Perform logical and cloud extraction of Apple iOS devices with of the most advanced mobile forensic tools on the market. Retrieve information remotely via iCloud with or without Apple ID and password, decrypt iOS backups and FileVault 2 volumes
Version: 9.60Elcomsoft Phone Breaker is one of the most advanced mobile forensic tools on the market.
License: Free To Try $199.00
Operating System: Windows
Homepage: www.elcomsoft.com
Developed by:
Supporting iPhone and iPad devices as well as remote extraction from Apple iCloud, Elcomsoft Phone Breaker can perform logical and over-the-air extraction from a wide range of devices. The tool can brute-force passwords to encrypted iOS backups using built-in GPU acceleration and smart dictionary attacks, and download device backups from Apple iCloud and Microsoft OneDrive.
GPU-accelerated recovery helps break into encrypted backups faster.
Elcomsoft Phone Breaker can access evidence stored in iCloud and iCloud Drive with or without Apple ID and password.
Binary authentication tokens obtained from the users computer allow logging into Apple iCloud without a password, downloading iCloud photos, files and backups. No lengthy attacks and no physical access to an iPhone device are required. The tool supports accounts with and without two-factor authentication.
All current and legacy versions of iOS are supported.
In addition to iCloud backups, Apple synchronizes certain types of information across iOS devices via iCloud.
Health and activity information, passwords, text messages, photos, Safari history and a lot more are securely synchronized. Call logs, Safari open tabs, notes, calendars and contacts are also synchronized in nearly real time with little or no delay.
The data, including deleted items, is synced just minutes after the activity as opposed to iCloud backups being daily at best.
Elcomsoft Phone Breaker extracts and decrypts synchronized information from Apple iCloud, including end-to-end encrypted items such as iCloud Keychain, Health, Messages, Screen Time and other data.
Version 9.60: All synced iCloud data is now grouped together and can be downloaded at once, including iCloud Photos & keychain Fixed Safari history downloading (now end-to-end encrypted) Fixed problems with decryption of some files in iCloud backups Fixed Wi-Fi information downloading from some iCloud accounts
Version 9.50: Home edition: all users with non-expured license get access to Professional edition Professional edition: only legacy authentication is possible now An ability to browse inside keychain obtained with Cellebrite UFED 4PC A warning about a risk of account blocking for non-2FA accounts And more!
Version 9.30: iCloud downloading engine supports iCloud backups for all versions of iOS up to 13.2 iCloud Drive analysis engine enables deep analysis of iCloud Drive data structures for the most comprehensive extraction Fixed the problem when accessing specific synced data categories with tokens And more!
Version 9.15: Support for iOS 13/iPadOS Beta iCloud backups Fixed some problems downloading and decrypting specific iOS 11 & 12 iCloud backups Extracting full-featured iCloud token from macOS Added parsing of notifications for iOS13 Preliminary macOS 10.15 (Catalina) support Various fixes and improvements
Version 9.10.32610: Added support for iCloud backups for iOS 11.2-12.4 (Forensic edition only) Synced iCloud data is now fully supported in Windows version Fixed the problem with EPB initialization on machines with CUDA (NVIDiA) cards iTunes backup decryption and iCloud backup downloading have been improved
Version 9.05.31064: iCloud authentication problems (occurred due to recent changes made by Apple) have been fixed
Version 9.05.30126: added support for Health data in the iCloud bug fixes and performance improvements
Version 8.32.28289: support for iOS 11 backups improved
Version 8.31.27924: Fixed the problems downloading iCloud backups (iOS 9-11)