mvt icon indicating copy to clipboard operation
mvt copied to clipboard

Backup-Decrypt not fully decrypts db file

Open tobn03 opened this issue 1 year ago • 1 comments

So, first I created a backup of my iPhone with iTunes, then I copied over to Ubuntu WSL instance and decrypted. The backup-decrypt process didn't show errors at all.

For example the Manifest.db looks like this in original encrypted backup:

æØ‘"ñ†Ä #rFo¼àp¶+J§ÂÚb7ã£Éû¨6¯ºõæJš{%&Œ€’¸%«ˆ7]Îßœ›;©yOšúQÑb½]ºõeÄýú<Gõ éE²©µâ¹¥ÎÛ%Î~¶ÆËç=…ÿÂ6Pn׆æ,‘olk>âÛºiI/@r½[y:%˜ÓgõëÉÇþ”)§6U¤ÉLƒ]«FŠ¥X\ž˜IWÊájÉ )G	YJö#…u 2v^úY‚Ò€/Ƨ#jd6qÖì9Þ\$ãΑäs©&sLú’¡{¡6¡<Ñ€á„ðyu6ã
ùå¥!Ù¥Æm­‹QPÔ÷‘ݦ¶Ëdôâöv.Ëøµé¾j­f¡†Ge;#–b£‘ØQ$Øõ¬akiBz¾,³±F.eѳ=)5„
¨¶àœº´ý`ÊŠ»Åg	±i™‚v3Zd%uEåú¦ø¸±ý˜ÐÔËm!]Þ@kÄ«å¼ÔÒÆ4P,¢DWåÑû¢$RÌOeUâòcYMa

After running backup-decrypt it's somehow decrypted but not fully and can therefore not be interpreted as a valid db file:
W.]269a97d0cc9b73ce3
d3428291209324bc795ffbf-]70ad65d08c748ed9c2ddc58738eac5d0f77a8fd9E'-]86828b2adb5c617ea241f47a1d662fec5d530fc0s'-]d8
6f5a83c9dec59f49b4f69aa512ad54fedd67d0Xt        -]b186f868a530aac4bbf06b3c25a1efcdbbe6b272aX-]4e84d7364d811624c505660a5e
effbfa5af750d7,2D}U

Using Python 3.12.3 MVT 2.5.4 (installed from source) iTunes 12.13.4.4 iPhone X --> iOS 16.7.10 --> no jailbreak device

Since my iPhone is bit older (iOS 16 is the most current version for this device) and the most current iOS version is 18 probably this can be a cause. Maybe the structure of the db file has changed a bit and now it cannot be fully interpreted anymore? May I should try an older version of MVT?

I'm little bit lost here, any help would be appreciated. Thanks!

tobn03 avatar Nov 13 '24 14:11 tobn03

Hi,

The encryption mechanisms not the code in MVT has changed since MVT as been published as far as I know. are you sure you aren't looking at the wrong folder by mistake?

Te-k avatar Jun 12 '25 18:06 Te-k