Skip to content

Fixes for iPhone 10.0.2 quirks#30

Open
ameyaonline wants to merge 1 commit into
dinosec:masterfrom
ameyaonline:bugfix/Manifest-db-encrypted-file-column
Open

Fixes for iPhone 10.0.2 quirks#30
ameyaonline wants to merge 1 commit into
dinosec:masterfrom
ameyaonline:bugfix/Manifest-db-encrypted-file-column

Conversation

@ameyaonline

Copy link
Copy Markdown

I have an iOS 10.0.2 backup that I really needed to access without having to restore it on one of the phones. This code does an amazing job but for the 10.0.2 quirks. namely:

  1. The file column in the Manifest.db is encrypted, AES128CBC, and then base64 encoded with:
    key = First 16 bytes of SHA1( backup_password + salt )
    initializationVector = "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0A\x0B\x0C\x0D\x0E\x0F"
    Added code only when version is 10.0.2 to process this column further to provide a plist.

  2. The salt for the above step comes from Properties table in Manifest.db, there is also passwordHash stored in the table. Made these available to ManifestDB & related objects for use above.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant