Hi guys,
My colleagues and I are currently trying to find a way to jailbreak an iPhone running OS 4.3.5 so that when we examine it using XRY we still retain the emails.
Does anyone know anyway we can do this?
Doesn't really answer your question but have you tried using UFED Physical Analyzer 2?
my understanding is it can recover emails without the need to jail break the device.
Indeed UFED Physical supports physical extraction and decryption of iOS 4.3.5 that will extract emails and many additional data types.
Next UFED version will add physical support for iOS 5 too.
iPhone 4S is currently only supported with logical and file system extraction
RonS
You could give Elcomsoft a try? Great all round iPhone tool to obtain file system read and dump. It gets you the emails when you select the raw image option, and it will work with v4.3.5.
What model of iPhone is it? Im assuming it is either going to be 3GS or a 4?
You could give Elcomsoft a try? Great all round iPhone tool to obtain file system read and dump. It gets you the emails when you select the raw image option, and it will work with v4.3.5.
What model of iPhone is it? Im assuming it is either going to be 3GS or a 4?
Don't forget to kill the mail application in the tray on the handset otherwise you will end up with the mail files being full of 0's (using Elcomsoft).
Has anyone tried imaging a iphone v4 v A1332 with software version 5.0.0 through the UFED device latest version (Full 1.0.2.7)? I keep getting an error message "Cannot read extra info". I've tried selecting each supported feature one at a time but keep getting the error. Perhaps UFED doesn't support v5 yet through the "Extract Phone Data" option?
Thanks
Image the iPhone and pull the emails out by loading the image in EnCase
hu? The UFED errors. No image to import.
Image the handset using Zdziardski