■Restriction passcode attack on iOS 7

open /var/mobile/Library/Preferences/com.apple.restrictionspassword.plist

you can find this kinds:

    ＜key＞RestrictionsPasswordKey＜/key＞
    ＜data＞
    xxxxxxxxxxxxxxxxxxxxxxxxxxx=
    ＜/data＞
    ＜key＞RestrictionsPasswordSalt＜/key＞
    ＜data＞
    XXXXXX==
    ＜/data＞

convert it to hex digits

    $ key=```echo "key" | base64 -d | xxd -p```
    $ salt=```echo "salt" | base64 -d | xxd -p```

finally try matching hashed 0000~9999(PBKDF2-HMAC-SHA1, salt=salt, iterations=1000) and the given key

more info: http://hashcat.net/forum/archive/index.php?thread-2892.html

Permalink | 記事への反応(0) | 17:12

ツイートシェア