Wickr - Anti Forens...
 
Notifications
Clear all

Wickr - Anti Forensics software....sort of

9 Posts
6 Users
0 Likes
529 Views
Adam10541
(@adam10541)
Posts: 550
Honorable Member
Topic starter
 

https://www.mywickr.com/

A new app for iOS which allows instant messaging, picture exchange etc etc with some interesting controls and supposedly all encrypted so people like us can't recover any information.

I'm going to be doing some test tomorrow if I'm quiet for anyone who's interested.

 
Posted : 05/07/2012 1:22 pm
(@alexc)
Posts: 301
Reputable Member
 

I wanted to have a play too, so I'd be interested in any findings if you get there first!

 
Posted : 05/07/2012 2:16 pm
(@steves)
Posts: 12
Active Member
 

I would also be interested in any results. unfortunately we do not have an iPhone to test on here x

 
Posted : 05/07/2012 2:35 pm
Adam10541
(@adam10541)
Posts: 550
Honorable Member
Topic starter
 

I brought in an old iPhone 3gs and have it installed on my iPad3.

Boss has a few BD things for me to do but hopefully a bit later today I can send some messages and MMS and see what happens.

Planning a very simple test really, just going to image the iPhone 3GS before the app is installed, then immediately after but prior to sending any messages, then after messages have been sent to and from the iPhone but 'within' the self destruct time limit, then after the self destruct time limit.

If the app works as advertised at no time should I see any of the messages or pictures contained within.

If I don't get time to do it all today will report back when I can.

 
Posted : 06/07/2012 6:17 am
Adam10541
(@adam10541)
Posts: 550
Honorable Member
Topic starter
 

Finished the testing and it would appear that Wickr does what it says on the box!

No artifacts recovered from the phone for the text or pictures.

I may do some further testing with the updated iOS but I don't expect that to influence the results at all. I imagine that the developers at Cellebrite and MicroSysttemation may have more luck decrypting the files that Wickr may leave behind and getting results that way, but for the moment Wickr is not leaving any evidence behind.

In the real world I don't think it will have any effect on our work, as encryption for computers has been around for a long long time and seems to be rarely used by those conducting illegal or questionable activities.

 
Posted : 10/07/2012 7:53 am
(@armresl)
Posts: 1011
Noble Member
 

What software/hardware did you use for your test.

What version of Iphone, what firmware version.

Jailbroken or no?

How were your results validated.

These will all help anyone else who may want to replicate or take your exam to the next level and post to this thread about their experiences.

Finished the testing and it would appear that Wickr does what it says on the box!

No artifacts recovered from the phone for the text or pictures.

I may do some further testing with the updated iOS but I don't expect that to influence the results at all. I imagine that the developers at Cellebrite and MicroSysttemation may have more luck decrypting the files that Wickr may leave behind and getting results that way, but for the moment Wickr is not leaving any evidence behind.

In the real world I don't think it will have any effect on our work, as encryption for computers has been around for a long long time and seems to be rarely used by those conducting illegal or questionable activities.

 
Posted : 10/07/2012 8:37 pm
Adam10541
(@adam10541)
Posts: 550
Honorable Member
Topic starter
 

Used UFED PA 3.0 and then 3.1
iPhone 3GS iOS 5.1 Jail broken

As for validation, well I couldn't find anything, there's my validation. I don't have the time or the inclination to run a thousand tests with a thousand different tools. I'll leave that to the research Academics or people that have the time )

 
Posted : 11/07/2012 6:02 am
(@topsirloin)
Posts: 45
Eminent Member
 

Bringing an old thread back up. Are people seeing this application on more devices lately?

 
Posted : 28/11/2014 12:37 am
(@gorvq7222)
Posts: 229
Reputable Member
 

Hi,

I did test Wickr on my iPhone 5s(ios 7),and I export its sqlite db. Using Winhex to check if encrypted or not. Everything is encrypted. You could not see chat content, even who is talking to who is unknown.

I've test lots of Apps ,and its encryption is better than Line, WeChat, FB Messenger,QQ…

Rick

 
Posted : 04/12/2014 6:28 am
Share: