Next Release

This is a place holder for what is being put into the next release of Truxton.

Truxton Next

<< Released 2024-?

Improvements

1. Generic SQLite exploitation. You can add your own SQLite exploitation scripts to Truxton and it will run them against every SQLite database it finds. Truxton includes all of the scripts from project APOLLO
2. Beginning to exploit Apple SEGB files. For now, we mostly just convert them to SEGB XML.
3. Better PList and protocol buffer conversion to XML. When a field looks like it may contain a timestamp, Truxton decodes and outputs a human-readable timestamp.
4. Better MPEG 2 Stream carving.
5. Truxton no longer pollutes the Camera Information section with Quicktime information.
6. In the GUI, when viewing a geographic location on an external map URL link, a label for that location is now included instead of just "You are here"
7. Better DataPilot integration
8. We now extract the Windows Advertising ID (WAID) from Windows machines.

New Types

File

1. Type_Generic_SQLite_Script_Results
2. Type_Generic_SQLite_Script_Details
3. Type_Apple_SEGB
4. Type_Apple_Icon_Cache
5. Type_Material_Exchange_Format
6. Type_ECW
7. Type_NetXray
8. Type_Waze_Roadmap_Data
9. Type_Maps_With_Me
10. Type_Apple_Encrypted_Archive
11. Type_Apple_SEGB_XML
12. Type_DataPilot_Database
13. Type_Numerical_Control
14. Type_NetCDF
15. Type_Android_Call_Log_Backup
16. Type_WebAssembly
17. Type_CPBitmap
18. Type_Protocol_Buffer_Archive

Entity Types

1. ENTITY_TYPE_WAID - An identifier used by Microsoft Windows to target you with advertising.

Event Types

1. EVENT_TYPE_DEVICE_LOCKED - When a device enters a locked state
2. EVENT_TYPE_DEVICE_UNLOCKED - When a device has been unlocked
3. EVENT_TYPE_FAILED_LOGON - Someone tried and failed to log on

Location Type

1. LOCATION_TYPE_NETWORK_CONNECTION - When we know the location of a network that a user connected to.