Elcomsoft Phone Breaker Tool
Recover Password-Protected BlackBerry and Apple Backups
Elcomsoft Phone Breaker enables forensic access to password-protected backups for smartphones and portable devices based on RIM BlackBerry and Apple iOS platforms. The password recovery tool supports all Blackberry smartphones as well as Apple devices running iOS including iPhone, iPad and iPod Touch devices of all generations released to date, including the iPhone 7 Plus and iOS 10.
Retrieve Cloud Backups: Apple iCloud and Windows Live
Cloud acquisition is an alternative way of retrieving information stored in mobile backups produced by Apple iOS, and the only method to explore Windows Phone 8 and Windows 10 Mobile devices. Elcomsoft Phone Breaker can retrieve information from Apple iCloud and Windows Live! services provided that original user credentials for that account are known.
Online backups can be acquired by forensic specialists without having the original iOS or Windows Phone device in hands. All that’s needed to access online backups stored in the cloud service are the original user’s credentials including Apple ID or Live ID accompanied with the corresponding password.
Two-Step Verification and Two-Factor Authentication
The Forensic edition of Elcomsoft Phone Breaker enables over-the-air acquisition of iCloud data without having the original Apple ID and password. Password-free access to iCloud data is made possible via the use of a binary authentication token extracted from the user’s computer.
Elcomsoft Phone Breaker supports accounts with Apple's two-step verification as well as the new two-factor authentication. Access to the second authentication factor such as a trusted device or recovery key is required. You will only need to use it once as Elcomsoft Phone Breaker can save authentication credentials for future sessions.
Note: at this time, Microsoft Live! accounts that use two-factor authentication are not supported.
Note: this functionality is only available in the Forensic edition
Accessing iCloud without Login and Password
If the user’s Apple ID and password are not available, Elcomsoft Phone Breaker can use a binary authentication token created by Apple iCloud Control Panel in order to login to iCloud and retrieve information. The use of authentication tokens allows bypassing two-factor authentication even if no access to the secondary authentication factor is available.
The Forensic edition of Elcomsoft Phone Breaker comes with the ability to acquire and use authentication tokens from Windows and Mac OS X computers, hard drives or forensic disk images. Authentication tokens for all users of that computer can be extracted, including domain users (providing that their system logon passwords are known). The tools are available in both Windows and Mac versions of the tool.
Authentication tokens are obtained from the suspect’s computer on which iCloud Control Panel is installed. In order for the token to be created, the user must have been logged in to iCloud Control Panel on that PC at the time of acquisition. Authentication tokens can be extracted from live systems (a running Mac OS or Windows PC) or retrieved from users’ hard drives or forensic disk images.
iCloud Control Panel is an integral part of Mac OS systems, and installs separately on Windows PCs. Most users will stay logged in to their iCloud Control Panel for syncing contacts, passwords (iCloud Keychain), notes, photo stream and other types of data without re-typing their password. All this means that the probability of obtaining authentication tokens from PCs with iCloud Control Panel installed is high.
Note: this functionality is only available in the Forensic edition
Decrypt FileVault 2 Volumes
FileVault 2 is a whole-disk encryption scheme used in Apple’s Mac OS X. FileVault 2 protects the entire startup partition with secure 256-bit XTS-AES encryption.
If the user forgets their account password, or if the encrypted volume is moved to a different computer, a FileVault 2 can be unlocked with a special Recovery Key. If the user logs in with their Apple ID credentials, the Recovery Key can be saved into the user’s iCloud account. Should the user forget their password, the system can automatically use the Recovery Key to unlock the encrypted volume. It is important to note that Apple does not allow the end user to view or extract FileVault 2 recovery keys from iCloud.
Elcomsoft Phone Breaker can extract FileVault 2 recovery keys from the user’s iCloud account, and use these keys to decrypt encrypted disk images. Valid authentication credentials (Apple ID/password or iCloud authentication token) as well as volume identification information extracted from the FileVault-encrypted disk image are required.
