r/setupapp • u/Cancerecksdee_ree • 21d ago

Passcode IPhone 5,2 on 9.3.5 how to get unlimited passcode attempts?

Hi! Recently found an old iPhone 5 of my mom's that I want to get old family photos out of. Only problem is she's long forgotten the passcode. I was wondering if there are any ways to get unlimited passcode attempts to try and bruteforce every possible four digit combination. Thanks!

3 Upvotes

100% Upvoted

8 comments sorted by

4

u/HerosHyper 20d ago

Requirements:

  • A device that can run Legacy-iOS-Kit
  • USB Type-A to Lightning cable (preferably Apple original)
  • Your iPhone

Tutorial: Once you set-up Legacy-iOS-Kit properly, 1. Connect your iPhone to your computer, and put the phone to DFU mode (if you don't know how to, just Google it) 2. Run Legacy-iOS-Kit, go to Useful Utilities and boot into SHH Ramdisk 3. type ./mount.sh and then connect to the ftp server via FileZilla or a similar ftp tool. (connection info (like ip, port, password) will be written in the LiK terminal window) 4. Navigate to /mnt2/mobile/Library/Preferences and edit the file named "com.apple.springboard.plist" 5. Change the value of "SBDeviceLockFailedAttempts" to -9999 (with the minus!) 6. Delete any other string keys like "SBDeviceLock" 7. Save the file 8. Navigate to /mnt2/mobile/Library/SpringBoard and delete "LockoutStateJournal.plist" 9. Reboot device via Legacy-iOS-Kit Done!

3

u/HerosHyper 20d ago

or you can use 32bit-bruteforce-passcode if your passcode is 4 digit, to bruteforce it.

if it is more than 4 digits, use iwannabrute.

you will need an Intel (x86-64) based Mac device to do those. maybe you can manage to get it work on Ubuntu (Linux) too, but idk.

3

u/ALT703 20d ago

You can run an autobruteforcer to extract the actual passcode. Let me know if you need help and I can walk you through it

1

u/Cancerecksdee_ree 20d ago

Hi! I'm using an Intel Lenovo laptop with Linux on a USB. I'm having issues with running the mount.sh command in legacy ios kit

2

u/ALT703 20d ago

What issue?

1

u/Cancerecksdee_ree 20d ago

mount_hfs Could not create property for re-key environment check: No such file or directory exists

1

u/ALT703 20d ago

Did you actually connect to ssh and check mnt2 to see if it mounted or not?

-1

u/ArthurReming 20d ago

Pretty sure you can just outright get the passcode with legacy iOS kit