Errors with check-backup #456

swiss-JF · 2024-02-02T17:57:55Z

swiss-JF
Feb 2, 2024

Hi, small questions. I have used mvt-ios before (like on year ago), and had to run a test on a device recently. the backup went smoothly. The backup was made successfully. No error while doing it and it had the indication "backup successful".

However, when IU run the check-backup module, I get a few errors. Last time I had use it, it went fine. I am not sure where the issue could be, and would be interested if somebody could point to me what is going wrong.

I removed some identifying details on the device.

17:52:42 INFO     [mvt.ios.cmd_check_backup] Parsing STIX2 indicators file at path /home/linux/.local/share/mvt/indicators/raw.githubusercontent.com_mvt-project_mvt-indicators_main_2023-04-11_quadream_kingspawn.stix2                      
         INFO     [mvt.ios.cmd_check_backup] Parsing STIX2 indicators file at path /home/linux/.local/share/mvt/indicators/raw.githubusercontent.com_mvt-project_mvt-indicators_main_intellexa_predator_predator.stix2                        
         INFO     [mvt.ios.cmd_check_backup] Parsing STIX2 indicators file at path /home/linux/.local/share/mvt/indicators/raw.githubusercontent.com_AmnestyTech_investigations_master_2021-07-18_nso_pegasus.stix2                           
         INFO     [mvt.ios.cmd_check_backup] Parsing STIX2 indicators file at path /home/linux/.local/share/mvt/indicators/raw.githubusercontent.com_AmnestyTech_investigations_master_2021-12-16_cytrox_cytrox.stix2                         
         INFO     [mvt.ios.cmd_check_backup] Parsing STIX2 indicators file at path /home/linux/.local/share/mvt/indicators/raw.githubusercontent.com_AmnestyTech_investigations_master_2023-03-29_android_campaign_malware.stix2              
17:52:43 INFO     [mvt.ios.cmd_check_backup] Parsing STIX2 indicators file at path                                                                                                                                                            
                  /home/linux/.local/share/mvt/indicators/raw.githubusercontent.com_mvt-project_mvt-indicators_main_2023-06_01_operation_triangulation_operation_triangulation.stix2                                                          
         INFO     [mvt.ios.cmd_check_backup] Parsing STIX2 indicators file at path /home/linux/.local/share/mvt/indicators/raw.githubusercontent.com_mvt-project_mvt-indicators_main_2022-06-23_rcs_lab_rcs.stix2                             
         INFO     [mvt.ios.cmd_check_backup] Parsing STIX2 indicators file at path /home/linux/.local/share/mvt/indicators/raw.githubusercontent.com_mvt-project_mvt-indicators_main_2023-07-25_wyrmspy_dragonegg_wyrmspy_dragonegg.stix2     
         INFO     [mvt.ios.cmd_check_backup] Parsing STIX2 indicators file at path /home/linux/.local/share/mvt/indicators/raw.githubusercontent.com_AssoEchap_stalkerware-indicators_master_generated_stalkerware.stix2                      
17:52:46 INFO     [mvt.ios.cmd_check_backup] Loaded a total of 9918 unique indicators                                                                                                                                                         
         INFO     [mvt] Checking iTunes backup located at: /home/linux/Documents/Backup_iphone/***                                                                                                                      
         INFO     [mvt.ios.modules.backup.backup_info] Running module BackupInfo...                                                                                                                                                           
         INFO     [mvt.ios.modules.backup.backup_info] Build Version: 21B80                                                                                                                                                                   
         INFO     [mvt.ios.modules.backup.backup_info] Device Name: *** iPhone                                                                                                                                                               
         INFO     [mvt.ios.modules.backup.backup_info] Display Name: *** iPhone                                                                                                                                                              
         INFO     [mvt.ios.modules.backup.backup_info] GUID: ***                                                                                                                                                 
         INFO     [mvt.ios.modules.backup.backup_info] ICCID: ***                                                                                                                                                            
         INFO     [mvt.ios.modules.backup.backup_info] IMEI: ***                                                                                                                                                                  
         INFO     [mvt.ios.modules.backup.backup_info] MEID: None                                                                                                                                                                             
         INFO     [mvt.ios.modules.backup.backup_info] Installed Applications: ['com.janandre.HomeKitTimers', 'com.elgato.eve', 'com.google.GoogleMobile', 'com.sonos.SonosController2', 'com.shazam.Shazam', 'com.google.chrome.ios',        
                  'com.nordvpn.NordVPN', 'com.apple.store.Jolly', 'com.spotify.client', 'com.yannicfries.homedevices', 'com.getdropbox.Dropbox', 'com.savantav.Savant-Pro', 'com.novosoft.TurboScanFree', 'com.facebook.stellaapp',           
                  'net.whatsapp.WhatsApp']                                                                                                                                                                                                    
         INFO     [mvt.ios.modules.backup.backup_info] Last Backup Date: ***                                                                                                                                                  
         INFO     [mvt.ios.modules.backup.backup_info] Phone Number: ***                                                                                                                                                         
         INFO     [mvt.ios.modules.backup.backup_info] Product Name: None                                                                                                                                                                     
         INFO     [mvt.ios.modules.backup.backup_info] Product Type: iPhone16,1 (iPhone 15 Pro)                                                                                                                                               
         INFO     [mvt.ios.modules.backup.backup_info] Product Version: 17.1                                                                                                                                                                  
         INFO     [mvt.ios.modules.backup.backup_info] Serial Number: ***
         INFO     [mvt.ios.modules.backup.backup_info] Target Identifier: *                                                                                                                                           
         INFO     [mvt.ios.modules.backup.backup_info] Target Type: Device                                                                                                                                                                    
         INFO     [mvt.ios.modules.backup.backup_info] Unique Identifier: ***                                                                                                                                           
         INFO     [mvt.ios.modules.backup.backup_info] iTunes Version: 11.2.0                                                                                                                                                                 
         **WARNING  [mvt.ios.modules.backup.backup_info] This phone is running an outdated iOS version: 17.1 (latest is 17.2.1)**                                                                                                                 
         INFO     [mvt.ios.modules.backup.backup_info] The BackupInfo module does not support checking for indicators                                                                                                                         
         INFO     [mvt.ios.modules.backup.configuration_profiles] Running module ConfigurationProfiles...                                                                                                                                     
         **ERROR    [mvt.ios.modules.backup.configuration_profiles] The ConfigurationProfiles module database seems to be corrupted: failed to query Manifest.db: file is not a database**                                                        
         INFO     [mvt.ios.modules.backup.manifest] Running module Manifest...                                                                                                                                                                
         INFO     [mvt.ios.modules.backup.manifest] Found Manifest.db database at path: /home/linux/Documents/Backup_iphone/***-***/Manifest.db                                                                             
         ERROR    [mvt.ios.modules.backup.manifest] Error in running extraction from module Manifest: file is not a database                                                                                                                  
                  Traceback (most recent call last):                                                                                                                                                                                          
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/module.py", line 167, in run_module                                                                                                                      
                      exec_or_profile("module.run()", globals(), locals())                                                                                                                                                                    
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/utils.py", line 259, in exec_or_profile                                                                                                                  
                      exec(module, globals, locals)                                                                                                                                                                                           
                    File "<string>", line 1, in <module>                                                                                                                                                                                      
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/ios/modules/backup/manifest.py", line 129, in run                                                                                                               
                      cur.execute("SELECT * FROM Files;")                                                                                                                                                                                     
                  sqlite3.DatabaseError: file is not a database                                                                                                                                                                               
         INFO     [mvt.ios.modules.backup.profile_events] Running module ProfileEvents...                                                                                                                                                     
         ERROR    [mvt.ios.modules.backup.profile_events] The ProfileEvents module database seems to be corrupted: failed to query Manifest.db: file is not a database                                                                        
         INFO     [mvt.ios.modules.mixed.calls] Running module Calls...                                                                                                                                                                       
         INFO     [mvt.ios.modules.mixed.calls] Found Calls database at path: /home/linux/Documents/Backup_iphone/***/5a/5a4935c78a451d79c540d2741                                                       
         ERROR    [mvt.ios.modules.mixed.calls] Error in running extraction from module Calls: file is not a database                                                                                                                         
                  Traceback (most recent call last):                                                                                                                                                                                          
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/module.py", line 167, in run_module                                                                                                                      
                      exec_or_profile("module.run()", globals(), locals())                                                                                                                                                                    
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/utils.py", line 259, in exec_or_profile                                                                                                                  
                      exec(module, globals, locals)                                                                                                                                                                                           
                    File "<string>", line 1, in <module>                                                                                                                                                                                      
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/ios/modules/mixed/calls.py", line 57, in run                                                                                                                    
                      cur.execute(                                                                                                                                                                                                            
                  sqlite3.DatabaseError: file is not a database                                                                                                                                                                               
         INFO     [mvt.ios.modules.mixed.chrome_favicon] Running module ChromeFavicon...                                                                                                                                                      
         INFO     [mvt.ios.modules.mixed.chrome_favicon] There might be no data to extract by module ChromeFavicon: unable to find the module's database file                                                                                 
         INFO     [mvt.ios.modules.mixed.chrome_history] Running module ChromeHistory...                                                                                                                                                      
         INFO     [mvt.ios.modules.mixed.chrome_history] There might be no data to extract by module ChromeHistory: unable to find the module's database file                                                                                 
         INFO     [mvt.ios.modules.mixed.contacts] Running module Contacts...                                                                                                                                                                 
         INFO     [mvt.ios.modules.mixed.contacts] Found Contacts database at path: /home/linux/Documents/Backup_iphone/***/31/31bb7ba8914760d6dfb6614be442                                                 
         ERROR    [mvt.ios.modules.mixed.contacts] Error in running extraction from module Contacts: file is not a database                                                                                                                   
                  Traceback (most recent call last):                                                                                                                                                                                          
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/module.py", line 167, in run_module                                                                                                                      
                      exec_or_profile("module.run()", globals(), locals())                                                                                                                                                                    
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/utils.py", line 259, in exec_or_profile                                                                                                                  
                      exec(module, globals, locals)                                                                                                                                                                                           
                    File "<string>", line 1, in <module>                                                                                                                                                                                      
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/ios/modules/mixed/contacts.py", line 50, in run                                                                                                                 
                      cur.execute(                                                                                                                                                                                                            
                  sqlite3.DatabaseError: file is not a database                                                                                                                                                                               
         INFO     [mvt.ios.modules.mixed.firefox_favicon] Running module FirefoxFavicon...                                                                                                                                                    
         INFO     [mvt.ios.modules.mixed.firefox_favicon] There might be no data to extract by module FirefoxFavicon: unable to find the module's database file                                                                               
         INFO     [mvt.ios.modules.mixed.firefox_history] Running module FirefoxHistory...                                                                                                                                                    
         INFO     [mvt.ios.modules.mixed.firefox_history] There might be no data to extract by module FirefoxHistory: unable to find the module's database file                                                                               
         INFO     [mvt.ios.modules.mixed.idstatuscache] Running module IDStatusCache...                                                                                                                                                       
         INFO     [mvt.ios.modules.mixed.idstatuscache] There might be no data to extract by module IDStatusCache: unable to find the module's database file                                                                                  
         INFO     [mvt.ios.modules.mixed.interactionc] Running module InteractionC...                                                                                                                                                         
         INFO     [mvt.ios.modules.mixed.interactionc] Found InteractionC database at path: /home/linux/Documents/Backup_iphone/***/1f/1f5a521220a3a8df8e7a2e49dee                                         
         ERROR    [mvt.ios.modules.mixed.interactionc] Error in running extraction from module InteractionC: file is not a database                                                                                                           
                  Traceback (most recent call last):                                                                                                                                                                                          
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/ios/modules/mixed/interactionc.py", line 287, in run                                                                                                            
                      cur.execute(QUERIES[0])                                                                                                                                                                                                 
                  sqlite3.OperationalError: near "AS": syntax error                                                                                                                                                                           
                                                                                                                                                                                                                                              
