Unlocked iPhone 6s ...
 
Notifications
Clear all

Unlocked iPhone 6s data extraction blocked

19 Posts
8 Users
0 Reactions
3,035 Views
Mreza
(@mreza)
Trusted Member
Joined: 10 years ago
Posts: 85
 

If it's sure 100% the detective version with pasware included able to bypass the password, definitely I will upgrade my analyst. But if not, what is the percentage to success?

It has an password decrypting ability. Nobody mentioned the possibility of bypassing password.

https://www.oxygen-forensic.com/en/products/oxygen-forensic-detective/detective/encrypted-backups

https://vimeo.com/239147894


   
ReplyQuote
(@meroslave)
Active Member
Joined: 8 years ago
Posts: 10
Topic starter  

If it's sure 100% the detective version with pasware included able to bypass the password, definitely I will upgrade my analyst. But if not, what is the percentage to success?

It has an password decrypting ability. Nobody mentioned the possibility of bypassing password.

https://www.oxygen-forensic.com/en/products/oxygen-forensic-detective/detective/encrypted-backups

https://vimeo.com/239147894

Now I get you, so thanks for your clearance.


   
ReplyQuote
(@meroslave)
Active Member
Joined: 8 years ago
Posts: 10
Topic starter  

Otherwise, All I need to extract from the iPhone is the WhatsApp voice notes, I read about softwares like wondershare and mobile go that able to extract WhatsApp files and chat, any recommendations?
PS my plane B is to record it manually using aux cable!!


   
ReplyQuote
(@dandaman_24)
Estimable Member
Joined: 11 years ago
Posts: 172
 

If i have read this correctly, you have the passcode for the device to unlock, you have performed a backup and the software is unable to parse the data as the backup is encrypted with a password ?

First of all, have you tried the password as 1234 ?

Have you looked for passwords stored on the handset ?

If the user has saved passwords in Safari browser / some apps they should be stored in the following locations.

iOS 11
Settings - Accounts & Passwords - App & Website Passwords - (tap your fingerprint on scanner) then enter the passcode for the device

iOS10
Settings - Safari - Passwords - (tap your fingerprint on scanner) then enter the passcode for the device

You can then write a word list of the passwords known / stored on the device to run across the encrypted backup.

Or follow the following details from Elcomsoft to reset iTunes backup password
https://blog.elcomsoft.com/2017/11/ios-11-makes-logical-acquisition-trivial-allows-resetting-itunes-backup-password/


   
ReplyQuote
(@meroslave)
Active Member
Joined: 8 years ago
Posts: 10
Topic starter  

If i have read this correctly, you have the passcode for the device to unlock, you have performed a backup and the software is unable to parse the data as the backup is encrypted with a password ?

First of all, have you tried the password as 1234 ?

Have you looked for passwords stored on the handset ?

If the user has saved passwords in Safari browser / some apps they should be stored in the following locations.

iOS 11
Settings - Accounts & Passwords - App & Website Passwords - (tap your fingerprint on scanner) then enter the passcode for the device

iOS10
Settings - Safari - Passwords - (tap your fingerprint on scanner) then enter the passcode for the device

You can then write a word list of the passwords known / stored on the device to run across the encrypted backup.

Or follow the following details from Elcomsoft to reset iTunes backup password
https://blog.elcomsoft.com/2017/11/ios-11-makes-logical-acquisition-trivial-allows-resetting-itunes-backup-password/

(
no results, but so much thanks, because it was too value information in your post.


   
ReplyQuote
(@tackleberry)
Eminent Member
Joined: 12 years ago
Posts: 30
 

OXY will brute force the Itunes encrypted password. I have had success at this.

Once Encryption is selected on the iTunes account it cannot be turned off. and Encryption password cannot be changed without knowing the original.

While not a sound process, We have experimented with logging out of user ITUNES on device and logging back into a un-encrypted ITUNES established account and had success reacquiring data.

NOTE>>> you are changing the device…….

I have not yet compared the differences in data other a quick overview where 1 category of artifacts ( apples notes) were lost when the extraction was done the second time with the "unencrypted" Itunes account. I believe that occurred in settings when I logged out of encrypted ITunes and logged into the un-encrypted one.


   
ReplyQuote
SamBrown
(@sambrown)
Trusted Member
Joined: 11 years ago
Posts: 97
 

You could update the device to iOS 11 and then remove the password

https://blog.elcomsoft.com/2017/11/ios-11-makes-logical-acquisition-trivial-allows-resetting-itunes-backup-password/


   
ReplyQuote
(@meroslave)
Active Member
Joined: 8 years ago
Posts: 10
Topic starter  

You could update the device to iOS 11 and then remove the password

https://blog.elcomsoft.com/2017/11/ios-11-makes-logical-acquisition-trivial-allows-resetting-itunes-backup-password/

Ammm, sounds a good idea, yesterday I thought about it specifically, but I first tried with my friend's iPhone to upgrade it to 11 iOS then restore the encrypted backup to the new iPhone (iOS 11), then I have the chance to clear it, but unfortunately the iTunes asked for the password before restoring the backup.
That moment your idea was pending but I still hesitated because I have no idea how to do it with no internet connection (to avoid locking the iPhone), and also I still expect a disappointed itunes message asking for the dam password.
Anyway, deserve to be tried.


   
ReplyQuote
SamBrown
(@sambrown)
Trusted Member
Joined: 11 years ago
Posts: 97
 

No you need to upgrade the original device where the backup came from and after the reset you can make a new, unencrypted backup.
The encrypted backup you already have is useless without the password.


   
ReplyQuote
Page 2 / 2
Share: