n0fate / OS-X-ContinuityLinks
Script for forensic analysis of the OS X Continuity
☆20Updated 7 years ago
Alternatives and similar repositories for OS-X-Continuity
Users that are interested in OS-X-Continuity are comparing it to the libraries listed below
Sorting:
- Automatically exported from code.google.com/p/pac4mac☆40Updated 6 years ago
- Breaking the iCloud Keychain Artifacts☆102Updated last year
- Research about malware that infects the EFI and SMC of Apple MacBooks.☆61Updated 3 months ago
- Keyjacker enumerates Mac keychains and displays plain text passwords.☆23Updated 7 years ago
- Resources for HFS+ Forensics☆37Updated 9 years ago
- anyKextLoader is a program that can be used to disable SIP without rebooting.☆39Updated 9 years ago
- macOS/iOS database location scraper to extract location data☆83Updated 2 years ago
- ☆62Updated 7 years ago
- Dump the iOS Frequent Location binary plist files☆85Updated 6 years ago
- Decrypts local iOS backups and recreates file system, with a framework for automatically extracting useful information☆43Updated 9 years ago
- Scripts to extract compound bplists in the iOS -> KnowledgeC.db -> structuredmetadata table.☆26Updated 6 years ago
- "Fuzzy matching" for SQLite databases☆30Updated 5 years ago
- Script to parse Safari Binary Cookies from Cookies.binarycookies file☆39Updated 8 years ago
- Dump contents of an iOS device iTunes backup☆34Updated 3 years ago
- A Kext that can be used to disable Rootless in OS X El Capitan/macOS Sierra. You need to sign it OR use an exploit to make OS X load it.☆79Updated 5 years ago
- ☆39Updated 9 years ago
- OS X rootkit loader version #1☆18Updated 10 years ago
- ☆35Updated 6 years ago
- Extraction of iMessage Data via XSS☆53Updated 9 years ago
- 010 template for apfs☆25Updated 4 years ago
- The current repository contains all the scripts needed to build kernel-mode mac-a-mal malicious activity hooking on macOS.☆85Updated 6 years ago
- Mount, dump and analyze APFS volumes and containers☆41Updated 7 years ago
- Sierra network activity list☆28Updated 7 years ago
- OSX Events Monitor☆22Updated 6 years ago
- Python Module for parsing Apple ASL Logs☆15Updated 9 years ago
- A small utility to read and write to Macs physical memory using default AppleHWAccess.kext.☆25Updated 9 years ago
- Scripts I use to setup a new macOS or Linux machine for iOS research☆17Updated 6 years ago
- Python script to parse the Most Recently Used (MRU) plist files on macOS into a more human friendly format.☆105Updated 7 years ago
- Parse the Mac Quickook index.sqlite database☆54Updated 8 years ago
- macOS XProtect definition files☆40Updated 3 years ago