SAD1992 / iphone-dataprotection

Automatically exported from code.google.com/p/iphone-dataprotection
0 stars 0 forks source link

Passcode Complexity either 0 or 2. Not 1 #97

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago
Hello,
I have been experimenting/modifying some modules of the dataproctection 
codebase.

I am trying to optimize the way the bruteforce method in the restored_external 
module works. 
The device is a iPhone4 - Running iOS 6.1. 

For devices that are using a complex passcode (something other than a 4 digit 
numeric only pin) it would valuable to know if the passcode is numeric only or 
a combination of alpha-numeric. 
Looking through the repository, the file bruteforce.py appears to the have a 
typdef for complexity which includes a value of 1 for numeric only.

However, it appears that the only values being returned are either 0 or 2 
(simple or complex) but not a 1.

Is anyone else seeing this? Is this a result of iOS 6 only? 

Thank You.
Frank

Original issue reported on code.google.com by frankmar...@gmail.com on 5 Mar 2013 at 7:51

GoogleCodeExporter commented 8 years ago
indeed, the bruteforce scripts get the passcode complexity from the 
EffectiveUserSettings.plist file, but the correct value is in fact stored in 
the keybag itself, in the "OpaqueStuff" dictionnary. Attached is a patch that 
gets the correct value and should work when complexity=1 (this patch only fixes 
the bruteforce command of ios_examiner, not the demo_bruteforce script).
thanks for reporting this issue.

Original comment by jean.sig...@gmail.com on 15 Mar 2013 at 12:27

Attachments:

GoogleCodeExporter commented 8 years ago
closing old issues

Original comment by jean.sig...@gmail.com on 11 Feb 2014 at 10:38