One of the evidence items during the 2022 Magnet User Summit CTF was a full file system extraction of an iPhone running iOS 15. Recently the CTF creators made the evidence (and corresponding challenge questions) available at CyberDefenders.org. You can register for a free account and then download the evidence. There’s several recommended tools listed in the challenge summary. For me the tools used were:
Once you’re registered, process the evidence with Magnet and iLEAPP. The other tools we’ll touch on coming up.
WARNING: SPOILERS AHEAD
Don’t read ahead if you’re still working on the challenges. If you get stuck and want to see how I chose to solve it… then read on friend.Continue reading “Magnet 2022 CTF – iOS15”