Note: this functionality is only available in the Forensic edition
Synced Data
Starting with iOS 9, iPhones automatically sync certain types of data with iCloud in real time. Elcomsoft Phone Breaker automatically downloads synced data including call logs, contacts, notes, calendars as well as Web browsing activities including Safari history (including deleted records), bookmarks and open tabs. Unlike iCloud backups that may or may not be created on daily basis, synced information is pushed to Apple servers just minutes after the corresponding activity has taken place. Once uploaded, synced data can be retained for months with no option for the end user to clear the data or disable the syncing.
iCloud Files
In addition to iCloud backups, Elcomsoft Phone Breaker can download files stored in the user’s iCloud account such as documents or spreadsheets, third-party application data (such as WhatsApp own backups, 1Password database, Passbook/Wallet data etc.), and more. Files from a synced Mac such as Desktop, Documents, and Trash can be extracted. Some of this data (mostly documents) is available using the iCloud feature on Windows and macOS systems, but most files are only accessible using Elcomsoft Phone Breaker. The exact set of data available may depend on the version of iOS installed, iCloud synchronization settings, the list of applications installed on the devices connected to the given account, and the options set in these applications. Note that there is no email notification sent by Apple when downloading files from iCloud.
Note: this functionality is only available in the Forensic edition
iCloud Photo Library
Apple’s iCloud Photo Library is designed to help users store and synchronize media files between multiple devices. If iCloud Photo Library is enabled, media files are no longer saved to iOS iCloud backups. As a result, acquiring iCloud backups or downloading files stored in iCloud Drive does not automatically provide access to media files stored in the iCloud Photo Library.
Elcomsoft Phone Breaker can extract photos and videos stored in the user’s iCloud Photo Library. In addition to existing files, Elcomsoft Phone Breaker can extract media files that have been deleted from the Library during the past 30 days. Selective downloads are possible by specifying which user-created albums to download.
Unlock Apple and BlackBerry Backups
The new tool recovers the original plain-text passwords protecting encrypted backups for Apple and BlackBerry devices (running BlackBerry 7 OS or earlier). The backups contain address books, call logs, SMS archives, calendars and other organizer data, camera snapshots, voice mail and email account settings, applications, Web browsing history and cache.
Note: this feature is available in Windows version only.
Decrypt BlackBerry 10 Backups
Local backups produced by BlackBerry Link are always encrypted with a highly secure hardware-specific encryption key, effectively preventing forensic analytic tools from processing BlackBerry 10 data. As even the original use has no control over the password protecting these backups, the only possible way of using these backups was restoring them onto a BlackBerry device with the same BlackBerry ID, making forensic analysis of these backups extremely cumbersome.
Elcomsoft Phone Breaker can effectively decrypt BlackBerry 10 backups produced with BlackBerry Link if the user’s BlackBerry ID and password are known.
Note: this functionality is only available in the Forensic edition
Selective Access to iCloud Backups
Downloading a large backup for the very first time can potentially take hours. Subsequent updates are incremental, and occur much faster. If speed is essential, Elcomsoft Phone Breaker offers the ability to quickly acquire select information and skip data that’s taking the longest to download (such as music and videos). Information such as messages, attachments, phone settings, call logs, address books, notes, calendars, email account settings, camera roll, and many other pieces of information can be pre-selected and downloaded in just minutes, providing investigators with near real-time access to essential information.
Perform Enhanced Forensic Analysis on iOS Devices
ElcomSoft offers the complete toolkit for performing forensic analysis of encrypted user data stored in certain iPhone/iPad/iPod devices. The toolkit allows eligible customers acquiring bit-to-bit images of devices’ file systems, extracting phone secrets (passcodes, passwords, and encryption keys) and decrypting the file system dump. Access to most information is provided in real-time. In addition to Elcomsoft Phone Breaker, the toolkit includes the ability to decrypt images of devices’ file systems, as well as a free tool that can extract the encrypted file system out of the device in raw form. More information is available on a dedicated Web page.
Features and Benefits
Gain access to information stored in password-protected iPhone, iPad, iPod Touch and Blackberry backups
Decrypt iPhone and BlackBerry backups with known passwords
Decrypt BlackBerry 10 backups with known BlackBerry ID and password
Recover passwords to BlackBerry Password Keeper and Wallet applications
Instantly decrypt BlackBerry Password Keeper for BlackBerry 10 containers
Recover BlackBerry device password[1]
Recover master password to 1Password containers extracted from Dropbox, local and cloud iOS backups
Extract FileVault 2 recovery keys and use them to decrypt FileVault 2 containers without lengthy attacks
Read and decrypt keychain data (email account passwords, Wi-Fi passwords, and passwords you enter into websites and some other applications)
iOS: view saved passwords and authentication tokens including Apple ID password or token
iOS: access passwords/tokens to email accounts, instant messengers and social networks
Save time with cost-efficient GPU acceleration when one or several AMD or NVIDIA video cards are installed[2]
Perform advanced dictionary attacks with highly customizable permutations
Perform offline attacks without Apple iTunes or BlackBerry Desktop Software installed
Recover passwords to backups for original and ‘jailbroken’ iPhone (all models up to iPhone 7 and 7 Plus), iPad (all generations incl. iPad Pro), and iPod Touch (all generations) devices
Download Apple iCloud backups (including iOS 10) with Apple ID and password, or authentication tokens (no hidden fees: unlimited extractions with no subscriptions or additional fees)
Extract synced data such as call logs, contacts, notes, calendars as well as Web browsing activities including Safari history and open tabs.
Locate and extract iCloud authentication tokens
Download iCloud Photo Library including photos during the past 30 days
Download extra data from Apple iCloud accounts (files from iCloud Drive, incl. ones not accessible by operating system)
Compatible with all versions of iTunes, iOS (up to the latest iOS 10), BlackBerry Link and BlackBerry Desktop Software*
Note: password recovery features are available in Windows version only.
GPU Acceleration
ElcomSoft offers a highly efficient, cost-effective solution to lengthy attacks by dramatically increasing the speed of password recovery when one or more supported video cards are present. The company’s patented GPU acceleration reduces the time required to recover iPhone/iPad/iPod and BlackBerry backup passwords by orders of magnitude. The latest generation of ElcomSoft GPU acceleration technology supports unlimited numbers of AMD or NVIDIA boards such as NVIDIA 600/700/800/900/1000-series and AMD 6000/7000/R5/R7/R9-series. ElcomSoft GPU acceleration provides true supercomputer performance at consumer prices.
To make GPU acceleration cost-effective, ElcomSoft implemented support for multiple diverse GPU acceleration units running at the same time. Effectively, this budget-friendly solution allows mixing multiple generations of compatible video cards, extending existing systems by adding new acceleration hardware instead of replacing.
Note: iOS 10.0 backups can be broken much faster with about 6,000,000 passwords per second on a mainstream CPU. iOS 10.1 reverts to the old algorithm, while iOS 10.2 and newer have very slow recovery speeds of several hundred passwords per second using a GPU
Note: not applicable to MacOS X version
Advanced Attacks
Elcomsoft Phone Breaker supports an advanced dictionary attack with customizable permutations. According to multiple security researches, the majority of users choose meaningful, dictionary-based passwords that are easier for them to remember. Elcomsoft Phone Breaker is able to recover such passwords and their variations quickly and efficiently no matter which language they are. Elcomsoft Phone Breaker supports a variety of permutations of dictionary words, trying hundreds of variants for each dictionary word to ensure the best possible chance to recover the password.
Note: not applicable to MacOS X version
Extract and Decrypt Stored Passwords
In Apple iPhone devices, passwords to email accounts, Web sites, and certain third-party software are stored securely in keychains that are encrypted with hardware keys unique to each individual device. Prior to the release of iOS 4, keychains remained encrypted with a device-specific hardware key; but with the release of Apple iOS 4, the keychains are stored encrypted only with backup’s master password. Elcomsoft Phone Breaker is able to instantly read and decrypt all keychain data including stored passwords if a backup password is known or recovered. iOS 5/6/7/8/9/10 are supported as well.
Please note that decrypting keychain from a local (iTunes) password-protected backup only requires the password to backup itself. For local non-encrypted backups and backups downloaded from iCloud, decrypting the keychain is only possible for jailbroken 32-bit devices, and only if you have physical access to the device and can obtain the encryption key (0x835, 'securityd') using Elcomsoft iOS Forensic Toolkit.
Offline Backups
Elcomsoft Phone Breaker does not use Apple iTunes or BlackBerry Desktop Software, and does not need to have those products installed. All password recovery operations are performed offline.
Password Managers
Elcomsoft Phone Breaker can decrypt encrypted containers created by popular password managers including BlackBerry Password Keeper and Wallet for BlackBerry, as well as 1Password, allowing investigators accessing all of the suspect’s stored passwords.
Access Information Stored in BlackBerry Password Keeper and Wallet
A great deal of highly valuable information is stored in BlackBerry Password Keeper and BlackBerry Wallet apps (prior to BlackBerry 10). Users' login credentials with Web site passwords are kept in BlackBerry Password Keeper to provide mobile users with faster login experience. BlackBerry Wallet stores users' financial information including credit card numbers, billing and shipping addresses, loyalty points numbers, etc.
Information in BlackBerry Password Keeper and Wallet has an extra layer of protection. The data is securely encrypted, protected with individual master passwords. Elcomsoft Phone Password Breaker can quickly[3] recover the master passwords, and unlock access to users’ passwords and financial information stored in Password Keeper and Wallet apps.
Instant Decryption of BlackBerry Password Keeper (BlackBerry 10)
Previous versions of BlackBerry Password Keeper used a user-specified master password to protect the password container. Recent versions of BlackBerry Password Keeper employ an escrow key to achieve the same. Elcomsoft Phone Breaker can extract the escrow key and instantly decrypt BlackBerry Password Keeper containers extracted from BlackBerry 10 backups.
Note: BlackBerry 10 backups themselves are also protected and must be decrypted with Elcomsoft Phone Breaker prior to targeting BlackBerry Password Keeper.
1Password
1Password is a popular cross-platform password manager available for Mac OS X, Windows, Android and iOS. 1Password containers are protected with a user-defined master password. Elcomsoft Phone Breaker can attack master passwords and decrypt 1Password containers retrieved from Dropbox, iTunes of iCloud backups.
Recover BlackBerry Device Password
The recovery of BlackBerry (prior to verison 10) password is possible if the user-selectable Device Password security option is enabled to encrypt media card data. By analyzing information stored on encrypted media cards, Elcomsoft Phone Password Breaker can try millions password combinations per second, recovering a fairly long 7-character password in a matter of hours. With the ability to recover the device password, ElcomSoft does what's been long considered impossible, once again making Elcomsoft Phone Password Breaker the world's first.
Note: this feature is available in Windows version only.
Compatibility Chart
Have activation key
Please set the software compatibility
Install as administrator
Home(Win) Pro(Win/Mac) Forensic(Win/Mac)
Support for iOS from 3.x to 10.3 ✓ ✓ ✓
Support for all iPhone models up to iPhone 6 Plus ✓ ✓ ✓
Support for iPod Touch and iPad ✓ ✓ ✓
Support for all BlackBerry devices (except PlayBook) ✓ ✓ ✓
Recover password to iTunes backup ✓ ✓/- ✓/-
Number of CPUs supported 2 32/- 32/-
Number of GPUs supported 1 8/- 8/-
Explore iOS keychain data - ✓ ✓
Decrypt iPhone/iPad/iPod backup (with known password) - ✓ ✓
Recover BlackBerry (prior to BB 10) backup passwords ✓ ✓/- ✓/-
Decrypt BlackBerry (prior to BB 10) backup (with known password) - ✓ ✓
Recover BlackBerry Password Keeper passwords - ✓/- ✓/-
Recover BlackBerry Wallet passwords - ✓/- ✓/-
Recover BlackBerry Device Password - ✓/- ✓/-
Decrypt BlackBerry (prior to 10) SD card - ✓ ✓
Download backups from iCloud with Apple ID and password - ✓ ✓
Extract synced data from iCloud with Apple ID and password - ✓ ✓
Download iCloud Photo Library - ✓ ✓
Access iCloud with authentication tokens - - ✓
Extract synced data from iCloud with authentication tokens - - ✓
Support for iCloud accounts with two-step verification - - ✓
Download extra data from iCloud and iCloud Drive - - ✓
Extract Windows Phone data from Cloud (with known credentials) - ✓ ✓
Decrypt BlackBerry 10 backup (with known BB ID password) - - ✓
Get FileVault recovery key from iCloud and decrypt protected disks - - ✓
If an option to encrypt the media card (with password) is enabled
Installing latest display driver is recommended when using GPU acceleration on NVIDIA or AMD cards.
