sucking SMS texts f...
 
Notifications
Clear all

sucking SMS texts from iPhone backup img on iTunes

6 Posts
4 Users
0 Reactions
750 Views
(@Anonymous)
Guest
Joined: 1 second ago
Posts: 0
Topic starter  

I recently lost my iPhone, and I need to get some important contact info off the SMS database table.

Any suggestions on how to do this? I hear that it's just a db file and that it's easy to do a sort of "select * where" sort of SQL statement.

Ideas?


   
Quote
(@alexc)
Reputable Member
Joined: 16 years ago
Posts: 301
 

It's SQLite, you can use the command line tool or something like SQLite Browser.

You can identify the correct file using the mdinfo files (it will have originally been "sms.db").

"SELECT * FROM message" will probably serve your purposes!


   
ReplyQuote
(@mobileforensicswales)
Reputable Member
Joined: 17 years ago
Posts: 274
 

Go to the directory

c\Documents and Settings\&Username&\Application Data\Apple Computer\MobileSync\Backup\

or

c\Documents and Settings\&Username&\Application Data\Apple Computer\MobileSync\Backup\

Copy out the

3d0d7e5fb2ce288813306e4d4636395e047a3d28.mddata

Rename it to .db and open the file in any SQL browser utility, in the SQL database, look up the messages table all your messages will be there against phone number.


   
ReplyQuote
(@alexc)
Reputable Member
Joined: 16 years ago
Posts: 301
 

Stetzer, just for my own curiosity, is the sms.db always named with that file name? I assumed that it was a hash/random number/UID which would be dependant on the occasion (hence why the associated mdinfo gives you the original file name and path).


   
ReplyQuote
(@hereid)
Active Member
Joined: 20 years ago
Posts: 6
 

AlexC - I just checked my own iPhone backup files and it does seem to be! I, like you, had thought it was a hash/uid, but it is in all my separate backup files and all contain SMS wahoo -)


   
ReplyQuote
(@mobileforensicswales)
Reputable Member
Joined: 17 years ago
Posts: 274
 

Stetzer, just for my own curiosity, is the sms.db always named with that file name? I assumed that it was a hash/random number/UID which would be dependant on the occasion (hence why the associated mdinfo gives you the original file name and path).

Nope, from my experience I've always seen it named this D You will find the same applies to the contact database too but I can't find my notes on that sorry. If anyone wants to pass that file name into the topic I'm sure it will be appreciated

Glad I could of help

Steve


   
ReplyQuote
Share: