Forensics Level 5 100 points

Decrypt Encrypted iOS Backup

Mission

Perform encrypted-iOS-backup password verification with a safe iTunes metadata fixture. No real iPhone or backup is used. Match candidate passwords to the Manifest.plist digest, then recover the recorded message payload.

#forensics#ios#backup#encryption#hashcat

Clear it in 3 steps

Not started
  1. Start the environment

  2. Investigate the target

  3. Submit the flag