{"id":17078448,"url":"https://github.com/flamusdiu/xleapp","last_synced_at":"2025-10-07T23:16:18.495Z","repository":{"id":43638352,"uuid":"410377508","full_name":"flamusdiu/xleapp","owner":"flamusdiu","description":"xLEAPP - Merging of iLEAPP/RLEAPP/vLEAPP, ALEAPP, cLEAPP","archived":false,"fork":false,"pushed_at":"2024-04-13T21:08:38.000Z","size":30418,"stargazers_count":39,"open_issues_count":10,"forks_count":4,"subscribers_count":6,"default_branch":"main","last_synced_at":"2024-04-14T12:01:39.359Z","etag":null,"topics":["dfir","forensics","forensics-tools","python3"],"latest_commit_sha":null,"homepage":"https://pypi.org/project/xleapp/","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/flamusdiu.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null}},"created_at":"2021-09-25T20:40:32.000Z","updated_at":"2024-04-15T21:47:02.793Z","dependencies_parsed_at":"2024-04-13T22:39:14.021Z","dependency_job_id":null,"html_url":"https://github.com/flamusdiu/xleapp","commit_stats":{"total_commits":714,"total_committers":27,"mean_commits":"26.444444444444443","dds":0.5420168067226891,"last_synced_commit":"265de226e5fbea866278981c64086243bb85959f"},"previous_names":[],"tags_count":10,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/flamusdiu%2Fxleapp","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/flamusdiu%2Fxleapp/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/flamusdiu%2Fxleapp/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/flamusdiu%2Fxleapp/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/flamusdiu","download_url":"https://codeload.github.com/flamusdiu/xleapp/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248630708,"owners_count":21136489,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["dfir","forensics","forensics-tools","python3"],"created_at":"2024-10-14T12:21:54.983Z","updated_at":"2025-10-07T23:16:13.469Z","avatar_url":"https://github.com/flamusdiu.png","language":"JavaScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"# xLEAPP\n\n\u003e [!NOTE]\n\u003e This is an alpha application. I am having trouble getting a testing suite to test the main app object.\n\u003e So, I have been trying to solve this problem. Please use official packages for real DFIR work.\n\u003e If you want to help, please find me on https://azuleonyx.bio.link\n\n\n[![Code style: black](https://img.shields.io/badge/code%20style-black-000000.svg)](https://github.com/psf/black)\n[![pre-commit](https://img.shields.io/badge/pre--commit-enabled-brightgreen?logo=pre-commit\u0026logoColor=white)](https://github.com/pre-commit/pre-commit)\n\n**Development build. Please be cauious using on real cases.**\n\nFramework for Logs, Events, And Plists Parser (LEAPP)\n\nThis framework is a complete rewrite of the excellent tool iLEAPP.Details of iLEAPP can be found in this [blog post](https://abrignoni.blogspot.com/2019/12/xleapp-ios-logs-events-and-properties.html)\n\nxLEAPP is the framework created to merge several tools together. More information about the rewrite is given in by talk ([YouTube](https://www.youtube.com/watch?v=seTpCmSF0Gc)) at Black Hills Info Security\u0026#39;s Wild West Hackin\u0026#39; Fest (WWHF): Deadwood in 2021.\n\n\u003cimg src=\"https://user-images.githubusercontent.com/1879197/139466769-3155b3d9-75c6-4ef0-bbb0-73b77fdc349f.gif\" width=700\u003e\n\n## Features\n\n* Provides a centralized and modular framework\n* Provides a simplified way to write plugins (artifacts) for each different supported platform.\n* Parses iOS, macOS, Android, Chromebook, warranty returns, and Windows artifacts depending on the plugins installed.