How to crack iOS device password.

Cracking iOS Passwords

I’d venture to guess that many phone and tablet passwords (really, they’re
just 4-digit PINs) can be guessed outright. A mobile device gets lost or stolen
and all the person recovering it has to do is try some basic number combinations
such as 1234, 1212, or 0000. Soon, voilà! — the system is unlocked.
Many phones and tablets running iOS, Android, and Blackberry OS are configured
to wipe the device if the incorrect password is entered X number of
times (often 10 failed attempts). A reasonable security control indeed. But what else can be done? Some commercial tools can be used to crack simple
passwords/PINs and recover information from lost or stolen devices or
devices undergoing a forensics investigation.


Elcomsoft’s iOS Forensic Toolkit (https://youtu.be/Pqq5n_vj_W8) provides
a means for demonstrating just how easily passwords/PINs on iOS-based
phones and tablets can be cracked. Here’s how:

1. Plug your iPhone/iPod/iPad into your test computer and place it into
Device Firmware Upgrade (DFU) mode.

To enter DFU mode, simply power the device off, hold down the Home
button (bottom center) and sleep button (upper corner) at the same
time for 10 seconds, and continue holding down the Home button for
another 10 seconds. The mobile device screen goes blank.

2. Load the iOS Forensic Toolkit by inserting your USB license dongle
into your test computer and running Tookit.cmd.

                                           iOS Forensic Toolkit's main page.
                                                                                                                                                       
3. Load the iOS Forensic Toolkit Ramdisk onto the mobile device by
selecting option 2 LOAD RAMDISK.

Loading the RAMDISK code allows your test computer to communicate
with the mobile device and run the tools needed for cracking the password
(among other things).

4. Select the iOS device that’s connected, as shown in Figure 10-6.
I selected option 14 because I have an iPhone 4 with GSM.
\

    Select the appropriate iOS device from the list

You now see the toolkit connect to the device and confirm a successful
load. You should see the Elcomsoft logo in the
middle of your mobile device’s screen as well.

     iOS Forensic Toolkit Ramdisk loading successfully.

5. To crack the devices password/PIN, simply select option 6 GET
PASSCODE on the main menu.
iOS Forensic Toolkit will prompt you to save the passcode to a file. You
can press Enter to accept the default of passcode.txt. The cracking
process will commence and, with any luck, the passcode will be found
and displayed.

                                Cracking a 4-digit PIN on an iPhone. 
                                                 
So, having no password for phones and tablets is bad, and a 4-digit PIN
such as this is not much better. User beware!
You can also use iOS Forensic Toolkit to copy files and even crack the
keychains to uncover the password that protects the device’s backups
in iTunes (option 5 GET KEYS).

If anything, you need to be thinking about how your business information,
which undoubtedly is present on phones and tablets, is going to
be handled in the event one of your employee’s devices is seized by law
enforcement personnel. Sure, they’ll follow their chain-of-custody procedures,
but overall, they’ll have very little incentive to ensure the information
stays protected long-term.

Be careful with how you sync your mobile devices and, especially, where the
file backups are stored. They may be off in the wild blue yonder (the cloud),
which means you have no real way to gauge how secure the personal and
business information truly is. On the other hand, when synched files and
backups are stored without a password, with a weak password, or on an unencrypted
laptop, everything is still at risk given the tools available to crack the
encryption used to protect this information. For instance, Elcomsoft’s Phone
Password Breaker (http://www.elcomsoft.com/eppb.html) can be
used to unlock backups from BlackBerry and Apple devices as well as recover
online backups made to iCloud.

Oxygen Forensic Suite (www.oxygen-forensic.com) is an alternative commercial
tool that can be used for cracking iOS-based passwords as well as
additional recovery functionality for Android-based system.com.

If have any opinion or you have any other method comment down below.
Thankyou.