ElcomSoft iOS Forensic Toolkit 6.60 With Crak

by SadeemPC · December 5, 2020

Perform physical and logical acquisition of iPhone, iPad and iPod Touch devices. Image device file system, extract device secrets (passwords, encryption keys and protected data) and decrypt the file system image. The application allows forensic experts to physically obtain Apple devices running all versions of iOS 12 to iOS 12.1.2 inclusive. The toolkit provides file system extraction for all devices supported by jailbreak without root, and allows decrypting the key chain to extract stored passwords and credentials for authentication.

For the first time, iOS Forensic Toolkit does not use a fully autonomous jailbreak to access the file system. Instead, Toolkit uses it without roots and with a much smaller footprint than traditional jailbreaks. Unlike traditional methods, a rootless jailbreak does not overwrite the file system or alter the contents of the system partition. As a result, this type of hack without root can be completely removed once it is received, without requiring a system rebuild to restore the system partition to its original, unmodified state.

Physical data retrieval offers many advantages over all other retrieval options because it provides access to protected parts of the file system and extracts data that is not synchronized with iCloud or included in local backups. In particular, physical discovery is the only method to decrypt key chain elements that target the highest security class. Retrieval of the file system gains full access to isolated software applications and all system areas, extracts secret chats and recovers deleted messages. Downloaded emails, chat databases and secrets from two factor authentication applications, system logs and detailed location data are just a few of the things that are only available when you extract a file system.