Several hundred thousand passwords per second can be tried depending on PC hardware
Credits
Download Here
Recover Password-Protected BlackBerry and Apple Backups
Elcomsoft Phone Breaker enables forensic access to password-protected backups for smartphones and portable devices based on RIM BlackBerry and Apple iOS platforms. The password recovery tool supports all Blackberry smartphones as well as Apple devices running iOS including iPhone, iPad and iPod Touch devices of all generations released to date, including the iPhone 7 Plus and iOS 10.
Retrieve Cloud Backups: Apple iCloud and Windows Live
Cloud acquisition is an alternative way of retrieving information stored in mobile backups produced by Apple iOS, and the only method to explore Windows Phone 8 and Windows 10 Mobile devices. Elcomsoft Phone Breaker can retrieve information from Apple iCloud and Windows Live! services provided that original user credentials for that account are known.
Online backups can be acquired by forensic specialists without having the original iOS or Windows Phone device in hands. All that’s needed to access online backups stored in the cloud service are the original user’s credentials including Apple ID or Live ID accompanied with the corresponding password.
Two-Step Verification and Two-Factor Authentication
The Forensic edition of Elcomsoft Phone Breaker enables over-the-air acquisition of iCloud data without having the original Apple ID and password. Password-free access to iCloud data is made possible via the use of a binary authentication token extracted from the user’s computer.
Elcomsoft Phone Breaker supports accounts with Apple's two-step verification as well as the new two-factor authentication. Access to the second authentication factor such as a trusted device or recovery key is required. You will only need to use it once as Elcomsoft Phone Breaker can save authentication credentials for future sessions.
Note: at this time, Microsoft Live! accounts that use two-factor authentication are not supported.
Note: this functionality is only available in the Forensic edition
Accessing iCloud without Login and Password
If the user’s Apple ID and password are not available, Elcomsoft Phone Breaker can use a binary authentication token created by Apple iCloud Control Panel in order to login to iCloud and retrieve information. The use of authentication tokens allows bypassing two-factor authentication even if no access to the secondary authentication factor is available.
The Forensic edition of Elcomsoft Phone Breaker comes with the ability to acquire and use authentication tokens from Windows and Mac OS X computers, hard drives or forensic disk images. Authentication tokens for all users of that computer can be extracted, including domain users (providing that their system logon passwords are known). The tools are available in both Windows and Mac versions of the tool.
Authentication tokens are obtained from the suspect’s computer on which iCloud Control Panel is installed. In order for the token to be created, the user must have been logged in to iCloud Control Panel on that PC at the time of acquisition. Authentication tokens can be extracted from live systems (a running Mac OS or Windows PC) or retrieved from users’ hard drives or forensic disk images.
iCloud Control Panel is an integral part of Mac OS systems, and installs separately on Windows PCs. Most users will stay logged in to their iCloud Control Panel for syncing contacts, passwords (iCloud Keychain), notes, photo stream and other types of data without re-typing their password. All this means that the probability of obtaining authentication tokens from PCs with iCloud Control Panel installed is high.
Note: this functionality is only available in the Forensic edition
Decrypt FileVault 2 Volumes
FileVault 2 is a whole-disk encryption scheme used in Apple’s Mac OS X. FileVault 2 protects the entire startup partition with secure 256-bit XTS-AES encryption.
If the user forgets their account password, or if the encrypted volume is moved to a different computer, a FileVault 2 can be unlocked with a special Recovery Key. If the user logs in with their Apple ID credentials, the Recovery Key can be saved into the user’s iCloud account. Should the user forget their password, the system can automatically use the Recovery Key to unlock the encrypted volume. It is important to note that Apple does not allow the end user to view or extract FileVault 2 recovery keys from iCloud.
Elcomsoft Phone Breaker can extract FileVault 2 recovery keys from the user’s iCloud account, and use these keys to decrypt encrypted disk images. Valid authentication credentials (Apple ID/password or iCloud authentication token) as well as volume identification information extracted from the FileVault-encrypted disk image are required.
Note: this functionality is only available in the Forensic edition
Synced Data
Starting with iOS 9, iPhones automatically sync certain types of data with iCloud in real time. Elcomsoft Phone Breaker automatically downloads synced data including call logs, contacts, notes, calendars as well as Web browsing activities including Safari history (including deleted records), bookmarks and open tabs. Unlike iCloud backups that may or may not be created on daily basis, synced information is pushed to Apple servers just minutes after the corresponding activity has taken place. Once uploaded, synced data can be retained for months with no option for the end user to clear the data or disable the syncing.
iCloud Files
In addition to iCloud backups, Elcomsoft Phone Breaker can download files stored in the user’s iCloud account such as documents or spreadsheets, third-party application data (such as WhatsApp own backups, 1Password database, Passbook/Wallet data etc.), and more. Files from a synced Mac such as Desktop, Documents, and Trash can be extracted. Some of this data (mostly documents) is available using the iCloud feature on Windows and macOS systems, but most files are only accessible using Elcomsoft Phone Breaker. The exact set of data available may depend on the version of iOS installed, iCloud synchronization settings, the list of applications installed on the devices connected to the given account, and the options set in these applications. Note that there is no email notification sent by Apple when downloading files from iCloud.
Note: this functionality is only available in the Forensic edition
iCloud Photo Library
Apple’s iCloud Photo Library is designed to help users store and synchronize media files between multiple devices. If iCloud Photo Library is enabled, media files are no longer saved to iOS iCloud backups. As a result, acquiring iCloud backups or downloading files stored in iCloud Drive does not automatically provide access to media files stored in the iCloud Photo Library.
Elcomsoft Phone Breaker can extract photos and videos stored in the user’s iCloud Photo Library. In addition to existing files, Elcomsoft Phone Breaker can extract media files that have been deleted from the Library during the past 30 days. Selective downloads are possible by specifying which user-created albums to download.
Unlock Apple and BlackBerry Backups
The new tool recovers the original plain-text passwords protecting encrypted backups for Apple and BlackBerry devices (running BlackBerry 7 OS or earlier). The backups contain address books, call logs, SMS archives, calendars and other organizer data, camera snapshots, voice mail and email account settings, applications, Web browsing history and cache.
Note: this feature is available in Windows version only.
Decrypt BlackBerry 10 Backups
Local backups produced by BlackBerry Link are always encrypted with a highly secure hardware-specific encryption key, effectively preventing forensic analytic tools from processing BlackBerry 10 data. As even the original use has no control over the password protecting these backups, the only possible way of using these backups was restoring them onto a BlackBerry device with the same BlackBerry ID, making forensic analysis of these backups extremely cumbersome.
Elcomsoft Phone Breaker can effectively decrypt BlackBerry 10 backups produced with BlackBerry Link if the user’s BlackBerry ID and password are known.
Note: this functionality is only available in the Forensic edition
Selective Access to iCloud Backups
Downloading a large backup for the very first time can potentially take hours. Subsequent updates are incremental, and occur much faster. If speed is essential, Elcomsoft Phone Breaker offers the ability to quickly acquire select information and skip data that’s taking the longest to download (such as music and videos). Information such as messages, attachments, phone settings, call logs, address books, notes, calendars, email account settings, camera roll, and many other pieces of information can be pre-selected and downloaded in just minutes, providing investigators with near real-time access to essential information.
Perform Enhanced Forensic Analysis on iOS Devices
ElcomSoft offers the complete toolkit for performing forensic analysis of encrypted user data stored in certain iPhone/iPad/iPod devices. The toolkit allows eligible customers acquiring bit-to-bit images of devices’ file systems, extracting phone secrets (passcodes, passwords, and encryption keys) and decrypting the file system dump. Access to most information is provided in real-time. In addition to Elcomsoft Phone Breaker, the toolkit includes the ability to decrypt images of devices’ file systems, as well as a free tool that can extract the encrypted file system out of the device in raw form. More information is available on a dedicated Web page.
Features and Benefits
Gain access to information stored in password-protected iPhone, iPad, iPod Touch and Blackberry backups
Decrypt iPhone and BlackBerry backups with known passwords
Decrypt BlackBerry 10 backups with known BlackBerry ID and password
Recover passwords to BlackBerry Password Keeper and Wallet applications
Instantly decrypt BlackBerry Password Keeper for BlackBerry 10 containers
Recover BlackBerry device password[1]
Recover master password to 1Password containers extracted from Dropbox, local and cloud iOS backups
Extract FileVault 2 recovery keys and use them to decrypt FileVault 2 containers without lengthy attacks
Read and decrypt keychain data (email account passwords, Wi-Fi passwords, and passwords you enter into websites and some other applications)
iOS: view saved passwords and authentication tokens including Apple ID password or token
iOS: access passwords/tokens to email accounts, instant messengers and social networks
Save time with cost-efficient GPU acceleration when one or several AMD or NVIDIA video cards are installed[2]
Perform advanced dictionary attacks with highly customizable permutations
Perform offline attacks without Apple iTunes or BlackBerry Desktop Software installed
Recover passwords to backups for original and ‘jailbroken’ iPhone (all models up to iPhone 7 and 7 Plus), iPad (all generations incl. iPad Pro), and iPod Touch (all generations) devices
Download Apple iCloud backups (including iOS 10) with Apple ID and password, or authentication tokens (no hidden fees: unlimited extractions with no subscriptions or additional fees)
Extract synced data such as call logs, contacts, notes, calendars as well as Web browsing activities including Safari history and open tabs.
Locate and extract iCloud authentication tokens
Download iCloud Photo Library including photos during the past 30 days
Download extra data from Apple iCloud accounts (files from iCloud Drive, incl. ones not accessible by operating system)
Compatible with all versions of iTunes, iOS (up to the latest iOS 10), BlackBerry Link and BlackBerry Desktop Software*
Note: password recovery features are available in Windows version only.
GPU Acceleration
ElcomSoft offers a highly efficient, cost-effective solution to lengthy attacks by dramatically increasing the speed of password recovery when one or more supported video cards are present. The company’s patented GPU acceleration reduces the time required to recover iPhone/iPad/iPod and BlackBerry backup passwords by orders of magnitude. The latest generation of ElcomSoft GPU acceleration technology supports unlimited numbers of AMD or NVIDIA boards such as NVIDIA 600/700/800/900/1000-series and AMD 6000/7000/R5/R7/R9-series. ElcomSoft GPU acceleration provides true supercomputer performance at consumer prices.
To make GPU acceleration cost-effective, ElcomSoft implemented support for multiple diverse GPU acceleration units running at the same time. Effectively, this budget-friendly solution allows mixing multiple generations of compatible video cards, extending existing systems by adding new acceleration hardware instead of replacing.
Note: iOS 10.0 backups can be broken much faster with about 6,000,000 passwords per second on a mainstream CPU. iOS 10.1 reverts to the old algorithm, while iOS 10.2 and newer have very slow recovery speeds of several hundred passwords per second using a GPU
Note: not applicable to MacOS X version
Advanced Attacks
Elcomsoft Phone Breaker supports an advanced dictionary attack with customizable permutations. According to multiple security researches, the majority of users choose meaningful, dictionary-based passwords that are easier for them to remember. Elcomsoft Phone Breaker is able to recover such passwords and their variations quickly and efficiently no matter which language they are. Elcomsoft Phone Breaker supports a variety of permutations of dictionary words, trying hundreds of variants for each dictionary word to ensure the best possible chance to recover the password.
Note: not applicable to MacOS X version
Extract and Decrypt Stored Passwords
In Apple iPhone devices, passwords to email accounts, Web sites, and certain third-party software are stored securely in keychains that are encrypted with hardware keys unique to each individual device. Prior to the release of iOS 4, keychains remained encrypted with a device-specific hardware key; but with the release of Apple iOS 4, the keychains are stored encrypted only with backup’s master password. Elcomsoft Phone Breaker is able to instantly read and decrypt all keychain data including stored passwords if a backup password is known or recovered. iOS 5/6/7/8/9/10 are supported as well.
Please note that decrypting keychain from a local (iTunes) password-protected backup only requires the password to backup itself. For local non-encrypted backups and backups downloaded from iCloud, decrypting the keychain is only possible for jailbroken 32-bit devices, and only if you have physical access to the device and can obtain the encryption key (0x835, 'securityd') using Elcomsoft iOS Forensic Toolkit.
Offline Backups
Elcomsoft Phone Breaker does not use Apple iTunes or BlackBerry Desktop Software, and does not need to have those products installed. All password recovery operations are performed offline.
Password Managers
Elcomsoft Phone Breaker can decrypt encrypted containers created by popular password managers including BlackBerry Password Keeper and Wallet for BlackBerry, as well as 1Password, allowing investigators accessing all of the suspect’s stored passwords.
Access Information Stored in BlackBerry Password Keeper and Wallet
A great deal of highly valuable information is stored in BlackBerry Password Keeper and BlackBerry Wallet apps (prior to BlackBerry 10). Users' login credentials with Web site passwords are kept in BlackBerry Password Keeper to provide mobile users with faster login experience. BlackBerry Wallet stores users' financial information including credit card numbers, billing and shipping addresses, loyalty points numbers, etc.
Information in BlackBerry Password Keeper and Wallet has an extra layer of protection. The data is securely encrypted, protected with individual master passwords. Elcomsoft Phone Password Breaker can quickly[3] recover the master passwords, and unlock access to users’ passwords and financial information stored in Password Keeper and Wallet apps.
Instant Decryption of BlackBerry Password Keeper (BlackBerry 10)
Previous versions of BlackBerry Password Keeper used a user-specified master password to protect the password container. Recent versions of BlackBerry Password Keeper employ an escrow key to achieve the same. Elcomsoft Phone Breaker can extract the escrow key and instantly decrypt BlackBerry Password Keeper containers extracted from BlackBerry 10 backups.
Note: BlackBerry 10 backups themselves are also protected and must be decrypted with Elcomsoft Phone Breaker prior to targeting BlackBerry Password Keeper.
1Password
1Password is a popular cross-platform password manager available for Mac OS X, Windows, Android and iOS. 1Password containers are protected with a user-defined master password. Elcomsoft Phone Breaker can attack master passwords and decrypt 1Password containers retrieved from Dropbox, iTunes of iCloud backups.
Recover BlackBerry Device Password
The recovery of BlackBerry (prior to verison 10) password is possible if the user-selectable Device Password security option is enabled to encrypt media card data. By analyzing information stored on encrypted media cards, Elcomsoft Phone Password Breaker can try millions password combinations per second, recovering a fairly long 7-character password in a matter of hours. With the ability to recover the device password, ElcomSoft does what's been long considered impossible, once again making Elcomsoft Phone Password Breaker the world's first.
Note: this feature is available in Windows version only.
Compatibility Chart
Have activation key
Please set the software compatibility
Install as administrator
Home(Win) Pro(Win/Mac) Forensic(Win/Mac)
Support for iOS from 3.x to 10.3 ✓ ✓ ✓
Support for all iPhone models up to iPhone 6 Plus ✓ ✓ ✓
Support for iPod Touch and iPad ✓ ✓ ✓
Support for all BlackBerry devices (except PlayBook) ✓ ✓ ✓
Recover password to iTunes backup ✓ ✓/- ✓/-
Number of CPUs supported 2 32/- 32/-
Number of GPUs supported 1 8/- 8/-
Explore iOS keychain data - ✓ ✓
Decrypt iPhone/iPad/iPod backup (with known password) - ✓ ✓
Recover BlackBerry (prior to BB 10) backup passwords ✓ ✓/- ✓/-
Decrypt BlackBerry (prior to BB 10) backup (with known password) - ✓ ✓
Recover BlackBerry Password Keeper passwords - ✓/- ✓/-
Recover BlackBerry Wallet passwords - ✓/- ✓/-
Recover BlackBerry Device Password - ✓/- ✓/-
Decrypt BlackBerry (prior to 10) SD card - ✓ ✓
Download backups from iCloud with Apple ID and password - ✓ ✓
Extract synced data from iCloud with Apple ID and password - ✓ ✓
Download iCloud Photo Library - ✓ ✓
Access iCloud with authentication tokens - - ✓
Extract synced data from iCloud with authentication tokens - - ✓
Support for iCloud accounts with two-step verification - - ✓
Download extra data from iCloud and iCloud Drive - - ✓
Extract Windows Phone data from Cloud (with known credentials) - ✓ ✓
Decrypt BlackBerry 10 backup (with known BB ID password) - - ✓
Get FileVault recovery key from iCloud and decrypt protected disks - - ✓
If an option to encrypt the media card (with password) is enabled
Installing latest display driver is recommended when using GPU acceleration on NVIDIA or AMD cards.
Several hundred thousand passwords per second can be tried depending on PC hardware
Credits
Download Here
0 Comments