Skip to content

Add plcat command to target-shell to read plist files #1756

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
JSCU-CNI wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Add plcat command to target-shell to read plist files #1756

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
4ac69e9
Add pcat command to target-shell to read plist files
JSCU-CNI May 19, 2026
ccc626e
Apply suggestion from @JSCU-CNI
JSCU-CNI May 19, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 12 additions & 0 deletions dissect/target/tools/shell.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@
import logging
import os
import platform
import plistlib
import pydoc
import random
import re
Expand All @@ -23,6 +24,7 @@
from datetime import datetime, timedelta, timezone
from enum import IntEnum
from pathlib import Path, PurePosixPath
from pprint import pprint
from tarfile import BLKTYPE, CHRTYPE, DIRTYPE, FIFOTYPE, LNKTYPE, REGTYPE, SYMTYPE
from typing import TYPE_CHECKING, Any, BinaryIO, ClassVar, TextIO

Expand Down Expand Up @@ -1504,6 +1506,16 @@ def cmd_hexdump(self, args: argparse.Namespace, stdout: TextIO) -> bool:

return False

@arg("path", type=TargetPathArgument)
def cmd_plcat(self, args: argparse.Namespace, stdout: TextIO) -> bool:
"""Print the contents of an Apple plist file."""
paths = list(self.resolve_glob_path(args.path))
for path in paths:
if len(paths) > 1:
print(path)
pprint(plistlib.load(path.open("rb")), stream=stdout)
return False

@arg("path", type=TargetPathArgument)
@alias("digest")
@alias("shasum")
Expand Down