Join Us!

Extract a encrypted...
 
Notifications
Clear all

Extract a encrypted iTunes backup with password and wechat  

  RSS
sherrye815
(@sherrye815)
New Member

I got a encrypted iPhone backup, and then I found the password from the PC web history. I try to open iPhone backup file through iPhone Backup Extractor Pro. I can see some infomation such as picture, SMS, contacts and so on. And the question are
1. How can I decode the encrypted iTunes backup file into a unencrypted backup file ? I want to get more information rather than info from iPhone Backup Extractor, wechat is my target. As we know, the wechat history from iPhone Backup file is unenrypted and there are keychain stored many password on encrypted iPhone Backup file. How can I get there file or record ? I know cellebrite can extract an encrypted iTunes backup file. Is there any other tools ?
2.A funny thing…The password is correct when I input on iPhone Backup Extractor. But I try to input the password by EnCase v7 or iPhone Backup Browser. Both display the wrong password.
What's the matter ? Did anyone occur the issue?

Quote
Posted : 19/06/2015 5:16 pm
kbertens
(@kbertens)
Member

Normally I load these files into the Ufed if i know the password. If I dont't know it, Elcomsoft phone breaker can use dictionary or brute force attacks.

ReplyQuote
Posted : 19/06/2015 11:32 pm
OxygenForensics
(@oxygenforensics)
Active Member

Oxygen Forensic Passware Analyst can find passwords to encrypted iTunes backups. It uses brute-force, dictionary or other easily customizable attacks. The program supports data parsing from the latest versions of WeChat (iOS, Android). Keychain file is also automatically decrypted during data extraction and all passwords are shown in a readable format.

ReplyQuote
Posted : 07/07/2015 5:00 pm
 Anonymous

Under normal circumstances, the iPhone Backup Extractor full version should be able to help you extract the data you need.

ReplyQuote
Posted : 05/12/2019 8:31 am
jaclaz
(@jaclaz)
Community Legend

I want to get more information rather than info from iPhone Backup Extractor, wechat is my target.

Under normal circumstances, the iPhone Backup Extractor full version should be able to help you extract the data you need.

Perfect. roll

jaclaz

ReplyQuote
Posted : 05/12/2019 2:41 pm
UnallocatedClusters
(@unallocatedclusters)
Senior Member

You could try to restore the encrypted backup to a factory reset iPhone, “reset all passwords” under settings in the iPhone, and then acquire and analyze the iPhone data with whatever tools you have. Not sure if this would work - I have never tried it myself

ReplyQuote
Posted : 07/12/2019 4:01 am
armresl
(@armresl)
Senior Member

You are replying to a 4 year old post.

ReplyQuote
Posted : 08/12/2019 7:21 am
msbettyhunt
(@msbettyhunt)
New Member

You are replying to a 4 year old post.

Ain't we allowed to reply on the old post?

ReplyQuote
Posted : 16/12/2019 4:08 am
jaclaz
(@jaclaz)
Community Legend

You are replying to a 4 year old post.

Ain't we allowed to reply on the old post?

Sure we are.

BUT replying to an old post WITHOUT adding any relevant info is frowned upon, not only because it adds nothing, but it may also make some less attentive members reply, and then another one will reply, etc. while the OP (original poster) is already well past the original issue and most probably won't ever report if any of the suggestions have been found meaningful/useful.

BTW, in theory the scheme of a thread about a help/assistance request should be
1) the OP asks the question, hopefully providing as much details as possible
2) one or more willing helping members try to suggest a meaningful, well thought solution to the OP's problem (and nothing else)
3) the OP tries the suggested solution and reports whether it worked or not
4) one or more loops to #2 until the issue is resolved or deemed to be unresolvable

