Extracts data from iTunes backup Manifest.plist files to generate hashes compatible with hashcat cracking modes 14700 and 14800.
itunes_backup2hashcat is a Perl script that extracts encryption parameters from iTunes backup Manifest.plist files and converts them into hash formats compatible with hashcat. It enables security researchers and forensic analysts to crack passwords from iOS backups by generating hashes for hashcat modes 14700 and 14800, streamlining the password recovery process.
Security professionals, digital forensic analysts, and penetration testers who need to recover passwords from iOS device backups for authorized security testing or forensic investigations.
It provides a straightforward, command-line tool that eliminates manual extraction of backup encryption data, directly outputting hashcat-ready hashes with support for multiple iOS versions and batch processing of files.
Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
The script requires only the path to a Manifest.plist file as an argument, making it straightforward to use for quick hash extraction without complex configuration.
It can handle multiple .plist files via command-line wildcards or explicit lists, as noted in the README, streamlining workflows for bulk backup analysis.
Automatically outputs hashes in formats ready for hashcat modes 14700 (iOS < 10) and 14800 (iOS 10.x), reducing manual conversion errors for security testing.
Focused on a no-frills design with minimal dependencies, it prioritizes reliability for forensic tasks without bloat, as emphasized in the philosophy section.
The script requires Perl installation, which may not be standard on all systems, and cross-platform support is only implied without detailed testing or documentation.
The README admits missing features and relies on community contributions, offering no built-in error handling, validation, or support for newer iOS versions beyond 10.x.
Released into the public domain with a disclaimer providing no guarantees, it lacks official updates, bug fixes, or professional support, risking reliability in critical scenarios.