#section

5 posts · Last used 3d

Back to Timeline
McNadoMD @mcnado@mstdn.social · 3d ago
Replying to @tranquillity@mastodon.minionflo.net
Legit question, boosts plz, poisoning / ph- Hover or focus to reveal Sensitive
0
2
0
Alexis Brignoni :python: :donor: @abrignoni@infosec.exchange · Jul 16, 2026
New iLEAPP parser: the United Airlines iOS app! ✈️ New blog post from the awesome James Habben walking through the research: where the data lived, which rabbit holes were worth chasing, and which ones he left alone. 12 new artifacts in iLEAPP: 👤 Account profile 🧳 Saved travelers and trip passengers 🎫 Trips, boarding passes, and PNR documents 🔎 Booking and flight status searches 📋 Boarding status log 🎬 Inflight entertainment watch history ⌚ Watch complications 💬 iMessage recipients from the app's plugin cache The traveler/passenger split, the trip JSON mining, and that late-discovered iMessage plugin cache are the fun ones. Read the write-up, it shows the actual thinking, not just the results. Thank you James! 📖 Read it: https://leapps.org/blog-post?post=united-ios-app-artifacts 🔗 Get iLEAPP: https://www.leapps.org/releases#section-ileapp #DFIR #MobileForensics #DigitalForensics #iOS #FLOSS #iLEAPP
0
0
0
Alexis Brignoni :python: :donor: @abrignoni@infosec.exchange · Jul 16, 2026
Photos.sqlite in LAVA! 📸 The entire Photos.sqlite parser family in iLEAPP, 42 artifacts, is now converted to LAVA. A massive body of work from the awesome Scott Koenig, covering one of the richest sources of evidence on any iOS device. What it parses: 📷 Basic asset and album data 📍 Assets with valid locations ⭐ Favorites, hidden, trashed, and burst assets 🤖 GenAI-detected images 👥 People and detected faces 📤 Shared albums plus iCloud Shared Photo Library assets and contributors 🔗 iCloud shared links 🗂️ Asset internal resource data ⚙️ Camera, MediaAnalysis, and SlideShow plist configs 📱 Per-version reference tables from iOS 14 all the way through iOS 26 Standardized timestamps, guarded queries across iOS versions, and full LAVA output for every one. Here is why that matters. Photos.sqlite is data heavy. The old HTML report can choke and crash under that many rows. LAVA does not. It handles the volume and stays fast and filterable, exactly when you need it to. Huge thank you to Scott Koenig for the research and for keeping it current release after release. 🔗 Get iLEAPP: https://www.leapps.org/releases#section-ileapp #DFIR #DigitalForensics #iOS
0
0
0
mkj @mkj@social.mkj.earth · Jun 03, 2026
Replying to @hakona@im.alstadheim.no
0
0
0
infinite love ⴳ @trwnh@mastodon.social · Feb 28, 2026
Replying to on hollo.social
@hongminhee@hollo.social you can use HTTP 3xx redirects but that's not strictly necessary because you can use DNS A/AAAA/CNAME as well (and have the HTTP server respond to those names in conjunction with TLS SNI) the idea is that multiple server names can be responded to by the same Fedify software instance. in nginx it's doable with the http.server.server_name directive. https://nginx.org/en/docs/http/server_names.html SNI: https://datatracker.ietf.org/doc/html/rfc6066#section-3 does fedify expect to run behind a reverse proxy? if so, it can route requests.
0
1
0

You've seen all posts