±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35131
New Yesterday: 2 Visitors: 241

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

iPhone Jailbreak - Anyone Doing It?

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page 1, 2  Next 
  

iPhone Jailbreak - Anyone Doing It?

Post Posted: Fri Feb 08, 2019 6:46 pm

I saw that there is now a jailbreak available for 11.4 and was wondering if anyone is jailbreaking devices in order to get more from their extractions? Assuming you either have the passcode or there isn't one, are you taking the extra step of jailbreaking the device in order to obtain more? Elcomsoft is saying they can obtain a physical on iDevices once jailbroken which got me thinking is this a step I should be taking for devices I receive.  

the_Grinch
Senior Member
 
 
  

Re: iPhone Jailbreak - Anyone Doing It?

Post Posted: Fri Feb 08, 2019 11:56 pm

You better take Cellebrite for your issue.  

TinyBrain
Senior Member
 
 
  

Re: iPhone Jailbreak - Anyone Doing It?

Post Posted: Sat Feb 09, 2019 5:15 am

It really depends on the task you need to do...

For example if you need to examine some malware or spyware, which probably is already at root level, you better don't destroy evidence by trying to jailbrake.

If you need to gather more information over a logical filesystem extraction, if documented in the right way, jailbrake can be ok.
_________________
Apple passcode unlock + decrypted filesystem dump, Android user locks unlock + physical dump with decrypted userdata partition. We provide our services world-wide, but we reserve the right for choosing which tasks we take and which we deny! 

passcodeunlock
Senior Member
 
 
  

Re: iPhone Jailbreak - Anyone Doing It?

Post Posted: Sat Feb 09, 2019 2:58 pm

Got it! This was all a hypothetical just to see the value vs risk and to see what others are doing. Obviously, the aim is to get the most evidence as possible with destroying it and the question has to be asked. Thanks as always!!  

the_Grinch
Senior Member
 
 
  

Re: iPhone Jailbreak - Anyone Doing It?

Post Posted: Sun Feb 10, 2019 1:36 am

Before doing this kind of stuff on a live device, ALWAYS try it first on a similar dummy device. If that works as expected, I don't see any major problem repeating the process Smile
_________________
Apple passcode unlock + decrypted filesystem dump, Android user locks unlock + physical dump with decrypted userdata partition. We provide our services world-wide, but we reserve the right for choosing which tasks we take and which we deny! 

passcodeunlock
Senior Member
 
 
  

Re: iPhone Jailbreak - Anyone Doing It?

Post Posted: Sun Feb 10, 2019 4:39 am

Check out Sarah Edwards' research
Some answers you will only get with a jailbreak->file system extraction  

randomaccess
Senior Member
 
 
  

Re: iPhone Jailbreak - Anyone Doing It?

Post Posted: Sun Feb 10, 2019 2:39 pm

Awesome! Thanks I will check her out...seems she has a podcast on iOS forensics.  

the_Grinch
Senior Member
 
 

Page 1 of 2
Go to page 1, 2  Next