{"id":15512116,"url":"https://github.com/bolodev/osxripper","last_synced_at":"2025-10-12T09:30:30.327Z","repository":{"id":94451255,"uuid":"278934998","full_name":"bolodev/osxripper","owner":"bolodev","description":"Tool to rip system and user data from OSX and macOS","archived":false,"fork":false,"pushed_at":"2022-12-06T16:49:02.000Z","size":323,"stargazers_count":16,"open_issues_count":1,"forks_count":3,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-01-29T13:36:49.781Z","etag":null,"topics":["dfir","forensics","macos","osx"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/bolodev.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-07-11T20:14:54.000Z","updated_at":"2024-10-29T15:19:48.000Z","dependencies_parsed_at":"2023-04-28T09:03:09.608Z","dependency_job_id":null,"html_url":"https://github.com/bolodev/osxripper","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/bolodev/osxripper","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bolodev%2Fosxripper","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bolodev%2Fosxripper/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bolodev%2Fosxripper/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bolodev%2Fosxripper/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/bolodev","download_url":"https://codeload.github.com/bolodev/osxripper/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bolodev%2Fosxripper/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279010938,"owners_count":26084837,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-12T02:00:06.719Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["dfir","forensics","macos","osx"],"created_at":"2024-10-02T09:53:26.861Z","updated_at":"2025-10-12T09:30:30.011Z","avatar_url":"https://github.com/bolodev.png","language":"Python","funding_links":[],"categories":["Python"],"sub_categories":[],"readme":"# OSXRipper\n[![Language grade: Python](https://img.shields.io/lgtm/grade/python/g/bolodev/osxripper.svg?logo=lgtm\u0026logoWidth=18)](https://lgtm.com/projects/g/bolodev/osxripper/context:python)\n\nOSXRipper is a tool to gather system and user information from OSX file systems. Currently it is supporting OSX versions 10.6 - 10.15 (Snow Leopard to Catalina).\n\n#### Alternatives to OSXRipper\n\nApple Pattern of Life Lazy Output'er (APOLLO)\n- https://github.com/mac4n6/APOLLO\u003cbr /\u003e\n\nMAC APT\n- https://github.com/ydkhatri/mac_apt\u003cbr /\u003e\n\nOSX Auditor\n- https://github.com/jipegit/OSXAuditor\u003cbr /\u003e\n\niParser\n- http://az4n6.blogspot.co.uk/2012/08/automated-plist-parser.html\u003cbr /\u003e\n- https://github.com/mdegrazia/iParser\n\nMac Plist Ripper\n- https://bitbucket.org/chrishargreaves/mac_plist_ripper\n\nIf anyone knows of alternatives I would be more than happy to add them here.\n\n#### Uses the CCL Forensics BPlist parser\nhttps://github.com/cclgroupltd/ccl-bplist\n\n__Prereqs__\u003cbr /\u003e\nAssumes at least Python 3.4.3 is installed\n\n#### Usage\n\npython3 osxripper.py --help\n\n__Options__\u003cbr /\u003e\n-h, --help                       Show help message and exit\u003cbr /\u003e\n-i DIRECTORY, --input=DIRECTORY  input directory\u003cbr /\u003e\n-o DIRECTORY, --output=DIRECTORY output directory\u003cbr /\u003e\n-l, --list List the available plugins\u003cbr /\u003e\n-s, --summary                    Run Summary plugin only\u003cbr /\u003e\n\n__Notes__\u003cbr /\u003e\nN.B. if run on Linux and OSX systems user may have to escalate privileges to root\u003cbr /\u003e\nN.B. the output directory must exist\n\n__On OSX:__\u003cbr /\u003e\n\u003cem\u003esudo python3 osxripper.py -i /Volumes/my_mounted_volume -o /Users/username/Desktop/my_analysis\u003c/em\u003e\u003cbr /\u003e\n\n__On Linux:__\u003cbr /\u003e\n\u003cem\u003esudo python3 osxripper.py -i /mnt/hfs_mount -o /home/username/my_analysis\u003c/em\u003e\u003cbr /\u003e\nN.B. if kpartx used to mount the image the input path may be /media/...\u003cbr /\u003e\n\n__On Windows:__\u003cbr /\u003e\n\u003cem\u003epython.exe osxripper.py -i X:\\extracted_files_root -o C:\\Users\\username\\Desktop\\my_analysis\u003c/em\u003e\u003cbr /\u003e\n\n#### Plugin Development Guide\nCheck the Wiki page for getting started with plugin development or make use of existing plugins under __plugins/osx__\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbolodev%2Fosxripper","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fbolodev%2Fosxripper","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbolodev%2Fosxripper/lists"}