ios_backup_extractor 1.1.0 → 1.2.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: 9b67944ac247ad378f8dba3742797929d917d4df
-  data.tar.gz: f0cb61ddb947a41a25c462c3a2dd523f96f3b088
+SHA256:
+  metadata.gz: c550f9eaaf8ec2f4415286b9ad41046ee675c0ed1f2f44ec8fc213fe0cd58649
+  data.tar.gz: 254cb6e8da6cb2a4eca3e72cfae3f8c0d0790d79cf577cd39b97d63011f9859a
 SHA512:
-  metadata.gz: 132eb417611b828d131bcced52e3226b2a2058a3b45fb5cc2ca9acb372dadbf9761f7bc05058d6f3107641e3cdc54c5ae67094b8a35ece8d2bba3fc627b04e04
-  data.tar.gz: 1eea2e6d2218621c19a52f4011e73a34ab4608210d709ce905e7462e8c9c9fe6369d21916f687ee5d815869741cb3aebc9ec98ff48ad93d32ef36fbd8151302d
+  metadata.gz: a36b324df7b41043d8f426aaa78b7bbe75857932a9cee1cad9face7fac89d0ce2f1547eb93cab5466a2e8bc4a8c67dbdacaa0a2d9a2a81df8152d98a1ee4663e
+  data.tar.gz: 6213ac85292d7e844ab6586fa25eabbf4c694fece157d5d4fd1b7ae6b1ff2c71f1a239979b475bc8b4623fd159aaac22e81cfa1d8cb6d60b620cde4ae7463dad

data/exe/ios

@@ -58,6 +58,10 @@ OptionParser.new do |opts|
     backup_options[:password] = q.to_s
   end
 
+  opts.on('--temp FOLDER', 'Folder to use for creating temp files') do |q|
+    backup_options[:temp_folder] = q.to_s
+  end
+
   opts.on('--serial SERIAL', 'Target a specific device by its serial number') do |q|
     options[:serial_number] = q.to_s.strip
   end

data/ios_backup_extractor.gemspec

@@ -23,7 +23,7 @@ Gem::Specification.new do |spec|
   spec.add_dependency 'aes_key_wrap'
   spec.add_dependency 'CFPropertyList'
   spec.add_dependency 'sqlite3'
-  spec.add_development_dependency 'bundler', '~> 1.10'
-  spec.add_development_dependency 'rake', '~> 10.0'
+  spec.add_development_dependency 'bundler', '~> 2.2'
+  spec.add_development_dependency 'rake', '~> 12.3.3'
   spec.add_development_dependency 'rspec'
 end

data/lib/ios_backup_extractor/backup_retriever.rb

@@ -17,7 +17,7 @@ module IosBackupExtractor
           continue unless infos.has? InfoPlist::PRODUCT_VERSION
           major = infos.versions.first
           if major <= 3
-            raise 'iOS 3 backups are not supported'
+            @backups << RawBackup3.new(File.dirname(path))
           elsif major < 10
             @backups << RawBackup4.new(File.dirname(path))
           else

data/lib/ios_backup_extractor/keybag.rb

@@ -9,6 +9,7 @@ module IosBackupExtractor
     def initialize(data, version_major, version_minor)
       @version_major = version_major
       @version_minor = version_minor
+      logger.debug(self.class.name) { "Keybag for backup of iOS #{@version_major}.#{@version_minor}" }
       parse_binary_blob(data)
     end
 
@@ -58,7 +59,7 @@ module IosBackupExtractor
     def get_passcode_key_from_passcode(password)
       raise 'This is not a backup/icloud keybag' unless @type == 1 or @type == 3
 
