Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updated Decrypting Realm Databases for Android (0x05d) and iOS (0x06d) #2570

Merged
merged 15 commits into from
May 2, 2024

Conversation

R3zk0n
Copy link
Contributor

@R3zk0n R3zk0n commented Feb 28, 2024

Thank you for submitting a Pull Request to the OWASP MASTG. Please make sure that:

  • Your contribution is written in the 2nd person (e.g. you)
  • Your contribution is written in an active present form for as much as possible.
  • You have made sure that the reference section is up to date (e.g. please add sources you have used, make sure that the references to MITRE/MASVS/etc. are up to date)
  • Your contribution has proper formatted markdown and/or code
  • Any references to website have been formatted as [TEXT](URL “NAME”)
  • You verified/tested the effectiveness of your contribution (e.g.: is the code really an effective remediation? Please verify it works!)

If your PR is related to an issue. Please end your PR test with the following line:
This PR closes #1951

Long delay and update, added both iOS and Android examples

Copy link
Contributor Author

@R3zk0n R3zk0n left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updated Frida Script

@R3zk0n R3zk0n changed the title Updated Decrypting Realm Databases in 0x05d - Testing Data Storage Updated Decrypting Realm Databases in 0x05d - Testing Data Storage and 0x06d-Testing-Data-Storage Mar 13, 2024
Document/0x05d-Testing-Data-Storage.md Outdated Show resolved Hide resolved
Document/0x06d-Testing-Data-Storage.md Outdated Show resolved Hide resolved
@cpholguera
Copy link
Collaborator

Maybe you could include a final short paragraph in both files indicating that the DB can be then extracted with adb pull and viewed with https://github.com/realm/realm-studio could you please try if that works for you?

Something like

To access the decrypted data, you can pull the database using `adb pull`, then load it into [Realm Studio](https://docs.realm.io/sync/realm-studio#browsing-local-realms) and insert the key you previously obtained.

Copy link
Collaborator

@cpholguera cpholguera left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the additions @R3zk0n!

@cpholguera cpholguera merged commit 52c8b71 into OWASP:master May 2, 2024
5 checks passed
@cpholguera cpholguera changed the title Updated Decrypting Realm Databases in 0x05d - Testing Data Storage and 0x06d-Testing-Data-Storage Updated Decrypting Realm Databases for Android (0x05d) and iOS (0x06d) May 2, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Decrypting Realm Databases
3 participants