HELP! iPHONE XS MAX...
 
Notifications
Clear all

HELP! iPHONE XS MAX iOS 13

23 Posts
4 Users
3 Likes
2,983 Views
Kwazo
(@kwazo)
Posts: 22
Eminent Member
Topic starter
 

Can someone tell me if an iPhone XS Max running iOS 13 with an unknown 4-digit passcode can be forensically unlocked and examined for deleted SMS and iMessages? 

 

This topic was modified 2 years ago by Dolores
 
Posted : 09/07/2020 9:13 pm
Topic Tags
Picard
(@sevenofnine)
Posts: 17
Active Member
 

Coincidently Elcomsoft released this blog today.

https://blog.elcomsoft.com/2020/07/the-iphone-data-recovery-myth-what-you-can-and-cannot-recover/

 
Posted : 10/07/2020 8:32 am
Kwazo
(@kwazo)
Posts: 22
Eminent Member
Topic starter
 

@sevenofnine Very helpful information. Thank you mate!

 
Posted : 10/07/2020 7:09 pm
passcodeunlock
(@passcodeunlock)
Posts: 792
Prominent Member
 
Posted by: @kwazo

Can someone tell me if an iPhone XS Max running iOS 13 with an unknown 4-digit passcode can be forensically unlocked and examined for deleted SMS and iMessages? 

 

I think there is a way for unlocking it up to iOS 13.5, but it takes some time and costs some money.

Once unlocked, FFS acquisition is possible using the unc0ver jailbrake.

 
Posted : 10/07/2020 11:18 pm
Kwazo
(@kwazo)
Posts: 22
Eminent Member
Topic starter
 

@passcodeunlock Wouldn’t encryption then be the next problem? 

 
Posted : 11/07/2020 10:27 am
passcodeunlock
(@passcodeunlock)
Posts: 792
Prominent Member
 

Jailbrake means full root access, so no, encryption wouldn't be a problem for doing a full filesystem acquisition!

 
Posted : 11/07/2020 12:16 pm
Kwazo
(@kwazo)
Posts: 22
Eminent Member
Topic starter
 

@passcodeunlock Ok and your sure that method would work on the iPhone XS Max with iOS 13.5?

 
Posted : 11/07/2020 4:57 pm
passcodeunlock
(@passcodeunlock)
Posts: 792
Prominent Member
 

Yes, once the device is open and jailbroken, FFS is possible, I'm sure about that.

 
Posted : 11/07/2020 5:32 pm
Kwazo
(@kwazo)
Posts: 22
Eminent Member
Topic starter
 

@passcodeunlock Ok thank you. And would this method be able to recover all deleted SMS/iMessage and safari history? 

 
Posted : 11/07/2020 5:54 pm
passcodeunlock
(@passcodeunlock)
Posts: 792
Prominent Member
 

I'm not from the weather channel to predict things.

The only way to find out is actually trying it ?!

 
Posted : 11/07/2020 6:04 pm
jeeper reacted
Kwazo
(@kwazo)
Posts: 22
Eminent Member
Topic starter
 

@passcodeunlock Thanks for your help. I’m about to spend almost £2000 for a private company to do this so I’m just trying to get as much information from diffrent sources as possible. Looks like it’s going to just be a gamble. Anyway I appreciate your information

 
Posted : 11/07/2020 6:08 pm
passcodeunlock
(@passcodeunlock)
Posts: 792
Prominent Member
 

If you are LE, GreyKey could be used to solve your problem.

If by the private company you mean Cellebrite Advanced Services, that will do it.

All other options are only a waste of your time and money.

 
Posted : 11/07/2020 6:43 pm
Kwazo
(@kwazo)
Posts: 22
Eminent Member
Topic starter
 

Using a company called MSAB. I’ve had very mixed reviews 

 
Posted : 12/07/2020 9:31 am
fissa
(@fissa)
Posts: 27
Eminent Member
 

No need to worry. They are a big compagny and will deliver.

 

 
Posted : 12/07/2020 10:39 am
Kwazo
(@kwazo)
Posts: 22
Eminent Member
Topic starter
 

@fissa I’m sure they are really good at what they do I’m just worried that the setup and the security/encryption  measures on this type of device/iOS system is going to be difficult for any company looking to recover deleted data

 
Posted : 12/07/2020 3:51 pm
Page 1 / 2
Share:
Share to...