKit/WebsiteData/IndexedDB/v0 4
e26ee270debf5b9fd3e7bf1fb557db26751 AppDomain-com.pspdfkit.viewer Library/WebKit/WebsiteData/IndexedDB/v0 4
ce919c85a6d75909f174404cebaa74cb955 AppDomainPlugin-com.apple.quicklook.extension.previewUI Library/WebKit/WebsiteData/IndexedDB/v0 4
23f3df316a27d3ab9dd35e4707c6ecb2174 AppDomain-in.appear.app Library/WebKit/WebsiteData/IndexedDB/v0 4
afeaf1a55710ef6ae78f6ab055a179e1eff AppDomain-product.enacti.notes Library/WebKit/WebsiteData/IndexedDB/v0 4
2c39301dbd3171829f1c1ef32064cd908ca AppDomainGroup-group.com.imesart.USBDisk Documents/Welcome.html 4
3cac82871fb0b3098d4b57871038cafa438 AppDomain-com.mx.gfuentesdev.tvcast Library/WebKit/WebsiteData/IndexedDB/v0 4
cbf859b26b1c855af62624bc33279a7e5cc AppDomain-com.tmsoft.NoiseGenerator Library/WebKit/WebsiteData/IndexedDB/v0 4
d039037ea2a47e47bf1606f3a4acc64bb7c AppDomain-com.packtpub.reader Library/WebKit/WebsiteData/IndexedDB/v0 4
e7ae1df940257b1b18929a5072545a5ccf7 AppDomain-com.flyvoip.wifiapplite Library/WebKit/WebsiteData/IndexedDB/v0 4
979af40e38efa09c8e6e120e93352452c01 AppDomain-com.amazon.Amazon Library/WebKit/WebsiteData/IndexedDB/v0 4
64c4edbbf8e0df1ffb6ae15a4c67c06f506 AppDomain-com.buzzfeed.buzzfeed Library/WebKit/WebsiteData/IndexedDB/v0 4
598ca9e1293fb01a0643440e3e6f4ad02eb AppDomain-com.adobe.lrmobilephone Library/WebKit/WebsiteData/IndexedDB/v0 4
fb5e0c879b7bc1fcf85aad5e9607c763601 AppDomain-com.amazon.Lassen Library/WebKit/WebsiteData/IndexedDB/v0 4
73faa39d44d82db1148620a952d56c3b8bc AppDomain-com.themarket.cordova Library/WebKit/WebsiteData/IndexedDB/v0 4
15f920d7864e5f93d285fb691892d3a55e6 AppDomain-com.google.MyBusiness Library/WebKit/WebsiteData/IndexedDB/v0 4
06322a524d967d41db31be7db22fed19991 AppDomain-com.google.chrome.ios Library/WebKit/WebsiteData/IndexedDB/v0 4
d596ada179ce4fa70fe816ef9b6a95bf893 AppDomainPlugin-com.readdle.PdfConverter.PdfConverterExtension Library/WebKit/WebsiteData/IndexedDB/v0 4
9ffbc7a555c72fd5af5bf3b068cd0a679a6 AppDomain-com.emirates.EKiPhone Library/WebKit/WebsiteData/IndexedDB/v0 4
31b7d8f1598b4fb41ce3ee5ee8d0cb32ce6 AppDomain-org.mozilla.ios.Firefox Library/WebKit/WebsiteData/IndexedDB/v0 4

27f8dcd705d1a3123daacac0d67e59d7bf9 HomeDomain Library/Preferences/com.apple.operator_1.plist 4
cc3ee16f88753a8ceeddec5c198798c340b HomeDomain Library/Preferences/com.apple.operator_1.merged.plist 4
0c42b3a39b73eb6f7d391a609dd0963af68 HomeDomain Library/Preferences/com.apple.operator.merged.plist 4
77ef6217df5bbe456b8bb5e387c3f40c060 HomeDomain Library/Preferences/com.apple.carrier_1.plist 4
8f172e71483f1f20d0e5bac526fb0f6c51f HomeDomain Library/Preferences/com.apple.carrier_1.merged.plist 4
c304e4ae49904ed5923af53112d9528bad9 HomeDomain Library/Preferences/com.apple.carrier.merged.plist 4
865971c077f62b3528efedb38a02c104317 HomeDomain Library/Preferences/com.apple.carrier.default.plist 4

1d4f341e749f65a173afd242eb6b70f22e3 AppDomain-com.amazon.echo Library/WebKit/WebsiteData/IndexedDB/v0 4
f52b33cae44e13c82cbaed0df5277e9e36f AppDomain-com.opera.OperaMini Library/WebKit/WebsiteData/IndexedDB/v0 4

4c039cd31e30b2d827a6d96313fa610513a AppDomain-com.opera.OperaMini Library/OperaLocalStorage 4

ac13529d5f4e79690ef1a590db95b5f13d6 AppDomain-com.wunderground.weatherunderground Library/WebKit/WebsiteData/IndexedDB/v0 4
7cd34ad23a0b81d3763d4814d2e8d15e9b3 AppDomain-com.duckduckgo.mobile.ios Library/WebKit/WebsiteData/IndexedDB/v0 4
1bf36cb61d7be29fac7ef35c2f2dfd95595 AppDomain-com.tripadvisor.LocalPicks Library/WebKit/WebsiteData/IndexedDB/v0 4
7ddfe762170f57b74153aeba09ad3236afc AppDomain-com.deezer.Deezer Library/WebKit/WebsiteData/IndexedDB/v0 4
a8a542adfb5d3100a7edfc2527e4fb183b0 AppDomain-com.shazam.Shazam Library/WebKit/WebsiteData/IndexedDB/v0 4
fec1eb2117a8616c533d17535d86f7db53f AppDomain-com.google.GoogleDigitalEditions Library/WebKit/WebsiteData/IndexedDB/v0 4
0bf1c6678849458c1fd68b845c0fb8a5ab9 AppDomain-com.ite.lpawus Library/WebKit/WebsiteData/IndexedDB/v0 4
9533c85f70ee3164d0cde064434bf064cf7 AppDomain-com.amazon.CloudDrivePhotos Library/WebKit/WebsiteData/IndexedDB/v0 4
b42261cf29c40247e57596cdf1b3f82ca77 AppDomain-com.facebook.Messenger Library/WebKit/WebsiteData/IndexedDB/v0 4
f9ec762c5d9aa513727facfb768bd4b8299 AppDomain-com.slickdeals.mobile Library/WebKit/WebsiteData/IndexedDB/v0 4
b26234c55dfe488c82209f67251d8196941 AppDomain-com.atebits.Tweetie2 Library/WebKit/WebsiteData/IndexedDB/v0 4
97e3c023828e28defda57ecd4bba616c2d5 AppDomain-com.apple.mobilesafari Library/WebKit/WebsiteData/IndexedDB/v0 4
173d3141e5811ee1e54ee3da99935f15ffa AppDomain-com.digiset.pdfit Library/WebKit/WebsiteData/IndexedDB/v0 4
9e4f3ce6cad9dcf680a35c4fc3d00917a8e AppDomain-com.reddit.Reddit Library/WebKit/WebsiteData/IndexedDB/v0 4
ee4628bd25f7f6f05e1d7dfb1b30626f3b7 AppDomain-com.viber Library/WebKit/WebsiteData/IndexedDB/v0 4
862dbde243eee351eed189e6266c6bccd2f AppDomain-se.resenatverket.FlightRadar24-Free Library/WebKit/WebsiteData/IndexedDB/v0 4
22381f802eb4cc55889ce218add7cdd40c2 AppDomain-com.miracast.screenmirroring.firetv Library/WebKit/WebsiteData/IndexedDB/v0 4
28d8c8483488038ca749a34983ea46df093 AppDomain-pinterest Library/WebKit/WebsiteData/IndexedDB/v0 4

Encrypted backup detected as not encrypted

The script successfully decrypts the keybag and manifest, however it then detects the backup as not encrypted and simply copies files over without decrypting them. See the log
iOS 13.4.1, iTunes 12.6.3 encrypted backup

... cut ...
12-04 20:03 root DEBUG Found magic name in SINF
12-04 20:03 root DEBUG Found user's name from SINF: XXXXXXXX
12-04 20:03 root DEBUG Data being interpreted for FRPD is of type: <class 'bytes'>
12-04 20:03 root DEBUG Found magic bytes in iTunes Prefs FRPD... Finding Usernames and Desktop names now
12-04 20:03 root DEBUG Starting output to F:\2\Device_YYYYY_Output.db
12-04 20:03 root DEBUG Opened database: F:\2\Device_YYYYY_Output.db successfully
12-04 20:03 root DEBUG Finished output to F:\2\Device_YYYYY_Output.db
12-04 20:03 root DEBUG User chose to recreate folders. Starting process now
12-04 20:03 root DEBUG Set the output of the decrypted Manifest.db to: F:\2\Decrypted_Manifest.db
12-04 20:03 root INFO Starting decryption of the Manifest.db
12-04 20:03 root DEBUG Reading and unlocking keybag
12-04 20:03 root DEBUG Opening encrypted Manifest.db
12-04 20:03 root INFO Successfully decrypted Manifest.db!
12-04 20:03 root INFO Backup is not encrypted
12-04 20:03 root DEBUG Trying to create directory: F:\2\Device_YYYYY_Folders
12-04 20:03 root DEBUG Successfully created directory: F:\2\Device_YYYYY_Folders
12-04 20:03 root DEBUG Modern Manifest.db found
12-04 20:03 root DEBUG Opened database: F:\2\Decrypted_Manifest.db successfully
12-04 20:03 root DEBUG Trying to execute query: SELECT fileId, domain, relativePath, flags, file FROM files against database F:\2\Decrypted_Manifest.db
12-04 20:03 root DEBUG Successfully executed query: SELECT fileId, domain, relativePath, flags, file FROM files against database F:\2\Decrypted_Manifest.db
12-04 20:03 root DEBUG Trying to recreate directory: AppDomain-com.xcstudio.LUT-Master\ from source file: 8d5f2deb0dd752c21a2ca1b81527b81891df1a87
12-04 20:03 root DEBUG Successfully recreated directory: AppDomain-com.xcstudio.LUT-Master\ from source file: 8d5f2deb0dd752c21a2ca1b81527b81891df1a87
... cut ...

UnicodeEncodeError: 'charmap' codec can't encode character '\u043e' in position 37: character maps to <undefined>

Python 3.6.3 and 3.8.3 on Windows 10. Unencrypted backup. -i, -o, -v, -t txt parameters
This Python Unicode issue was supposed to be fixed in versions 3.6+.

After deleting the kaitaistruct import line, now the script fails on Unicode character '\u043e' which is cyrillic small letter o

06-23 11:39 root DEBUG Found user's name from SINF: XXXXXXXXXXXXXXXX
06-23 11:39 root DEBUG Found magic name in SINF
06-23 11:39 root DEBUG Found user's name from SINF: XXXXXXXXXXXXXXXX
06-23 11:39 root DEBUG Data being interpreted for FRPD is of type: <class 'bytes'>
06-23 11:39 root DEBUG Found magic bytes in iTunes Prefs FRPD... Finding Usernames and Desktop names now
06-23 11:39 root DEBUG Starting output to I:\on-1\Device_YYYYYYYYYYY_Output.txt
06-23 11:39 root ERROR Could not write output to I:\on-1\Device_YYYYYYYYYYY_Output.txt Exception was: 'charmap' codec can't encode character '\u043e' in position 37: character maps to
Traceback (most recent call last):
File "C:\temp\iTunes_Backup_Reader-4.0\helpers\writer.py", line 152, in startWrite
writeToTxt(backup_list, application_list, output_file, logger)
File "C:\temp\iTunes_Backup_Reader-4.0\helpers\writer.py", line 45, in writeToTxt
"iTunes Version: \t" + backup_list[17] + "\n\n")
File "C:\Program Files\Python36\lib\encodings\cp1252.py", line 19, in encode
return codecs.charmap_encode(input,self.errors,encoding_table)[0]
UnicodeEncodeError: 'charmap' codec can't encode character '\u043e' in position 37: character maps to
06-23 11:39 root INFO Program ended in: 1.6166751384735107 seconds

ImportError: cannot import name 'KaitaiStruct'

This is a normal unencrypted backup with only -i -o and -v parameters. I get: ImportError: cannot import name 'KaitaiStruct'

Kaitaistruct package is present in iTBR root. Running Python 3.6.5

Traceback (most recent call last):
File "C:\temp\iTunes_Backup_Reader-4.0\iTunes_Backup_Reader.py", line 18, in
from helpers import plist_parser, recreator
File "C:\temp\iTunes_Backup_Reader-4.0\helpers\recreator.py", line 17, in
from helpers import decryptor
File "C:\temp\iTunes_Backup_Reader-4.0\helpers\decryptor.py", line 17, in
from kaitaistruct import KaitaiStruct, KaitaiStream, BytesIO
ImportError: cannot import name 'KaitaiStruct'

manifestMbdbParser UnicodeDecodeError: 'utf-8' codec can't decode byte 0xf5 in position 3: invalid start byte

iTunes_Backup_Reader.exe VERSION 4.0

Tried changing

`.decode("utf-8","ignore")

_Reader-master\Oct-09-2017-800pm\KeyboardDomain
07-11 00:03 root DEBUG Successfully created path
Traceback (most recent call last):
File "iTunes_Backup_Reader.py", line 211, in
main()
File "iTunes_Backup_Reader.py", line 161, in main
recreator.startRecreate(input_dir, output_dir, password, 0, logger)
File "helpers\recreator.py", line 79, in startRecreate
manifestMbdbParser.mbdbParser(manifest_mbdb_path, input_dir, output_dir, logger)
File "helpers\manifestMbdbParser.py", line 53, in mbdbParser
path = (record.Path.String).decode("utf-8")
UnicodeDecodeError: 'utf-8' codec can't decode byte 0xf5 in position 3: invalid start byte
[12648] Failed to execute script iTunes_Backup_Reader

Feature request - option to remove empty folders

There should be an option to omit empty folders where there are no files.

You could sort on the database query based on item type and just write out files, creating their directory structures only.

InvalidPlistException: module 'plistlib' has no attribute 'Data'

Hi! First I would like to thank you for your work
I'm having trouble running the script, I'm getting exceptions.
Can you please give some help? Thanks

  • macOS
  • python3
  • have installed trough pip3: pathlib-revised; biplist; pycryptodome; construct; recreator; kaitaistruct
  • encrypted backup

`
Traceback (most recent call last):
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/biplist/init.py", line 126, in readPlist
result = reader.parse()
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/biplist/init.py", line 234, in parse
return self.readRoot()
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/biplist/init.py", line 248, in readRoot
raise NotBinaryPlistException()
biplist.NotBinaryPlistException

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/biplist/init.py", line 141, in readPlist
result = wrapDataObject(result, for_binary=True)
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/biplist/init.py", line 154, in wrapDataObject
elif isinstance(o, (bytes, plistlib.Data)) and for_binary:
AttributeError: module 'plistlib' has no attribute 'Data'

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "[userFolder]/iTunes_Backup_Reader/iTunes_Backup_Reader.py", line 211, in
main()
File "[userFolder]/iTunes_Backup_Reader/iTunes_Backup_Reader.py", line 157, in main
plist_parser.parsePlists(input_dir, output_dir, out_type, decrypt, logger)
File "[userFolder]/iTunes_Backup_Reader/helpers/plist_parser.py", line 194, in parsePlists
backups, apps = readPlists(status_plist_path, manifest_plist_path, info_plist_path, logger, output_dir)
File "[userFolder]/iTunes_Backup_Reader/helpers/plist_parser.py", line 141, in readPlists
info_plist = readPlist(info_plist_path)
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/biplist/init.py", line 143, in readPlist
raise InvalidPlistException(e)
biplist.InvalidPlistException: module 'plistlib' has no attribute 'Data'
`

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.