Perform logical acquisition of mobile devices running Apple iOS, Windows Phone, Windows 10 Mobile and BlackBerry 10. Retrieve information remotely via iCloud with or without Apple ID and password, decrypt iOS backups and FileVault 2 volumes.
Version: 8.32.28289Gain full access to information stored in iOS, Apple iCloud, Windows Phone and BlackBerry 10 devices!
License: Free To Try $199.00
Operating System: Windows
Homepage: www.elcomsoft.com
Developed by:
Now with full iOS 10 support, Elcomsoft Phone Breaker can recover passwords to encrypted iOS backups, download device backups from Apple iCloud and Microsoft OneDrive, and retrieve decryption keys to BlackBerry 10 backups directly from BlackBerry servers. GPU-accelerated recovery helps break into encrypted backups faster. The ability to retrieve attack Mac OS X account passwords allows to decrypt and mount FileVault 2 volumes.
Elcomsoft Phone Breaker is the only forensic tool to acquire data stored in iCloud and iCloud Drive with or without Apple ID and password.
Binary authentication tokens obtained from the users computer allow logging into Apple iCloud without a password, downloading iCloud photos, files and backups. No lengthy attacks and no physical access to an iPhone device are required! The tool supports two-step verification and two-factor authentication.
In addition to iCloud backups, Apple syncs certain types of data across iOS devices via iCloud.
Call logs, browsing history and Safari open tabs, notes, calendars and contacts are synced in nearly real time with little or no delay. The data, including deleted items, is synced just minutes after the activity as opposed to iCloud backups being daily at best.
Elcomsoft Phone Breaker extracts synced information in addition to iCloud backups.
By obtaining FileVault 2 recovery keys from the users Apple account, Elcomsoft Phone Breaker can instantly unlock and mount encrypted FileVault 2 volumes.
Elcomsoft Phone Breaker is the first GPU-accelerated tool to recover plain-text iOS backup passwords, and remains the only tool to decrypt the keychain.
ElcomSoft's patented GPU acceleration helps unlock password-protected backups 50 to 200 times faster compared to using a CPU alone. The GPU acceleration technology supports unlimited numbers of AMD and NVIDIA boards.
Version 8.32.28289: support for iOS 11 backups improved
Version 8.31.27924: Fixed the problems downloading iCloud backups (iOS 9-11)
Version 8.30: extract iMessage/SMS directly from iCloud (if synced) improved downloading files from iCloud Drive (much faster now, more data) several bugfixes and many performance and UI/UX improvements
Version 8.21: fixed iCloud SSL certificate issue
Version 8.20: new iCloud synced data: Account Info new iCloud synced data: Apple Maps new iCloud synced data: Wi-Fi connections new iCloud synced data: iBooks new iCloud synced data: : Wallet extracting FileVault2 recovery token just by Apple ID (no disk image needed) and more
Version 8.1: The new release is now able to discretely detect whether or not the Apple account being acquired has two-factor authentication enabled without triggering a push notification on user’s devices. Two-factor authentication codes delivered as SMS messages are now supported.
Version 8.0.21404: Fixed. Some application's data is not displayed in the EPB for some accounts Fixed. Deleted photos are not downloading using EPB 8.0 Added. Alerts are downloaded for iOS 11 events, which don't have alerts in the event settings
Version 6.61: Version 6.61 can now correctly identify and process tokens with lifespan restrictions. You will now be prompted to either re-authenticate with Apple ID login and password or continue using existing authentication token for the purpose of accessing synchronized data and files in iCloud Drive.
Version 6.40: EPB 6.40 adds the ability to extract deleted Safari browsing history records from iCloud, and adds full suppoort of iOS 10.2 backups (password recovery).