Ladies/Gents,
I have an iPhone 4 running iOS 7 with Blackberry Messenger installed and have run it through XRY 6.7 where I conducted a Logical and a Physical and I have also ran it through Lantern. Neither of these tools bring the data back as a tab which I fully expected as there has yet to be an update released.
So my question is, Is there anyway of extracting the SQLite database information neatly? Or does anybody know of a tool which extracts the data from the device?
Thanks in advance.
Chris
Have you tried running it through EnCase 7?
Acquire the device via "acquire smartphone" then look in the RawData/app domain for the BBS app. If the SQLite database is present you will be able to either
A) export the database to view with your viewer of choice
B) Encase will have parsed the database and present the tables and entries within.
There was a new release of Cellebrite PA today, mainly focused on decoding for iOS 7.0.3 & 7.0.4 applications etc, i have not had a chance to test this out yet!
hommy0's suggestion would be worth a shot though!
I'm a Windows/Web/Database developer and I've decided to bite the bullet and learn some Java and write apps for Android. I've done Hello World and a few other programs and now I want to start playing with things like contacts and SMSs.
To make life easier I want to get copies of the various SQLite databases so that I can write my SQL queries and general play with them in my SQLite admin program on Windows.
I assume that they are just regular SQLite files like I've used in other projects so what I'd like to know if possible is
Is my assumption about them being regular SQLite files correct?
Where do they live on the phone?
How do I get them off the phone/emulator?
Also, I don't know whether it makes a difference to what I want to do but I've not rooted my phone and don't really want to. Based on that, if it needs rooting to get them I'd be really grateful if anyone happens to have gone through this exercise before and can just attach them to a reply post.
Ladies/Gents,
I have an iPhone 4 running iOS 7 with Blackberry Messenger installed and have run it through XRY 6.7 where I conducted a Logical and a Physical and I have also ran it through Lantern. Neither of these tools bring the data back as a tab which I fully expected as there has yet to be an update released.
So my question is, Is there anyway of extracting the SQLite database information neatly? Or does anybody know of a tool which extracts the data from the device?
Thanks in advance.
Chris
If you export all files using the reflect original path option you will be presented with a folder containing all/as much of the file system as XRY can extract. If you then navigate to;
private/var/mobile/applications
you will be presented with a directory containing data for installed applications. If you can locate within here the BBM application you can then look at the files and see if you can identify the database that stores the user data. I've not come across this app yet but I wouldn't mind betting that it won't be as straight forward as whatsapp and other IM applications.
Once/if you do identify the db and the data isn't encrypted, you can write a query that will output the data with your desired formatting.
Be wary of WAL's and changes they may make, if they are present.
As stated, some other tools may have support for this now but you can work with what you already have.