EH-Net

Ethical Hacking Discussions and Related Certifications => Forensics => Topic started by: lahp on March 30, 2012, 11:53:58 AM



Title: need a good IPHONE forensic tool
Post by: lahp on March 30, 2012, 11:53:58 AM
Hi all I need a good and free(iah) forensic tool which will work with an iphone I wish to plug my iphone to my pc and scan it for deleted files :)


Title: Re: need a good IPHONE forensic tool
Post by: sil on March 30, 2012, 03:46:28 PM
viaExtract from viaForensics (https://viaforensics.com/products/viaextract/) I used that, a combination of jailbreaking and dd when I performed an analysis on a dozen phones earlier in the year. However, I also have my own Cellebrite so YMMV

http://www.tormenting.net/kixngiggles/DSCF7017.JPG (http://www.tormenting.net/kixngiggles/DSCF7017.JPG)
http://www.tormenting.net/kixngiggles/DSCF7016.JPG (http://www.tormenting.net/kixngiggles/DSCF7016.JPG)

At one point I had a total of about 12 Blackberries, 8 iPhones, 8-10 Androids and a slew of other phones. viaExtract was able to do a lot of what I needed however, when it came to deleted information, depending on the phone, I would jailbreak it, create a dd image, drag it into FTK, DFF and EnCase


Title: Re: need a good IPHONE forensic tool
Post by: millwalll on April 02, 2012, 06:44:21 AM
Yah I agree with sil there are other tools like active undelete depending on what files you trying to locate.


Title: Re: need a good IPHONE forensic tool
Post by: BillV on April 03, 2012, 07:20:05 AM
Not free (and no idea how well it works) but happened to see this in the SkyMall magazine on my flight yesterday:

http://www.skymall.com/shopping/detail.htm?pid=203635521&c=

edit: lol.. just noticed the small text at the bottom that says 'up to iOS 3.21'