O'Reilly logo

iPhone Forensics by Jonathan Zdziarski

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Chapter 3. Accessing the iPhone

After reading the earlier chapters of this book, you should have a rudimentary understanding of how the iPhone functions on an operating system level, and should have created a secure environment to work on your desktop without the risk of cross-contamination. In this chapter, you’ll install the forensic recovery toolkit—an open source toolkit containing tools for recovering the raw disk image of the iPhone. While some example toolkits have been provided online to complement this book, all payload and staging files are simple zip archives. This means you can easily replace the standard toolkit with your own tools, which can be compiled for the iPhone using a publicly available open source tool chain. Instructions for setting up the tool chain can be found on Jay Freeman’s website: http://www.saurik.com/id/4.

Whether you use the stock recovery tools or build your own, these tools will be the means by which you’ll gain access to the device’s operating system. You’ll access the device by installing a forensic-friendly jailbreak tool that safeguards against writes to the user partition of the device. This will, in turn, install an SSH daemon on the iPhone, allowing you to access it over a secure network connection.

Installing the Recovery Toolkit (Firmware v1.0.2–1.1.4)

The iLiberty+ program is a free tool designed by Youssef Francis and Pepijn Oomen for unlocking the iPhone/iPod and installing various payloads onto the iPhone/iPod Touch. Under normal circumstances, ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required