Join Us!

HELP! iPHONE XS MAX...
 
Notifications
Clear all

HELP! iPHONE XS MAX iOS 13  

Page 1 / 2
  RSS
Kwazo
(@kwazo)
New Member

Can someone tell me if an iPhone XS Max running iOS 13 with an unknown 4-digit passcode can be forensically unlocked and examined for deleted SMS and iMessages? 

 

This topic was modified 1 month ago by Dolores
Quote
Posted : 09/07/2020 9:13 pm
Topic Tags
Picard
(@sevenofnine)
New Member

Coincidently Elcomsoft released this blog today.

https://blog.elcomsoft.com/2020/07/the-iphone-data-recovery-myth-what-you-can-and-cannot-recover/

ReplyQuote
Posted : 10/07/2020 8:32 am
Kwazo
(@kwazo)
New Member

@sevenofnine Very helpful information. Thank you mate!

ReplyQuote
Posted : 10/07/2020 7:09 pm
passcodeunlock
(@passcodeunlock)
Senior Member
Posted by: @kwazo

Can someone tell me if an iPhone XS Max running iOS 13 with an unknown 4-digit passcode can be forensically unlocked and examined for deleted SMS and iMessages? 

 

I think there is a way for unlocking it up to iOS 13.5, but it takes some time and costs some money.

Once unlocked, FFS acquisition is possible using the unc0ver jailbrake.

ReplyQuote
Posted : 10/07/2020 11:18 pm
Kwazo
(@kwazo)
New Member

@passcodeunlock Wouldn’t encryption then be the next problem? 

ReplyQuote
Posted : 11/07/2020 10:27 am
passcodeunlock
(@passcodeunlock)
Senior Member

Jailbrake means full root access, so no, encryption wouldn't be a problem for doing a full filesystem acquisition!

ReplyQuote
Posted : 11/07/2020 12:16 pm
Kwazo
(@kwazo)
New Member

@passcodeunlock Ok and your sure that method would work on the iPhone XS Max with iOS 13.5?

ReplyQuote
Posted : 11/07/2020 4:57 pm
passcodeunlock
(@passcodeunlock)
Senior Member

Yes, once the device is open and jailbroken, FFS is possible, I'm sure about that.

ReplyQuote
Posted : 11/07/2020 5:32 pm
Kwazo
(@kwazo)
New Member

@passcodeunlock Ok thank you. And would this method be able to recover all deleted SMS/iMessage and safari history? 

ReplyQuote
Posted : 11/07/2020 5:54 pm
passcodeunlock
(@passcodeunlock)
Senior Member

I'm not from the weather channel to predict things.

The only way to find out is actually trying it ?!

ReplyQuote
Posted : 11/07/2020 6:04 pm
jeeper liked
Kwazo
(@kwazo)
New Member

@passcodeunlock Thanks for your help. I’m about to spend almost £2000 for a private company to do this so I’m just trying to get as much information from diffrent sources as possible. Looks like it’s going to just be a gamble. Anyway I appreciate your information

ReplyQuote
Posted : 11/07/2020 6:08 pm
passcodeunlock
(@passcodeunlock)
Senior Member

If you are LE, GreyKey could be used to solve your problem.

If by the private company you mean Cellebrite Advanced Services, that will do it.

All other options are only a waste of your time and money.

ReplyQuote
Posted : 11/07/2020 6:43 pm
Kwazo
(@kwazo)
New Member

Using a company called MSAB. I’ve had very mixed reviews 

ReplyQuote
Posted : 12/07/2020 9:31 am
fissa
(@fissa)
Junior Member

No need to worry. They are a big compagny and will deliver.

 

ReplyQuote
Posted : 12/07/2020 10:39 am
Kwazo
(@kwazo)
New Member

@fissa I’m sure they are really good at what they do I’m just worried that the setup and the security/encryption  measures on this type of device/iOS system is going to be difficult for any company looking to recover deleted data

ReplyQuote
Posted : 12/07/2020 3:51 pm
Page 1 / 2
Share: