Backup-Decrypt not fully decrypts db file
So, first I created a backup of my iPhone with iTunes, then I copied over to Ubuntu WSL instance and decrypted. The backup-decrypt process didn't show errors at all.
For example the Manifest.db looks like this in original encrypted backup:
æØ‘"ñ†Ä #rFo¼àp¶+J§ÂÚb7ã£Éû¨6¯ºõæJš{%&Œ€’¸%«ˆ7]Îßœ›;©yOšúQÑb½]ºõeÄýú<Gõ éE²©µâ¹¥ÎÛ%Î~¶ÆËç=…ÿÂ6Pn׆æ,‘olk>âÛºiI/@r½[y:%˜ÓgõëÉÇþ”)§6U¤ÉLƒ]«FŠ¥X\ž˜IWÊájÉ )G YJö#…u 2v^úY‚Ò€/Ƨ#jd6qÖì9Þ\$ãΑäs©&sLú’¡{¡6¡<Ñ€á„ðyu6ã
ùå¥!Ù¥Æm‹QPÔ÷‘ݦ¶Ëdôâöv.Ëøµé¾jf¡†Ge;#–b£‘ØQ$Øõ¬akiBz¾,³±F.eѳ=)5„
¨¶àœº´ý`ÊŠ»Åg ±i™‚v3Zd%uEåú¦ø¸±ý˜ÐÔËm!]Þ@kÄ«å¼ÔÒÆ4P,¢DWåÑû¢$RÌOeUâòcYMa
After running backup-decrypt it's somehow decrypted but not fully and can therefore not be interpreted as a valid db file:
W.]269a97d0cc9b73ce3
d3428291209324bc795ffbf-]70ad65d08c748ed9c2ddc58738eac5d0f77a8fd9E'-]86828b2adb5c617ea241f47a1d662fec5d530fc0s'-]d8
6f5a83c9dec59f49b4f69aa512ad54fedd67d0Xt -]b186f868a530aac4bbf06b3c25a1efcdbbe6b272aX-]4e84d7364d811624c505660a5e
effbfa5af750d7,2D}U
Using Python 3.12.3 MVT 2.5.4 (installed from source) iTunes 12.13.4.4 iPhone X --> iOS 16.7.10 --> no jailbreak device
Since my iPhone is bit older (iOS 16 is the most current version for this device) and the most current iOS version is 18 probably this can be a cause. Maybe the structure of the db file has changed a bit and now it cannot be fully interpreted anymore? May I should try an older version of MVT?
I'm little bit lost here, any help would be appreciated. Thanks!
Hi,
The encryption mechanisms not the code in MVT has changed since MVT as been published as far as I know. are you sure you aren't looking at the wrong folder by mistake?