Join Us!

Locked iPhone6 with...
 
Notifications
Clear all

Locked iPhone6 with Checkr1n  

  RSS
Arbab
(@arbab)
New Member

Hi,

Is there any way to bypass the message on iOS device "Unlock iPhone to use accessories".

We need to bypass iPhone 6 passcode.

We tried the following method.

To bypass iPhone 6 with OS version between (12.3–13.3), we inject Checkr1n in DFU mode. After successfully injected checkr1n, we tired to connect iPhone with UFED,XRY or with Linux. we got connection issue. message popup on iPhone like "Unlock iPhone to use accessories".

We test 3 different test devices iPhone 6s, 6 and iphone 8 (Locked with bypass). after injected Checkr1n in DFU mode XRY, UFED are able to detect and do the extraction,without any trust relation popup. "As the devices are passcode locked.
BUT

After one hour if we try to do extraction again on these three test iOS deivices with XRY,UFED or via linux. message popup. "Unlock iPhone to use accessories".

Conclusions. within one hour of the locked iOS device, iPhone code can be bypass and able to do full file system extraction via UFED, or XRY.

My Question is, "is there any way to bypass the message "Unlock iPhone to use accessories". on locked devices or disable the usb accessories in setting>>Touch id and passcode >>USB Accessories.

Thanks

Quote
Posted : 12/01/2020 5:05 pm
Igor_Michailov
(@igor_michailov)
Senior Member

BFU Extraction Forensic Analysis of Locked and Disabled iPhones

https://blog.elcomsoft.com/2019/12/bfu-extraction-forensic-analysis-of-locked-and-disabled-iphones/

ReplyQuote
Posted : 12/01/2020 7:53 pm
the_Grinch
(@the_grinch)
Active Member

Checkra1n won't allow you to do a full extraction without the passcode. It will get you some data, but if you don't have the passcode for the device your stuck.

ReplyQuote
Posted : 14/01/2020 8:03 pm
passcodeunlock
(@passcodeunlock)
Senior Member

@OP I sent you a PM.

ReplyQuote
Posted : 15/01/2020 1:57 pm
Arbab
(@arbab)
New Member

@OP I sent you a PM.

Thanks for the kind offer, we will update you soon,

Second We are able to jailbreak the device using Checkr1n v0.9.5. Which has the ability to remove this message "Unlock iPhone to use accessories".

We are able to do BFU extraction with UFED but we got very less data, i.e locations, wifi address, files. Now the challenge is '' How to decrypt the full file system, or to get more data .i.e application data, contacts, calls, sms etc''.

ReplyQuote
Posted : 15/01/2020 10:40 pm
the_Grinch
(@the_grinch)
Active Member

Hook it up to GrayKey or Cellebrite's solution. As previously posted without the passcode you aren't going to get the data you are looking for.

ReplyQuote
Posted : 15/01/2020 10:52 pm
passcodeunlock
(@passcodeunlock)
Senior Member

If it is Before First Unlock, you ge some data, but you are wasting your time, it won't help you get the desired data. Please read the link posted previously by Igor

https://blog.elcomsoft.com/2019/12/bfu-extraction-forensic-analysis-of-locked-and-disabled-iphones/

If you really want to move forward and the case is important enough, contact me.

ReplyQuote
Posted : 16/01/2020 11:48 am
Share: