Skip to content

Apple Maps Trips/Significant Locations Parser#1438

Open
ogmini wants to merge 3 commits intoabrignoni:mainfrom
ogmini:main
Open

Apple Maps Trips/Significant Locations Parser#1438
ogmini wants to merge 3 commits intoabrignoni:mainfrom
ogmini:main

Conversation

@ogmini
Copy link

@ogmini ogmini commented Mar 4, 2026

Builds off the iPhone 14 image from the recent MVS 2026 CTF.

This plugin parses the following:

  • Apple Maps Trips
  • Significant Locations
  • Significant Locations Visits

Replicates the information parsed by Magnet Axiom

AppleMapsTrips AppleMapTrips-iLEAPP SignificantLocations SignificantLocations-iLEAPP SignificantLocationsVisits SignificantLocationsVisits-iLEAPP

@ogmini
Copy link
Author

ogmini commented Mar 5, 2026

Incorporated some information from https://doubleblak.com/blogPost.php?k=Locations
Added constructed Google Maps links for ease of examination.

AppleMapsTrips-updated SignificantLocations-updated SignificantLocationsVisits-updated

@stark4n6
Copy link
Collaborator

@ogmini do these paths have -WAL files typically? if so we would want to include in the regex path

Inclusion of wal and shm files for the sqlite databases.

Fixed linting error for unused import
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants