I have an Apple iPhone 4S without a passcode lock, iOS6, which has been configured to encrypt the back ups. I have connected it to UFED Physical analyzer and performed an Advanced logical extraction using the 'Method 1' and 'Method 2' options.
Now the 'Method 1' requires the password to be entered to decode the data. At this current moment in time I am currently using this software http//
'Method 2' decoded some of the user data, however not all of it. I have looked through the some of the decoded data for potential passwords but I have had no luck.
The software to recover the password is ongoing but now I am running out of time and I am looking at manually photographing the data.
While I charge my camera batteries and warm my trigger finger up, is there anything else that someone can recommend?
Obviously the password is user defined which could consist of complex/non-complex characters, therefore it will take a lot of time, unless you can narrow down your search preferences. Some alternative software which could be used is EPPB (Elcomsoft) and PRTK (Access Data), however it all depends how strong your word lists are and if your computer specs are strong enough to maximise the processing.
XRY/Cellebrite can obtain some data, however this is limited and not all of the data is able to be obtained due to the backup encryption. Sorry to be the bearer of bad news, but it looks like you have drawn the short straw in that case, unless you can crack the password!
It can't
If this is a law enforcement case, you can approach Cellebrite for a possible solution.
Best regards,
Ron Serber
Have you tried generating a dictionary from already acquired data? As Ron said Cellebrite may have alts
Cellebrite CAIS might do it, I presume that is what Ron was suggesting. )
Also Passware products could be interesting for your case, but I got no experience with those.