search

ptoomey3 / Keychain-Dumper

A tool to check which keychain items are available to an attacker once an iOS device has been jailbroken
BSD 3-Clause "New" or "Revised" License
1.35k stars 299 forks source link

Add SecAttrAccessControl printing functionality #72

Closed vocaeq closed 1 year ago

vocaeq commented 1 year ago

Hi,

Adding functionality to quickly check SecAccessControl flags. This allows checking whether key requires password, biometry to be set or whether it should only respect current biometry settings and remove key when biometry settings were changed.

ptoomey3 commented 1 year ago

I've had a number of folks open various issues having issues with Keychain-Dumper on newer iOS releases and such. Given the PR, I'd assume you aren't able to use it successfully? I can take a look at the change proposed here, but would also appreciate any feedback around any hurdles you've experience and what you have had to do to workaround them. Thanks!

vocaeq commented 1 year ago

@ptoomey3 It works fine on both 14.5 and 15.1, people just don't know how to use it. I remember that I've encountered similar problem to https://github.com/ptoomey3/Keychain-Dumper/issues/71 on my second pc and simple switch to Theos SDK resolved the problem. Today I compiled it both with iOS 16.1 SDK and iOS 14.5 Theos SDK without any issue, both Macs are Apple Silicon. Application works without any issue on iOS 15.1 (palera1n) and iOS 14.5 (checkra1n). Don't have any higher devices to check. Many people are reporting to have problem with compilation and the fact that if you add asterisk or too many keychain-access-groups keychain_dumper does not work - which is true and the solution is simply add less groups to entitlement and not use asterisk. I will try to add another PR with updated compilation and usage instructions soon.

Below screenshot from tool working on iOS 15.1 on iPad: keychainDumper

vocaeq commented 1 year ago

Hello @ptoomey3, Took me a while, but I finally found time to look at the issue. Watch type only applies to macOS, not iOS so I did not implement it. Additionally I modified README file, as many people have troubles with compilation and running the tool.

ptoomey3 commented 1 year ago

Nice! I'll take a look at this sometime this week and hopefully get it merged.