Show HN: Ibex – a cross-platform iOS backup decryption tool
a year ago
- #forensics
- #iOS
- #security
- ibex is a cross-platform tool for decrypting and extracting iOS backups.
- It supports macOS, Linux, and Windows.
- Requires explicit consent from the backup data owner for use.
- Built for researchers and defenders aiding victims of spyware and stalkerware.
- Features include decryption of encrypted iOS backups, support for latest iOS versions, and cross-platform compatibility.
- Can automatically detect backups and extract single files based on filename match.
- Organizes output in a structured directory.
- Detailed manifest parsing and extraction capabilities.
- Installation options include building from source, using Homebrew, or downloading pre-built releases.
- Supports various command-line flags for customization.
- Follows a specific process to decrypt and extract iOS backups.
- Creates an organized output directory structure.
- Security best practices include working with copies of backup data and storing extracted data securely.
- Currently developed independently, with plans for future collaboration.
- Encourages donations to digital privacy and free speech organizations.
- Provides resources for victims of spyware and stalkerware.
- Licensed under the MIT License.