Perform logical and cloud extraction of Apple iOS devices with of the most advanced mobile forensic tools on the market. Retrieve information remotely via iCloud with or without Apple ID and password, decrypt iOS backups and FileVault 2 volumes
Version: 9.70Elcomsoft Phone Breaker is one of the most advanced mobile forensic tools on the market.
License: Free To Try $199.00
Operating System: Windows
Homepage: www.elcomsoft.com
Developed by:
Now with iOS 14 support, the tool supports iPhone and iPad devices as well as remote extraction from Apple iCloud, Elcomsoft Phone Breaker can perform logical and over-the-air extraction from a wide range of devices. The tool can brute-force passwords to encrypted iOS backups using built-in GPU acceleration and smart dictionary attacks, and download device backups from Apple iCloud and Microsoft OneDrive.
GPU-accelerated recovery helps break into encrypted backups faster.
Elcomsoft Phone Breaker can access evidence stored in iCloud and iCloud Drive with or without Apple ID and password.
Binary authentication tokens obtained from the users computer allow logging into Apple iCloud without a password, downloading iCloud photos, files and backups. No lengthy attacks and no physical access to an iPhone device are required. The tool supports accounts with and without two-factor authentication.
All current and legacy versions of iOS are supported.
In addition to iCloud backups, Apple synchronizes certain types of information across iOS devices via iCloud.
Health and activity information, passwords, text messages, photos, Safari history and a lot more are securely synchronized. Call logs, Safari open tabs, notes, calendars and contacts are also synchronized in nearly real time with little or no delay.
The data, including deleted items, is synced just minutes after the activity as opposed to iCloud backups being daily at best.
Elcomsoft Phone Breaker extracts and decrypts synchronized information from Apple iCloud, including end-to-end encrypted items such as iCloud Keychain, Health, Messages, Screen Time and other data.
Version 9.70: Improved authentication into Microsoft accounts. Downloading additional data from Microsoft accounts (Apps & services timeline, recent OneDrive files list). Downloading files from OneDrive.
Version 9.65: Improved iCloud data acquisition and processing, especially on large backups and extensive synced data. Optimized cached data storage, proper cleaning of expired data for better performance. More reliable iCloud authentication and additional error handling. Other improvements and optimizations.
Version 9.64.37795: Improved iCloud authentication (now faster and more reliable). Improved iCloud download performance. Improved handling of iCloud-related errors.
Version 9.63.37410.0: Improved error logging Fixes: Downloading Account info with token authentication Downloading Safari tabs from iCloud Processing large iCloud files Incorrect backup date timezone in keychain explorer "http request error" when accessing iCloud data from some accounts
Version 9.63: Fixed "http request error" when accessing iCloud data from some accounts Fixed processing large iCloud files Fixed downloading Safari tabs from iCloud Fixed incorrect backup date timezone in keychain explorer Fixed Account info downloading with token authentication Improved error logging
Version 9.61: Fixed the problem downloading icloud backups (incl. The latest ios 13.6). Added preliminary support for ios 14 (beta) icloud backups downloading. Added support for macos catalina 10.15.6. Bug fixes and performance improvements.
Version 9.60: All synced iCloud data is now grouped together and can be downloaded at once, including iCloud Photos & keychain Fixed Safari history downloading (now end-to-end encrypted) Fixed problems with decryption of some files in iCloud backups Fixed Wi-Fi information downloading from some iCloud accounts
Version 9.50: Home edition: all users with non-expured license get access to Professional edition Professional edition: only legacy authentication is possible now An ability to browse inside keychain obtained with Cellebrite UFED 4PC A warning about a risk of account blocking for non-2FA accounts And more!
Version 9.30: iCloud downloading engine supports iCloud backups for all versions of iOS up to 13.2 iCloud Drive analysis engine enables deep analysis of iCloud Drive data structures for the most comprehensive extraction Fixed the problem when accessing specific synced data categories with tokens And more!