idb 2.1.0 → 2.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 94b05b90dac0f6ec5d2d307d23014a2a7a4a10da
-  data.tar.gz: 5d2f0e5a97d747755a4030fb6e23824abfa50c5f
+  metadata.gz: 64226ae62cd205643d25b1ba1864b5a54d163b4d
+  data.tar.gz: 40eeb316e70e2165a12c96ba7da69fc1932ac111
 SHA512:
-  metadata.gz: 1332f364438b0ea9e23ba283b17067f956c901ebc28484cb1f976b07df3930b59b586abb0a5dd8c41e36dd1eaf6a38c5ceb8c15736d2fbef3af9ece0d51dd114
-  data.tar.gz: ad4bbfcbba28ea9cd69ab868678ffe99d67315c2aeb025ecee3af95879f030906b5d6fc038ab05278f4fe92567c70567a5311a91865703a632ef2979725286d6
+  metadata.gz: 388da49012ccce3480ccc91fba98e7c8fddb384559a589b246d69000da16f0770f5792df830e628542645458002ab5ec6663828b931405740d01bf086aef3732
+  data.tar.gz: 9da5c592809bb8e364818d82d0e522d56155fb1d0610c0dcc583cc2169c184aecc7fe5fb106a209c363bca77123d30d13746c87e94b3305422e56d95869c0e5e

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    idb (2.1.0)
+    idb (2.5.0)
       awesome_print
       coderay
       ffi
@@ -29,7 +29,7 @@ GEM
       tilt
     hexdump (0.2.3)
     htmlentities (4.3.2)
-    launchy (2.4.2)
+    launchy (2.4.3)
       addressable (~> 2.3)
     libxml-ruby (2.7.0)
     libxml4r (0.2.6)

data/README.md

@@ -1,3 +1,8 @@
+[![Gem Version](https://badge.fury.io/rb/idb.svg)](http://badge.fury.io/rb/idb)
+[![Dependency Status](https://gemnasium.com/dmayer/idb.png)](https://gemnasium.com/dmayer/idb)
+[![Code Climate](https://codeclimate.com/github/dmayer/idb.png)](https://codeclimate.com/github/dmayer/idb)
+<img src="https://stats.cysec.org/piwik.php?idsite=2&rec=1" style="border:0" alt="" />
+
 # Idb
 
 idb is a tool to simplify some common tasks for iOS pentesting and research. Originally there was a command line version of the tool, but it is no longer under development so you should get the GUI version.
@@ -10,10 +15,10 @@ idb has some prerequisites. As it turns out, things like ruby and Qt are difficu
 
 ### 1. Prerequisites 
 ####  1.1 Ruby Environment
-idb requires a valid ruby 1.9.3 or 2.1 installation. **Ruby 2.0 does not work properly** due to issues with qtbindings.
+idb requires a valid ruby 1.9.3 or 2.1 installation and it is recommended to install the used ruby using [RVM](https://rvm.io/). **Ruby 2.0 does not work properly** due to issues with qtbindings.
 
 **Important Note:** Shared library support is required! This is the default for many system rubies, but if you install a ruby via `rvm` or similar, you need to do one of the following:
-* Under `rvm` use `--enable-shared` when installing ruby.
+* **Under `rvm` use `rvm install 2.1 --enable-shared` when installing ruby.**
 * Under `ruby-install`/`chruby` use `-- --enable-shared` when installing ruby.
 * Under `ruby-build`/`rbenv` with `ruby-build` use `CONFIGURE_OPTS=--enable-shared [command]` when installing Ruby.
 

data/lib/gui/app_details_group_box.rb

@@ -3,7 +3,7 @@ require_relative '../lib/app'
 module Idb
 
   class AppDetailsGroupBox < Qt::GroupBox
-    attr_accessor :uuid, :bundle_id
+    attr_accessor :uuid, :bundle_id, :vals, :icon
     signals "app_changed()"
     signals "show_device_status()"
 
@@ -16,56 +16,6 @@ module Idb
       setTitle "App Details"
 
 
-      @icon_button_layout = Qt::GridLayout.new
-
-
-      # select app
-      @select_app_button = Qt::PushButton.new "Select App..."
-      @select_app_button.setEnabled(false)
-      @select_app_button.connect(SIGNAL(:released)) { |x|
-        @app_list = AppListDialog.new
-        @app_list.connect(SIGNAL('accepted()')) {
-          $selected_app =  @app_list.app_list.currentItem().app
-          @vals['uuid'].setText($selected_app.uuid)
-          @vals['bundle_id'].setText($selected_app.bundle_id)
-          @vals['bundle_name'].setText($selected_app.bundle_name)
-          @vals['url_handlers'].setText($selected_app.get_url_handlers.join("\n"))
-          @vals['platform_version'].setText($selected_app.platform_version)
-          @vals['sdk_version'].setText($selected_app.sdk_version)
-          @vals['minimum_os_version'].setText($selected_app.minimum_os_version)
-          @launch_app.setEnabled(true)
-          @open_folder.setEnabled(true)
-
-          begin
-          icon_file = $selected_app.get_icon_file
-          pixmap = Qt::Pixmap.new(icon_file)
-          @icon.setPixmap pixmap.scaledToWidth(50)  unless icon_file.nil?
-
-          rescue => e
-            $log.error "Icon CONVERSION failed.  #{e.message}"
-            @icon.setPixmap Qt::Pixmap.new
-            # lets ignore conversion errors for now..
-          end
-
-          emit app_changed()
-        }
-
-        @app_list.exec
-      }
-
-
-      @icon_button_widget = Qt::Widget.new self
-      @icon_button_widget.setLayout @icon_button_layout
-
-      @icon = Qt::Label.new
-
-      @icon_button_layout.addWidget @icon, 0, 0, 1, 1
-      @icon_button_layout.addWidget @select_app_button, 0, 1, 1, 3
-      @layout.addWidget @icon_button_widget, 0, 0, 1, 2
-
-
-
-
       @labels = Hash.new
       @vals = Hash.new
       @cur_row = 1
@@ -77,6 +27,8 @@ module Idb
       addDetail 'platform_version', 'Platform Version'
       addDetail 'sdk_version', 'SDK Version'
       addDetail 'minimum_os_version', 'Minimum OS'
+      addDetail 'keychain_access_groups', 'Keychain Access Groups'
+      addDetail 'data_dir', 'Data Directory'
 
       @launch_app = Qt::PushButton.new "Launch App"
       @launch_app.setEnabled(false)
@@ -106,17 +58,38 @@ module Idb
 
       }
 
+      clear
+
+    end
+
+    def app_changed
+      @vals['uuid'].setText($selected_app.uuid)
+      @vals['bundle_id'].setText($selected_app.bundle_id)
+      @vals['bundle_name'].setText($selected_app.bundle_name)
+      @vals['url_handlers'].setText($selected_app.get_url_handlers.join("\n"))
+      @vals['platform_version'].setText($selected_app.platform_version)
+      @vals['sdk_version'].setText($selected_app.sdk_version)
+      @vals['minimum_os_version'].setText($selected_app.minimum_os_version)
+      @vals['keychain_access_groups'].setText($selected_app.keychain_access_groups)
+      @vals['data_dir'].setText($selected_app.data_directory.sub("/private/var/mobile/Containers/Data/Application",""))
+      @launch_app.setEnabled(true)
+      @open_folder.setEnabled(true)
+
+
+
     end
 
     def clear
       $selected_app =  nil
-      @vals['uuid'].setText("")
-      @vals['bundle_id'].setText("")
-      @vals['bundle_name'].setText("")
-      @vals['url_handlers'].setText("")
-      @vals['platform_version'].setText("")
-      @vals['sdk_version'].setText("")
-      @vals['minimum_os_version'].setText("")
+      @vals['uuid'].setText("[No Application Selected]")
+      @vals['bundle_id'].setText("[No Application Selected]")
+      @vals['bundle_name'].setText("[No Application Selected]")
+      @vals['url_handlers'].setText("[No Application Selected]")
+      @vals['platform_version'].setText("[No Application Selected]")
+      @vals['sdk_version'].setText("[No Application Selected]")
+      @vals['minimum_os_version'].setText("[No Application Selected]")
+      @vals['data_dir'].setText("[No Application Selected]")
+      @vals['keychain_access_groups'].setText("[No Application Selected]")
       @launch_app.setEnabled(false)
       @open_folder.setEnabled(false)
 
@@ -124,6 +97,8 @@ module Idb
 
 
 
+
+
     def addDetail id, label
       @labels[id] = Qt::Label.new  "<b>#{label}</b>", self, 0
       @vals[id] = Qt::Label.new  "", self, 0
@@ -132,15 +107,6 @@ module Idb
       @cur_row += 1
     end
 
-
-    def enable_select_app
-      @select_app_button.setEnabled(true)
-    end
-
-    def disable_select_app
-      @select_app_button.setEnabled(false)
-    end
-
   end
 
   class AppBinaryGroupBox < Qt::GroupBox
@@ -180,6 +146,8 @@ module Idb
       addDetail 'canaries', 'Stack Canaries'
       addDetail 'arc', 'ARC'
 
+      clear
+
     end
 
 
@@ -197,11 +165,11 @@ module Idb
     end
 
     def clear
-      @vals['encryption_enabled'].setText("")
-      @vals['cryptid'].setText("")
-      @vals['pie'].setText("")
-      @vals['canaries'].setText("")
-      @vals['arc'].setText("")
+      @vals['encryption_enabled'].setText("[Binary not yet analyzed]")
+      @vals['cryptid'].setText("[Binary not yet analyzed]")
+      @vals['pie'].setText("[Binary not yet analyzed]")
+      @vals['canaries'].setText("[Binary not yet analyzed]")
+      @vals['arc'].setText("[Binary not yet analyzed]")
     end
 
     def disable_analyze_binary

data/lib/gui/app_list_dialog.rb

@@ -41,6 +41,16 @@ module Idb
     end
 
     def refresh_app_list
+      if $device.ios_version == 8
+        box = Qt::MessageBox.new 1, "Refreshing...", "Refreshing uicache to ensure app information is up-to-date. This may take a few seconds."
+        box.setStandardButtons(0)
+        box.show
+        box.raise
+        # need to refresh iOS uicache in case app was installed after last reboot.
+        # Otherwise the /var/mobile/Library/MobileInstallation/LastLaunchServicesMap.plist will be out of date
+        $device.ops.execute "/usr/bin/uicache"
+        box.hide
+      end
       app_uuids =  $device.get_app_uuids
       progress = Qt::ProgressDialog.new "Reading App list...", nil, 1, app_uuids.size, self
       progress.setAutoClose true

data/lib/gui/app_tab_widget.rb

@@ -0,0 +1,52 @@
+module Idb
+  class AppTabWidget < Qt::TabWidget
+    attr_accessor :app_details, :app_binary
+    signals "app_changed()"
+    signals "binary_analyzed()"
+
+    def initialize *args
+      super *args
+
+      @layout = Qt::GridLayout.new self
+      setLayout(@layout)
+
+
+
+      @layout.addWidget @select_app_button, 0,0
+
+      # Box for App details
+      @app_details = AppDetailsGroupBox.new @central_widget
+      @app_details.connect(SIGNAL(:show_device_status)) {
+        @device_status = DeviceStatusDialog.new
+        @device_status.exec
+      }
+
+
+      @layout.addWidget @app_details, 1,0, 2, 1
+
+      # App Binary Details
+      @app_binary = AppBinaryGroupBox.new @central_widget
+      @layout.addWidget @app_binary, 1,1
+      @app_binary.connect(SIGNAL('binary_analyzed()')) {
+        emit binary_analyzed()
+      }
+
+      @spacer_horizontal = Qt::SpacerItem.new 0,1, Qt::SizePolicy::Expanding, Qt::SizePolicy::Fixed
+      @layout.addItem @spacer_horizontal, 1, 2
+
+      @spacer = Qt::SpacerItem.new 0,1, Qt::SizePolicy::Fixed, Qt::SizePolicy::Expanding
+
+      @layout.addItem @spacer, 2, 1, 2,1
+      @layout.addItem @spacer, 3, 0
+
+
+    end
+
+    def app_changed
+      @app_binary.app_changed
+      @app_details.app_changed
+
+    end
+
+  end
+end

data/lib/gui/cache_db_widget.rb

@@ -20,9 +20,9 @@ module Idb
           $log.error "File #{item.full_path} could not be downloaded. Either the file does not exist (e.g., dead symlink) or there is a permission problem."
         else
           if RbConfig::CONFIG['host_os'] =~ /linux/
-            Process.spawn "'#{$settings['sqlite_editor']}' '#{Dir.getwd}/#{cache_name}'"
+            Process.spawn "'#{$settings['sqlite_editor']}' '#{cache_name}'"
           else
-            Process.spawn "open -a '#{$settings['sqlite_editor']}' '#{Dir.getwd}/#{cache_name}'"
+            Process.spawn "open -a '#{$settings['sqlite_editor']}' '#{cache_name}'"
           end
         end
 
