Script http-icloud-findmyiphone

Script types: prerule
Categories: discovery, safe, external
Download: https://svn.nmap.org/nmap/scripts/http-icloud-findmyiphone.nse

Script Summary

Retrieves the locations of all "Find my iPhone" enabled iOS devices by querying the MobileMe web service (authentication required).

Script Arguments

http-icloud-findmyiphone.username

the Apple Id username

http-icloud-findmyiphone.password

the Apple Id password

slaxml.debug

See the documentation for the slaxml library.

http.host, http.max-body-size, http.max-cache-size, http.max-pipeline, http.pipeline, http.truncated-ok, http.useragent

See the documentation for the http library.

smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername

See the documentation for the smbauth library.

Example Usage

nmap -sn -Pn --script http-icloud-findmyiphone --script-args='username=<user>,password=<pass>'

Script Output 

Pre-scan script results:
| http-icloud-findmyiphone:
|   name                           location        accuracy  date               type
|   Patrik Karlsson's MacBook Air  -,-             -         -                  -
|   Patrik Karlsson's iPhone       40.690,-74.045  65        04/10/12 16:56:37  Wifi
|_  Mac mini                       40.690,-74.045  65        04/10/12 16:56:36  Wifi

Requires

Author:

  • Patrik Karlsson

License: Same as Nmap--See https://nmap.org/book/man-legal.html