<Thread> It’s 5:30am and I’m at the airport. Few days ago, M. X called me. He is the CEO of a big company and he thinks that one of his competitors hacked his phone. I’m going to the company HQ to analyse his phone and evaluate the situation.
This is my first post-lockdown flight. Even if the lockdown ended a while ago and the situation is under control in France, the majority of flights are still cancelled and the airport is empty. We are in the middle of the summer holidays, it should be full of people in theory.
This is my first post-lockdown flight. Even if the lockdown ended a while ago and the situation is under control in France, the majority of flights are still cancelled and the airport is empty. We are in the middle of the summer holidays, it should be full of people in theory.
This is my first post-lockdown flight. Even if the lockdown ended a while ago and the situation is under control in France, the majority of flights are still cancelled and the airport is empty. We are in the middle of the summer holidays, it should be full of people in theory.
This view is amazing.

Bonus game: #GEOINT experts, what city is in the first photo?
This view is amazing.Bonus game: #GEOINT experts, what city is in the first photo?
This view is amazing.Bonus game: #GEOINT experts, what city is in the first photo?
Obviously, this is not my final destination. I’m not that stupid 😅 https://twitter.com/fs0c131y/status/1286530861756809219?s=21 https://twitter.com/fs0c131y/status/1286530861756809219
I’m on site. The fun can start!
Let see what this phone has to tell me
Thanks to the awesome @ElcomSoft iOS Forensic kit, I have now an image of the phone with all the data https://www.elcomsoft.fr/eift.html 
The phone has more than 41000 location data points saved. You should really turn off your location people
I used APOLLO to analyse the data and generate kmz files https://github.com/mac4n6/APOLLO 
mac4n6/APOLLO

Apple Pattern of Life Lazy Output'er. Contribute to mac4n6/APOLLO development by creating an account on GitHub.

https://github.com/mac4n6/APOLLO
Once you have the kmz files, you can use Google Earth Pro to open it.

Yes, iOS has a dedicated database to keep the history of where you parked your vehicule...
Thanks to @ElcomSoft Phone Viewer, you can view the Wifi history with the location. So, now I know where he went for holidays since he bought his phone. I also know where he bought his phone because the phone was connected to the store Wifi.
Worth to say:
- Turn off your wifi if you don't need it
- Clear regularly the Wifi history in your phone https://twitter.com/fs0c131y/status/1286606074313875457?s=20
You should clear regularly your web history too #JustSaying
The level of details is insane you have a log to know when the torch has ben used
The previous screenshot is coming from the report generated by the very good iLEAPP made by @AlexisBrignoni https://github.com/abrignoni/iLEAPP
abrignoni/iLEAPP

iOS Logs, Events, And Preferences Parser. Contribute to abrignoni/iLEAPP development by creating an account on GitHub.

https://github.com/abrignoni/iLEAPP
I'm back from lunch. It's time to look at the keychain baby
You can follow @fs0c131y.
Tip: mention @twtextapp on a Twitter thread with the keyword “unroll” to get a link to it.

Latest Threads Unrolled:
Those who think consciousness raising & movement building are disconnected, or even a distraction from electoral politics have not paid attention to the history of social change.In this thread, we
Read more
The 2020s will be known as the Remote Work decadeA few predictions of what is likely to emerge[ a thread ] Third Space: Office and Working from Home will
Read more
1/29: Have you ever had a concept explained to you that helps frame complex issues you’ve been wrestling with and opens your eyes to new possibilities? A concept that I
Read more
By continuing to use the site, you are consenting to the use of cookies as explained in our Cookie Policy to improve your experience.