iCloudkitExtractor

Experimental .NET/WPF forensic toolkit for iCloud auth, CloudKit/MMCS backup download, and…

Visit website

FreeOther13 impressionslaunches Nov 31 comment

>log in to comment

Giordano Sconti[maker]· 3d ago
I built iCloudKitExtractor as an experimental .NET/WPF toolkit to pull iCloud auth tokens, download CloudKit/MMCS backups, and recover Octagon/PCS data like ADP or Recovery Key. It’s research‑grade and works with Apple’s private APIs, which can change at any time. 🤔 How do you currently acquire iCloud authentication data when doing forensic analysis?

Experimental .NET/WPF forensic toolkit for iCloud auth, CloudKit/MMCS backup download, and Octagon/PCS recovery (ADP, Recovery Key, Lockdown Mode). Research software by Forensis-Lab — highly experimental; Apple private APIs may change overnight. - GiordanoSconti/iCloudKitExtractor

Other

Experimental .NET/WPF forensic toolkit
iCloud authentication extraction
CloudKit/MMCS backup download
Octagon/PCS recovery (ADP, Recovery Key, Lockdown Mode)

Experimental .NET/WPF toolkit to extract iCloud auth, CloudKit/MMCS backups, and Octagon/PCS recovery data.

for: Forensic analysts and security researchers needing low-level iCloud data recovery.
pricing: open source
license: MIT

GiordanoSconti/iCloudKitExtractor 10 4C#updated 4 days ago

works with.NETWPFWindowsFrida

Key features

5 features of iCloudkitExtractor

CloudKit / MMCS download — List devices and download backup payloads via CloudKit authorization and MMCS edge flows.
Octagon / PCS recovery — Recover Recovery Key and PIN paths for ADP-protected zones and keychain material.
Anisette / Frida support — Optional jailbroken iPhone Frida backend to provide coherent iPhone/akd identity during auth.
Windows x64 builds — Framework-dependent binaries requiring .NET 10 Desktop Runtime.
Open source MIT license — Code released under MIT, with attribution to Forensis-Lab.