Im just wondering what everyones experience so far has been like using the new Cellebrite update for Checkm8?
Has anyone had either postivie or negative results?
Anyone compared the data extracted between Checkm8 and Greykey full file system extractions?
Any errors?
Thanks.
I recently attempted to use the Checkm8 exploit and so far have had success with an iPhone 6s+ as well as an iPhone 8. I initially ran into issues, but found using the default apple cord resolved my issues and has worked more consistently than the recommended "cable no.210".
The iPhone 6s+ is my work phone, so it was my "controlled" item for testing the Checkm8 exploit compared to full file system extraction on GrayKey. Here is a listing of the phone type, software versions and more
iPhone 6s+ (A1634) iOS 13.3.1 (54.74GB/64GB available)
UFED Touch 2 7.28.2.8
Cellebrite PA 7.30.0.228
GrayKey 1.6.6
I started with the Checkm8 full file system extraction, the extraction pulled 11 GB and finished within 32 minutes with no errors during extraction after swapping the "cable no.210" for the original apple cable and used PA (7.30.0.228).
Graykey also had no issues, the extraction pulled 11.35 GB and took about 17 minutes from start to finish. I used the .zip file with PA (7.30.0.228) and come up with almost the exact number of files extracted.
The only difference for this particular phone that I experienced was the duration of extraction time and the issues with the cable, otherwise I found the two full file system extractions to be very similar in results.
Will be interested to see if you have any luck with the iPhone X.
I've just tried again using the latest 4PC (7.30) and it still hangs just shy of 9GB of the way in.
Still appears to be problematic.
People using the Checkm8 function in Belkasoft (to obtain data from iPhones or create images) rarely report hiccups or problems along the way
Perhaps, you should try a tool (like Belkasoft Evidence Center) that works and retails for cheaper 8)