1. msft.guy's Avatar
    Just took a look at the dmg and looks like all file _data_ is encrypted.. Note that when you mount it on the phone, you can read decrypted files, but obviously not the ones that were deleted. So, if your phone doesn't boot but data partition is mountable in SSH, you can copy those files, but if you've deleted files or the partition doesn't mount, you seem to be screwed, at least until someone figures how to decode the file data.
    2010-11-26 06:56 PM
  2. domfactor's Avatar
    Yeah I am thinking the encryption situation might be whats going on...im going to try some other tools like scalpel to see if i cqan get anything from them. Any other ideas?
    2010-11-29 05:21 PM
  3. Estefan's Avatar
    I'm in same situation "3Gs iOS4" with encrypted user partition image.
    I'v heard something about /private/var/keybags/systembag.kb
    that keeps the keys.

    any idea how to use it?
    2010-12-01 04:57 PM
  4. saintx7's Avatar
    i'm using iphone 4 os 4.1
    i already tried anything
    for transfering img file to

    Code:
    dd if=/dev/rdisk0s2 bs=4096 | ssh [email protected] 'dd of=iphone_rdisk0s2_4096.img'

    and

    dd if=/dev/rdisk0s2 bs=4096KB | ssh [email protected] 'dd of=iphone_rdisk0s2_4096KB.img'

    and

    dd if=/dev/rdisk0s2s1 bs=4096KB | ssh [email protected] 'dd of=iphone_rdisk0s2s1_4096KB.img'

    and

    dd if=/dev/disk0 | ssh <username>@<computer-ip> 'dd of=iphone-dump.img'

    but when i input the password
    always got "setgid : invalid argument"

    anyone can help me please???
    thanks
    2010-12-12 06:53 PM
  5. kmarker's Avatar
    Saintx7, iOS 4.1 uses disk encryption. Even if you are able to get an img file. You will not be able to recover files from the image file.
    2010-12-14 08:40 PM
  6. saintx7's Avatar
    Saintx7, iOS 4.1 uses disk encryption. Even if you are able to get an img file. You will not be able to recover files from the image file.
    so any solution for me??
    thanks
    2010-12-15 07:26 AM
  7. 143voltron's Avatar
    i'm using iphone 4 os 4.1
    i already tried anything
    for transfering img file to

    Code:
    dd if=/dev/rdisk0s2 bs=4096 | ssh [email protected] 'dd of=iphone_rdisk0s2_4096.img'

    and

    dd if=/dev/rdisk0s2 bs=4096KB | ssh [email protected] 'dd of=iphone_rdisk0s2_4096KB.img'

    and

    dd if=/dev/rdisk0s2s1 bs=4096KB | ssh [email protected] 'dd of=iphone_rdisk0s2s1_4096KB.img'

    and

    dd if=/dev/disk0 | ssh <username>@<computer-ip> 'dd of=iphone-dump.img'

    but when i input the password
    always got "setgid : invalid argument"

    anyone can help me please???
    thanks
    there is a website that helps you extract/recover your date using the same information. I tried half of it last night and plan to do the other half tonight. The tutorial is great, they go screen shot by screen shot.
    I'm not sure if I can post a link, but google is your friend.
    2010-12-22 11:27 PM
  8. saintx7's Avatar
    there is a website that helps you extract/recover your date using the same information. I tried half of it last night and plan to do the other half tonight. The tutorial is great, they go screen shot by screen shot.
    I'm not sure if I can post a link, but google is your friend.
    please give me the link for that web via private message please
    i already tried find in google but no solution for my problem
    thanks
    2010-12-23 05:12 AM
  9. 143voltron's Avatar
    please give me the link for that web via private message please
    i already tried find in google but no solution for my problem
    thanks
    I've sent it over to you. Keep us posted pls.
    2010-12-23 09:36 PM
  10. itpronet's Avatar
    I've sent it over to you. Keep us posted pls.
    i've restore the stock 4.2.1 firmware after failed the untethered 4.2.1 jailbreak with redsn0w and i just discover that the ssh was not communicating properly last night was due to my two seperate WLAN connection.

    i would really really appreciate if you can also pm me the link for the method of extracting 4.2.1 deleted files. thanks x 100,0000000...

    hope u had a nice christmas and wish u a very happy new year.
    2010-12-27 07:21 AM
  11. 143voltron's Avatar
    I have found a program similar to Iphone backup extractor!!!!!!!

    I'm a window user and usually there are backup extractor out there for mac's for free. Until I found this program, I have been searching the web for weeks and weeks to retrieve pics of my newborn and son that I had lost. I have read blogs, threads dating back to 2008, I was so determine that my wife thought that I was cheating on her with the pc lol.

    I know this is silly but to some of us...pictures are priceless.

    There is no commands needed, don't have to use mobile terminal just download and find your last backup.

    Don't forget to hit the thank you button if I have helped you.
    Last edited by 143voltron; 2010-12-28 at 08:08 PM. Reason: spelling
    2010-12-28 07:59 PM
  12. saintx7's Avatar
    I have found a program similar to Iphone backup extractor!!!!!!!

