Title says it all really.
From what I can gather there is no way around it as Zidarski does not bypass IOS 4.?.? (Can't be sure what version its running since stuck on lock screen)
Anybody know if there are any tools or methods for extracting any info from a locked iPad?
There seems to be very little in the forums from my search.
Depends on what you want to do. If I was you and you have NO way of getting the passcode from another source then my advice to you would be to use something like XRY to get the contents of the user accessible area. XRY will work without knowledge of the passcode.
I guess to what lengths you will go to depends on the type of offense and the likelihood of finding stuff of interest on the device.
If you require more advice please PM me.
You could use irecovery to establish the build of the device and thus the firmware. Then you may be in a better position to think about removal of the passcode, or not of course if it is 4.x.x
Thanks for the replies.
Didn't know XRY will do that. It might give me something. Worth a try!
Never heard of iRecovery, I will check it out.
I took some of my own knowledge to figure its running at least 4.2 as the screen lock button is now a mute button, which was one of the changes from the new iOS. So at least 4.2.1 would I be right in saying?
I will try XRY today and see what that gives me…
Thanks again.
You are correct, the screen orientation switch is now a mute switch in OS 4.2.
As far as I am aware XRY will not be able to read a locked device? I have never been successful in attempting that in the past (OS 3).
As Coligulus pointed out iRecovery will give you a 'Build Tag' which will look something like iBoot-931.71.16 (That code was from iOS4.2 on an iPhone 4)
If the device is jailbroken then you might be able to just run the recover-fs.sh scripts to get the file system back? I would want to test that first though before attempting it on an evidential device.
Cellebrite UFED Physical will soon support physical and file system extraction on locked iPhone and iPad including iOS 4.x
Cellebrite UFED Physical will soon support physical and file system extraction on locked iPhone and iPad including iOS 4.x
So you are able to take a dd image of the iPad running iOS 4.2x?
This is interesting as the JZ tools are not able to do this. Can you confirm a time scale for when this will be available?
Will there be any need for files from the host computer in order to perform this recovery or to bypass passcodes?
I can't see this being the case (maybe I'm just sceptical)
I do know the JZ technique has been made the official tool in the US (or something on those lines… not sure on US rules etc.)
But opening it all up and bypassing the passcode would be a be in on El Jobso's eyes one can assume!
(oh and I managed to get the passcode for the ipad… sometimes its as easy as just asking ! ) lol
XRY is doing its thing now. Oxygen crapped out on me. So even with the passcode, its never just straightforward…! |
Cellebrite UFED Physical will soon support physical and file system extraction on locked iPhone and iPad including iOS 4.x
How long will it be before this is implemented?
Thanks
Cellebrite UFED Physical will soon support physical and file system extraction on locked iPhone and iPad including iOS 4.x
How long will it be before this is implemented?
Thanks
As soon as they find a suitable zeroday I guess.