Notifications
Clear all

Pulling iCloud data

6 Posts
5 Users
0 Reactions
1,676 Views
(@datar)
Eminent Member
Joined: 11 years ago
Posts: 15
Topic starter  

A client needs me to retrieve and preserve the data from his iCloud account, for future reference. Assuming access is not a problem (I will be provided with user name/password), what tool (Except cloud analyzer) could you recommend? Preferably something under 1000$, if such a thing exists.

Thank you!


   
Quote
UnallocatedClusters
(@unallocatedclusters)
Honorable Member
Joined: 13 years ago
Posts: 576
 

https://www.iphonebackupextractor.com/?utm_source=adwords&utm_medium=ad&utm_campaign=ipbe-brand&gclid=EAIaIQobChMI84L-__i34AIVB57ACh2iVAPqEAAYASAAEgKU7vD_BwE

The least expensive iCloud collection tool I am aware of is iPhone Backup Extractor Pro at US $70.00


   
ReplyQuote
(@tacobreath)
Active Member
Joined: 10 years ago
Posts: 14
 

I've used Elcomsoft Phone Breaker for pulling an iCloud backup of an iPhone. It did a really nice job. It has several other useful features like pulling Microsoft cloud data and iTunes backup password cracking. I have the "Pro" version which goes for $199 USD.


   
ReplyQuote
(@cs1337)
Trusted Member
Joined: 12 years ago
Posts: 83
 

I've used elcemsoft but it appears to be broken now due to Apple updates. Is their any tool that currently does work that you are aware of?


   
ReplyQuote
(@v-katalov)
Trusted Member
Joined: 12 years ago
Posts: 52
 

I've used elcemsoft but it appears to be broken now due to Apple updates. Is their any tool that currently does work that you are aware of?

Now it works again! )

https://www.elcomsoft.com/news/721.html


   
ReplyQuote
UnallocatedClusters
(@unallocatedclusters)
Honorable Member
Joined: 13 years ago
Posts: 576
 

I can confirm of course that Elcomsoft Phone Breaker's iCloud collection tool is working again! Excellent work as always Elcomsoft and Vlad!!!

My setup

Forensic collection workstation 2017 Apple Macbook Pro / 16GB RAM, running Windows 10 in Boot Camp.

** I recommend checking the "pack files into a single tar archive" under settings before the collection.

1. I first logged into the target iCloud account on the collection workstation using Apple iCloud Windows desktop software.

I was prompted to "allow" on the iPhone whose iCloud account I was collecting and was provided with a 6-digit code to enter into the Windows desktop iCloud software.

2. I then logged in to the target iCloud account using Elcomsoft Phone Breaker v.9.1 32610; I was again prompted on the target iPhone to "allow" and then was provided with a 6-digit verification code on the target iPhone, which I input into Phone Breaker.

New features (new to me)

* Phone Breaker has separate status bars to show the progress of multiple concurrent iCloud mobile backup downloads.

* The ability to save previously used "pipelines" and password "attacks".


   
ReplyQuote
Share: