Perform logical and cloud extraction of Apple iOS devices with of the most advanced mobile forensic tools on the market. Retrieve information remotely via iCloud with or without Apple ID and password, decrypt iOS backups and FileVault 2 volumes
Version: 10.11.38791Elcomsoft Phone Breaker is one of the most advanced mobile forensic tools on the market.
License: Free To Try $199.00
Operating System: Windows
Homepage: www.elcomsoft.com
Developed by:
Now with iOS 14 support, the tool supports iPhone and iPad devices as well as remote extraction from Apple iCloud, Elcomsoft Phone Breaker can perform logical and over-the-air extraction from a wide range of devices. The tool can brute-force passwords to encrypted iOS backups using built-in GPU acceleration and smart dictionary attacks, and download device backups from Apple iCloud and Microsoft OneDrive.
GPU-accelerated recovery helps break into encrypted backups faster.
Elcomsoft Phone Breaker can access evidence stored in iCloud and iCloud Drive with or without Apple ID and password.
Binary authentication tokens obtained from the users computer allow logging into Apple iCloud without a password, downloading iCloud photos, files and backups. No lengthy attacks and no physical access to an iPhone device are required. The tool supports accounts with and without two-factor authentication.
All current and legacy versions of iOS are supported.
In addition to iCloud backups, Apple synchronizes certain types of information across iOS devices via iCloud.
Health and activity information, passwords, text messages, photos, Safari history and a lot more are securely synchronized. Call logs, Safari open tabs, notes, calendars and contacts are also synchronized in nearly real time with little or no delay.
The data, including deleted items, is synced just minutes after the activity as opposed to iCloud backups being daily at best.
Elcomsoft Phone Breaker extracts and decrypts synchronized information from Apple iCloud, including end-to-end encrypted items such as iCloud Keychain, Health, Messages, Screen Time and other data.
Version 10.11.38791: iCloud protocol fixes and performance improvements.
Version 10.10: Compatibility with macOS 12 Monterey Cloud acquisition agent (for trusted device) now does not require permanent Internet connection Support for synced Apple Maps data in iCloud created with iOS 15 Support for Cellebrite UFED keychain format Improved iCloud authentication process Crash bugfix
Version 10.0: Authenticate to iCloud using trusted device.
Version 9.71: Fixed the issues downloading icloud data in professional edition 'Account info' currently cannot be downloaded in Professional edition, due to icloud protocol changes Downloading icloud photos in professional edition is now possible only if icloud for windows is installed, due to protocol changes
Version 9.70: Improved authentication into Microsoft accounts. Downloading additional data from Microsoft accounts (Apps & services timeline, recent OneDrive files list). Downloading files from OneDrive.
Version 9.65: Improved iCloud data acquisition and processing, especially on large backups and extensive synced data. Optimized cached data storage, proper cleaning of expired data for better performance. More reliable iCloud authentication and additional error handling. Other improvements and optimizations.
Version 9.64.37795: Improved iCloud authentication (now faster and more reliable). Improved iCloud download performance. Improved handling of iCloud-related errors.
Version 9.63.37410.0: Improved error logging Fixes: Downloading Account info with token authentication Downloading Safari tabs from iCloud Processing large iCloud files Incorrect backup date timezone in keychain explorer "http request error" when accessing iCloud data from some accounts