dissect.target.plugins.os.unix.bsd.darwin.ios._os

Module Contents

Classes

IOSPlugin	Apple iOS plugin.
Config

class dissect.target.plugins.os.unix.bsd.darwin.ios._os.IOSPlugin(target: dissect.target.target.Target)

Bases: dissect.target.plugins.os.unix.bsd.darwin._os.DarwinPlugin

Apple iOS plugin.

References

• https://developer.apple.com/library/archive/documentation/FileManagement/Conceptual/FileSystemProgrammingGuide/FileSystemOverview/FileSystemOverview.html

• https://corp.digitalcorpora.org/corpora/mobile/iOS17/

SYSTEM = '/private/var/preferences/SystemConfiguration/preferences.plist'

GLOBAL = '/private/var/mobile/Library/Preferences/.GlobalPreferences.plist'

VERSION = '/System/Library/CoreServices/SystemVersion.plist'

PASSWD_FILES = ('/private/etc/passwd',)

classmethod detect(target: dissect.target.target.Target) → dissect.target.filesystem.Filesystem | None

Provide detection of this OSPlugin on a given filesystem.

Parameters:

fs – Filesystem to detect the OS on.

Returns:

The root filesystem / sysvol when found.

classmethod create(target: dissect.target.target.Target, sysvol: dissect.target.filesystem.VirtualFilesystem) → typing_extensions.Self

Initiate this OSPlugin with the given target and detected filesystem.

Parameters:

• target – The Target object.

• sysvol – The filesystem that was detected in the detect() function.

Returns:

An instantiated version of the OSPlugin.

hostname() → str | None

Return the target’s hostname.

Returns:

The hostname as string.

ips() → list

Return the IP addresses configured in the target.

Returns:

The IPs as list.

version() → str

Return the target’s OS version.

Returns:

The OS version as string.

users() → collections.abc.Iterator[dissect.target.helpers.record.IOSUserRecord]

Yield unix user records from passwd files or syslog session logins.

References

• https://manpages.ubuntu.com/manpages/oracular/en/man5/passwd.5.html

os() → str

Return a slug of the target’s OS name.

Returns:

A slug of the OS name, e.g. ‘windows’ or ‘linux’.

architecture() → str | None

Return a slug of the target’s OS architecture.

Returns:

A slug of the OS architecture, e.g. ‘x86_32-unix’, ‘MIPS-linux’ or ‘AMD64-win32’, or ‘unknown’ if the architecture is unknown.

class dissect.target.plugins.os.unix.bsd.darwin.ios._os.Config

SYSTEM: dict[str, Any]

GLOBAL: dict[str, Any]

VERSION: dict[str, Any]

classmethod load(*args: list[pathlib.Path]) → typing_extensions.Self