-      if @version_major == 10 && @version_minor < 2
+      if @version_major < 10 || (@version_major == 10 && @version_minor < 2)
         return OpenSSL::PKCS5.pbkdf2_hmac_sha1(password, @attributes['SALT'], @attributes['ITER'], 32)
       end
 

data/lib/ios_backup_extractor/raw_backup.rb

@@ -9,7 +9,6 @@ module IosBackupExtractor
       @backup_directory = NauktisUtils::FileBrowser.ensure_valid_directory(backup_directory)
       @info_plist = InfoPlist.new(File.join(@backup_directory, INFO_PLIST))
       @manifest_plist = IosBackupExtractor.plist_file_to_hash(File.join(@backup_directory, MANIFEST_PLIST))
-      raise 'This looks like a very old backup (iOS 3?)' unless @manifest_plist.has_key? 'BackupKeyBag'
     end
 
     ##
@@ -39,8 +38,8 @@ module IosBackupExtractor
       raise "Backup destination already exists. #{parent_directory}" if File.exist? parent_directory
       FileUtils.mkdir(parent_directory)
       logger.info(self.class.name) { "Starting backup extraction in directory #{parent_directory}" }
-      copy_files(destination_directory, options)
-      add_files_with_extensions(destination_directory)
+      copy_files(parent_directory, options)
+      add_files_with_extensions(parent_directory)
       logger.info(self.class.name) { "Backup extraction finished. #{IosBackupExtractor.file_count(parent_directory)} files extracted." }
       parent_directory
     end

data/lib/ios_backup_extractor/raw_backup10.rb

@@ -5,12 +5,13 @@ module IosBackupExtractor
     private
 
     def load!(options = {})
+      raise 'This looks like a very old backup (iOS 3?)' unless @manifest_plist.has_key? 'BackupKeyBag'
       super(options)
 
       # Grab a copy of the Manifest database
       manifest_dir = Dir.mktmpdir
       major, minor = info_plist.versions
-      if is_encrypted? and major >= 10 and minor >= 2
+      if is_encrypted? && (major > 10 || (major == 10 && minor >= 2))
         protection_class = @manifest_plist['ManifestKey'][0..3].unpack('V')[0]
         key = @keybag.unwrap_key_for_class(protection_class, @manifest_plist['ManifestKey'][4..-1])
         copy_enc_file_from_backup(MANIFEST_DB, File.join(manifest_dir, MANIFEST_DB), key)

data/lib/ios_backup_extractor/raw_backup3.rb

@@ -0,0 +1,58 @@
+module IosBackupExtractor
+  class RawBackup3 < RawBackup
+    private
+
+    def load!(options = {})
+      unless @loaded
+        logger.debug(self.class.name) { 'Loading backup' }
+        logger.info(self.class.name) { "Files in the original backup directory #{IosBackupExtractor.file_count(@backup_directory)}" }
+
+        p @backup_directory
+
+
+        if @manifest_plist['IsEncrypted'] && @manifest_plist['IsEncrypted'] != 0
+          raise "Encrypted backup for iOS 3 and below are not supported."
+        end
+
+        @manifest_data = IosBackupExtractor.plist_data_to_hash(@manifest_plist['Data']) 
+        @loaded = true
+      end
+    end
+
+    # Copy a file from the backup to destination
+    def copy_files(destination_directory, options = {})
+      destination_directory = NauktisUtils::FileBrowser.ensure_valid_directory(destination_directory)
+
+      @manifest_data['Files'].each_pair do |key, value|
+        puts key
+        puts value
+
+        mdinfo_file = File.join(@backup_directory, "#{key}.mdinfo")
+        mdinfo_file = File.expand_path(mdinfo_file)
+        raise "File #{mdinfo_file} doesn't exist in your backup source" unless File.exists?(mdinfo_file)
+
+        mddata_file = File.join(@backup_directory, "#{key}.mddata")
+        mddata_file = File.expand_path(mddata_file)
+        raise "File #{mddata_file} doesn't exist in your backup source" unless File.exists?(mddata_file)
+
+        mdinfo = IosBackupExtractor.plist_file_to_hash(mdinfo_file)
+
+        domain, path = mdinfo['Domain'], mdinfo['Path']
+        if mdinfo['Metadata']
+          mdinfo_metadata = IosBackupExtractor.plist_data_to_hash(mdinfo['Metadata'])
+          domain, path = mdinfo_metadata['Domain'], mdinfo_metadata['Path']
+        end
+
+        p mdinfo
+        p mdinfo_metadata
+
+        destination = File.expand_path(File.join(destination_directory, domain, path))
+        copy_file_from_backup(mddata_file, destination)
+      end
+    end
+
+    def add_files_with_extensions(destination_directory)
+
+    end
+  end
+end

data/lib/ios_backup_extractor/raw_backup4.rb

@@ -5,6 +5,7 @@ module IosBackupExtractor
     private
 
     def load!(options = {})
+      raise 'This looks like a very old backup (iOS 3?)' unless @manifest_plist.has_key? 'BackupKeyBag'
       super(options)
       @mbdb = MBDB.new(File.join(@backup_directory, MANIFEST_MBDB))
     end
@@ -19,31 +20,12 @@ module IosBackupExtractor
           continue unless should_include?(f[:domain], f[:file_path], options)
 
           destination = File.expand_path(File.join(destination_directory, f[:domain], f[:file_path]))
-          raise "File #{destination} already exists" if File.exists?(destination)
-
-          source = File.expand_path(File.join(@backup_directory, f[:file_id]))
-          raise "File #{source} doesn't exist in your backup source" unless File.exists?(source)
-
-          logger.debug(self.class.name) { "Extracting #{destination}" }
-          FileUtils.mkdir_p(File.dirname(destination))
 
           if not f[:encryption_key].nil? and not @keybag.nil?
             key = @keybag.unwrap_key_for_class(f[:protection_class], f[:encryption_key][4..-1])
-
-            cipher = OpenSSL::Cipher::AES256.new(:CBC)
-            cipher.decrypt
-            cipher.key = key
-            buf = ''
-            File.open(destination, 'wb') do |outf|
-              File.open(source, 'rb') do |inf|
-                while inf.read(4096, buf)
-                  outf << cipher.update(buf)
-                end
-                outf << cipher.final
-              end
-            end
+            copy_enc_file_from_backup(f[:file_id], destination, key)
           else
-            FileUtils.cp(source, destination)
+            copy_file_from_backup(f[:file_id], destination)
           end
         end
       end

data/lib/ios_backup_extractor/version.rb

@@ -1,3 +1,3 @@
 module IosBackupExtractor
-  VERSION = '1.1.0'
+  VERSION = '1.2.2'
 end

data/lib/ios_backup_extractor.rb

@@ -13,6 +13,7 @@ require 'ios_backup_extractor/info_plist'
 require 'ios_backup_extractor/mbdb'
 require 'ios_backup_extractor/keybag'
 require 'ios_backup_extractor/raw_backup'
+require 'ios_backup_extractor/raw_backup3'
 require 'ios_backup_extractor/raw_backup4'
 require 'ios_backup_extractor/raw_backup10'
 require 'ios_backup_extractor/backup_retriever'

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ios_backup_extractor
 version: !ruby/object:Gem::Version
-  version: 1.1.0
+  version: 1.2.2
 platform: ruby
 authors:
 - Nauktis
-autorequire: 
+autorequire:
 bindir: exe
 cert_chain: []
-date: 2017-01-27 00:00:00.000000000 Z
+date: 2021-12-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: nauktis_utils
@@ -86,28 +86,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.10'
+        version: '2.2'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.10'
+        version: '2.2'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '10.0'
+        version: 12.3.3
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '10.0'
+        version: 12.3.3
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
@@ -148,12 +148,13 @@ files:
 - lib/ios_backup_extractor/mbdb.rb
 - lib/ios_backup_extractor/raw_backup.rb
 - lib/ios_backup_extractor/raw_backup10.rb
+- lib/ios_backup_extractor/raw_backup3.rb
 - lib/ios_backup_extractor/raw_backup4.rb
 - lib/ios_backup_extractor/version.rb
 homepage: https://github.com/Nauktis/ios_backup_extractor
 licenses: []
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -168,9 +169,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.5.1
-signing_key: 
+rubygems_version: 3.1.2
+signing_key:
 specification_version: 4
 summary: Ruby script to extract iOS backups.
 test_files: []