Code Monkey home page Code Monkey logo

4n6-scripts's Introduction

4n6-scripts

Forensic Scripts

Currently this project contains assorted Perl/Python scripts from http://cheeky4n6monkey.blogspot.com/

In December 2021, an attempted cleanup was done - scripts were sorted into folders by OS, Perl language or "utilities" (if you're not sure where a Python script moved to, its probably here).

The scripts were initially written for/tested on SANS SIFT Virtual Machines.

  • MOST Perl scripts should also run with ActiveState Perl on Windows but ALL have been tested/run on SANS SIFT (v2).
  • Python Scripts have been developed/tested on Ubuntu and/or Windows 7/10.
  • These programs are free software: you can redistribute them and/or modify them under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or any later version.

    These programs are distributed in the hope that they will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

    You can view the GNU General Public License at http://www.gnu.org/licenses/

    4n6-scripts's People

    Contributors

    cheeky4n6monkey avatar

    Stargazers

     avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

    Watchers

     avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

    4n6-scripts's Issues

    Modify fbmsg-extractor

    hi @cheeky4n6monkey I've just modified your fbmsg-extractor.py to work with latest threads_db2 & contacts_db2 for mobile forensics education purpose. Please forgive me if there is any violation towards your creation. I'm newbie in python and not so familiar with github fork so I create new issue please review my modification.

    Video Timestamp Issue

    The readable timestamp conversion fails on some video entries. Tested with an S6 android 5.1.1. The timestamps for videos are stored the same as the image entries. There are no extra zeros at the end of the time stamp. Instead of dividing by 1000 to eliminate the extra numbers, why not take a substring of the variable "timestring". This way the "if" statement is removed completely. (No need to check for difference between video and pictures)

    suggested code would be

    timestring = datetime.datetime.utcfromtimestamp(int(timestamp[0:10])).strftime("%Y-%m-%dT%H-%M-%S)

    replace if statement with that code. Tested and works great!

    Merge into the LEAPP family

    Please merge your scripts into the more-popular LEAPP series of projects of abrignoni. Those tools are the most mature series of FOSS data analysis from device dumps available.

    TypeError: argument should be integer or bytes-like object, not 'str'

    When I try to execute imgcache-parse-mod.py or imgcache-parse.py I have this issue :

    E:\404\Test\4n6-scripts-master\4n6-scripts-master\Android>python imgcache-parse-mod.py -f 86546165715873655.0 -o output.html -p Running imgcache-parse-mod.py v2016-08-03

    Traceback (most recent call last): File "E:\404\Test\4n6-scripts-master\4n6-scripts-master\Android\imgcache-parse-mod.py", line 126, in <module> hits = all_indices(filestring, substring1, []) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

    File "E:\404\Test\4n6-scripts-master\4n6-scripts-master\Android\imgcache-parse-mod.py", line 66, in all_indices i = bigstring.find(substring, offset) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ TypeError: argument should be integer or bytes-like object, not 'str'

    Any idea ?

    trivial code improvement

    in utilities/google-ei-time.py, line 116 can be replaced with:
    timestamp = int.from_bytes( decoded[ : 4], byteorder='little')
    which seems a bit more pythonic to me

    Recommend Projects

    • React photo React

      A declarative, efficient, and flexible JavaScript library for building user interfaces.

    • Vue.js photo Vue.js

      ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

    • Typescript photo Typescript

      TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

    • TensorFlow photo TensorFlow

      An Open Source Machine Learning Framework for Everyone

    • Django photo Django

      The Web framework for perfectionists with deadlines.

    • D3 photo D3

      Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

    Recommend Topics

    • javascript

      JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

    • web

      Some thing interesting about web. New door for the world.

    • server

      A server is a program made to process requests and deliver data to clients.

    • Machine learning

      Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

    • Game

      Some thing interesting about game, make everyone happy.

    Recommend Org

    • Facebook photo Facebook

      We are working to build community through open source technology. NB: members must have two-factor auth.

    • Microsoft photo Microsoft

      Open source projects and samples from Microsoft.

    • Google photo Google

      Google โค๏ธ Open Source for everyone.

    • D3 photo D3

      Data-Driven Documents codes.