\n\n## Other Documentation\n\n* [Artifact Creation](docs/current/artifact-creation.md)\n\n## Pre-requisites\n\nThis project requires you to have Python \u003e= 3.9\n\n## Plugins\n\n\u003e Notice: Extensions have been merged into a single repo. Please ensure ths post [[v0.2.1](https://github.com/flamusdiu/xleapp/releases/tag/v0.2.1)] version.\n\nHere is a list of plugins that need to be completed. Plugin package suffixed with \"non-free\" use licenses that may not conform with MIT licenses and are seperated out.\n\n- [X] xleapp-extensions [[Github](https://github.com/flamusdiu/xleapp-extensions)] [[PyPI](https://pypi.org/project/xleapp-extensions/)]\n- [ ] xleapp-non-free-extensions [[Github](https://github.com/flamusdiu/xleapp-non-free-extensions)]\n\n## Installation\n\n### Windows\n\n* Python\n\n  ```powershell\n  PS\u003e py -3 -m pip install xleapp\n  PS\u003e py -3 -m pip install xleapp-\u003cplugin\u003e\n  ```\n\n* PIPX\n\n  ```powershell\n  PS\u003e py -3 -m pip install pipx\n  PS\u003e pipx install xleapp\n  PS\u003e pipx inject xleapp xleapp-\u003cplugin\u003e\n  ```\n\n### Linux\n\n* Python\n\n  ```bash\n  $ python3 -m pip install xleapp\n  $ python3 -m pip install xleapp-\u003cplugin\u003e\n  ```\n\n* PIPX\n\n  ```bash\n  $ python3 -m pip install pipx\n  $ pipx install xleapp\n  $ pipx inject xleapp xleapp-\u003cplugin\u003e\n  ```\n\n## Installation from Github and Development Information\n\n* [Windows](docs/current/windows.md)\n* [Linux](docs/current/linux.md)\n\n## VS Code configuration files\n\nThere are several [configuration files](https://github.com/flamusdiu/xleapp-project) that I have been using for VS Code.\n\n## Compile to executable\n\n**NOTE:** This may not work at this time with this alpha version.\n\nTo compile to an executable so you can run this on a system without python installed.\n\nTo create xleapp.exe, run:\n\n```bash\npyinstaller --onefile xleapp.spec\n```\n\nTo create xleappGUI.exe, run:\n\n```bash\npyinstaller --onefile --noconsole xleappGUI.spec\n```\n\n## Usage\n\n### CLI\n\n```bash\n$ xleapp -h\nusage: xleapp [-h] [-I] [-R] [-A] [-C] [-V] [-o OUTPUT_FOLDER] [-i INPUT_PATH]\n       [--artifacts [ARTIFACTS ...]] [-p] [-l] [--gui] [--version]\n\nxLEAPP: Logs, Events, and Plists Parser.\n\noptional arguments:\n  -h, --help            show this help message and exit\n  -I                    parse ios artifacts\n  -R                    parse Warrant Returns / User Generated Archives artifacts\n  -A                    parse android artifacts\n  -C                    parse Chromebook artifacts\n  -V                    parse vehicle artifacts\n  -o OUTPUT_FOLDER, --output_folder OUTPUT_FOLDER\n                        Output folder path\n  -i INPUT_PATH, --input_path INPUT_PATH\n                        Path to input file/folder\n  --artifact [ARTIFACT ...]\n                        Filtered list of artifacts to run. Allowed: core, \u003ccheck artifact list in\n                        documentation\u003e\n  -p, --artifact_paths  Text file list of artifact paths\n  -l, --artifact_table  Text file with table of artifacts\n  --gui                 Runs xLEAPP into graphical mode\n  --version             show program\u0026#39;s version number and exit\n\n```\n\n### GUI\n\nThis needs work and may not work properly!\n\n```bash\n$ xleapp --gui\n\n```\n\n### Help\n\n```bash\n$ xleapp.py --help\n\n```\n\nThe GUI will open in another window.\n\n## Acknowledgements\n\nThis tool is the result of a collaborative effort of many people in the DFIR community.\n\nThis product includes software developed by Sarah Edwards (Station X Labs, LLC, @iamevltwin, mac4n6.com) and other contributors as part of APOLLO (Apple Pattern of Life Lazy Output'er).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fflamusdiu%2Fxleapp","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fflamusdiu%2Fxleapp","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fflamusdiu%2Fxleapp/lists"}