nosy 0.0.2

data/lib/nosy/hunter.rb

@@ -0,0 +1,16 @@
+require 'fileutils'
+
+module Nosy
+
+	class Hunter
+
+		def hunt
+			if RUBY_PLATFORM =~ /darwin/
+				FileUtils.cp "#{Dir.home}/Library/Application Support/MobileSync/Backup/55e67384ae82dd8a317f29585e1d7b5884e43107/3d0d7e5fb2ce288813306e4d4636395e047a3d28", "#{FileUtils.pwd}/texts.sqlite"
+				"#{FileUtils.pwd}/texts.sqlite"
+			end
+		end
+	
+	end
+
+end

data/lib/nosy/parser.rb

@@ -0,0 +1,110 @@
+require 'sqlite3'
+
+Message = Struct.new(:receiver, :sender, :message, :imessage, :date)
+
+module Nosy
+
+	class Parser
+
+		def can_parse?(file)
+			begin
+				db = SQLite3::Database.new( file )
+				begin
+					results = db.execute2( "select * from message LIMIT 1" )
+					results.map do |header|
+						if ( header[0] == "ROWID" && header[1] == "address" && header[2] == "date" && header[3] == "text" && header[4] == "flags" && header[16] == "read")
+							return true
+						else
+							return false
+						end
+					end
+				rescue SQLite3::SQLException
+					return false
+				end
+			rescue SQLite3::NotADatabaseException
+				return false
+			end
+
+		end
+
+		def parse(file)
+			db = SQLite3::Database.new( file )
+			all_messages = db.execute( "select * from message" )
+
+			all_messages.map do |message|
+
+				# http://www.slideshare.net/hrgeeks/iphone-forensics-without-the-iphone
+				# http://www.scip.ch/?labs.20111103
+
+				parsed_message = Message.new("", "", message[3], "", "")
+
+				## If it is an iMessage
+				if message[29] == 1
+					parsed_message.imessage = true
+					parsed_message.date = message[2] + 978307200
+						
+					# Sent an iMessage
+					if message[25] == 36869
+						parsed_message.receiver = format_address(message[18])
+						parsed_message.sender = "me"
+
+					# Recieved an iMessage
+					elsif message[25] == 12289
+						parsed_message.receiver = "me"
+						parsed_message.sender = format_address(message[18])
+
+					# Sent a group iMessage
+					elsif message[25] == 32773
+						parsed_message.sender = "me"
+						parsed_message.receiver = "group"
+					end
+
+				## It is an SMS
+				else
+
+					parsed_message.imessage = false
+					parsed_message.date = message[2]
+
+					# Sent SMS
+					if message[4] == 3
+						parsed_message.receiver = format_address(message[1])
+						parsed_message.sender = "me"
+					
+					# Recieved an SMS
+					elsif message[4] == 2
+						parsed_message.receiver = "me"
+						parsed_message.sender = format_address(message[1])
+
+					# Sent SMS on retry
+					elsif message[4] == 35
+						parsed_message.receiver = format_address(message[1])
+						parsed_message.sender = "me"
+
+					# SMS Failed
+					elsif message[4] == 33
+						parsed_message.receiver = format_address(message[1])
+						parsed_message.sender = "me"
+
+					# iMessage Failed and sent as SMS
+					elsif message[4] == 16387
+						parsed_message.receiver = format_address(message[1])
+						parsed_message.sender = "me"
+					end
+
+				end
+	 
+	    	parsed_message
+	    end
+		end
+
+		private
+			def format_address(address)
+				if !address.nil?
+					address = address.gsub(/\s+|[()-]/, "")
+					address =~ /^[0-9]+$/ ? "+"+address : address
+				end
+			end
+
+	end
+
+end

data/lib/nosy/searcher.rb

@@ -0,0 +1,35 @@
+module Nosy
+
+	class Searcher
+		attr_accessor :texts
+
+	  def initialize( file )
+			@texts = Parser.new.parse( file )
+	  end
+
+	  def search(filters={})
+
+	    @texts.select do |text|
+      	filters.all?{ |key, value| key == :date ? filter_dates(key, value, text) : text[key] == value }
+    	end
+	  end
+
+	  private
+
+	  def filter_dates( key, value, text )
+	  	if value[1] == "="
+				value[0] == ">" ? Time.at(text[key]) >= Time.at(value[2..-1].to_i) : Time.at(text[key]) <= Time.at(value[2..-1].to_i)
+			else
+  			if value[0] == ">"
+  				Time.at(text[key]) > Time.at(value[1..-1].to_i)
+  			elsif value[0] == "<"
+  				Time.at(text[key]) < Time.at(value[1..-1].to_i)
+  			else
+  				Time.at(text[key]) == Time.at(value.to_i)
+  			end
+  		end
+	  end
+	
+	end
+
+end

data/lib/nosy.rb

@@ -0,0 +1,22 @@
+require "nosy/hunter"
+require "nosy/parser"
+require "nosy/searcher"
+
+module Nosy
+
+		def self.hunt
+			Hunter.new.hunt
+		end
+
+		def self.new(file)
+			Searcher.new(file)
+		end
+
+		def self.can_parse?(file)
+			Parser.new.can_parse?(file)
+		end
+
+		def self.parse(file)
+			Parser.new.parse(file)
+		end
+end

metadata

@@ -0,0 +1,84 @@
+--- !ruby/object:Gem::Specification
+name: nosy
+version: !ruby/object:Gem::Version
+  version: 0.0.2
+  prerelease: 
+platform: ruby
+authors:
+- Philip Dudley
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2011-11-24 00:00:00.000000000Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: sqlite3
+  requirement: &70094878998840 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 1.3.4
+  type: :runtime
+  prerelease: false
+  version_requirements: *70094878998840
+- !ruby/object:Gem::Dependency
+  name: fileutils
+  requirement: &70094878998360 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '0.7'
+  type: :runtime
+  prerelease: false
+  version_requirements: *70094878998360
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: &70094878997900 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 2.6.0
+  type: :development
+  prerelease: false
+  version_requirements: *70094878997900
+description: Nosy fetches, parses and searches the iPhone's SMS database that is created
+  on your machine each time you make a backup.
+email: pdudley89@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/nosy.rb
+- lib/nosy/hunter.rb
+- lib/nosy/parser.rb
+- lib/nosy/searcher.rb
+homepage: http://phildudley.com
+licenses: []
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 1.8.10
+signing_key: 
+specification_version: 3
+summary: Nosy fetches, parses and searches the iPhone's SMS database that is created
+  on your machine each time you make a backup.
+test_files: []
+has_rdoc: