{% extends "base/base_layout.html" %} {% load static %} {% block sidebar_option %} sidebar-mini {% endblock %} {% block extra_css %} {% endblock %} {% block sidebar %} {% endblock %} {% block content %}

Dynamic Analysis Report - {{ bundleid }}

INFORMATION

USERDEFAULTS DATA

{% if userdefaults %} {% for k, v in userdefaults.items %} {% endfor %}
KEY VALUE
{{k}} {{v | base64_decode }}
{% endif %}

KEYCHAIN DATA

{% if keychain %} {% for item in keychain %} {% endfor %}
ITEM DATA CREATE DATE MODIFICATION DATE
Entitlement Group: {{item.entitlement_group}}
Item Class: {{item.item_class}}
Accessible Attribute: {{item.accessible_attribute}}
Generic: {{item.generic}}
Service: {{item.service}}
Account: {{item.account}}

Protected: {{item.protected}}
Label: {{item.label}}
Access Control: {{item.access_control}}
Description: {{item.description}}
Comment: {{item.comment}}
Creator: {{item.creator}}
Type: {{item.type}}
Script Code: {{item.script_code}}
Alias: {{item.alias}}
Invisible: {{item.invisible}}
Negative: {{item.negative}}
Custom Icon: {{item.custom_icon}}
{{item.data | pretty_json | base64_decode}}
{{item.create_date}} {{item.modification_date}}
{% endif %}

FILE ACCESS

{% if files %} {% for item in files %} {% endfor %}
FILE PATH DOWNLOAD
{{item}}
{% endif %}

APP DATA DIRECTORY

{% if datadir %} {% for item in datadir %} {% endfor %}
FILE PATH DOWNLOAD FILE PROTECTION
{{ item.path | replace:"/private/var/mobile/Containers/Data/Application/|" }} {{ item.fileProtectionKey }}
{% endif %}

URLS INVOKED

{% if network %} {% for item in network %} {% endfor %}
SOURCE URL
{{item.source}} {{item.url}}
{% endif %}

JSON DATA

{% if json %} {% for item in json %} {% endfor %}
JSON
{{item | pretty_json}}
{% endif %}

APP LOGS

{% if logs %} {% for item in logs %} {% endfor %}
LOGS
{{item}}
{% endif %}

TEXT INPUTS

{% if textinputs %} {% for item in textinputs %} {% endfor %}
KEYSTROKES
{{item}}
{% endif %}

PASTEBOARD

{% if pasteboard %} {% for item in pasteboard %} {% endfor %}
ITEMS IN PASTEBOARD
{{item}}
{% endif %}

APP COOKIES

{% if cookies %} {% for item in cookies %} {% endfor %}
NAME VALUE DOMAIN PATH EXPIRY HTTPONLY SECURE VERSION
{{item.name}} {{item.value}} {{item.domain}} {{item.path}} {{item.expiry}} {{item.httponly}} {{item.secure}} {{item.version}}
{% endif %}

CRYPTO OPERATIONS

{% if crypto %} {% for item in crypto %} {% for k, v in item.items %} {% if v %} {% endif %} {% endfor %} {% endfor %}
{{ k }}:
 {{ v | base64_decode | pretty_json}}
{% endif %}

CREDENTIAL STORAGE

{% if credentials %} {% for item in credentials %} {% endfor %}
HOST AUTHENTICATION METHOD PROTOCOL PORT USER PASSWORD
{{item.host}} {{item.authenticationMethod}} {{item.protocol}} {{item.port}} {{item.user}} {{item.password}}
{% endif %}

SQLITE QUERIES

{% if sql %} {% for item in sql %} {% endfor %}
QUERIES
{{item}}
{% endif %}

SCREENSHOTS

{% for i in screenshots %} Screenshot {% endfor %}

SERVER LOCATIONS

{% if domains %}


This app may communicate with the following OFAC sanctioned list of countries.

{% for domain, details in domains.items %} {% if details|key:"ofac" == True %} {% endif %} {% endfor %}
DOMAIN COUNTRY/REGION
{{domain}} IP: {{details|key:"geolocation"|key:"ip"}}
Country: {{details|key:"geolocation"|key:"country_long"}}
Region: {{details|key:"geolocation"|key:"region"}}
City: {{details|key:"geolocation"|key:"city"}}
{% endif %}

DOMAIN MALWARE CHECK

{% if domains %} {% for domain, details in domains.items %} {% endfor %}
DOMAIN STATUS GEOLOCATION
{{domain}} {% if details|key:"bad" == "yes" %} malware
                      URL: {{details|key:"domain_or_url"}}
                      IP: {{details|key:"ip"}}
                      Description: {{details|key:"desc"}}
                      
{% else %} good
{% endif %}
{% if details|key:"geolocation" %} IP: {{details|key:"geolocation"|key:"ip"}}
Country: {{details|key:"geolocation"|key:"country_long"}}
Region: {{details|key:"geolocation"|key:"region"}}
City: {{details|key:"geolocation"|key:"city"}}
Latitude: {{details|key:"geolocation"|key:"latitude"}}
Longitude: {{details|key:"geolocation"|key:"longitude"}}
View: Google Map {% else %} No Geolocation information available. {% endif %}
{% endif %}

URLS

{% if urls %}
{% for f in urls %} {{ f}}
{% endfor %} {% endif %}

EMAILS

{% if emails %}
{% for f in emails %} {{ f}}
{% endfor %} {% endif %}

TRACKERS

{% if trackers %} {% for trk in trackers|key:"trackers" %} {% endfor %}
TRACKER NAME CATEGORIES URL
{{trk.name}} {{trk.categories}} {{trk.url}}
{% endif %}

SQLITE DATABASE

{% for file in sqlite %} {% endfor %}
FILES
{{file|key:"file"}}

PLIST FILES

{% for file in plist %} {% endfor %}
FILES
{{file|key:"file"}}

OTHER FILES

{% for file in others %} {% endfor %}
FILES
{{file|key:"file"}}
{% endblock %} {% block extra_scripts %} {% endblock %}