sepinf-inc / IPED

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners.
Other
886 stars 211 forks source link

Android backup parser #2079

Open patrickdalla opened 5 months ago

patrickdalla commented 5 months ago

Closes #2078

patrickdalla commented 5 months ago

@lfcnassif , while implementing ALeapp I found the project https://github.com/nelenkov/android-backup-extractor (Apache V2 license). I adapted it to make a IPED parser.

The Cellebrite extractions I found to test it were all unencrypted and were parsed perfectly. But I could not test the decryption code.

Please, review it.

lfcnassif commented 5 months ago

Thank you @patrickdalla! This is very useful!