yeah it is the keybag
although i found some interesting things afterwards
i took the keybag from my laptop
and then the keybag from my work pc
they were completely different for the same phone, same passcode
and they both worked, i switched them out and could access my phone still
also i checked iexplorer on a mac and couldnt get anywhere further than DCIM, but i need to do a more thorough investigation
What i want to have a think about is how the keys are generated so i can create the plist and use it to open a phone without actually having the original laptop
so from what i can gather…the plist contains some information about the computer you use to connect to, and it has to have an identifier for the phone. it doesnt relate to the passcode, because i changed the passcode on the phone and even though it created a new plist with a completely different key, it still worked with the previous plist
the quest continues