Difference between revisions of "Converting Binary Plists"

From ForensicsWiki
Jump to: navigation, search
(Links)
Line 1: Line 1:
Binary plists are the files that Apple products use to store information. The easiest way to view them is to convert them to xml.
+
Binary plists are the files that Apple products use to store information. The easiest way to view them is to convert them to XML.
 +
Note that binary data in XML plist are converted in base64 and therefore strings in the binary data are not directly visible.
  
The program plutil is native to OSX (as of 10.2), however it is also included when iTunes is installed on a Windows PC.
+
The program '''plutil''' is native to [[Mac OS X]] (as of 10.2), however it is also included when iTunes is installed on a Windows PC.
 +
On linux libplist [http://cgit.sukimashita.com/libplist.git] also provides an equivalent of '''plutil'''.
  
 
plutil on a Windows PC is stored in:
 
plutil on a Windows PC is stored in:
 
+
<pre>
  ''Program Files (x86)\Common Files\Apple\Apple Application Support''
+
C:\Program Files (x86)\Common Files\Apple\Apple Application Support
 +
</pre>
  
 
Which can be added to the PATH in Environmental variables so plutil can be run from anywhere
 
Which can be added to the PATH in Environmental variables so plutil can be run from anywhere
  
 
To convert Binary plists to XML run the command:
 
To convert Binary plists to XML run the command:
  '''plutil -convert xml1 file.plist'''
+
<pre>
 
+
plutil -convert xml1 file.plist
 
+
</pre>
  
 +
Or with libplist
 +
<pre>
 +
plutil -i file.plist > file.xml.plist
 +
</pre>
  
  
 
== External Links ==
 
== External Links ==
* [[http://developer.apple.com/library/mac/#documentation/Darwin/Reference/ManPages/man1/plutil.1.html - Apple plutil man page]]
+
* [http://developer.apple.com/library/mac/#documentation/Darwin/Reference/ManPages/man1/plutil.1.html Apple plutil man page]
 
* [http://cgit.sukimashita.com/libplist.git/ A library to handle Apple Property List format in binary or XML]
 
* [http://cgit.sukimashita.com/libplist.git/ A library to handle Apple Property List format in binary or XML]

Revision as of 14:39, 20 June 2012

Binary plists are the files that Apple products use to store information. The easiest way to view them is to convert them to XML. Note that binary data in XML plist are converted in base64 and therefore strings in the binary data are not directly visible.

The program plutil is native to Mac OS X (as of 10.2), however it is also included when iTunes is installed on a Windows PC. On linux libplist [1] also provides an equivalent of plutil.

plutil on a Windows PC is stored in:

C:\Program Files (x86)\Common Files\Apple\Apple Application Support

Which can be added to the PATH in Environmental variables so plutil can be run from anywhere

To convert Binary plists to XML run the command:

plutil -convert xml1 file.plist

Or with libplist

plutil -i file.plist > file.xml.plist


External Links