iOSForensic 是一个用于 iOS 取证的 Python 工具。 它能获取文件、日志，提取 sqlite3 数据库并将 .plist 文件解压缩为 xml。
只需克隆此 Git 仓库并安装依赖项。
./iOSForensic.py -i 192.168.1.10 [OPTIONS] APP_NAME.app INCOMPLETE_APP_NAME APP_NAME2_WITHOUT_DOT_APP
./iOSForensic.py -i 192.168.1.10 -p 1337 -P pwd MyApp.app angry MyApp2
由 Florian Pradines (Phonesec) 编写，该工具自 2014 年 6 月起被列为推荐的 OWASP iOS 安全项目。
您可以通过我的网站联系我。
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.