O'Reilly logo

Learning iOS Forensics by Pasquale Stirparo, Mattia Epifani

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Encrypted iTunes backup cracking

As we explained in Chapter 3, Evidence Acquisition from iDevices, and in the first part of this chapter, an iTunes backup can be encrypted with a password chosen by the iDevice user. When you seize iDevice with a backup password already set or if you have a computer with a previously created encrypted backup, you can try to crack the backup using a dedicated tool. Currently, we were able to find only three software packages that can be used to crack an encrypted backup: EPPB, Passware Forensic, and iPhone Backup Unlocker.

Case study – iTunes encrypted backup cracking with EPPB

As from the product website, Elcomsoft Phone Password Breaker enables forensic access to password-protected backups for smartphones and portable ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required