#9 – Manifest.db BLOBs

comment 1
Digital Forensics / iOS Artifacts / Smartphone Forensics

Yesterday I mentioned extracting BLOB data from Manifest.db, which would be a painful process to do manually. Thankfully, Adrian Leong (@Cheeky4n6Monkey) wrote a python script to automate BLOB extractions from SQLite databases. It is a fairly simple script and will work on any SQLite databases, not just the Manifest.db.

An example of the script is below:

python sqlite-blob-dumper.py targetdb.sqlite tablename outputdir

Test it out. Let him know what you think or submit a pull request with your updates.

1 Comment

  1. Pingback: Week 26 – 2018 – This Week In 4n6

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s