I got a encrypted iPhone backup, and then I found the password from the PC web history. I try to open iPhone backup file through iPhone Backup Extractor Pro. I can see some infomation such as picture, SMS, contacts and so on. And the question are
1. How can I decode the encrypted iTunes backup file into a unencrypted backup file ? I want to get more information rather than info from iPhone Backup Extractor, wechat is my target. As we know, the wechat history from iPhone Backup file is unenrypted and there are keychain stored many password on encrypted iPhone Backup file. How can I get there file or record ? I know cellebrite can extract an encrypted iTunes backup file. Is there any other tools ?
2.A funny thing…The password is correct when I input on iPhone Backup Extractor. But I try to input the password by EnCase v7 or iPhone Backup Browser. Both display the wrong password.
What's the matter ? Did anyone occur the issue?
Normally I load these files into the Ufed if i know the password. If I dont't know it, Elcomsoft phone breaker can use dictionary or brute force attacks.
Oxygen Forensic Passware Analyst can find passwords to encrypted iTunes backups. It uses brute-force, dictionary or other easily customizable attacks. The program supports data parsing from the latest versions of WeChat (iOS, Android). Keychain file is also automatically decrypted during data extraction and all passwords are shown in a readable format.
Under normal circumstances, the iPhone Backup Extractor full version should be able to help you extract the data you need.
I want to get more information rather than info from iPhone Backup Extractor, wechat is my target.
Under normal circumstances, the iPhone Backup Extractor full version should be able to help you extract the data you need.
Perfect. roll
jaclaz
You could try to restore the encrypted backup to a factory reset iPhone, “reset all passwords” under settings in the iPhone, and then acquire and analyze the iPhone data with whatever tools you have. Not sure if this would work - I have never tried it myself
You are replying to a 4 year old post.
You are replying to a 4 year old post.
Ain't we allowed to reply on the old post?
You are replying to a 4 year old post.
Ain't we allowed to reply on the old post?
Sure we are.
BUT replying to an old post WITHOUT adding any relevant info is frowned upon, not only because it adds nothing, but it may also make some less attentive members reply, and then another one will reply, etc. while the OP (original poster) is already well past the original issue and most probably won't ever report if any of the suggestions have been found meaningful/useful.
BTW, in theory the scheme of a thread about a help/assistance request should be
1) the OP asks the question, hopefully providing as much details as possible
2) one or more willing helping members try to suggest a meaningful, well thought solution to the OP's problem (and nothing else)
3) the OP tries the suggested solution and reports whether it worked or not
4) one or more loops to #2 until the issue is resolved or deemed to be unresolvable
What actually happens in practice most of the time is
1) the OP asks the question, usually omitting any meningful detail
2) a number of other members either throw half @§§ed or vague/generic recommendations or ask for meaningful details
3) some of the good guys that actually make and sell commercial tools take the occasion to say how their tool would work instead
4) some spammer take the occasion - possibly years later - to mention their tool - even if already mentioned (and excluded) before
5) a willing helping member doesn't notice the date of the before last post and there may be a loop to #2
6) the thread having been posted to "floats" to the "recent posts" and a number of people will read it (AGAIN), won't notice the dates of the original posts and will add some comment (good or bad) and again a loop to #2 may happen
7) the original issue likely won't be solved anyway (or at least we will miss any confirmation on what - if any - worked), the forum database will increase (a little) in size, lots of members will have lost (a liittle) time reading an old, likely irrelevant thread and entropy will win another (little) battle.
jaclaz
You could try to restore the encrypted backup to a factory reset iPhone, “reset all passwords” under settings in the iPhone, and then acquire and analyze the iPhone data with whatever tools you have. Not sure if this would work - I have never tried it myself
I don't think it will work,because there is no way to secure the rest of the data in the iPhone,if the iPhone Backup Extractor doesn't work well enough,Why not reset password directly?This tool can help you.
https://
One the password will be cracked,you can extract any data you want,and the content covered in this tutorial is also helpful.
https://
Good luck to U.