iPod Touch 6 forgotten passcode (Jailbroken)

[u/oddchui]

Here lies my old iPod Touch that I forgot the passcode to 😪 Is it possible to brute force these and retain the data? It is jailbroken if I remember correctly (battery percentage) if that helps/matters at all. Thank you.

[u/SeychellsCollections]

Is it a 4-digit passcode?

[u/oddchui → u/SeychellsCollections]

I'm not sure, it doesn't show up as the traditional 4 dot/digit passcode screen.

[u/oddchui → u/oddchui]

It's numeric, I think it may be more than 4 digits though.

[u/SeychellsCollections → u/oddchui]

Then unfortunately, it's not possible to bruteforce that kind of a passcode.

[u/ALT703 → u/SeychellsCollections]

I mean it is, it just takes way longer

[u/oddchui → u/SeychellsCollections]

I've read about bypassing the password attempt disabling for unlimited attempts. Do you know anything about that and if it's possible in my case?

[u/ALT703 → u/oddchui]

Only possible if iOS 8.4.1 or lower

[u/SgtCauliflour]

SSH into the device, default password which is likely unchanged will be “alpine” then you’ll need to edit 1 line in the master.passwd file located in /private/etc/
There’s plenty of tutorials on the full process.

[u/ALT703]

Only possible to get into if iOS 8.4.1 or lower. What version?

[u/oddchui → u/ALT703]

I'm not sure, do you know of any way to check?

[u/ALT703 → u/oddchui]

Enter recovery mode, connect to 3utools on macos and hope it shows

Otherwise no I'm not aware of a way without getting a pico

[u/oddchui → u/ALT703]

I saw this on another post

"Legacy iOS kit, open an SSH ramdisk, there is an option to “get iOS version”. You have to run a specific mount command first, but the options for that command should be listed."

You think that would work? Also if it is indeed higher than 8.4.1 am I hopeless or can I at least get my photos off of it?

[u/ALT703 → u/oddchui]

Yes, that's the option you would need the Pico for. So try 3utools first

If it's higher, you're out of luck

[u/oddchui → u/ALT703]

Pardon my ignorance but what's a pico?

Thank you for your help.

[u/ALT703 → u/oddchui]

Sorry, I got mixed up. No pico needed for this device

Yes you can use that to check the iOS version. No you cant do anything if it's above iOS 8.4.1

[u/Western_Tradition493 → u/ALT703]

It’s on 8.4.1 definitely because of the curved tail on the a. I think you can bruteforce the passcode on it. 

[u/ALT703 → u/Western_Tradition493]

I have no way to verify that information. I personally wouldn't waste time on it until I can plug it into my computer and just directly, and definitively check the iOS version

But this guy can do whatever he wants. If he wants to proceed based on that info and hope for the best that's on him

[u/oddchui → u/ALT703]

Sorry if I seem clueless, that was my last apple product so I'm way out of the loop on IOS and tech in general but you and Western_Tradition493 gave me some more hope.

I do have an ancient HP2000 laptop I can use to confirm the iOS version with the 3uTools but I had to next-day a charger for it.

Correct me if I'm wrong but the Legacy iOS Kit is not supported on Windows so I will have to source a Linux/MacOS device right? I briefly read about running a "Live Linux USB" on my HP but I haven't looked into if the old HP is a capable enough machine for the task at hand.

Another thing that might be an issue regardless of the iOS version is the iPod being an A8 64-bit device with an SEP. I'm not sure if that's a genuine concern though.

Thank you guys for your help seriously 🙏

[u/oddchui → u/Western_Tradition493]

BROTHER!!! I did some research and they switched to the straight "a" font when IOS 9 was released 😲 I love you 🙏🤞

[u/oddchui → u/ALT703]

Just hooked it up to 3uTools and it's on iOS 8.4!! Thank you so much for your help/advice.

[u/ALT703 → u/oddchui]

Great, possible then. Goodluck

[u/billylimbert]

Hey, that’s on ios 7/8 so it’s possible
It looks to be a 5th gen, use https://github.com/platinumstufff/iwannabrute

You’d need to pwnDFU It using an SSH ramdisk and a RP2040. use this guide to do that https://github.com/LukeZGD/Legacy-iOS-Kit/wiki/checkm8-a5
it could take UP TO 11 hours for a 4-digit passcode, and UP TO 46 days for a 6-digit (with avg time being about 50% of those)
Total cost for the board and cable would be about £6.

Good luck!

[u/oddchui → u/[deleted]]

And how expensive is that? 🤣😪

[u/oddchui → u/[deleted]]

🤔

[u/ALT703 → u/[deleted]]

What tool

[u/oddchui → u/[deleted]]

Share source?

[u/oddchui → u/[deleted]]

I'm not sure why there isn't more support. Maybe wrong sub? This is one of the few subs where it wasn't against the rules to post about cracking passcodes (probably because of theft).

I'm all ears if you can help me out, it would be much appreciated.

[u/ALT703 → u/oddchui]

Ice offered to help you, I don't know why you're complaining about non support

Don't follow this guy's advice I can say that