keychaindumper Not working on ios 12.1.1 jailbreak.

[Mr007jd]

How to Reproduce:

1. iphone 6.
2. ios version 12.1.1
3. uncover Jailbreak.

I uploaded keychaindumper through ssh.
./keychain_dumper
chmod +r /private/var/Keychains/keychain-2.db

Error:
Killed: 9

and i have tried other too , none works.
Please solve the issue.

[ddddyyy]

12.0.1 none works too

[NotSoEthical]

12.1.2 not works too.

[suculent]

After rebuilding from scratch, which solved the Killed 9 error.

Same with Chimera on 12.1.1. Access groups/entitlements are exported properly, but neither specific nor wildcard version fetches more than just some basic Apple stuff, no application-related credentials.

[ptoomey3]

Can you see if #38 addresses your needs?

[suculent]

I’ve injected exported entitlements, but I’m still unable to inspect Keychain from AppStore build (blackbox testing). Same when signing Dumper with same Distribution identity as the app (whitebox testing). It helps fetching at least some internet and generic passwords, but I’m not sure how those are selected. Tried both with locked/unlocked device with expectably beter results on the Unlocked one.

…

Can you see if #38 addresses your needs?

[mechanico]

That sounds uncommon, please confirm that you execute keychain-dumper with root permissions. Always make sure to have your phone unlocked. If everything works fine you should be presented with the pin-pad again once you executed the tool. Enter the device pin again, et voila.

[mechanico]

btw. it should make no difference from my point of view, if the app is downloaded from the Appstore or e.g. installed with Apple Configurator.

[suculent]

@mechanico I've been previously able to reproduce behaviour you describe. The app is either from AppStore or from XCode. PIN Pad opens, but keychain dump is visibly short and limited to Apple stuff only.

[mechanico]

@suculent can you execute the keychain_dumper command with the -s option, and paste the output here?

[Yongle-Fu]

same 12.4 to
just directly visit by
sqlite3 /path/to/keychain-2.db

[mechanico]

@yonglefu can you closer describe your workaround?

The tool worked on every device I used it so far, if you have any issues with a certain app, please let me know. I will try to assist if I have time.

[ptoomey3]

Can folks here try out the binary release in https://github.com/ptoomey3/Keychain-Dumper/releases/tag/1.0.0. I built that using Xcode 10.3 for the iOS 12.4 SDK.

[bensh]

@ptoomey3
release works on iphone 6 12.4.3
also works on 7plus 11.2.5

can I request a way to filter based on entitlement group?