Locked iPhone6 with...
 
Notifications
Clear all

Locked iPhone6 with Checkr1n

7 Posts
4 Users
0 Likes
2,210 Views
(@arbab)
Posts: 16
Active Member
Topic starter
 

Hi,

Is there any way to bypass the message on iOS device "Unlock iPhone to use accessories".

We need to bypass iPhone 6 passcode.

We tried the following method.

To bypass iPhone 6 with OS version between (12.3–13.3), we inject Checkr1n in DFU mode. After successfully injected checkr1n, we tired to connect iPhone with UFED,XRY or with Linux. we got connection issue. message popup on iPhone like "Unlock iPhone to use accessories".

We test 3 different test devices iPhone 6s, 6 and iphone 8 (Locked with bypass). after injected Checkr1n in DFU mode XRY, UFED are able to detect and do the extraction,without any trust relation popup. "As the devices are passcode locked.
BUT

After one hour if we try to do extraction again on these three test iOS deivices with XRY,UFED or via linux. message popup. "Unlock iPhone to use accessories".

Conclusions. within one hour of the locked iOS device, iPhone code can be bypass and able to do full file system extraction via UFED, or XRY.

My Question is, "is there any way to bypass the message "Unlock iPhone to use accessories". on locked devices or disable the usb accessories in setting>>Touch id and passcode >>USB Accessories.

Thanks

 
Posted : 12/01/2020 5:05 pm
Igor_Michailov
(@igor_michailov)
Posts: 529
Honorable Member
 

BFU Extraction Forensic Analysis of Locked and Disabled iPhones

https://blog.elcomsoft.com/2019/12/bfu-extraction-forensic-analysis-of-locked-and-disabled-iphones/

 
Posted : 12/01/2020 7:53 pm
(@the_grinch)
Posts: 136
Estimable Member
 

Checkra1n won't allow you to do a full extraction without the passcode. It will get you some data, but if you don't have the passcode for the device your stuck.

 
Posted : 14/01/2020 8:03 pm
passcodeunlock
(@passcodeunlock)
Posts: 792
Prominent Member
 

@OP I sent you a PM.

 
Posted : 15/01/2020 1:57 pm
(@arbab)
Posts: 16
Active Member
Topic starter
 

@OP I sent you a PM.

Thanks for the kind offer, we will update you soon,

Second We are able to jailbreak the device using Checkr1n v0.9.5. Which has the ability to remove this message "Unlock iPhone to use accessories".

We are able to do BFU extraction with UFED but we got very less data, i.e locations, wifi address, files. Now the challenge is '' How to decrypt the full file system, or to get more data .i.e application data, contacts, calls, sms etc''.

 
Posted : 15/01/2020 10:40 pm
(@the_grinch)
Posts: 136
Estimable Member
 

Hook it up to GrayKey or Cellebrite's solution. As previously posted without the passcode you aren't going to get the data you are looking for.

 
Posted : 15/01/2020 10:52 pm
passcodeunlock
(@passcodeunlock)
Posts: 792
Prominent Member
 

If it is Before First Unlock, you ge some data, but you are wasting your time, it won't help you get the desired data. Please read the link posted previously by Igor

https://blog.elcomsoft.com/2019/12/bfu-extraction-forensic-analysis-of-locked-and-disabled-iphones/

If you really want to move forward and the case is important enough, contact me.

 
Posted : 16/01/2020 11:48 am
Share: