Alexis Brignoni
@abrignoni@infosec.exchange
Digital forensics nerd. Opinions are mine and subject to change. He/Him. #DFIR #DigitalForensics #FOSS #Python #OSDF #MobileForensics Whoami? 🖥 Developer of open-source tools for digital forensics (iLEAPP, ALEAPP, & RLEAPP.) 📱 Digital forensics examiner specializing in mobile forensics. 🔊 Public speaker on cybersecurity and digital investigations. 🃏 Certified Digital Forensics Memer
infosec.exchange
New iLEAPP parser: the United Airlines iOS app! ✈️
New blog post from the awesome James Habben walking through the research: where the data lived, which rabbit holes were worth chasing, and which ones he left alone.
12 new artifacts in iLEAPP:
👤 Account profile
🧳 Saved travelers and trip passengers
🎫 Trips, boarding passes, and PNR documents
🔎 Booking and flight status searches
📋 Boarding status log
🎬 Inflight entertainment watch history
⌚ Watch complications
💬 iMessage recipients from the app's plugin cache
The traveler/passenger split, the trip JSON mining, and that late-discovered iMessage plugin cache are the fun ones. Read the write-up, it shows the actual thinking, not just the results.
Thank you James!
📖 Read it: https://leapps.org/blog-post?post=united-ios-app-artifacts
🔗 Get iLEAPP: https://www.leapps.org/releases#section-ileapp
#DFIR #MobileForensics #DigitalForensics #iOS #FLOSS #iLEAPP