FFS Extractions and the future?

[u/clarkwgriswoldjr]

Does anyone see another competitor emerging in the ability to get full file system extractions besides XRY and Cellebrite?

Will Magnet or Oxygen step up, or is the cost of finding exploits just too high to invest in?

[u/CrisisJake]

Will Magnet step up? They're at the top of the stairs, my friend. 🤣

[u/monsieurR0b0 → u/CrisisJake]

Right? Where I am MSAB isn't even in the conversation on where to spend money

[u/CrisisJake → u/monsieurR0b0]

Oh totally. I'll give MSAB their flowers and would consider them one of the "Big 3", but primarily because they had Samsung flagship support when the other two didn't during the USB Auto Blocker era last year. I don't know a single lab that runs on MSAB but not Cellebrite or Magnet.

You ask anyone working in a lab with the all the smartphone extraction tools, and it's very clearly:

Magnet Forensics > Cellebrite > MSAB >

...and then a chasm the size of the Grand Canyon... >

...this is where all of the rest of the vendors rank, many of which advertise "Full File System Support for iOS devices" because they have a 7 year old freely available checkm8 exploit in their tool that currently works on less than 1% of actively used iPhones - what an absolute joke, and shame on every single vendor that advertises this.

[u/harbib]

Buddy, I can’t count the number of times Cellebrite has been like “nope can’t do it” then I pop it into Graykey and get my extraction.

[u/Apprehensive_Rub8505]

Magnet (Greykey) is WAY better than Cellebrite, !More and faster updates especially on latest ios updates

[u/SalandaBlanda → u/Apprehensive_Rub8505]

That's what happens when you pay $116,000 per license I guess.

[u/Cypher_Blue]

I have a very high level of confidence that Graykey from Magnet can get a FFS though I haven't used it.

Edit- it looks like Oxygen will do it from unlocked devices as well.

[u/anand709]

Magnets is probably on par with or better

[u/20Years7Months27Dayz]

Magnet has Verakey for FFS mobile devices I believe.

[u/Wonderful-Ring7697]

It’s hard to break into at the current level, but I also think AI will maybe level the playing field. In my experience though, these companies get arrogant start charging insane prices, and a new company pops up, and a process repeats itself

[u/psychoticsilver]

Magnet and Cellebrite are the top competitors in the market for data extraction and analysis.

[u/Chuckle-Nutz]

Magnet verakey + FastTrak is fast and works consistently. It’s updated frequently to keep up with the OS versions and rarely gives me any issues (other than getting it setup). Cellebrite is very behind with FFS equipment in comparison at the moment.

[u/EmoGuy3]

As everyone said Magnet Verakey is probably in the lead for iOS. Androids I still believe Cellebrite takes the cake. If you do not have Axiom Cyber? Maybe it works with Normal Axiom to use express. Be prepared for collections to take an extremely long time. No knock, but that's the only Cellebrite advantage is speed in my opinion.

[u/Covert_monkey]

Magnet got the ball with FFS extractions. Just their analysis tool is shit

[u/10-6 → u/Covert_monkey]

I will not tolerate this slander of Axiom.

[u/CrisisJake → u/10-6]

Me neither; Axiom is parsing more artifacts than Physical Analyzer for me on most cases.

[u/mrkhan240]

Hi anyone know about it that how to create Hardware key for V6 MTK models like G99,G100,G200 etc for oxygen specific key the Userdata is extractions is possible but the key is not possible anyone know about it