KeyChainDumper Updated #8

carterlasalle · 2021-09-21T21:31:07Z

It looks like keychain dumper has been updated! With ios15 released, what is the plan for this?

tarbaII · 2021-09-21T22:46:54Z

I'll look into it, I actually just jailbroke my phone again a couple days ago for the first time in months, so good timing :)
Can't promise I'll have time anytime soon, but within 10 days or so I'll probably have a response for you with some info.

carterlasalle · 2021-09-23T05:51:45Z

I'll look into it, I actually just jailbroke my phone again a couple days ago for the first time in months, so good timing :)
Can't promise I'll have time anytime soon, but within 10 days or so I'll probably have a response for you with some info.

Thank you so much. I just think this is a really cool project!

tarbaII · 2021-09-25T01:07:03Z

@RocketNinja15 After about 2 hours of fiddling around with it, I finally got it to work on the latest version, iOS 14.8. I'm really excited! I'll probably have iOS 12 through 14 support finished in the next week or two. Won't be too difficult because the groundwork is already there, just need to tweak some things.

Alyxs-iPhone:/usr/bin root# keychain_dumper > /private/var/mobile/kdout.txt

...
Generic Password
----------------
Service: ParentalControls
Account: user
Entitlement Group: apple
Label: (null)
Accessible Attribute: kSecAttrAccessibleWhenUnlockedThisDeviceOnly, protection level 5
Description: (null)
Comment: (null)
Synchronizable: 0
Generic Field: (null)
Keychain Data: 2458
...

As you can see, it successfully got the Screen Time passcode I set on my phone, which was 2458. I was a little relieved because I'd actually forgotten what I'd set it to 😆

carterlasalle · 2021-09-25T23:51:18Z

@RocketNinja15 After about 2 hours of fiddling around with it, I finally got it to work on the latest version, iOS 14.8. I'm really excited! I'll probably have iOS 12 through 14 support finished in the next week or two. Won't be too difficult because the groundwork is already there, just need to tweak some things.
Alyxs-iPhone:/usr/bin root# keychain_dumper > /private/var/mobile/kdout.txt

...
Generic Password
----------------
Service: ParentalControls
Account: user
Entitlement Group: apple
Label: (null)
Accessible Attribute: kSecAttrAccessibleWhenUnlockedThisDeviceOnly, protection level 5
Description: (null)
Comment: (null)
Synchronizable: 0
Generic Field: (null)
Keychain Data: 2458
...
As you can see, it successfully got the Screen Time passcode I set on my phone, which was 2458. I was a little relieved because I'd actually forgotten what I'd set it to 😆

That's Awesome @alyxferrari ! I just recently jailbroke my old iPad on ios 13 because my phone is on ios 15. I was running the .jar and it kept erroring on http://alyxferrari.github.io/iosrr/keychain_dumper. I'm assuming that's due to your fiddling around :) I'm excited to see where this project goes!

tarbaII · 2021-09-26T00:08:29Z

Oh wait my bad I deleted my GitHub pages repository a couple days ago, I forgot that this project uses it... oops-
It'll be fixed with the iOS 14 update

carterlasalle · 2021-09-26T16:45:40Z

Oh wait my bad I deleted my GitHub pages repository a couple of days ago, I forgot that this project uses it... oops-
It'll be fixed with the iOS 14 update

OK, no worries @alyxferrari! Is there a way to download manually, if not then no worries, I can't wait for the ios 14 :)

tarbaII · 2021-09-28T00:00:13Z

@RocketNinja15 Can you try this?
https://drive.google.com/file/d/1BoWkK7hhQ-NSaG21oARNjzvhvLRz0WGa/view?usp=sharing

carterlasalle · 2021-09-28T02:06:18Z

@RocketNinja15 Can you try this?
https://drive.google.com/file/d/1BoWkK7hhQ-NSaG21oARNjzvhvLRz0WGa/view?usp=sharing

@alyxferrari where should I put this, in the same directory as the other jar, or should I open this

tarbaII · 2021-09-28T02:12:01Z

Make a new folder somewhere and put the JAR I sent in there. Then just run it like normal

carterlasalle · 2021-09-28T03:18:22Z

Make a new folder somewhere and put the JAR I sent in there. Then just run it like normal

@alyxferrari I almost got it, but....

Unable to reach a settlement: [diffie-hellman-group1-sha1, diffie-hellman-group-exchange-sha1] and [curve25519-sha256@libssh.org, ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521, diffie-hellman-group-exchange-sha256, diffie-hellman-group14-sha1]

tarbaII · 2021-09-28T03:20:24Z

Can you run it from the command prompt and take a screenshot of the output?

cd C:/Folder/That/Has/The/Jar
java -jar putjarfilenamehere.jar

Replace the folder and file names of course

carterlasalle · 2021-09-28T03:25:11Z

Can you run it from the command prompt and take a screenshot of the output?

cd C:/Folder/That/Has/The/Jar
java -jar putjarfilenamehere.jar

Replace the folder and file names of course

@alyxferrari https://hastebin.com/idibokokac.properties

I pasted it in there :)

tarbaII · 2021-09-28T03:30:08Z

Sorry for the intrusive question, but do you live outside the US? I read a while ago that some countries consider certain cryptography extensions weapons lol

carterlasalle · 2021-09-28T03:34:04Z

Sorry for the intrusive question, but do you live outside the US? I read a while ago that some countries consider certain cryptography implementations weapons lol

Haha, nope! I live in the US mainland @alyxferrari What do you see that is causing the issue?

tarbaII · 2021-09-28T03:36:02Z

Well then I have no clue why it's failing to get instances for whatever crypto extensions it's trying to access. I'll do some troubleshooting tomorrow and get back to you

carterlasalle · 2021-09-28T03:46:25Z

Well then I have no clue why it's failing to get instances for whatever crypto extensions it's trying to access. I'll do some troubleshooting tomorrow and get back to you

so what is the exact problem, is it trying to download something, connect to the web, decrypt something... what is is it trying to do and getting hung in @alyxferrari

tarbaII · 2021-09-28T03:48:59Z

SSH connections are encrypted and the OS isn't letting it access the crypto extensions it needs to encrypt and decrypt the connection data

carterlasalle · 2021-09-28T04:03:07Z

SSH connections are encrypted and the OS isn't letting it access the crypto extensions it needs to encrypt and decrypt the connection data

C:\Users\Rocket\Downloads\keychain-dumper>ssh root@MYIPThe authenticity of host 'MYIP (MYIP)' can't be established.RSA key fingerprint is SHA256:MYKEY.Are you sure you want to continue connecting (yes/no/[fingerprint])? yes Warning: Permanently added 'MYIP' (RSA) to the list of known hosts.root@MYIP4's password:Rockets-iPad:~ root# ssh

@alyxferrari i can connect though terminal......

tarbaII · 2021-09-28T04:04:27Z

The SSH library I'm using is probably doing something weird. I'll look into it in the morning

carterlasalle · 2021-09-28T04:07:06Z

The SSH library I'm using is probably doing something weird. I'll look into it in the morning

Yea, no worries, sleep is precious :)
I am going to be unavailable until Thursday so have a good week! Thank you so much for your support @alyxferrari !

carterlasalle · 2021-09-30T20:45:31Z

@alyxferrari I am back by the way, so you need me to test anything 👍

tarbaII · 2021-10-01T02:13:23Z

Did some research and apparently the crypto error is my fault because the JAR is unsigned. I'll still have to look into how to fix that. I'm also trying to get an iOS 12 device of mine working so I can test on it. I'll let you know when I have something for you.

carterlasalle · 2021-10-01T15:34:30Z

Did some research and apparently the crypto error is my fault because the JAR is unsigned. I'll still have to look into how to fix that. I'm also trying to get an iOS 12 device of mine working so I can test on it. I'll let you know when I have something for you.

@alyxferrari
https://docs.oracle.com/javase/tutorial/deployment/jar/signindex.html

Is it this?

tarbaII · 2021-10-01T16:50:48Z

Probably although I'm not sure. I'll have to look more into it.

tarbaII · 2021-10-01T16:55:13Z

@RocketNinja15 Could you uninstall your current version of Java and install the OpenJDK? It seems like only official Oracle versions of Java have this problem. Another tester and I didn't have this problem because we were both using the OpenJDK.

https://adoptium.net/ choose either JDK 11 (what I would recommend) or JDK 17

carterlasalle · 2021-10-05T23:56:10Z

@RocketNinja15 Could you uninstall your current version of Java and install the OpenJDK? It seems like only official Oracle versions of Java have this problem. Another tester and I didn't have this problem because we were both using the OpenJDK.

https://adoptium.net/ choose either JDK 11 (what I would recommend) or JDK 17

@alyxferrari progress.... but

tarbaII · 2021-10-06T00:08:02Z

Can you take a screenshot of the console or the main iOS-RR log window? Thank you for your testing btw :)

carterlasalle · 2021-10-06T00:33:48Z

Can you take a screenshot of the console or the main iOS-RR log window? Thank you for your testing btw :)

Yup @alyxferrari
https://hastebin.com/tepuqevayu.apache

tarbaII · 2021-10-06T01:11:18Z

Can you install either NewTerm or Filza and see if the folder /User (its a shortcut, not a real folder) exists?

If it does, can you take a screenshot of its directory structure?

carterlasalle · 2021-10-07T03:54:43Z

Can you install either NewTerm or Filza and see if the folder /User (its a shortcut, not a real folder) exists?

If it does, can you take a screenshot of its directory structure?

Yup! @alyxferrari

tarbaII · 2021-10-07T12:46:03Z

Hmm, that's a little odd that it's saying it doesn't exist then. I'll try hardcoding the actual path (/private/var/mobile) instead of using shortcuts.

carterlasalle · 2021-10-07T15:39:43Z

Hmm, that's a little odd that it's saying it doesn't exist then. I'll try hardcoding the actual path (/private/var/mobile) instead of using shortcuts.

@alyxferrari how should I do that? Is it saying that the /User/ folder doesn’t exist or the keychain-dumper folder doesn’t exist in the /User/ folder

tarbaII · 2021-10-07T15:48:37Z

I would have to do it, give me a couple hours and I'll send a build to you

carterlasalle · 2021-10-07T20:15:43Z

I would have to do it, give me a couple hours and I'll send a build to you

@alyxferrari no worries! No rush at all, I just want to help :)

carterlasalle · 2021-10-28T16:54:44Z

I would have to do it, give me a couple hours and I'll send a build to you

hey, let me know if you want me to test anything! @alyxxxx

tarbaII · 2021-10-28T20:37:05Z

Kinda forgot about this lol, I realized it was possible to port it to a native iOS app and started working on that but hit a roadblock. I'll update the Java version as soon as I can

carterlasalle · 2021-11-01T16:39:28Z

Kinda forgot about this lol, I realized it was possible to port it to a native iOS app and started working on that but hit a roadblock. I'll update the Java version as soon as I can

Hahaha, no worries @alyxxxx !

carterlasalle · 2021-11-12T05:44:19Z

@alyxxxx lmk if i can test anything.

I am running my pc boot camped to windows from Mac, and i use the checkra1n jailbreak on Mac then go to windows. IDK if that’s the issue

carterlasalle · 2022-05-23T18:10:10Z

@alyxferrari its been fixed for me for a while :)

carterlasalle · 2022-12-09T05:05:16Z

@tarbaII There is an issue with keychain dumper url

tarbaII added enhancement New feature or request question Further information is requested labels Sep 21, 2021

tarbaII added this to the v1.0 stable milestone Sep 21, 2021

tarbaII closed this as completed Sep 25, 2021

tarbaII linked a pull request Sep 27, 2021 that will close this issue

Update for iOS 13+ #9

Draft

tarbaII reopened this Sep 28, 2021

KeyChainDumper Updated #8

KeyChainDumper Updated #8

Comments

carterlasalle commented Sep 21, 2021

tarbaII commented Sep 21, 2021 • edited Loading

carterlasalle commented Sep 23, 2021 • edited Loading

tarbaII commented Sep 25, 2021 • edited Loading

carterlasalle commented Sep 25, 2021

tarbaII commented Sep 26, 2021 • edited Loading

carterlasalle commented Sep 26, 2021 • edited Loading

tarbaII commented Sep 28, 2021

carterlasalle commented Sep 28, 2021

tarbaII commented Sep 28, 2021

carterlasalle commented Sep 28, 2021

tarbaII commented Sep 28, 2021

carterlasalle commented Sep 28, 2021

tarbaII commented Sep 28, 2021 • edited Loading

carterlasalle commented Sep 28, 2021 • edited Loading

tarbaII commented Sep 28, 2021 • edited Loading

carterlasalle commented Sep 28, 2021

tarbaII commented Sep 28, 2021

carterlasalle commented Sep 28, 2021

tarbaII commented Sep 28, 2021 • edited Loading

carterlasalle commented Sep 28, 2021 • edited Loading

carterlasalle commented Sep 30, 2021

tarbaII commented Oct 1, 2021

carterlasalle commented Oct 1, 2021 • edited Loading

tarbaII commented Oct 1, 2021

tarbaII commented Oct 1, 2021

carterlasalle commented Oct 5, 2021

tarbaII commented Oct 6, 2021

carterlasalle commented Oct 6, 2021

tarbaII commented Oct 6, 2021

carterlasalle commented Oct 7, 2021 • edited Loading

tarbaII commented Oct 7, 2021

carterlasalle commented Oct 7, 2021 • edited Loading

tarbaII commented Oct 7, 2021

carterlasalle commented Oct 7, 2021

carterlasalle commented Oct 28, 2021 • edited Loading

tarbaII commented Oct 28, 2021

carterlasalle commented Nov 1, 2021

carterlasalle commented Nov 12, 2021 • edited Loading

carterlasalle commented May 23, 2022

carterlasalle commented Dec 9, 2022

tarbaII commented Sep 21, 2021 •

edited

Loading

carterlasalle commented Sep 23, 2021 •

edited

Loading

tarbaII commented Sep 25, 2021 •

edited

Loading

tarbaII commented Sep 26, 2021 •

edited

Loading

carterlasalle commented Sep 26, 2021 •

edited

Loading

tarbaII commented Sep 28, 2021 •

edited

Loading

carterlasalle commented Sep 28, 2021 •

edited

Loading

tarbaII commented Sep 28, 2021 •

edited

Loading

tarbaII commented Sep 28, 2021 •

edited

Loading

carterlasalle commented Sep 28, 2021 •

edited

Loading

carterlasalle commented Oct 1, 2021 •

edited

Loading

carterlasalle commented Oct 7, 2021 •

edited

Loading

carterlasalle commented Oct 7, 2021 •

edited

Loading

carterlasalle commented Oct 28, 2021 •

edited

Loading

carterlasalle commented Nov 12, 2021 •

edited

Loading