Extract a encrypted...
 
Notifications
Clear all

Extract a encrypted iTunes backup with password and wechat

13 Posts
11 Users
0 Likes
2,139 Views
(@sherrye815)
Posts: 3
New Member
Topic starter
 

I got a encrypted iPhone backup, and then I found the password from the PC web history. I try to open iPhone backup file through iPhone Backup Extractor Pro. I can see some infomation such as picture, SMS, contacts and so on. And the question are
1. How can I decode the encrypted iTunes backup file into a unencrypted backup file ? I want to get more information rather than info from iPhone Backup Extractor, wechat is my target. As we know, the wechat history from iPhone Backup file is unenrypted and there are keychain stored many password on encrypted iPhone Backup file. How can I get there file or record ? I know cellebrite can extract an encrypted iTunes backup file. Is there any other tools ?
2.A funny thing…The password is correct when I input on iPhone Backup Extractor. But I try to input the password by EnCase v7 or iPhone Backup Browser. Both display the wrong password.
What's the matter ? Did anyone occur the issue?

 
Posted : 19/06/2015 4:16 pm
(@kbertens)
Posts: 88
Trusted Member
 

Normally I load these files into the Ufed if i know the password. If I dont't know it, Elcomsoft phone breaker can use dictionary or brute force attacks.

 
Posted : 19/06/2015 10:32 pm
OxygenForensics
(@oxygenforensics)
Posts: 143
Estimable Member
 

Oxygen Forensic Passware Analyst can find passwords to encrypted iTunes backups. It uses brute-force, dictionary or other easily customizable attacks. The program supports data parsing from the latest versions of WeChat (iOS, Android). Keychain file is also automatically decrypted during data extraction and all passwords are shown in a readable format.

 
Posted : 07/07/2015 4:00 pm
(@Anonymous)
Posts: 0
Guest
 

Under normal circumstances, the iPhone Backup Extractor full version should be able to help you extract the data you need.

 
Posted : 05/12/2019 8:31 am
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

I want to get more information rather than info from iPhone Backup Extractor, wechat is my target.

Under normal circumstances, the iPhone Backup Extractor full version should be able to help you extract the data you need.

Perfect. roll

jaclaz

 
Posted : 05/12/2019 2:41 pm
UnallocatedClusters
(@unallocatedclusters)
Posts: 577
Honorable Member
 

You could try to restore the encrypted backup to a factory reset iPhone, “reset all passwords” under settings in the iPhone, and then acquire and analyze the iPhone data with whatever tools you have. Not sure if this would work - I have never tried it myself

 
Posted : 07/12/2019 4:01 am
(@armresl)
Posts: 1011
Noble Member
 

You are replying to a 4 year old post.

 
Posted : 08/12/2019 7:21 am
(@msbettyhunt)
Posts: 9
Active Member
 

You are replying to a 4 year old post.

Ain't we allowed to reply on the old post?

 
Posted : 16/12/2019 4:08 am
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

You are replying to a 4 year old post.

Ain't we allowed to reply on the old post?

Sure we are.

BUT replying to an old post WITHOUT adding any relevant info is frowned upon, not only because it adds nothing, but it may also make some less attentive members reply, and then another one will reply, etc. while the OP (original poster) is already well past the original issue and most probably won't ever report if any of the suggestions have been found meaningful/useful.

BTW, in theory the scheme of a thread about a help/assistance request should be
1) the OP asks the question, hopefully providing as much details as possible
2) one or more willing helping members try to suggest a meaningful, well thought solution to the OP's problem (and nothing else)
3) the OP tries the suggested solution and reports whether it worked or not
4) one or more loops to #2 until the issue is resolved or deemed to be unresolvable

What actually happens in practice most of the time is
1) the OP asks the question, usually omitting any meningful detail
2) a number of other members either throw half @§§ed or vague/generic recommendations or ask for meaningful details
3) some of the good guys that actually make and sell commercial tools take the occasion to say how their tool would work instead
4) some spammer take the occasion - possibly years later - to mention their tool - even if already mentioned (and excluded) before
5) a willing helping member doesn't notice the date of the before last post and there may be a loop to #2
6) the thread having been posted to "floats" to the "recent posts" and a number of people will read it (AGAIN), won't notice the dates of the original posts and will add some comment (good or bad) and again a loop to #2 may happen
7) the original issue likely won't be solved anyway (or at least we will miss any confirmation on what - if any - worked), the forum database will increase (a little) in size, lots of members will have lost (a liittle) time reading an old, likely irrelevant thread and entropy will win another (little) battle.

jaclaz

 
Posted : 16/12/2019 11:08 am
 Ruiz
(@ruiz)
Posts: 2
New Member
 

You could try to restore the encrypted backup to a factory reset iPhone, “reset all passwords” under settings in the iPhone, and then acquire and analyze the iPhone data with whatever tools you have. Not sure if this would work - I have never tried it myself

I don't think it will work,because there is no way to secure the rest of the data in the iPhone,if the iPhone Backup Extractor doesn't work well enough,Why not reset password directly?This tool can help you.
https://www.recoverywindowspassword.com/recover-itunes-backup-password.html
One the password will be cracked,you can extract any data you want,and the content covered in this tutorial is also helpful.
https://www.wikihow.com/Restore-iPhone-from-Backup
Good luck to U.

 
Posted : 19/12/2019 3:10 am
Page 1 / 2
Share: