Apple iPhone 4s disabled

I am not sure what you mean by disabled, is that the same as PIN locked? If so there is not a lot you can do as far as the device itself goes. A fancy and expensive paperweight. We are currently experiencing this same thing but with a iphone 6 and 5s. According to Apple website, you can request info via search warrant and if they stored anything to their icloud account, such as backups, pics, etc. Then you "may" be able to get them, but I do not know for sure. Maybe someone else here has had luck going that route or the host computer where a back up was done in itunes, but it may not be the most current data. Not sure of rules/laws in your country.

https://www.apple.com/privacy/docs/legal-process-guidelines-us.pdf

Harry

As hsteward said there is not a lot you can do by yourself, but I would suggest you some tricks which may give you a few (better than nothing) information

- If Siri is enabled, you could just ask him questions like "who call me today/yesterday/on january 3rd" or "what is the last message I receive from John Smith" (You may want to do it with the poeple that appear on the "last call" request)..

- Another thing you can do is to set up a rogue AP (Airbase from Aircrack-ng suite does a good job for that), trying various public SID (Starbucks, McDonald's free, etc..) until the iPhone auto-connect. Then you could start sniffing the traffic. You will only be able to see unencrypted traffic, but depending on the case, you might have access to a Root certificate that had been trusted by the device (if you are very lucky ) )

- Last but not least, you can find a vulnerability in the secure boot chain… (mmm good luck ) ) ) ).

Good luck. )

if the device is pin locked and is running iOS 8+ there is not much you can do.

If the device was paired with a computer that you control, you can find the lockdown certificates .

with these certificates you can pair the device to whichever computer you want and perform a backup of the device even if it's PIN locked.
BUT, since it's iOS 8+ you only chance for accomplishing such a trick is that the device has NEVER been powered off since the last pairing happened.

it worked great with ios <8 as you could completely bypass the pass code with the lockdown certificates, even if it was powered off, but now if it's been powered off, you will be asked for the unlock pin even if you have the certificates.

some forensics softwares claim that they can do an "advanced logical" extraction bypassing the pin lock, as they are using side channels to request data from the device, but i've never used them and as far as i know, on iOS8 the amount of that you can extract is minimal, maybe something from the media library but nothing more.

when I talk about a disabled iphone, I refer to the situation happen after you try 10 different pin code.
thanks

i have to check on some literature about that but i think that even if you can manage to unlock the device somehow, data would be long way gone anyway,
since as far as i know the encryption keys gets wiped out.

Have a look at the MFC dongle sold by Fonefunshop. I can confirm it works on a disabled IPhone with IOS 7. Havent tested IOS 8 yet.