golang

HOWTO decrypt iOS 10+ backups with irestore

This is the second post in a blog series describing how analysts can decrypt iOS 10 and later backups that are encrypted. These techniques assume you know the password and do not implement brute force password cracking. The first tool we examine is iRestore by Steve Dunham.

Continue reading