Plug your iPhone/iPod/iPad into your test computer and place it into Device Firmware Upgrade (DFU) mode. Load the iOS Forensic Toolkit by inserting your USB license dongle into your test computer and running Tookit.cmd.
Dec 22, 2019 Elcomsoft iOS Forensic Toolkit supports jailbroken 64-bit devices (iPhone 5s and newer) running most versions of iOS 7 through 12. Logical Acquisition with Keychain Extraction iOS Forensic Toolkit supports logical acquisition, a simpler and safer acquisition method compared to physical.
To enter DFU mode, simply power the device off, hold down the Home button (bottom center) and sleep button (upper corner) at the same time for 10 seconds, and continue holding down the Home button for another 10 seconds. The mobile device screen goes blank.
25
Load the iOS Forensic Toolkit Ramdisk onto the mobile device by selecting option 2 LOAD RAMDISK.
Loading the RAMDISK code allows your test computer to communicate with the mobile device and run the tools needed for cracking the password (among other things).
35
Select the iOS device that’s connected.
You now see the toolkit connect to the device and confirm a successful load. You should see the Elcomsoft logo in the middle of your mobile device’s screen as well.
45
Select the iOS device that’s connected.
You now see the toolkit connect to the device and confirm a successful load. You should see the Elcomsoft logo in the middle of your mobile device’s screen as well.
55
To crack the devices password/PIN, simply select option 6 GET PASSCODE on the main menu.
iOS Forensic Toolkit will prompt you to save the passcode to a file. You can press Enter to accept the default of passcode.txt. The cracking process will commence and, with any luck, the passcode will be found and displayed.
So, having no password for phones and tablets is bad, and a 4-digit PIN such as this is not much better. User beware!