Skip to content

Add plcat command to target-shell to read plist files#1756

Open
JSCU-CNI wants to merge 2 commits into
fox-it:mainfrom
JSCU-CNI:shell-plist
Open

Add plcat command to target-shell to read plist files#1756
JSCU-CNI wants to merge 2 commits into
fox-it:mainfrom
JSCU-CNI:shell-plist

Conversation

@JSCU-CNI

Copy link
Copy Markdown
Contributor

This PR adds a small utility command to target-shell to pretty print the contents of Apple plist files.

@yunzheng

Copy link
Copy Markdown
Member

What do you think of using plcat as the command name, mimicking plutil on macOS.

Comment thread dissect/target/tools/shell.py Outdated
@JSCU-CNI JSCU-CNI changed the title Add pcat command to target-shell to read plist files Add plcat command to target-shell to read plist files May 19, 2026

@Schamper Schamper left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What would you say about adding support for NSKeyedArchiver plist files? Using https://github.com/fox-it/dissect.util/blob/main/dissect/util/plist.py

@JSCU-CNI

Copy link
Copy Markdown
Contributor Author

What would you say about adding support for NSKeyedArchiver plist files? Using https://github.com/fox-it/dissect.util/blob/main/dissect/util/plist.py

A previous version of this cmd actually used the NSKeyedArchiver, but that did not always work for (b)plist files I encountered.

@Schamper

Copy link
Copy Markdown
Member

but that did not always work for (b)plist files I encountered.

Can you elaborate a bit further? Because our parser is borked or because of other reasons?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants