iphone_backup.js 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434
  1. const path = require('path')
  2. const sqlite3 = require('sqlite3')
  3. const bplist = require('bplist-parser')
  4. const fs = require('fs')
  5. const plist = require('plist')
  6. const tz_offset = 5
  7. const databases = {
  8. SMS: '3d0d7e5fb2ce288813306e4d4636395e047a3d28',
  9. Contacts: '31bb7ba8914766d4ba40d6dfb6113c8b614be442',
  10. Calendar: '2041457d5fe04d39d0ab481178355df6781e6858',
  11. Reminders: '2041457d5fe04d39d0ab481178355df6781e6858',
  12. Notes: 'ca3bc056d4da0bbf88b5fb3be254f3b7147e639c',
  13. Notes2: '4f98687d8ab0d6d1a371110e6b7300f6e465bef2',
  14. Calls: '2b2b0084a1bc3a5ac8c27afdf14afb42c61a19ca',
  15. Calls2: '5a4935c78a5255723f707230a451d79c540d2741',
  16. Locations: '4096c9ec676f2847dc283405900e284a7c815836',
  17. WebHistory: 'e74113c185fd8297e140cfcf9c99436c5cc06b57',
  18. Photos: '12b144c0bd44f2b3dffd9186d3f9c05b917cee25',
  19. WiFi: 'ade0340f576ee14793c607073bd7e8e409af07a8',
  20. Voicemail: '992df473bbb9e132f4b3b6e4d33f72171e97bc7a'
  21. }
  22. var cache = {}
  23. class iPhoneBackup {
  24. constructor (id, status, info, manifest, base) {
  25. this.id = id
  26. this.status = status
  27. this.info = info
  28. this.manifest = manifest
  29. this.base = base
  30. }
  31. // Open a backup with a specified ID
  32. // base is optional and will be computed if not used.
  33. static fromID (id, base) {
  34. // Get the path of the folder.
  35. if (base) {
  36. base = path.join(base, id)
  37. } else {
  38. base = path.join(process.env.HOME, '/Library/Application Support/MobileSync/Backup/', id)
  39. }
  40. // Parse manifest bplist files
  41. try {
  42. var status = bplist.parseBuffer(fs.readFileSync(path.join(base, 'Status.plist')))[0]
  43. } catch (e) {
  44. console.log('Cannot open Status.plist', e)
  45. }
  46. try {
  47. var manifest = bplist.parseBuffer(fs.readFileSync(path.join(base, 'Manifest.plist')))[0]
  48. } catch (e) {
  49. console.log('Cannot open Manifest.plist', e)
  50. }
  51. try {
  52. var info = plist.parse(fs.readFileSync(path.join(base, 'Info.plist'), 'utf8'))
  53. } catch (e) {
  54. console.log('Cannot open Info.plist', e)
  55. }
  56. return new iPhoneBackup(id, status, info, manifest, base)
  57. }
  58. getFileName (fileID, isAbsoulte) {
  59. isAbsoulte = isAbsoulte || false
  60. //const base = path.join(process.env.HOME, '/Library/Application Support/MobileSync/Backup/', this.id)
  61. // Return v2 filename
  62. if (this.status.Version < 3 || isAbsoulte) {
  63. return path.join(this.base, fileID)
  64. } else {
  65. // v3 has folders
  66. return path.join(this.base, fileID.substr(0, 2), fileID)
  67. }
  68. }
  69. getDatabase (fileID, isAbsoulte) {
  70. isAbsoulte = isAbsoulte || false
  71. // Get the backup folder
  72. // Return v2 filename
  73. if (this.status.Version < 3 || isAbsoulte) {
  74. return new sqlite3.Database(path.join(this.base, fileID), sqlite3.OPEN_READONLY)
  75. } else {
  76. // v3 has folders
  77. return new sqlite3.Database(path.join(this.base, fileID.substr(0, 2), fileID), sqlite3.OPEN_READONLY)
  78. }
  79. }
  80. getName (messageDest) {
  81. return new Promise((resolve, reject) => {
  82. if (messageDest.indexOf('@') === -1) {
  83. messageDest = messageDest.replace(/[\s+\-()]*/g, '')
  84. if (messageDest.length == 11 && messageDest[0] == '1') {
  85. messageDest = messageDest.substring(1)
  86. }
  87. }
  88. if (cache[messageDest] !== undefined) {
  89. return resolve(cache[messageDest])
  90. }
  91. var contactdb = this.getDatabase(databases.Contacts)
  92. contactdb.get(`SELECT
  93. c0First as first,
  94. c1Last as last,
  95. c2Middle as middle,
  96. c15Phone as phones
  97. from ABPersonFullTextSearch_content WHERE c15Phone like '%${messageDest}%'`,
  98. (err, row) => {
  99. if (err) return resolve()
  100. if (!row) return resolve()
  101. var result = {
  102. name: [row.first, row.middle, row.last].filter(el => el != null).join(' '),
  103. phones: row.phones.split(' '),
  104. query: messageDest
  105. }
  106. if (row) cache[messageDest] = result
  107. resolve(result)
  108. })
  109. })
  110. }
  111. getMessagesiOS9 (chatId, dumpAll) {
  112. var backup = this
  113. return new Promise((resolve, reject) => {
  114. var messagedb = this.getDatabase(databases.SMS)
  115. messagedb.all(`
  116. SELECT
  117. message.*,
  118. handle.id as sender_name,
  119. datetime(date + 978307200, 'unixepoch') AS XFORMATTEDDATESTRING
  120. FROM chat_message_join
  121. INNER JOIN message
  122. ON message.rowid = chat_message_join.message_id
  123. INNER JOIN handle
  124. ON handle.rowid = message.handle_id
  125. WHERE chat_message_join.chat_id = ?`, [parseInt(chatId)],
  126. async function (err, chats) {
  127. if (err) return reject(err)
  128. chats = chats || []
  129. if (dumpAll) console.log(JSON.stringify(chats, null, 4))
  130. // Compute the user's name
  131. for (var i in chats) {
  132. var el = chats[i]
  133. el.x_sender = el.is_from_me ? 'Me' : el.sender_name
  134. if (!el.is_from_me) {
  135. var contact = await backup.getName(el.sender_name)
  136. if (contact) {
  137. el.x_sender = `${contact.name} <${contact.query}>`
  138. }
  139. }
  140. }
  141. resolve(chats)
  142. })
  143. })
  144. }
  145. getMessagesiOS10iOS11 (chatId, dumpAll) {
  146. var backup = this
  147. return new Promise((resolve, reject) => {
  148. var messagedb = this.getDatabase(databases.SMS)
  149. messagedb.all(`
  150. SELECT
  151. message.*,
  152. handle.id as sender_name,
  153. datetime(date / 1000000000 + 978307200, 'unixepoch') AS XFORMATTEDDATESTRING
  154. FROM chat_message_join
  155. INNER JOIN message
  156. ON message.rowid = chat_message_join.message_id
  157. INNER JOIN handle
  158. ON handle.rowid = message.handle_id
  159. WHERE chat_message_join.chat_id = ?`, [parseInt(chatId)],
  160. async function (err, chats) {
  161. if (err) return reject(err)
  162. chats = chats || []
  163. if (dumpAll) console.log(JSON.stringify(chats, null, 4))
  164. // Compute the user's name
  165. for (var i in chats) {
  166. var el = chats[i]
  167. el.x_sender = el.is_from_me ? 'Me' : el.sender_name
  168. if (!el.is_from_me) {
  169. var contact = await backup.getName(el.sender_name)
  170. if (contact) {
  171. el.x_sender = `${contact.name} <${contact.query}>`
  172. }
  173. }
  174. }
  175. resolve(chats)
  176. })
  177. })
  178. }
  179. getMessages (chatId, dumpAll) {
  180. if (parseInt(this.manifest.Lockdown.BuildVersion) <= 13) {
  181. return this.getMessagesiOS9(chatId, dumpAll)
  182. } else {
  183. return this.getMessagesiOS10iOS11(chatId, dumpAll)
  184. }
  185. }
  186. getConversationsiOS9 (dumpAll) {
  187. var backup = this
  188. return new Promise((resolve, reject) => {
  189. var messagedb = this.getDatabase(databases.SMS)
  190. messagedb.all(`SELECT * FROM chat ORDER BY ROWID ASC`, async function (err, rows) {
  191. if (err) return reject(err)
  192. rows = rows || []
  193. // We need to do some manual parsing of these records.
