One of the evidence items during the 2022 Magnet User Summit CTF was a full file system extraction of an iPhone running iOS 15. Recently the CTF creators made the evidence (and corresponding challenge questions) available at CyberDefenders.org. You can register for a free account and then download the evidence. There’s several recommended tools listed in the challenge summary. For me the tools used were:
- Magnet Axiom Cyber – [request a free trial]
- iLEAPP
- Decode
- Unfurl
- Excel (yup, an old friend returns)
Once you’re registered, process the evidence with Magnet and iLEAPP. The other tools we’ll touch on coming up.
WARNING: SPOILERS AHEAD
Don’t read ahead if you’re still working on the challenges. If you get stuck and want to see how I chose to solve it… then read on friend.
Continue reading “Magnet 2022 CTF – iOS15”
Baker Street Forensics 