We have an iTunes backup brute-forcing solution ( Elcomsoft Distributed Password Recovery), which is very flexible on pattern-based password search. There were just a few passwords totally different from those ones, though also predictable. Here, ‘a’ is a small letter, followed by a fixed 9-character part that is always the same (a mix of small and capital letters and digits), sometimes followed by a single digit. Long story short, they soon realized that most passwords were built using exactly the same simple pattern: You still cannot view all of them at once, nor can you export them, so this is time-consuming manual work. Once you know the passcode, you can view the passwords stored in the device keychain (well, most of them). They decided to start with a kind of social engineering first. They did have the screen lock passcode, so it wasn’t a matter of life and death, but resetting the backup password is always the last resort with lots of negative consequences. No known exploits, no jailbreaks, and no known workarounds. If was a new device model a recent version of iOS. He had an iTunes-style backup of a device full of critical evidence, but the password locked him out of the data. I was recently contacted by an old partner from the other side of the world who asked for assistance in an urgent case. Have an iPhone backup but cannot get around the password protection? I have a story to share.
0 kommentar(er)