    I'm a window user and usually there are backup extractor out there for mac's for free. Until I found this program, I have been searching the web for weeks and weeks to retrieve pics of my newborn and son that I had lost. I have read blogs, threads dating back to 2008, I was so determine that my wife thought that I was cheating on her with the pc lol.

    I know this is silly but to some of us...pictures are priceless.

    There is no commands needed, don't have to use mobile terminal just download and find your last backup.

    Don't forget to hit the thank you button if I have helped you.
    yes i agree with u pictures is priceless
    but I've never done backups
    is it possible??
    please give me the link for the program thanks
    2010-12-29 02:53 PM
  13. Jenom's Avatar
    there is a website that helps you extract/recover your date using the same information. I tried half of it last night and plan to do the other half tonight. The tutorial is great, they go screen shot by screen shot.
    I'm not sure if I can post a link, but google is your friend.
    Could I please have that link as well? I have a 14GB image from /dev/rdisk0s2s1 with a bs of 1M but photorec can't find anything at all from it, when I go for just /dev/rdisk0 it gets to about 1GB then the phone reboots. I have an iPhone 4 with 4.2.1, Sigh.

    Many thanks and I'll keep everyone posted.
    2010-12-30 05:30 PM
  14. odi3's Avatar
    I am having difficulties recovering my pictures from my iphone 3g image as well. Photorec just found text, pngs (junk ones) as well as other random junk files.

    Currently this is where im at:
    Jailbroke my iphone
    installed cydia
    installed unbuntu onto a bootable flash drive
    ssh from iphone into desktop
    used this command: dd if=/dev/disk0 | ssh [email protected]<computer-ip> 'dd of=/media/<HARDRIVE_NAME>/iphone-dump.img'

    tried photorec, but didnt find anything useful

    Any suggestions on what to try next to recover photos?

    Also, if anyone are having difficulty with any of the things i have done, msg me and ill be happy to answer.


    Thanks, Ill also update with my progress.
    2010-12-30 07:13 PM
  15. arj154's Avatar
    is there any sort of prompt after you enter your password? it just seems to be hanging atm. I entered the dd if=/dev/rdisk0s2s1 bs=4096KB | ssh <user>@<comp ip here> 'dd of=iphone_rdisk0s2s1_4096KB.img' etc command just now on a iphone 3gs (old bootrom) 4.2.1
    2010-12-30 08:15 PM
  16. odi3's Avatar
    From my experience, thats a good thing!

    Your iphone will hang while the file is being transferred.

    When the iphone is done transferring a prompt will show up, it took about 4 hours or so for my 8gig image.

    Also, i was able to refresh the file on my desktop as it was being sent and see the disk image increasing in size.

    Hope this helps!
    2010-12-30 08:20 PM
  17. arj154's Avatar
    From my experience, thats a good thing!

    Your iphone will hang while the file is being transferred.

    When the iphone is done transferring a prompt will show up, it took about 4 hours or so for my 8gig image.

    Also, i was able to refresh the file on my desktop as it was being sent and see the disk image increasing in size.

    Hope this helps!
    ah good good where is the image being dumped to? im using a cygwin SSH server on windows to dump the image

    edit: found out where its being dumped to, for those using cygwin, its being dumped to cygwin/var/empty
    Last edited by arj154; 2010-12-30 at 08:42 PM.
    2010-12-30 08:23 PM
  18. odi3's Avatar
    On my transfer, i specified it to 'dd of=/media/<HARDRIVE_NAME>/iphone-dump.img'

    which was my windows hard drive mounted in the media folder

    since you didnt specify a location, im not really sure.. my guess would be your home folder in linux? (I wasnt able to do this because i didnt have the room on my usb key to have my 8gb image from iphone and all the ubuntu stuff, my usb ubuntu drive was only 8 gigs in total)


    I noticed when oyu sent your file u added bs=4096KB, whats that for? and is it needed?
    2010-12-30 08:34 PM
  19. arj154's Avatar
    On my transfer, i specified it to 'dd of=/media/<HARDRIVE_NAME>/iphone-dump.img'

    which was my windows hard drive mounted in the media folder

    since you didnt specify a location, im not really sure.. my guess would be your home folder in linux? (I wasnt able to do this because i didnt have the room on my usb key to have my 8gb image from iphone and all the ubuntu stuff, my usb ubuntu drive was only 8 gigs in total)


    I noticed when oyu sent your file u added bs=4096KB, whats that for? and is it needed?
    im not really sure tbh, i just saw it on the first post of page 12, it may be unnecessary.
    2010-12-30 08:43 PM
  20. odi3's Avatar
    I think if you did a restore, your data is gone (along with mine)

    I have used about 6 different programs to recover the data and none offer any of the old pics that were on the phone.

    Crud
    2011-01-03 01:49 AM
270 ... 7891011 ...
LINK TO POST COPIED TO CLIPBOARD