iphone4 ios5 no way...
 
Notifications
Clear all

iphone4 ios5 no way to unmount disks?

5 Posts
2 Users
0 Reactions
601 Views
(@niallc)
Active Member
Joined: 16 years ago
Posts: 6
Topic starter  

I'm trying to get an image of an iphone4's disk. I can't seem to unmount the main partition in order to image it.

Is there some trick to this I'm missing?


   
Quote
(@mobileforensicswales)
Reputable Member
Joined: 17 years ago
Posts: 274
 

Have you ever imaged an iPhone physically before?

If not please read the forum before continuing, everything I could suggest has already been explained


   
ReplyQuote
(@niallc)
Active Member
Joined: 16 years ago
Posts: 6
Topic starter  

Yes, I have imaged an iPhone before, but it was an older version. And I've searched the forums here for some insight and not found any.

Specifically my issue is, when I ssh into the iPhone, I can't unmount the partitions in order to dd them out. If I try to dd them out, as you see below, it simply creates empty files.

iPhone/private/var root# mount
/dev/disk0s1s1 on / (hfs, local, journaled, noatime)
devfs on /dev (devfs, local, nobrowse)
/dev/disk0s1s2 on /private/var (hfs, local, journaled, noatime, protect)
iPhone/private/var root# umount /dev/disk0s1s1
umount unmount(/) Resource busy
iPhone/private/var root# cd /
iPhone/ root# umount /private/var
umount unmount(/private/var) Resource busy
iPhone/ root# umount -a
umount unmount(/private/var) Resource busy
iPhone/ root# mount
/dev/disk0s1s1 on / (hfs, local, journaled, noatime)
devfs on /dev (devfs, local, nobrowse)
/dev/disk0s1s2 on /private/var (hfs, local, journaled, noatime, protect)
iPhone/ root# umount -a
umount unmount(/private/var) Resource busy
iPhone/ root# dd if=/dev/disk0s1s2 | ssh iMovie@192.168.1.3 password=bollix12 "dd of=Desktop/iphone1.img"
dd opening `/dev/disk0s1s2' Resource busy
Password
Password
0+0 records in
0+0 records out
0 bytes transferred in 0.003186 secs (0 bytes/sec)
iPhone/ root# dd if=/dev/disk0s1s1 | ssh iMovie@192.168.1.3 "dd of=Desktop/iphone.img"
dd opening `/dev/disk0s1s1' Resource busy
Password
0+0 records in
0+0 records out
0 bytes transferred in 0.002641 secs (0 bytes/sec)
iPhone/ root#

Any insight would be fantastic.

Thanks in advance.


   
ReplyQuote
(@mobileforensicswales)
Reputable Member
Joined: 17 years ago
Posts: 274
 

What are you trying to achieve?


   
ReplyQuote
(@niallc)
Active Member
Joined: 16 years ago
Posts: 6
Topic starter  

Hi,

I'm trying to image the phone.


   
ReplyQuote
Share: