Skip to content

Backup-Decrypt not fully decrypts db file #571

@tobn03

Description

@tobn03

So, first I created a backup of my iPhone with iTunes, then I copied over to Ubuntu WSL instance and decrypted.
The backup-decrypt process didn't show errors at all.

For example the Manifest.db looks like this in original encrypted backup:

æØ‘"ñ†Ä #�rFo¼àp�¶+J§ÂÚb7��ã£É�û¨6¯ºõæJ�š�{%&Œ€’¸�%«ˆ7]Îßœ›;©yOšúQÑb½]ºõeÄýú<Gõ éE²©µ�â¹¥ÎÛ%Î~�¶ÆËç=…ÿÂ6Pn׆æ,‘olk>âÛ�ºiI/@r½[��y:%��˜Ógõ��ëÉÇþ�”)§6U¤É�Lƒ]«�FŠ¥X�\ž�˜�IW�Êá�jÉ )G	YJö#…u �2�v^úY‚Ò€/Ƨ#jd6q�Öì9�Þ\$ã�Αäs©�&s�Lú’¡{¡6�¡<Ñ�€á„ð�yu��6ã
��ùå¥!Ù¥Æm­‹QPÔ�÷‘ݦ¶Ëd�ôâöv�.Ëø�µé¾j­f¡†Ge;#–��b£‘ØQ�$Øõ¬akiBz�¾,³±�F.eѳ�=)5„
¨¶�àœº´ý`ÊŠ»��Åg	±i™‚v3Z�d%uEåú¦ø�¸±ý˜Ð��Ô�Ëm!]�Þ@kÄ«å¼ÔÒÆ4P,¢DWå�Ñû�¢$RÌOe�UâòcYMa

After running backup-decrypt it's somehow decrypted but not fully and can therefore not be interpreted as a valid db file:
�W.�]�269a97d0cc9b73ce3
d3428291209324bc795ffbf�-�]�70ad65d08c748ed9c2ddc58738eac5d0f77a8fd9E'�-�]�86828b2adb5c617ea241f47a1d662fec5d530fc0s�'-�]�d8
6f5a83c9dec59f49b4f69aa512ad54fedd67d0Xt        �-�]�b186f868a530aac4bbf06b3c25a1efcdbbe6b272�a�X-�]�4e84d7364d811624c505660a5e
effbfa5af750d7,2��D���}������U

Using
Python 3.12.3
MVT 2.5.4 (installed from source)
iTunes 12.13.4.4
iPhone X --> iOS 16.7.10 --> no jailbreak device

Since my iPhone is bit older (iOS 16 is the most current version for this device) and the most current iOS version is 18 probably this can be a cause. Maybe the structure of the db file has changed a bit and now it cannot be fully interpreted anymore? May I should try an older version of MVT?

I'm little bit lost here, any help would be appreciated. Thanks!

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingiosquestionFurther information is requested

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions