iOS Restriction Passcode Brute Force

Overview

This version of the application is written in Python, which is used to crack the restriction passcode of an iPhone/iPad takes advantage of a flaw in unencrypted backups allowing the hash and salt to be discovered.

DEPENDENCIES

This has been tested with Python 2.7 and Python 3.7

Requires requests Install with pip install requests

Usage

usage: ioscrack.py [-h] [-c] [--mojave] [-b folder]

a script to crack the restriction passcode of an iDevice

optional arguments:
-h, --help            show this help message and exit
-c, --cli             prompts user for input
-m, --mojave              helps user run script on macOS mojave
-b folder, --backup folder
                    where backups are located

How to Use

1. Clone repository

   root@kitploit:~

   git clone https://github.com/thehappydinoa/iOSRestrictionBruteForce && cd iOSRestrictionBruteForce
   

2. Make sure to use iTunes or libimobiledevice to backup the iOS device to computer

3. Run ioscrack.py

   root@kitploit:~

   python ioscrack.py
   

How It Works

Done by cracking the pbkdf2 hash with my lambda function using Passlib

1. Tries the top 20 four-digit pins

2. Tries birthdays between 1000-(50 years into the future)

3. Brute force pins from 1 to 9999

4. Adds successful pins to local database

How to Protect Against

1. Encrypt backups

2. Backup only on trusted computers

Notes

You may have trouble accessing ~/Library/Application\ Support/MobileSync/Backup/ on macOS Mojave and higher as SIP (System Integrity Protection) prevents programmatic access to that folder. The way around this is to copy the folder Backup from the above path to the iOSRestrictionBruteForce folder then run python ioscrack.py -b Backup. Or run python ioscrack.py --mojave

Contributing

Best ways to contribute

• Star it on GitHub - if you use it and like it please at least star it :)
• Promote
• Open issues
• Submit fixes and/or improvements with Pull Requests
• Add to the wiki

Promotion

Like the project? Please support to ensure continued development going forward:

• Star this repo on GitHub

• Follow me

  • Twitter
  • GitHub

Acknowledgments

• yuejd

LICENSE

MIT License