@@ -50,7 +50,11 @@ module Idb
           item.setText full_path.sub($selected_app.app_dir,'')
         else
           pc = $device.protection_class full_path
-          item.setText full_path.sub($selected_app.app_dir,'') + " => " + pc.strip
+          if full_path.start_with? $selected_app.app_dir
+            item.setText "[App Bundle]" + full_path.sub($selected_app.app_dir,'') + " => " + pc.strip
+          elsif full_path.start_with? $selected_app.data_dir
+            item.setText "[Data Dir]" + full_path.sub($selected_app.data_dir,'') + " => " + pc.strip
+          end
         end
         item.full_path = full_path
         @list.addItem item

data/lib/gui/device_info_group_box.rb

@@ -3,6 +3,7 @@ require_relative 'device_status_dialog'
 module Idb
   class DeviceInfoGroupBox < Qt::GroupBox
     signals "disconnect()"
+    signals "connect_clicked()"
 
     def initialize *args
       super *args
@@ -12,19 +13,25 @@ module Idb
       setLayout(@layout)
       setTitle "Selected Device"
 
-      @device = Qt::Label.new  "<b><font color='red'>Please select a device from the 'Devices' menu.</font></b>", self, 0
-      @layout.addWidget @device, 0, 0, 2, 1
+      @device = Qt::Label.new  "<b><font color='red'>Please select a device from the 'Devices' menu or click 'Connect'.</font></b>", self, 0
+      @layout.addWidget @device, 0, 0, 2 ,1
+      @connect = Qt::PushButton.new "Connect to USB/SSH device"
+      @connect.connect(SIGNAL(:released)) {
+        emit connect_clicked()
+      }
+      @layout.addWidget @connect, 0,1,2,1
     end
 
     def update_device
       if $device.device?
+        @connect.hide
         uname = $device.ops.execute("/bin/uname -a")
         ssh_connection_info = ""
         if $device.mode == "usb"
           ssh_connection_info = " "
-          @device.setText "<b>USB device:</b> <b><font color='red'>Manually connect via SSH as #{$settings.ssh_username}@localhost:#{$device.usb_ssh_port}</font></b><br>#{uname}"
+          @device.setText "<b>USB device:</b> Manually connect via SSH as #{$settings.ssh_username}@localhost:#{$device.usb_ssh_port}"
         else
-          @device.setText "<b>USB device:</b> ssh://#{$settings.ssh_username}:[redacted]@#{$settings.ssh_host}:#{$settings.ssh_port}<br>#{uname}"
+          @device.setText "<b>SSH device:</b> ssh://#{$settings.ssh_username}:[redacted]@#{$settings.ssh_host}:#{$settings.ssh_port}"
         end
 
         @status = Qt::PushButton.new "Status"
@@ -39,12 +46,14 @@ module Idb
           $device.close unless $device.nil?
           $device = nil
           emit disconnect()
-          @disconnect.setEnabled(false)
-          @status.setEnabled(false)
+          @disconnect.hide
+          @connect.show
+          @status.hide
           @device.setText("<b><font color='red'>Please select a device from the 'Devices' menu.</font></b>")
         }
         @layout.addWidget @disconnect, 1, 1
 
+
       else
         @device.setText "<b>Simulator:</b> #{$device.sim_dir}"
       end

data/lib/gui/device_status_dialog.rb

@@ -99,7 +99,10 @@ module Idb
       else
         @install_aptget = Qt::PushButton.new "Install"
         @install_aptget.connect(SIGNAL(:released)) {
-          $device.install_apt_get
+          error = Qt::MessageBox.new
+          error.setText("Aptitude or apt-get must be installed on the device using Cydia.")
+          error.setIcon(Qt::MessageBox::Critical)
+          error.exec
           if $device.apt_get_installed?
             @install_aptget.hide
             mark_apt_get_installed

data/lib/gui/fs_viewer_tab_widget.rb

@@ -15,7 +15,14 @@ module Idb
       @rsync = Qt::PushButton.new "Rsync + Git"
       @layout.addWidget @rsync, 0,0
       @rsync.connect(SIGNAL :released) {
-        @manager.sync_new_revision
+        @manager.start_new_revision
+        if $device.ios_version == 8
+          @manager.sync_dir $selected_app.app_dir, "app_bundle"
+          @manager.sync_dir $selected_app.data_dir, "data_bundle"
+        else
+          @manager.sync_dir $selected_app.app_dir, "app_bundle"
+        end
+        @manager.commit_new_revision
 
       }
 
@@ -228,17 +235,40 @@ module Idb
       tree_item
     end
 
-    def set_start start
+    def update_start
       @treeview.clear
+      @selected_dir = $selected_app.app_dir
+      @local_path = "#{$selected_app.cache_dir}/idb_mirror.git"
+      @manager = RsyncGitManager.new @local_path
+
+      if $device.ios_version == 8
+        start_ios_8
+      else
+        start_ios_pre8
+      end
+    end
+
+    def start_ios_pre8
       @root_node = Qt::TreeWidgetItem.new
-      @root_node.setText(0, "app root")
+      @root_node.setText(0, "[App Bundle]")
       @root_node.setChildIndicatorPolicy(Qt::TreeWidgetItem::ShowIndicator)
       @treeview.addTopLevelItem @root_node
-      @start = start
-      @selected_dir = start
-      @root_node.setText(1, @start)
-      @local_path = "#{$selected_app.cache_dir}/idb_mirror.git"
-      @manager = RsyncGitManager.new start, @local_path
+      @root_node.setText(1, $selected_app.app_dir)
+    end
+
+    def start_ios_8
+      @bundle_root_node = Qt::TreeWidgetItem.new
+      @bundle_root_node.setText(0, "[App Bundle]")
+      @bundle_root_node.setChildIndicatorPolicy(Qt::TreeWidgetItem::ShowIndicator)
+      @bundle_root_node.setText(1, $selected_app.app_dir)
+
+      @data_root_node = Qt::TreeWidgetItem.new
+      @data_root_node.setText(0, "[Data Dir]")
+      @data_root_node.setChildIndicatorPolicy(Qt::TreeWidgetItem::ShowIndicator)
+      @data_root_node.setText(1, $selected_app.data_dir)
+
+      @treeview.addTopLevelItem @bundle_root_node
+      @treeview.addTopLevelItem @data_root_node
     end
 
   end

data/lib/gui/global_app_details_group_box.rb

@@ -0,0 +1,87 @@
+
+module Idb
+  class GlobalAppDetailsGroupBox < Qt::GroupBox
+    signals "app_changed()"
+
+    def initialize *args
+      super *args
+
+      # details on selected app
+      @layout = Qt::GridLayout.new
+      setLayout(@layout)
+      setTitle "Selected Application"
+
+      @app = Qt::Label.new  "<b>Connect to a device first.</b>", self, 0
+      @layout.addWidget @app, 0, 0
+
+      @app_details = Qt::Widget.new
+      @app_details_layout = Qt::GridLayout.new
+      @app_details_layout.setContentsMargins(0,0,0,0)
+
+      @app_details.setLayout(@app_details_layout)
+
+      @icon = Qt::Label.new
+      @app_details_layout.addWidget @icon, 0, 0, 2,1
+
+      @selected_app_label = Qt::Label.new  "<b>Selected App:</b>"
+      @selected_app = Qt::Label.new  ""
+      @app_details_layout.addWidget @selected_app_label, 0, 1
+      @app_details_layout.addWidget @selected_app, 0,2
+
+      @uuid_label = Qt::Label.new  "<b>UUID:</b>"
+      @uuid = Qt::Label.new  ""
+      @app_details_layout.addWidget @uuid_label, 1, 1
+      @app_details_layout.addWidget @uuid, 1,2
+
+      @layout.addWidget @app_details, 0,0
+      @app_details.hide
+
+
+      @select_app_button = Qt::PushButton.new "Select App..."
+      @select_app_button.setEnabled(false)
+      @select_app_button.connect(SIGNAL(:released)) { |x|
+        @app_list = AppListDialog.new
+        @app_list.connect(SIGNAL('accepted()')) {
+          $selected_app =  @app_list.app_list.currentItem().app
+          @selected_app.setText($selected_app.bundle_name + " (" + $selected_app.bundle_id + ")")
+          @uuid.setText($selected_app.uuid)
+          begin
+            icon_file = $selected_app.get_icon_file
+            pixmap = Qt::Pixmap.new(icon_file)
+            @icon.setPixmap pixmap.scaledToWidth(50)  unless icon_file.nil?
+
+          rescue => e
+            $log.error "Icon CONVERSION failed.  #{e.message}"
+            @icon.setPixmap Qt::Pixmap.new
+            # lets ignore conversion errors for now..
+          end
+
+          @app_details.show
+          @app.hide
+          emit app_changed()
+        }
+        @app_list.exec
+      }
+
+      @layout.addWidget @select_app_button, 0,1
+    end
+
+
+    def disconnect
+      @app.setText("<b>Connect to a device first.</b>")
+      @app.show
+      @app_details.hide
+      @select_app_button.setEnabled(false)
+    end
+
+    def enable
+      @app.setText("<b><font color='red'>Please click the 'Select Application' button.</font></b>")
+      @app.show
+      @app_details.hide
+      @select_app_button.setEnabled(true)
+    end
+
+
+
+  end
+end

data/lib/gui/main_tab_widget.rb

@@ -8,16 +8,25 @@ require_relative 'pasteboard_monitor_widget'
 require_relative 'fs_viewer_tab_widget'
 require_relative 'keychain_widget'
 require_relative 'tool_widget'
+require_relative 'app_tab_widget'
 require 'Qt'
 
 module Idb
   class MainTabWidget < Qt::TabWidget
-
+    attr_accessor :app_info
 
     def initialize *args
       super *args
       @tabs = Hash.new
 
+
+      @app_info = AppTabWidget.new self
+      @tabs[:app_info] = addTab(@app_info, "App Info")
+      @app_info.connect(SIGNAL('binary_analyzed()')) {
+        enableAppBinary
+      }
+
+
       @local_storage = LocalStorageTabWidget.new self
       @local_storage.setEnabled(false)
       @tabs[:local_storage] = addTab(@local_storage, "Storage")
@@ -76,6 +85,10 @@ module Idb
       disable_all
     end
 
+    def enable_select_app
+      @app_info.enable_select_app
+    end
+
     def enableLog
       @log.setEnabled(true)
       setTabEnabled(@tabs[:log], true)
@@ -165,8 +178,9 @@ module Idb
       enableURLHandlers
   #    refresh_current_tab
       @app_binary.refresh
+      @app_info.app_changed
       enableFSViewer
-      @fs_viewer.set_start  $selected_app.app_dir
+      @fs_viewer.update_start
       enableTools
       @tools.enable_screenshot
 

data/lib/gui/plist_file_widget.rb

@@ -52,7 +52,11 @@ module Idb
           item.setText full_path.sub($selected_app.app_dir,'')
         else
           pc = $device.protection_class full_path
-          item.setText full_path.sub($selected_app.app_dir,'') + " => " + pc.strip
+          if full_path.start_with? $selected_app.app_dir
+            item.setText "[App Bundle]" + full_path.sub($selected_app.app_dir,'') + " => " + pc.strip
+          elsif full_path.start_with? $selected_app.data_dir
+             item.setText "[Data Dir]" + full_path.sub($selected_app.data_dir,'') + " => " + pc.strip
+          end
         end
         item.full_path = full_path
         @list.addItem item

data/lib/gui/screenshot_wizard.rb

@@ -14,7 +14,7 @@ module ScreenShotWizard
     def self.new_with_app app
       wiz = self.new
       wiz.app = app
-      wiz.screenshot = ScreenShotUtil.new app.app_dir, $device.ops, false
+      wiz.screenshot = ScreenShotUtil.new app.data_dir, $device.ops, false
       wiz
     end
 

data/lib/gui/sqlite_widget.rb

@@ -20,13 +20,14 @@ module Idb
           error.exec
         else
           cache_name = $selected_app.cache_file item.full_path
+          puts cache_name
           if cache_name.nil?
             $log.error "File #{item.full_path} could not be downloaded. Either the file does not exist (e.g., dead symlink) or there is a permission problem."
           else
             if RbConfig::CONFIG['host_os'] =~ /linux/
-              Process.spawn "'#{$settings['sqlite_editor']}' '#{Dir.getwd}/#{cache_name}'"
+              Process.spawn "'#{$settings['sqlite_editor']}' '#{cache_name}'"
             else
-              Process.spawn "open -a '#{$settings['sqlite_editor']}' '#{Dir.getwd}/#{cache_name}'"
+              Process.spawn "open -a '#{$settings['sqlite_editor']}' '#{cache_name}'"
             end
           end
 
@@ -62,7 +63,11 @@ module Idb
           item.setText full_path.sub($selected_app.app_dir,'')
         else
           pc = $device.protection_class full_path
-          item.setText full_path.sub($selected_app.app_dir,'') + " => " + pc.strip
+          if full_path.start_with? $selected_app.app_dir
+            item.setText "[App Bundle]" + full_path.sub($selected_app.app_dir,'') + " => " + pc.strip
+          elsif full_path.start_with? $selected_app.data_dir
+            item.setText "[Data Dir]" + full_path.sub($selected_app.data_dir,'') + " => " + pc.strip
+          end
         end
 
         item.full_path = full_path

data/lib/idb.rb

@@ -12,6 +12,7 @@ require_relative 'gui/main_tab_widget'
 require_relative 'gui/settings_dialog'
 require_relative 'gui/device_info_group_box'
 require_relative 'gui/ca_manager_dialog'
+require_relative 'gui/global_app_details_group_box'
 
 module Idb
   TARGET = "Hello"
@@ -69,9 +70,10 @@ module Idb
 
   #      center
 
-  #      showMaximized();
-  #      show
-  #      self.raise
+        self.showMaximized()
+        self.raise
+        self.activateWindow
+
       end
 
      def self.execute_in_main_thread(blocking = false, sleep_period = 0.001)
@@ -96,47 +98,47 @@ module Idb
 
         @grid.setColumnMinimumWidth(0,450)
 
-
-        # Box for App details
-        @app_details = AppDetailsGroupBox.new @central_widget
-        @app_details.connect(SIGNAL(:app_changed)) {
-          @main_tabs.app_changed
-          @app_binary.app_changed
-          @menu_item_screenshot.setEnabled(true)
-        }
-        @app_details.connect(SIGNAL(:show_device_status)) {
-          @device_status = DeviceStatusDialog.new
-          @device_status.exec
-        }
-
-
-        @grid.addWidget @app_details, 0,0
-
-        # App Binary Details
-        @app_binary = AppBinaryGroupBox.new @central_widget
-        @grid.addWidget @app_binary, 1,0
-        @app_binary.connect(SIGNAL('binary_analyzed()')) {
-          @main_tabs.refresh_app_binary
-        }
-
-        @spacer = Qt::SpacerItem.new 0,1, Qt::SizePolicy::Fixed, Qt::SizePolicy::Expanding
-        @grid.addItem @spacer, 2,0
-
         # Main Tab Widget
         @main_tabs = MainTabWidget.new @central_widget
-        @grid.addWidget @main_tabs, 0,1,3,1
+        @grid.addWidget @main_tabs, 4,0,1,2
+
 
         # device Details
         @device_details = DeviceInfoGroupBox.new @central_widget
+        @device_details.setSizePolicy Qt::SizePolicy::Expanding, Qt::SizePolicy::Fixed
+        @device_details.connect(SIGNAL(:connect_clicked)) {
+          @usb_device.trigger
+        }
         @device_details.connect(SIGNAL :disconnect) {
           @main_tabs.disable_all
-          @app_binary.clear
-          @app_binary.disable_analyze_binary
-          @app_details.clear
-          @app_details.disable_select_app
+          @main_tabs.app_info.app_binary.clear
+          @main_tabs.app_info.app_binary.disable_analyze_binary
+          @main_tabs.app_info.app_details.clear
           @usb_device.setChecked(false)
+          @global_app_details.disconnect
+        }
+        @grid.addWidget @device_details, 0,0
+
+
+        # global app details
+        @global_app_details = GlobalAppDetailsGroupBox.new
+        @global_app_details.setSizePolicy Qt::SizePolicy::Expanding, Qt::SizePolicy::Fixed
+        @global_app_details.connect(SIGNAL :app_changed) {
+          @menu_item_screenshot.setEnabled(true)
+          @main_tabs.app_changed
         }
-        @grid.addWidget @device_details, 3,0,2,2
+        @grid.addWidget @global_app_details, 0, 1
+
+
+        @spacer = Qt::SpacerItem.new 0,5, Qt::SizePolicy::Fixed, Qt::SizePolicy::Fixed
+        @grid.addItem @spacer, 1,0,1,2
+        @grid.addItem @spacer, 3,0,1,2
+
+        line = Qt::Frame.new
+        line.setFrameShape(Qt::Frame::HLine)
+        line.setFrameShadow(Qt::Frame::Sunken)
+        @grid.addWidget line,2,0,1,2
+
 
         menu
 
@@ -161,8 +163,9 @@ module Idb
           }
           setting.exec
         }
-        @menu_file = menuBar().addMenu "&File"
+        @menu_file = Qt::Menu.new "&File"
         @menu_file.addAction menu_item_settings
+        menuBar().addAction @menu_file.menuAction()
 
         @menu_item_screenshot = Qt::Action.new "&Screenshot", self
         @menu_item_screenshot.setEnabled(false)
@@ -175,15 +178,16 @@ module Idb
           ca = CAManagerDialog.new self
           ca.exec
         }
-        @menu_tools = menuBar().addMenu "&Tools"
+        @menu_tools = Qt::Menu.new "&Tools"
         @menu_tools.addAction @menu_item_screenshot
         @menu_tools.addAction @menu_item_cert
+        menuBar.addAction @menu_tools.menuAction
 
 
         #Devices
         @sim_group = Qt::ActionGroup.new @menu_devices
 
-        @menu_devices = menuBar().addMenu "&Devices"
+        @menu_devices = Qt::Menu.new "&Devices"
         @usb_device = Qt::Action.new "USB Device", self
         if $settings['device_connection_mode'] == "ssh"
           @usb_device.setText("SSH Device")
@@ -220,11 +224,7 @@ module Idb
               @device_status = DeviceStatusDialog.new
               @device_status.exec
             end
-
-
-
-
-            @app_details.enable_select_app
+            @global_app_details.enable
             @device_details.update_device
             @menu_item_cert.setEnabled(true)
             @main_tabs.enableDeviceFunctions
@@ -233,6 +233,8 @@ module Idb
 
           progress.reset
         }
+
+
         menu_item = @menu_devices.addAction @usb_device
         @sim_group.addAction @usb_device
 
@@ -254,12 +256,11 @@ module Idb
           @menu_devices.addAction action
         }
 
-
+        menuBar.addAction @menu_devices.menuAction()
 
 
       end
 
-
      def center
           qdw = Qt::DesktopWidget.new
 
@@ -279,9 +280,7 @@ module Idb
       app.setApplicationName("idb")
 
       idb = Idb.new
-      idb.setWindowState Qt::WindowActive
-      idb.showMaximized
-      idb.raise
+      app.setActiveWindow(idb)
       app.exec
 
       $log.info "Performing cleanup before exiting."

data/lib/idb/version.rb

@@ -1,3 +1,3 @@
 module Idb
-  VERSION = "2.1.0"
+  VERSION = "2.5.0"
 end

data/lib/lib/CgBI.rb

@@ -39,12 +39,15 @@ module Idb
     end
 
     def self.from_file(file_path)
+
       self.new(File.open(file_path, 'rb') {|f| f.read})
     end
 
     def png
       return @png if @png
 
+      all_idats = ""
+
       #Convert from cgbi, set instance var, return
       data = @cgbi.dup
       png = ""
@@ -89,14 +92,14 @@ module Idb
           #(1..@height).each do |y|
             # Copy over the filter type byte on each line
             # TODO: Might not be necessary for all filter types
-            chunk[:data] << decompressed.slice!(0,1)
+            all_idats << decompressed.slice!(0,1)
             (1..@width).each do |x|
               # BGRA => RGBA
               b,g,r,a = decompressed.unpack("CCCC")
               decompressed.slice!(0,4).split(//)
 
               begin
-                chunk[:data] += [r,g,b,a].pack("CCCC")
+                all_idats += [r,g,b,a].pack("CCCC")
                 decompressed = nil if decompressed.length == 0
               rescue => e
                 puts "Left: #{decompressed.inspect}"
@@ -104,20 +107,19 @@ module Idb
             end
           end
 
-          # Deflate the IDAT chunk
-          chunk[:type] = "IDAT"
-          chunk[:data] = Zlib::Deflate.deflate(chunk[:data])
-          chunk[:length] = [chunk[:data].length].pack("N")
-          chunk[:crc] = [Zlib::crc32('IDAT' + chunk[:data])].pack("N")
-
-          # store it away
-          png << chunk[:length]
-          png << chunk[:type]
-          png << chunk[:data]
-          png << chunk[:crc]
 
         when "IEND"
           raise "Data after IEND" unless data.empty?
+
+          #first write IDAT
+          # Deflate the IDAT chunk
+          compressed_idats = Zlib::Deflate.deflate(all_idats)
+          png << [compressed_idats.length].pack("N")
+          png <<  "IDAT"
+          png << compressed_idats
+          png <<  [Zlib::crc32('IDAT' + compressed_idats)].pack("N")
+
+
           png << [chunk[:length]].pack("N")
           png << chunk[:type]
           png << chunk[:data]
@@ -150,4 +152,7 @@ module Idb
     end
 
   end
+
+
 end
+

data/lib/lib/app.rb

@@ -1,18 +1,34 @@
 require_relative 'plist_util'
 require_relative 'app_binary'
 require_relative 'CgBI'
+require_relative 'ios8_last_launch_services_map_wrapper'
 
 module Idb
   class App
-    attr_accessor :uuid, :app_dir, :binary, :cache_dir
+    attr_accessor :uuid, :app_dir, :binary, :cache_dir, :data_dir
 
 
     def initialize uuid
       @uuid = uuid
-      @app_dir = "#{$device.apps_dir}/#{@uuid}"
       @cache_dir = "#{$tmp_path}/#{uuid}"
       FileUtils.mkdir_p @cache_dir  unless Dir.exist? @cache_dir
+
+      @app_dir = "#{$device.apps_dir}/#{@uuid}"
       parse_info_plist
+
+      if $device.ios_version == 8
+        mapping_file = "/var/mobile/Library/MobileInstallation/LastLaunchServicesMap.plist"
+        local_mapping_file =  cache_file mapping_file
+        mapper = IOS8LastLaunchServicesMapWrapper.new local_mapping_file
+
+        @data_dir = mapper.data_path_by_bundle_id @info_plist.bundle_identifier
+        @keychain_access_groups = mapper.keychain_access_groups_by_bundle_id @info_plist.bundle_identifier
+
+       else
+        @data_dir = @app_dir
+      end
+
+
     end
 
     def analyze
@@ -113,26 +129,41 @@ module Idb
     end
 
 
-    def icon_path
+    def find_icon
+      # lets try the easy way first...
       icon_name = get_raw_plist_value('CFBundleIconFile')
+      if not icon_name.nil?
+        return icon_name
+      end
+
+      # lets try iphone icons
+      icon_name = get_raw_plist_value('CFBundleIcons')
+      unless icon_name.nil?
+        if not icon_name["CFBundlePrimaryIcon"].nil? and not icon_name["CFBundlePrimaryIcon"]["CFBundleIconFiles"].nil?
+          return icon_name["CFBundlePrimaryIcon"]["CFBundleIconFiles"].sort.last
+        end
+      end
 
-      unless icon_name
-        # If there's no icon specified, grab the first one from the array.
-        # If it's large, this could make the app nonresponsive.
-        icon_name = get_raw_plist_value('CFBundleIconFiles').first
-        # NOTE: This still fails to find the icon for some apps that store it in odd places,
-        # Like Netflix' plist_data['CFBundleIcons~ipad']['CFBundlePrimaryIcon']['CFBundleIconFiles']
+      # lets try ipad icons
+      icon_name = get_raw_plist_value('CFBundleIcons~ipad')
+      unless icon_name.nil?
+        if not icon_name["CFBundlePrimaryIcon"].nil? and not icon_name["CFBundlePrimaryIcon"]["CFBundleIconFiles"].nil?
+          return icon_name["CFBundlePrimaryIcon"]["CFBundleIconFiles"].sort.last
+        end
       end
+    end
 
+    def icon_path
       app_dir = Shellwords.escape(@app_dir)
+      icon_name = find_icon
 
       unless (icon_name[-4,4] == ".png")
         $log.debug "Appending extension to #{icon_name}"
-        icon_name += ".png"
+        icon_name += "*.png"
         $log.debug "Now: #{icon_name}"
       end
 
-      icon_file = $device.ops.execute("ls #{app_dir}/*app/#{icon_name}").strip
+      icon_file = $device.ops.execute("ls #{app_dir}/*app/#{icon_name}").split("\n").first.strip
 
       if not $device.ops.file_exists? icon_file
         $log.warn "Icon not found: #{icon_file}"
@@ -159,6 +190,22 @@ module Idb
       get_raw_plist_value 'CFBundleDisplayName'
     end
 
+    def keychain_access_groups
+      if @keychain_access_groups.nil?
+        "[iOS 8 specific]"
+      else
+        @keychain_access_groups.join "\n"
+      end
+    end
+
+    def data_directory
+      if $device.ios_version != 8
+        "[iOS 8 specific]"
+      else
+        @data_dir
+      end
+    end
+
     def platform_version
       get_raw_plist_value 'DTPlatformVersion'
     end
@@ -207,17 +254,37 @@ module Idb
 
     def find_plist_files
       $log.info "Looking for plist files..."
-      $device.ops.dir_glob(@app_dir, "**/*plist")
+      app_dir_files = $device.ops.dir_glob(@app_dir, "**/*plist")
+      data_dir_files = Array.new
+
+      if app_dir != data_dir
+        data_dir_files = $device.ops.dir_glob(@data_dir, "**/*plist")
+      end
+      app_dir_files + data_dir_files
+
     end
 
     def find_sqlite_dbs
       $log.info "Looking for sqlite files..."
-      $device.ops.dir_glob(@app_dir, "**/*sql**")
+      app_dir_files = $device.ops.dir_glob(@app_dir, "**/*sql**")
+      data_dir_files = Array.new
+
+      if app_dir != data_dir
+        data_dir_files = $device.ops.dir_glob(@data_dir, "**/*sql**")
+      end
+      app_dir_files + data_dir_files
+
     end
 
     def find_cache_dbs
       $log.info "Looking for Cache.db files..."
-      $device.ops.dir_glob(@app_dir, "**/Cache.db")
+      app_dir_files = $device.ops.dir_glob(@app_dir, "**/Cache.db")
+      data_dir_files = Array.new
+
+      if app_dir != data_dir
+        data_dir_files = $device.ops.dir_glob(@data_dir, "**/Cache.db")
+      end
+      app_dir_files + data_dir_files
     end
 
     def get_url_handlers

data/lib/lib/device.rb

@@ -7,10 +7,11 @@ require_relative 'usb_muxd_wrapper'
 
 module Idb
   class Device < AbstractDevice
-    attr_accessor :usb_ssh_port, :mode, :tool_port
+    attr_accessor :usb_ssh_port, :mode, :tool_port, :ios_version
 
     def initialize username, password, hostname, port
-      @apps_dir = '/private/var/mobile/Applications'
+
+
       @username = username
       @password = password
       @hostname = hostname
@@ -58,6 +59,28 @@ module Idb
         $log.debug "opening tool port #{@tool_port} for internal ssh connection"
         @usbmuxd.proxy @tool_port, $settings['ssh_port']
 
+
+
+        @apps_dir_ios_pre8 = '/private/var/mobile/Applications'
+        @apps_dir_ios_8 = '/private/var/mobile/Containers/Bundle/Application'
+        @data_dir_ios_8 = '/private/var/mobile/Containers/Data/Application'
+
+        if @ops.directory? @apps_dir_ios_pre8
+          @ios_version = 7 # 7 or earlier
+          @apps_dir = @apps_dir_ios_pre8
+          @data_dir = @apps_dir_ios_pre8
+
+        elsif @ops.directory? @apps_dir_ios_8
+          @ios_version = 8
+          @apps_dir = @apps_dir_ios_8
+          @data_dir = @data_dir_ios_8
+
+        else
+          $log.error "Unsupported iOS Version."
+          raise
+        end
+
+
       end
 
       start_port_forwarding
@@ -329,23 +352,17 @@ module Idb
       @ops.execute "killall -9 #{process_name}"
     end
 
-    def DEVICE_ID
+    def device_id
+
       $log.error "Not implemented"
       nil
     end
 
     def configured?
-      if $settings['devices'].nil?
-        false
-      elsif $settings['devices'][device_id].nil?
-        false
-      else
-        true
-      end
+      apt_get_installed? and open_installed? and openurl_installed? and dumpdecrypted_installed? and pbwatcher_installed? and pcviewer_installed? and keychain_dump_installed? and rsync_installed? and cycript_installed?
     end
 
