sensepost / objection

📱 objection - runtime mobile exploration
GNU General Public License v3.0
7.46k stars 854 forks source link

allow 'sqlite connect' to download temp files #392

Closed mame82 closed 3 years ago

mame82 commented 4 years ago

If sqlite connect does download the database file only (without temp files for "Shared Memory" and "Write-Ahead-Log") not all DB data is visible for inspection.

A test has been done TikTok for Android, where a database is accessed with sqlite connect before and after applying the patch from this PR. See this summary for reference:

https://github.com/mame82/objection/blob/android_sqlite_shm/sqlite_patch.md

I have not done tests to re-upload those temporary files after the database was altered (--sync option), thus the respective code is disabled. It could be enabled by setting write_back_tmp_sqlite to True here

leonjza commented 4 years ago

Nice! Thanks for this. I'm spread a bit thin at the moment but will definitely give this a test soon.

leonjza commented 3 years ago

Sorry for the time this took and thank you for contributing! 🙌