                  During handling of the above exception, another exception occurred:                                                                                                                                                         
                                                                                                                                                                                                                                              
                  Traceback (most recent call last):                                                                                                                                                                                          
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/ios/modules/mixed/interactionc.py", line 290, in run                                                                                                            
                      cur.execute(QUERIES[1])                                                                                                                                                                                                 
                  sqlite3.OperationalError: near "AS": syntax error                                                                                                                                                                           
                                                                                                                                                                                                                                              
                  During handling of the above exception, another exception occurred:                                                                                                                                                         
                                                                                                                                                                                                                                              
                  Traceback (most recent call last):                                                                                                                                                                                          
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/module.py", line 167, in run_module                                                                                                                      
                      exec_or_profile("module.run()", globals(), locals())                                                                                                                                                                    
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/utils.py", line 259, in exec_or_profile                                                                                                                  
                      exec(module, globals, locals)                                                                                                                                                                                           
                    File "<string>", line 1, in <module>                                                                                                                                                                                      
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/ios/modules/mixed/interactionc.py", line 293, in run                                                                                                            
                      cur.execute(QUERIES[2])                                                                                                                                                                                                 
                  sqlite3.DatabaseError: file is not a database                                                                                                                                                                               
         INFO     [mvt.ios.modules.mixed.locationd] Running module LocationdClients...                                                                                                                                                        
         INFO     [mvt.ios.modules.mixed.locationd] Found Locationd Clients plist at path: /home/linux/Documents/Backup_iphone/***/a6/a690d7769cce8904c107c8fe5f79412                                          
         ERROR    [mvt.ios.modules.mixed.locationd] Error in running extraction from module LocationdClients: Invalid file                                                                                                                    
                  Traceback (most recent call last):                                                                                                                                                                                          
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/module.py", line 167, in run_module                                                                                                                      
                      exec_or_profile("module.run()", globals(), locals())                                                                                                                                                                    
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/utils.py", line 259, in exec_or_profile                                                                                                                  
                      exec(module, globals, locals)                                                                                                                                                                                           
                    File "<string>", line 1, in <module>                                                                                                                                                                                      
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/ios/modules/mixed/locationd.py", line 161, in run                                                                                                               
                      self._extract_locationd_entries(self.file_path)                                                                                                                                                                         
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/ios/modules/mixed/locationd.py", line 137, in _extract_locationd_entries                                                                                        
                      file_plist = plistlib.load(handle)                                                                                                                                                                                      
                    File "/usr/lib/python3.10/plistlib.py", line 878, in load                                                                                                                                                                 
                      raise InvalidFileException()                                                                                                                                                                                            
                  plistlib.InvalidFileException: Invalid file                                                                                                                                                                                 
         INFO     [mvt.ios.modules.mixed.osanalytics_addaily] Running module OSAnalyticsADDaily...                                                                                                                                            
         INFO     [mvt.ios.modules.mixed.osanalytics_addaily] Found com.apple.osanalytics.addaily plist at path: /home/linux/Documents/Backup_iphone/***/f6/f65b5fafc69bbd3c60be01e146825fa83                    
         ERROR    [mvt.ios.modules.mixed.osanalytics_addaily] Error in running extraction from module OSAnalyticsADDaily: Invalid file                                                                                                        
                  Traceback (most recent call last):                                                                                                                                                                                          
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/module.py", line 167, in run_module                                                                                                                      
                      exec_or_profile("module.run()", globals(), locals())                                                                                                                                                                    
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/utils.py", line 259, in exec_or_profile                                                                                                                  
                      exec(module, globals, locals)                                                                                                                                                                                           
                    File "<string>", line 1, in <module>                                                                                                                                                                                      
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/ios/modules/mixed/osanalytics_addaily.py", line 75, in run                                                                                                      
                      file_plist = plistlib.load(handle)                                                                                                                                                                                      
                    File "/usr/lib/python3.10/plistlib.py", line 878, in load                                                                                                                                                                 
                      raise InvalidFileException()                                                                                                                                                                                            
                  plistlib.InvalidFileException: Invalid file                                                                                                                                                                                 
         INFO     [mvt.ios.modules.mixed.net_datausage] Running module Datausage...                                                                                                                                                           
         INFO     [mvt.ios.modules.mixed.net_datausage] Found DataUsage database at path: /home/linux/Documents/Backup_iphone/***/0d/0d609c54856a9bb2d68f2958a88426b                                           
         ERROR    [mvt.ios.modules.mixed.net_datausage] Error in running extraction from module Datausage: file is not a database                                                                                                             
                  Traceback (most recent call last):                                                                                                                                                                                          
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/module.py", line 167, in run_module                                                                                                                      
                      exec_or_profile("module.run()", globals(), locals())                                                                                                                                                                    
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/utils.py", line 259, in exec_or_profile                                                                                                                  
                      exec(module, globals, locals)                                                                                                                                                                                           
                    File "<string>", line 1, in <module>                                                                                                                                                                                      
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/ios/modules/mixed/net_datausage.py", line 50, in run                                                                                                            
                      self._extract_net_data()                                                                                                                                                                                                
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/ios/modules/net_base.py", line 42, in _extract_net_data                                                                                                         
                      cur.execute(                                                                                                                                                                                                            
                  sqlite3.DatabaseError: file is not a database                                                                                                                                                                               
         INFO     [mvt.ios.modules.mixed.safari_browserstate] Running module SafariBrowserState...                                                                                                                                            
         ERROR    [mvt.ios.modules.mixed.safari_browserstate] The SafariBrowserState module database seems to be corrupted: failed to query Manifest.db: file is not a database                                                               
         INFO     [mvt.ios.modules.mixed.safari_history] Running module SafariHistory...                                                                                                                                                      
         ERROR    [mvt.ios.modules.mixed.safari_history] The SafariHistory module database seems to be corrupted: failed to query Manifest.db: file is not a database                                                                         
         INFO     [mvt.ios.modules.mixed.tcc] Running module TCC...                                                                                                                                                                           
         INFO     [mvt.ios.modules.mixed.tcc] Found TCC database at path: /home/linux/Documents/Backup_iphone/***/64/64d0019cb3d46bfc8cce545a87ea9347                                                           
         ERROR    [mvt.ios.modules.mixed.tcc] Error in running extraction from module TCC: file is not a database                                                                                                                             
                  Traceback (most recent call last):                                                                                                                                                                                          
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/module.py", line 167, in run_module                                                                                                                      
                      exec_or_profile("module.run()", globals(), locals())                                                                                                                                                                    
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/utils.py", line 259, in exec_or_profile                                                                                                                  
                      exec(module, globals, locals)                                                                                                                                                                                           
                    File "<string>", line 1, in <module>                                                                                                                                                                                      
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/ios/modules/mixed/tcc.py", line 222, in run                                                                                                                     
                      self.process_db(self.file_path)                                                                                                                                                                                         
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/ios/modules/mixed/tcc.py", line 102, in process_db                                                                                                              
                      cur.execute(                                                                                                                                                                                                            
                  sqlite3.DatabaseError: file is not a database                                                                                                                                                                               
         INFO     [mvt.ios.modules.mixed.sms] Running module SMS...                                                                                                                                                                           
         INFO     [mvt.ios.modules.mixed.sms] Found SMS database at path: /home/linux/Documents/Backup_iphone/***/3d/3d0d7e5fb2ce288813306e4d4636395d28                                                           
         ERROR    [mvt.ios.modules.mixed.sms] Error in running extraction from module SMS: file is not a database                                                                                                                             
                  Traceback (most recent call last):                                                                                                                                                                                          
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/module.py", line 167, in run_module                                                                                                                      
                      exec_or_profile("module.run()", globals(), locals())                                                                                                                                                                    
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/utils.py", line 259, in exec_or_profile                                                                                                                  
                      exec(module, globals, locals)                                                                                                                                                                                           
                    File "<string>", line 1, in <module>                                                                                                                                                                                      
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/ios/modules/mixed/sms.py", line 124, in run                                                                                                                     
                      raise exc                                                                                                                                                                                                               
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/ios/modules/mixed/sms.py", line 96, in run                                                                                                                      
                      cur.execute(                                                                                                                                                                                                            
                  sqlite3.DatabaseError: file is not a database                                                                                                                                                                               
         INFO     [mvt.ios.modules.mixed.sms_attachments] Running module SMSAttachments...                                                                                                                                                    
         INFO     [mvt.ios.modules.mixed.sms_attachments] Found SMS database at path: /home/linux/Documents/Backup_iphone/***/3d/3d0d7e5fb2ce288813306e4d4636a3d28                                               
         ERROR    [mvt.ios.modules.mixed.sms_attachments] Error in running extraction from module SMSAttachments: file is not a database                                                                                                      
                  Traceback (most recent call last):                                                                                                                                                                                          
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/module.py", line 167, in run_module                                                                                                                      
                      exec_or_profile("module.run()", globals(), locals())                                                                                                                                                                    
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/utils.py", line 259, in exec_or_profile                                                                                                                  
                      exec(module, globals, locals)                                                                                                                                                                                           
                    File "<string>", line 1, in <module>                                                                                                                                                                                      
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/ios/modules/mixed/sms_attachments.py", line 80, in run                                                                                                          
                      cur.execute(                                                                                                                                                                                                            
                  sqlite3.DatabaseError: file is not a database                                                                                                                                                                               
         INFO     [mvt.ios.modules.mixed.webkit_resource_load_statistics] Running module WebkitResourceLoadStatistics...                                                                                                                      
         INFO     [mvt.ios.modules.mixed.webkit_resource_load_statistics] Unable to find WebKit observations.db: failed to query Manifest.db: file is not a database                                                                          
         INFO     [mvt.ios.modules.mixed.webkit_resource_load_statistics] The WebkitResourceLoadStatistics module produced no detections!                                                                                                     
         INFO     [mvt.ios.modules.mixed.webkit_session_resource_log] Running module WebkitSessionResourceLog...                                                                                                                              
         ERROR    [mvt.ios.modules.mixed.webkit_session_resource_log] The WebkitSessionResourceLog module database seems to be corrupted: failed to query Manifest.db: file is not a database                                                 
         INFO     [mvt.ios.modules.mixed.whatsapp] Running module Whatsapp...                                                                                                                                                                 
         INFO     [mvt.ios.modules.mixed.whatsapp] There might be no data to extract by module Whatsapp: unable to find the module's database file                                                                                            
         INFO     [mvt.ios.modules.mixed.shortcuts] Running module Shortcuts...                                                                                                                                                               
         INFO     [mvt.ios.modules.mixed.shortcuts] Found Shortcuts database at path: /home/linux/Documents/Backup_iphone/***/5b/5b4d0b44b5990f62b9f4382bf0b01094                                               
         ERROR    [mvt.ios.modules.mixed.shortcuts] Error in running extraction from module Shortcuts: file is not a database                                                                                                                 
                  Traceback (most recent call last):                                                                                                                                                                                          
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/module.py", line 167, in run_module                                                                                                                      
                      exec_or_profile("module.run()", globals(), locals())                                                                                                                                                                    
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/utils.py", line 259, in exec_or_profile                                                                                                                  
                      exec(module, globals, locals)                                                                                                                                                                                           
                    File "<string>", line 1, in <module>                                                                                                                                                                                      
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/ios/modules/mixed/shortcuts.py", line 90, in run                                                                                                                
                      cur.execute(                                                                                                                                                                                                            
                  sqlite3.DatabaseError: file is not a database                                                                                                                                                                               
         INFO     [mvt.ios.modules.mixed.applications] Running module Applications...                                                                                                                                                         
         INFO     [mvt.ios.modules.mixed.applications] Extracted a total of 15 applications                                                                                                                                                   
         INFO     [mvt.ios.modules.mixed.applications] The Applications module produced no detections!                                                                                                                                        
         INFO     [mvt.ios.modules.mixed.calendar] Running module Calendar...                                                                                                                                                                 
         INFO     [mvt.ios.modules.mixed.calendar] Found calendar database at path: /home/linux/Documents/Backup_iphone/***/20/2041457d5fe04d39d0ab4811783858                                                 
         ERROR    [mvt.ios.modules.mixed.calendar] Error in running extraction from module Calendar: file is not a database                                                                                                                   
                  Traceback (most recent call last):                                                                                                                                                                                          
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/module.py", line 167, in run_module                                                                                                                      
                      exec_or_profile("module.run()", globals(), locals())                                                                                                                                                                    
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/utils.py", line 259, in exec_or_profile                                                                                                                  
                      exec(module, globals, locals)                                                                                                                                                                                           
                    File "<string>", line 1, in <module>                                                                                                                                                                                      
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/ios/modules/mixed/calendar.py", line 141, in run                                                                                                                
                      self._parse_calendar_db()                                                                                                                                                                                               
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/ios/modules/mixed/calendar.py", line 87, in _parse_calendar_db                                                                                                  
                      cur.execute(                                                                                                                                                                                                            
                  sqlite3.DatabaseError: file is not a database                                                                                                                                                                               
         INFO     [mvt.ios.modules.mixed.global_preferences] Running module GlobalPreferences...                                                                                                                                              
         INFO     [mvt.ios.modules.mixed.global_preferences] Found Global Preference database at path: /home/linux/Documents/Backup_iphone/***/0d/0dc926a1810f7aee4e8f38793e01f93bf9d                              
         ERROR    [mvt.ios.modules.mixed.global_preferences] Error in running extraction from module GlobalPreferences: Invalid file                                                                                                          
                  Traceback (most recent call last):                                                                                                                                                                                          
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/module.py", line 167, in run_module                                                                                                                      
                      exec_or_profile("module.run()", globals(), locals())                                                                                                                                                                    
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/common/utils.py", line 259, in exec_or_profile                                                                                                                  
                      exec(module, globals, locals)                                                                                                                                                                                           
                    File "<string>", line 1, in <module>                                                                                                                                                                                      
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/ios/modules/mixed/global_preferences.py", line 61, in run                                                                                                       
                      self.process_file(self.file_path)                                                                                                                                                                                       
                    File "/home/linux/.local/lib/python3.10/site-packages/mvt/ios/modules/mixed/global_preferences.py", line 49, in process_file                                                                                              
                      data = plistlib.load(handle)                                                                                                                                                                                            
                    File "/usr/lib/python3.10/plistlib.py", line 878, in load                                                                                                                                                                 
                      raise InvalidFileException()                                                                                                                                                                                            
                  plistlib.InvalidFileException: Invalid file

roaree · 2024-02-05T13:07:03Z

roaree
Feb 5, 2024
Maintainer

Backup is probably encrypted, try decrypt with mvt-ios decrypt-backup /path/to/backup/folder -d /output/path

0 replies

swiss-JF · 2024-02-08T14:05:04Z

swiss-JF
Feb 8, 2024
Author

Thanks for your reply.

I tried, but got another error. I did not put a password. So I just hit enter when prompted to input the password (seems like I should have typed a password).

I did also
mvt-ios check-backup and got a similar error

linux@linux-:mvt-ios decrypt-backup -d /home/linux/Documents/Backup/output /home/linux/Documents/Backup/CODE- CODE


        MVT - Mobile Verification Toolkit
                https://mvt.re
                Version: 2.5.0
                Indicators updates checked recently, next automatic check in 12 hours


Enter backup password: 
14:50:07 INFO     [mvt.ios.decrypt] Decrypting iOS backup at path /home/linux/Documents/Backup_iphone/CODE with password                                                                                                 
Traceback (most recent call last):
  File "/home/linux/.local/bin/mvt-ios", line 8, in <module>
    sys.exit(cli())
  File "/home/linux/.local/lib/python3.10/site-packages/click/core.py", line 1157, in __call__
    return self.main(*args, **kwargs)
  File "/home/linux/.local/lib/python3.10/site-packages/click/core.py", line 1078, in main
    rv = self.invoke(ctx)
  File "/home/linux/.local/lib/python3.10/site-packages/click/core.py", line 1688, in invoke
    return _process_result(sub_ctx.command.invoke(sub_ctx))
  File "/home/linux/.local/lib/python3.10/site-packages/click/core.py", line 1434, in invoke
    return ctx.invoke(self.callback, **ctx.params)
  File "/home/linux/.local/lib/python3.10/site-packages/click/core.py", line 783, in invoke
    return __callback(*args, **kwargs)
  File "/home/linux/.local/lib/python3.10/site-packages/click/decorators.py", line 33, in new_func
    return f(get_current_context(), *args, **kwargs)
  File "/home/linux/.local/lib/python3.10/site-packages/mvt/ios/cli.py", line 131, in decrypt_backup
    backup.process_backup()
  File "/home/linux/.local/lib/python3.10/site-packages/mvt/ios/decrypt.py", line 84, in process_backup
    for item in self._backup.getBackupFilesList():
  File "/home/linux/.local/lib/python3.10/site-packages/iOSbackup/__init__.py", line 403, in getBackupFilesList
    backupFiles = catalog.cursor().execute(f"SELECT * FROM Files ORDER BY domain,relativePath").fetchall()
sqlite3.DatabaseError: file is not a database

It keeps saying that these files are not databases.

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Errors with check-backup #456

{{title}}

Replies: 2 comments

{{title}}

{{title}}

Select a reply

Errors with check-backup #456

swiss-JF Feb 2, 2024

Replies: 2 comments

roaree Feb 5, 2024 Maintainer

swiss-JF Feb 8, 2024 Author

swiss-JF
Feb 2, 2024

roaree
Feb 5, 2024
Maintainer

swiss-JF
Feb 8, 2024
Author