Lifehacks for hackers: Exploiting of Data Protection API

The simplest way of how to find and exploit Data Protection API misconfigurations:

  1. Install the demo version of iExplorer tool on any computer;
  2. Connect an iPhone and enable trust;
  3. Lock the device and disconnect the device from the computer;
  4. Keep the device locked, connect the device to the computer and use iExplorer tool to gather unencrypted data.

Severity: from Informational to Medium

CVSS3: up to 4.8