Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How to read itunes backup file (Manifest.db)

Tags:

sqlite

ios

I'm trying to read and analysis iPhone backup files in Library/Application Support/MobileSync/Backup folder.

I use SQLite DB viewer to view the manifest.db:

Files TABLE structure enter image description here

Files TABLE content enter image description here

The filename is encrypted. And the file is blob type which I can't decide it's an image or text or documents.

How can I get the details of these backup? (Using Javascript would be best, or Swift).

like image 650
Will Avatar asked Oct 18 '22 22:10

Will


2 Answers

The numbers and letters under fileID are the file names in the backup as in the folders with the manifest.db, and they correspond to the domain and relative path (duh). In iOS versions newer than 9.3.5, you can find the file itself in the folder named with the 1st 2 characters of the fileID. At the end of the relative path in the database it should have an extension. Use that as a hint to what program to use to open the file. Xcode for .plist etc. Ultimately it depends what you're looking for...

like image 190
all Avatar answered Nov 01 '22 14:11

all


The blob in the blob column is a binary plist. You can parse it using a plist parser e.g. Property List Parsing

like image 34
Owuor Avatar answered Nov 01 '22 12:11

Owuor