  194. // The timestamp information is stored in a binary blob named `properties`
  195. // Which is formatted as a binary PLIST.
  196. for (var el of rows) {
  197. if (el.properties) el.properties = bplist.parseBuffer(el.properties)[0]
  198. // Interestingly, some of these do not have dates attached.
  199. if (el.properties) {
  200. el.date = new Date(el.properties.CKChatWatermarkTime * 1000)
  201. } else {
  202. el.date = new Date(0)
  203. }
  204. var contact = await backup.getName(el.chat_identifier)
  205. if (contact) {
  206. el.display_name = `${contact.name} <${contact.query}>`
  207. }
  208. // Format as YY-MM-DD HH:MM:SS
  209. try {
  210. el.XFORMATTEDDATESTRING = el.date.toISOString()
  211. .split('T')
  212. .join(' ')
  213. .split('Z')
  214. .join(' ')
  215. .split('.')[0]
  216. .trim()
  217. } catch (e) {
  218. el.XFORMATTEDDATESTRING = ''
  219. }
  220. }
  221. // Sort by the date.
  222. rows = rows.sort(function (a, b) {
  223. return (a.date.getTime() || 0) - (b.date.getTime() || 0)
  224. })
  225. if (dumpAll) console.log(JSON.stringify(rows, null, 4))
  226. resolve(rows)
  227. })
  228. })
  229. }
  230. getConversationsiOS10iOS11 (dumpAll) {
  231. return new Promise((resolve, reject) => {
  232. var messagedb = this.getDatabase(databases.SMS)
  233. messagedb.all(`SELECT *, datetime(last_read_message_timestamp / 1000000000 + 978307200, 'unixepoch') AS XFORMATTEDDATESTRING FROM chat ORDER BY last_read_message_timestamp ASC`, async function (err, rows) {
  234. if (err) return reject(err)
  235. rows = rows || []
  236. if (dumpAll) console.log(JSON.stringify(rows, null, 4))
  237. resolve(rows)
  238. })
  239. })
  240. }
  241. getConversations (dumpAll) {
  242. if (parseInt(this.manifest.Lockdown.BuildVersion) <= 14) {
  243. return this.getConversationsiOS9(dumpAll)
  244. } else {
  245. return this.getConversationsiOS10iOS11(dumpAll)
  246. }
  247. }
  248. getFileManifest () {
  249. return new Promise((resolve, reject) => {
  250. var messagedb = this.getDatabase('Manifest.db', true)
  251. messagedb.all('SELECT * from FILES', async function (err, rows) {
  252. if (err) reject(err)
  253. resolve(rows)
  254. })
  255. })
  256. }
  257. getOldNotes () {
  258. return new Promise((resolve, reject) => {
  259. var messagedb = this.getDatabase(databases.Notes)
  260. messagedb.all(`SELECT *, datetime(ZCREATIONDATE + 978307200, 'unixepoch') AS XFORMATTEDDATESTRING from ZNOTE LEFT JOIN ZNOTEBODY ON ZBODY = ZNOTEBODY.Z_PK`, async function (err, rows) {
  261. if (err) reject(err)
  262. resolve(rows)
  263. })
  264. })
  265. }
  266. getNewNotesiOS9 () {
  267. return new Promise((resolve, reject) => {
  268. var messagedb = this.getDatabase(databases.Notes2)
  269. messagedb.all(`SELECT *, datetime(ZCREATIONDATE + 978307200, 'unixepoch') AS XFORMATTEDDATESTRING FROM ZICCLOUDSYNCINGOBJECT`, async function (err, rows) {
  270. if (err) reject(err)
  271. resolve(rows)
  272. })
  273. })
  274. }
  275. getNewNotesiOS10iOS11 () {
  276. return new Promise((resolve, reject) => {
  277. var messagedb = this.getDatabase(databases.Notes2)
  278. messagedb.all(`SELECT *, datetime(ZCREATIONDATE + 978307200, 'unixepoch') AS XFORMATTEDDATESTRING, datetime(ZCREATIONDATE1 + 978307200, 'unixepoch') AS XFORMATTEDDATESTRING1 FROM ZICCLOUDSYNCINGOBJECT`, async function (err, rows) {
  279. if (err) reject(err)
  280. resolve(rows)
  281. })
  282. })
  283. }
  284. getNotes () {
  285. if (parseInt(this.manifest.Lockdown.BuildVersion) <= 13) {
  286. // Legacy iOS 9 support
  287. // May work for earlier but I haven't tested it
  288. return this.getNewNotesiOS9()
  289. } else {
  290. return this.getNewNotesiOS10iOS11()
  291. }
  292. }
  293. getWebHistory () {
  294. return new Promise((resolve, reject) => {
  295. var messagedb = this.getDatabase(databases.WebHistory)
  296. messagedb.all(`SELECT *, datetime(visit_time + 978307200, 'unixepoch') AS XFORMATTEDDATESTRING from history_visits LEFT JOIN history_items ON history_items.ROWID = history_visits.history_item`, async function (err, rows) {
  297. if (err) reject(err)
  298. resolve(rows)
  299. })
  300. })
  301. }
  302. getPhotoLocationHistory () {
  303. return new Promise((resolve, reject) => {
  304. var messagedb = this.getDatabase(databases.Photos)
  305. messagedb.all(`SELECT ZDATECREATED, ZLATITUDE, ZLONGITUDE, ZFILENAME, datetime(ZDATECREATED + 978307200, 'unixepoch') AS XFORMATTEDDATESTRING FROM ZGENERICASSET ORDER BY ZDATECREATED ASC`, async function (err, rows) {
  306. if (err) reject(err)
  307. resolve(rows)
  308. })
  309. })
  310. }
  311. getGeofencesList () {
  312. return new Promise((resolve, reject) => {
  313. var messagedb = this.getDatabase(databases.Locations)
  314. messagedb.all(`SELECT datetime(Timestamp + 978307200, 'unixepoch') AS XFORMATTEDDATESTRING, Latitude, Longitude, Distance FROM Fences ORDER BY Timestamp ASC`, async function (err, rows) {
  315. if (err) reject(err)
  316. resolve(rows)
  317. })
  318. })
  319. }
  320. getCallsList () {
  321. return new Promise((resolve, reject) => {
  322. var messagedb = this.getDatabase(databases.Calls2)
  323. messagedb.all(`SELECT *, datetime(ZDATE + 978307200, 'unixepoch') AS XFORMATTEDDATESTRING from ZCALLRECORD ORDER BY ZDATE ASC`, async function (err, rows) {
  324. if (err) reject(err)
  325. resolve(rows)
  326. })
  327. })
  328. }
  329. getVoicemailsList () {
  330. return new Promise((resolve, reject) => {
  331. var messagedb = this.getDatabase(databases.Voicemail)
  332. messagedb.all(`SELECT *, datetime(date, 'unixepoch') AS XFORMATTEDDATESTRING from voicemail ORDER BY date ASC`, async function (err, rows) {
  333. if (err) reject(err)
  334. resolve(rows)
  335. })
  336. })
  337. }
  338. getVoicemailFileList () {
  339. return new Promise((resolve, reject) => {
  340. var messagedb = this.getDatabase('Manifest.db', true)
  341. messagedb.all(`SELECT * from FILES where relativePath like 'Library/Voicemail/%.amr'`, async function (err, rows) {
  342. if (err) reject(err)
  343. resolve(rows)
  344. })
  345. })
  346. }
  347. getWifiList () {
  348. return new Promise((resolve, reject) => {
  349. var filename = this.getFileName(databases.WiFi)
  350. try {
  351. resolve(bplist.parseBuffer(fs.readFileSync(filename))[0])
  352. } catch (e) {
  353. reject(e)
  354. }
  355. })
  356. }
  357. }
  358. module.exports.availableBackups = function () {
  359. const base = path.join(process.env.HOME, '/Library/Application Support/MobileSync/Backup/')
  360. return new Promise((resolve, reject) => {
  361. resolve(fs.readdirSync(base, { encoding: 'utf8' })
  362. .map(file => iPhoneBackup.fromID(file)))
  363. })
  364. }
  365. module.exports.iPhoneBackup = iPhoneBackup