- 1) Jailbreak the phone
- 2) Install BSD subsystem
- 3) Install SSH to connect the BSD subsystem installed on the phone and browse (or image the phone)
- SSH (just because it's a necessity for this kind of task): http://support.suso.com/supki/SSH_Tutorial_for_Windows
- Installing Open SSH: http://www.hackthatphone.com/2x/open_ssh.html
- Using SSH with iPhone: http://www.simonblog.com/2009/05/17/how-to-use-ssh-to-transfer-file-on-iphone/
- Install and Use SSH: http://thebigboss.org/guides-iphone-ipod-ipad/install-and-use-ssh
- 4) Actually accessing the phone and doing your dirty work:
- The major link: http://modmyi.com/forums/file-mods/237321-how-iphone-data-recovery.html
- Using SSH: http://www.trickyways.com/2010/09/how-to-ssh-into-iphone-4-on-windows/
- Other useful links:
If I get around to actually doing this I'll be sure to document my process. The main thing I am trying to do is recover deleted images. I haven't found the exact technical details of this process yet. Since I have a strong interest in forensics (and a little real experience) it shouldn't be too unfamiliar. The environment, at this point, is the biggest thing I need to figure out since I'm really a Windows guy with a very old Mac history (read that to mean the early 90's laptops...really).
There were a bunch of tools that must have used an exposed API Windows could access. Via a variety of tools I was able to see a standard list of files, but, even when I tried to access the device via Access Data FTK Imager, I couldn't get the application to recognize the drive, either as physical or logical drive. So, whatever driver iPhone uses to mount to Windows for browsing does not get recognized as a regular drive in Windows. This is hardly surprising, so, I am still looking for ways to get this done without doing a jailbreak. When my mom spoke with Apple they said there is a service in California that recovers images for $900 to $1200. That suggests to me there is a way to do it, but, you more than likely have to be "in the know" with regards to iPhone software. Since the most technical thing I know about the iPhone is that I have one digging deeply into trying to reverse engineer whatever this company may be doing seemed like a waste of time. I told my mom to hire some kid getting a master's in forensics from the local university, but, she didn't feel like going that route. More details to come...more than likely.
$900 to $1200 for recovering deleted images from an iphone??? what a rip-off!!!
ReplyDeleteYeah, it seemed a little steep to me too. I figured I could drop $50 on a brand new iPhone forensics book and get a seat for some decent software for $250 and still do the same thing myself. I just don't know the steps... If I find a good book (I have one mind) I'll share what I used to get it going.
ReplyDelete