Skip to content

Instantly share code, notes, and snippets.

@irfn
Last active August 1, 2021 08:15
Show Gist options
  • Save irfn/53e09d28d0ea77ca352cc603e8a39ee4 to your computer and use it in GitHub Desktop.
Save irfn/53e09d28d0ea77ca352cc603e8a39ee4 to your computer and use it in GitHub Desktop.
MVT investigation

MVT

MVT is a tool from https://github.com/mvt-project/mvt

Backup

Create an encrypted backup [Cause that includes more stuff.] https://support.apple.com/en-us/HT205220

Prerequisites

libimobiledevice looks to be needed only on linux, but what the heck brew install --HEAD libimobiledevice Might be already present! brew install python3 libusb sqlite3 pip3 install mvt

Decrypt Backup

Maybe do it with internet off? mvt-ios decrypt-backup -p password -d /decrypted /backup

Download investigations

Download the ones you need from https://github.com/AmnestyTech/investigations

About Amnesty International

https://github.com/AmnestyTech

mvt-ios check-backup -o /output -i /pegasus.stix2 /backup

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment