Script Stash - Plist Mapping with Python

Do you do forensic research? Do you have a bunch of random scripts that do one thing to help you along the way? That's precisely what the Script Stash is. It's a dumping ground of smaller scripts I've made that function mostly independently to assist with some piece of research or coding.

Figure 1: Plist Map help console

The first offering from it is Plist Map. In essence you feed it a plist file and it will traverse the file and map out the keys and values to the console (or to a text file if you'd like). When it gets complex with extra dictionaries inside you can more easily determine how the mapping will look when scripting a parser for a tool (aka LEAPP stuff). Those pesky empty lists always cause me issues.

Figure 2: Sample iOS Alarm Plist

It can handle binary, XML, or NSKeyedArchiver plist files currently as input. Check out the repo below for the script and more to come:

https://github.com/stark4n6/script-stash