mirror of
https://github.com/MobSF/Mobile-Security-Framework-MobSF.git
synced 2026-10-12 02:06:59 +00:00
Ajin Abraham
361e76a390
* Android script loading bug fix * Frida injected code view * Paramiko SSH reactor to address some host key issues, revert from warning to autoadd. * Frida Injection refactoring
139 lines
4.5 KiB
JavaScript
139 lines
4.5 KiB
JavaScript
/*
|
|
* iOS Data Protection
|
|
*
|
|
* getDataProtectionKeysForAllPaths() - List iOS file data protection classes (NSFileProtectionKey) of an app
|
|
*
|
|
*/
|
|
function listDirectoryContentsAtPath(path) {
|
|
var fileManager = ObjC.classes.NSFileManager.defaultManager();
|
|
var enumerator = fileManager.enumeratorAtPath_(path);
|
|
var file;
|
|
var paths = [];
|
|
|
|
while ((file = enumerator.nextObject()) !== null) {
|
|
paths.push(path + '/' + file);
|
|
}
|
|
|
|
return paths;
|
|
}
|
|
|
|
function listHomeDirectoryContents() {
|
|
var homePath = ObjC.classes.NSProcessInfo.processInfo().environment().objectForKey_("HOME").toString();
|
|
var paths = listDirectoryContentsAtPath(homePath);
|
|
return paths;
|
|
}
|
|
|
|
function getDataProtectionKeyForPath(path) {
|
|
var fileManager = ObjC.classes.NSFileManager.defaultManager();
|
|
var urlPath = ObjC.classes.NSURL.fileURLWithPath_(path);
|
|
var fileProtectionKey = ObjC.Object(ptr(fileManager.attributesOfItemAtPath_error_(urlPath.path(), NULL)));
|
|
var protString = fileProtectionKey.valueForKey_("NSFileProtectionKey")
|
|
if (protString)
|
|
return protString.UTF8String();
|
|
else{
|
|
return '';
|
|
}
|
|
}
|
|
|
|
function getDataProtectionKeysForAllPaths() {
|
|
var fileManager = ObjC.classes.NSFileManager.defaultManager();
|
|
var dict = [];
|
|
var paths = listHomeDirectoryContents();
|
|
|
|
var isDir = Memory.alloc(Process.pointerSize);
|
|
Memory.writePointer(isDir, NULL);
|
|
|
|
for (var i = 0; i < paths.length; i++) {
|
|
|
|
fileManager.fileExistsAtPath_isDirectory_(paths[i], isDir);
|
|
|
|
if (Memory.readPointer(isDir) == 0) {
|
|
dict.push({
|
|
path: paths[i],
|
|
fileProtectionKey: getDataProtectionKeyForPath(paths[i])
|
|
});
|
|
}
|
|
}
|
|
return dict;
|
|
}
|
|
|
|
send('Dumping Application Directory file information');
|
|
try {
|
|
setTimeout(() => {
|
|
send(JSON.stringify({'[MBSFDUMP] datadir': getDataProtectionKeysForAllPaths()}));
|
|
}, "2000");
|
|
} catch(err) {}
|
|
|
|
// /********************************************************************************
|
|
// * Name: Dump iOS Data Protection Keys
|
|
// * OS: iOS
|
|
// * Author: @ay-kay
|
|
// * Source: https://codeshare.frida.re/@ay-kay/ios-dataprotection/
|
|
// * Info: List iOS file data protection classes (NSFileProtectionKey) of an app
|
|
// *********************************************************************************/
|
|
|
|
// function listDirectoryContentsAtPath(path) {
|
|
// var fileManager = ObjC.classes.NSFileManager.defaultManager();
|
|
// var enumerator = fileManager.enumeratorAtPath_(path);
|
|
// var file;
|
|
// var paths = [];
|
|
|
|
// while ((file = enumerator.nextObject()) !== null) {
|
|
// paths.push(path + '/' + file);
|
|
// }
|
|
|
|
// return paths;
|
|
// }
|
|
|
|
// function listHomeDirectoryContents() {
|
|
// var homePath = ObjC.classes.NSProcessInfo.processInfo().environment().objectForKey_("HOME").toString();
|
|
// var paths = listDirectoryContentsAtPath(homePath);
|
|
// return paths;
|
|
// }
|
|
|
|
// function getDataProtectionKeyForPath(path) {
|
|
// var fileManager = ObjC.classes.NSFileManager.defaultManager();
|
|
// var urlPath = ObjC.classes.NSURL.fileURLWithPath_(path);
|
|
// var attributeDict = dictFromNSDictionary(fileManager.attributesOfItemAtPath_error_(urlPath.path(), NULL));
|
|
// return attributeDict.NSFileProtectionKey;
|
|
// }
|
|
|
|
// // helper function available at https://codeshare.frida.re/@dki/ios-app-info/
|
|
// function dictFromNSDictionary(nsDict) {
|
|
// var jsDict = {};
|
|
// var keys = nsDict.allKeys();
|
|
// var count = keys.count();
|
|
|
|
// for (var i = 0; i < count; i++) {
|
|
// var key = keys.objectAtIndex_(i);
|
|
// var value = nsDict.objectForKey_(key);
|
|
// jsDict[key.toString()] = value.toString();
|
|
// }
|
|
|
|
// return jsDict;
|
|
// }
|
|
|
|
// function getDataProtectionKeysForAllPaths(){
|
|
// var fileManager = ObjC.classes.NSFileManager.defaultManager();
|
|
// var dict = [];
|
|
// var paths = listHomeDirectoryContents();
|
|
|
|
// var isDir = Memory.alloc(Process.pointerSize);
|
|
// Memory.writePointer(isDir, NULL);
|
|
|
|
// for (var i = 0; i < paths.length; i++) {
|
|
// fileManager.fileExistsAtPath_isDirectory_(paths[i], isDir);
|
|
|
|
// if (Memory.readPointer(isDir) == 0) {
|
|
// dict.push({
|
|
// path: paths[i],
|
|
// fileProtectionKey: getDataProtectionKeyForPath(paths[i])
|
|
// });
|
|
// }
|
|
// }
|
|
// return dict;
|
|
// }
|
|
|
|
// send('Getting files in app data directory');
|
|
// send(JSON.stringify({'[MBSFDUMP] datadir': getDataProtectionKeysForAllPaths()}));
|