duh , The title made this look like a super challenge but what it was is just a trivial one . We would be more interested to how they got the cert thing and how to perform from there not the file browsing that can be done by just a simple text string search
The title says its an easy challenge so its expected to be simple - however i do understand your point and i might consider making a video on that too. Problem is (so far) i dont own an iphone device so that might be harder to do. But thank you for your input As far as getting the cert thing goes you can probably just google it and find out quickly - from what i've gathered it doesnt seem to be complex at all, most of the things are done by the victim, all the digital analyst has to do is get the certificate from victim's pc (maybe by cloning a hard drive or even just copying the cert file) (or just use victim's pc itself) and then plug in the phone (it doesnt ask for the password except the first time) meaning it will either ask to sync or autosync - even if it doesnt this allows the digital analyst to gather infromation from the phone. So as i said a lot of things are actually done for you in this scenario I thought of the challenge to be really fun and it was amazing how you can extract all this information because of one simple security flaw Hope this comment helps a bit
duh , The title made this look like a super challenge but what it was is just a trivial one .
We would be more interested to how they got the cert thing and how to perform from there not the file browsing that can be done by just a simple text string search
The title says its an easy challenge so its expected to be simple - however i do understand your point and i might consider making a video on that too. Problem is (so far) i dont own an iphone device so that might be harder to do. But thank you for your input
As far as getting the cert thing goes you can probably just google it and find out quickly - from what i've gathered it doesnt seem to be complex at all, most of the things are done by the victim, all the digital analyst has to do is get the certificate from victim's pc (maybe by cloning a hard drive or even just copying the cert file) (or just use victim's pc itself) and then plug in the phone (it doesnt ask for the password except the first time) meaning it will either ask to sync or autosync - even if it doesnt this allows the digital analyst to gather infromation from the phone.
So as i said a lot of things are actually done for you in this scenario
I thought of the challenge to be really fun and it was amazing how you can extract all this information because of one simple security flaw
Hope this comment helps a bit