I’ve been working hard on a big update to improve core functionality of APOLLO to include methods to gather up the database files needed so they can be extracted from using the APOLLO modules.New APOLLO Functions:‘gather_macos’ - Automagically finds...

I’ve been working hard on a big update to improve core functionality of APOLLO to include methods to gather up the database files needed so they can be extracted from using the APOLLO modules.

New APOLLO Functions:

‘gather_macos’ - Automagically finds and collects database files on macOS using modules.

Any directory, mounted volume, etc.

Ability to ignore certain directories

‘gather_ios’ - Automagically finds and collects database files on jailbroken iOS devices using modules.

IP and Port Required

Ability to ignore certain directories

‘extract’ - Nearly the same as before, rips through all the databases and extracts data via the SQL queries in the modules.

Improved CSV output

New JSON output within SQLite database

I’ve also updated many modules for iOS 14 and macOS 11. I’ve got more updates planned, however I still need to tweak, research, and test before I release.

You can see the new workings of the tool in my OSDFCon presentation - “Go for Launch: Getting Started with Practical APOLLO Analysis”

And for pure fun(!) a bonus Halloween themed presentation with “Getting Spooky with Apollo” that I did for a Fortego F-Con Lightning Talk. ??

View Entire Post