that's what i get when i try to read it via FTK
i dont know what is this !!
There is something wrong with your image. I've seen previously both encrypted and not encrypted images of ipads, none looked like your.
An encrypted image when viewed in hex should be filled with randomly looking data, starting from the first sector to the last sector, chunks of zeros are very rare.
With not encrypted image you should see partition headers.
Try imaging the device with something else.
Can you find the (HFS+) structures?
An encrypted JPG file
that's what i get when i try to read it via FTK
…
i dont know what is this !!
I recommend to open the image by X Ways Forensics. FTK can miss partitions.
Nice sample Mr. Igor!!!
There is something wrong with your image. I've seen previously both encrypted and not encrypted images of ipads, none looked like your.
An encrypted image when viewed in hex should be filled with randomly looking data, starting from the first sector to the last sector, chunks of zeros are very rare.
With not encrypted image you should see partition headers.
Try imaging the device with something else.
give me a method to image the device !! i used netcet method
what is yours !!
Can you find the (HFS+) structures?
An encrypted JPG filethat's what i get when i try to read it via FTK
…
i dont know what is this !!
I recommend to open the image by X Ways Forensics. FTK can miss partitions.
cant get x way it's not free ( is there any free alternate
give me a method to image the device !! i used netcet method
what is yours !!
I like open source alternatives, but since you failed with dd and netcat, for imaging your ipad with jailbrake I would suggest you using Cellebrite UFED 4PC or Oxygen Forensics Detective.
I don't suggest other open source alternatives, since those also use dd (or similar programs) in the background.
Please consider that I'm not affiliated with none of the companies creating the products I mentioned, the suggestions are based on my personal experience.
Size 591,740 bytes?
It must be a very low-end iPad ….
jaclaz
Size 591,740 bytes?
It must be a very low-end iPad ….
!!!
Yes jaclaz, yes. lol