 
-
     def cycript_installed?
       is_installed? :cycript
     end

data/lib/lib/ios8_last_launch_services_map_wrapper.rb

@@ -0,0 +1,20 @@
+require 'plist4r'
+
+class IOS8LastLaunchServicesMapWrapper
+
+  def initialize plist_file
+    @plist_file = plist_file
+
+    @plist_data = Plist4r.open @plist_file
+  end
+
+
+  def data_path_by_bundle_id bundle_id
+    @plist_data.to_hash["User"][bundle_id]["Container"]
+  end
+
+
+  def keychain_access_groups_by_bundle_id bundle_id
+    @plist_data.to_hash["User"][bundle_id]["Entitlements"]["keychain-access-groups"]
+  end
+end

data/lib/lib/plist_util.rb

@@ -13,7 +13,10 @@ module Idb
 
       @plutil = Pathname.new("/usr/bin/plutil")
       if(!@plutil.exist?)
-        raise "plutil not found at #{@plutil}. aborting."
+        @plutil = Pathname.new("/usr/bin/plistutil")
+          if(!@plutil.exist?)
+            raise "plutil not found at #{@plutil}. aborting."
+          end
       end
 
       parse_plist_file
@@ -31,6 +34,15 @@ module Idb
         puts CodeRay.scan(doc.to_xml(:indent => 2), :xml).terminal
     end
 
+    def get_with_regex regex
+      ap @plist_data.to_hash
+      a = @plist_data.to_hash.find { |x|
+        not (x =~ regex).nil?
+      }
+      ap a
+      a
+    end
+
     private
     def parse_plist_file
       $log.info 'Parsing plist file..'
@@ -68,5 +80,6 @@ module Idb
 
 
 
+
   end
 end

data/lib/lib/rsync_git_manager.rb

@@ -4,8 +4,7 @@ require 'expect'
 
 module Idb
   class RsyncGitManager
-    def initialize remote_path, local_path
-      @remote_path = remote_path
+    def initialize local_path
       @local_path = local_path
       FileUtils.mkdir_p @local_path unless Dir.exist? @local_path
 
@@ -27,23 +26,15 @@ module Idb
       end
     end
 
-    def sync_new_revision
-      $log.info "Hard resetting work dir #{@local_path}..."
-      begin
-        @g.reset_hard
-      rescue
-        $log.error "Reset of repo failed. If this is the first time you run rsync+git for this app this may be okay."
-      end
-
-
 
+    def sync_dir remote, local_relative
+      local = @local_path + "/" + local_relative
       if $settings['device_connection_mode'] == "ssh"
-        cmd = "rsync -avz -e 'ssh -oStrictHostKeyChecking=no  -p #{$settings.ssh_port}'  #{$settings.ssh_username}@#{$settings.ssh_host}:#{Shellwords.escape(@remote_path)}/ #{Shellwords.escape(@local_path)}/"
+        cmd = "rsync -avz -e 'ssh -oStrictHostKeyChecking=no  -p #{$settings.ssh_port}'  #{$settings.ssh_username}@#{$settings.ssh_host}:#{Shellwords.escape(remote)}/ #{Shellwords.escape(local)}/"
       else
-        cmd = "rsync -avz -e 'ssh -oStrictHostKeyChecking=no  -p #{$device.tool_port}'  root@localhost:#{Shellwords.escape(@remote_path)}/ #{Shellwords.escape(@local_path)}/"
+        cmd = "rsync -avz -e 'ssh -oStrictHostKeyChecking=no  -p #{$device.tool_port}'  root@localhost:#{Shellwords.escape(remote)}/ #{Shellwords.escape(local)}/"
       end
 
-
       $log.info "Executing rsync command #{cmd}"
       begin
         PTY.spawn(cmd) { |rsync_out, rsync_in, pid |
@@ -67,15 +58,28 @@ module Idb
           PTY.check
         }
       rescue
-        $log.info "Rsync Done. committing to git."
-        @g.add(:all=>true)
-        begin
-          @g.commit_all("Snapshot from #{Time.now.to_s}")
-        rescue
-        end
       end
 
     end
 
+
+    def commit_new_revision
+      $log.info "Rsync Done. committing to git."
+      @g.add(:all=>true)
+      begin
+        @g.commit_all("Snapshot from #{Time.now.to_s}")
+      rescue
+      end
+    end
+
+    def start_new_revision
+      $log.info "Hard resetting work dir #{@local_path}..."
+      begin
+        @g.reset_hard
+      rescue
+        $log.error "Reset of repo failed. If this is the first time you run rsync+git for this app this may be okay."
+      end
+    end
+
   end
 end

data/lib/lib/screen_shot_util.rb

@@ -3,9 +3,10 @@ require_relative 'ssh_operations'
 module Idb
   class ScreenShotUtil
 
-    def initialize app_path, ops, sim = true
-      @app_path = app_path
-      @snapshot_path = "#{@app_path}/Library/Caches/Snapshots"
+    def initialize data_path, ops, sim = true
+      @data_path = data_path
+      ap @data_path
+      @snapshot_path = "#{@data_path}/Library/Caches/Snapshots"
       @ops = ops
       @sim = sim
     end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: idb
 version: !ruby/object:Gem::Version
-  version: 2.1.0
+  version: 2.5.0
 platform: ruby
 authors:
 - Daniel A. Mayer
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-10-10 00:00:00.000000000 Z
+date: 2014-11-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -258,6 +258,7 @@ files:
 - lib/gui/app_details_group_box.rb
 - lib/gui/app_list_dialog.rb
 - lib/gui/app_list_widget_item.rb
+- lib/gui/app_tab_widget.rb
 - lib/gui/binary_strings_widget.rb
 - lib/gui/browse_filesystem_widget.rb
 - lib/gui/ca_manager_dialog.rb
@@ -270,6 +271,7 @@ files:
 - lib/gui/device_status_dialog.rb
 - lib/gui/file_system_events_widget.rb
 - lib/gui/fs_viewer_tab_widget.rb
+- lib/gui/global_app_details_group_box.rb
 - lib/gui/i_device_syslog_thread.rb
 - lib/gui/images/check.png
 - lib/gui/images/folder.ico
@@ -318,6 +320,7 @@ files:
 - lib/lib/device_ca_interface.rb
 - lib/lib/host_file_wrapper.rb
 - lib/lib/i_device_diagnostics_wrapper.rb
+- lib/lib/ios8_last_launch_services_map_wrapper.rb
 - lib/lib/keychain_plist_parser.rb
 - lib/lib/local_operations.rb
 - lib/lib/otool_wrapper.rb