What actually happens in practice most of the time is
1) the OP asks the question, usually omitting any meningful detail
2) a number of other members either throw half @§§ed or vague/generic recommendations or ask for meaningful details
3) some of the good guys that actually make and sell commercial tools take the occasion to say how their tool would work instead
4) some spammer take the occasion - possibly years later - to mention their tool - even if already mentioned (and excluded) before
5) a willing helping member doesn't notice the date of the before last post and there may be a loop to #2
6) the thread having been posted to "floats" to the "recent posts" and a number of people will read it (AGAIN), won't notice the dates of the original posts and will add some comment (good or bad) and again a loop to #2 may happen
7) the original issue likely won't be solved anyway (or at least we will miss any confirmation on what - if any - worked), the forum database will increase (a little) in size, lots of members will have lost (a liittle) time reading an old, likely irrelevant thread and entropy will win another (little) battle.

jaclaz

ReplyQuote
Posted : 16/12/2019 11:08 am
Ruiz
 Ruiz
(@ruiz)
New Member

You could try to restore the encrypted backup to a factory reset iPhone, “reset all passwords” under settings in the iPhone, and then acquire and analyze the iPhone data with whatever tools you have. Not sure if this would work - I have never tried it myself

I don't think it will work,because there is no way to secure the rest of the data in the iPhone,if the iPhone Backup Extractor doesn't work well enough,Why not reset password directly?This tool can help you.
https://www.recoverywindowspassword.com/recover-itunes-backup-password.html
One the password will be cracked,you can extract any data you want,and the content covered in this tutorial is also helpful.
https://www.wikihow.com/Restore-iPhone-from-Backup
Good luck to U.

ReplyQuote
Posted : 19/12/2019 3:10 am
cs1337
(@cs1337)
Member

You are replying to a 4 year old post.

Ain't we allowed to reply on the old post?

Sure we are.

BUT replying to an old post WITHOUT adding any relevant info is frowned upon, not only because it adds nothing, but it may also make some less attentive members reply, and then another one will reply, etc. while the OP (original poster) is already well past the original issue and most probably won't ever report if any of the suggestions have been found meaningful/useful.

BTW, in theory the scheme of a thread about a help/assistance request should be
1) the OP asks the question, hopefully providing as much details as possible
2) one or more willing helping members try to suggest a meaningful, well thought solution to the OP's problem (and nothing else)
3) the OP tries the suggested solution and reports whether it worked or not
4) one or more loops to #2 until the issue is resolved or deemed to be unresolvable

What actually happens in practice most of the time is
1) the OP asks the question, usually omitting any meningful detail
2) a number of other members either throw half @§§ed or vague/generic recommendations or ask for meaningful details
3) some of the good guys that actually make and sell commercial tools take the occasion to say how their tool would work instead
4) some spammer take the occasion - possibly years later - to mention their tool - even if already mentioned (and excluded) before
5) a willing helping member doesn't notice the date of the before last post and there may be a loop to #2
6) the thread having been posted to "floats" to the "recent posts" and a number of people will read it (AGAIN), won't notice the dates of the original posts and will add some comment (good or bad) and again a loop to #2 may happen
7) the original issue likely won't be solved anyway (or at least we will miss any confirmation on what - if any - worked), the forum database will increase (a little) in size, lots of members will have lost (a liittle) time reading an old, likely irrelevant thread and entropy will win another (little) battle.

jaclaz

You Forgot #8
8. A bunch of people will read this long post of 7 bullet points and never get those precious minutes of their life back P

ReplyQuote
Posted : 07/03/2020 3:05 am
jaclaz
(@jaclaz)
Community Legend

You Forgot #8
8. A bunch of people will read this long post of 7 bullet points and never get those precious minutes of their life back P

Still, if those people manage to get up to point #7 they will have learnt something that in the years will save them multiple times the little precious time lost today.

… one day they will thank me for those bullet points … roll

jaclaz

ReplyQuote
Posted : 07/03/2020 8:49 am
LeGioN
(@legion)
Member

… one day they will thank me for those bullet points … roll

jaclaz

Where is the button to just sticky this to the front page for ever and ever?

ReplyQuote
Posted : 07/03/2020 8:25 pm
Share: