ideviceunback - Decode manifest and copy files into human readable form from ilibmobiledevice's 'idevicebackup2' output

Since iOS 9.3.2 the idevicebackup2 tool has not been able to perform the 'unback' function as Apple removed the facility.

ideviceunback replaces this functionality

Currently in ALPHA development phase.

Installation:

1. Clone the project
   $ git clone https://github.com/bdh777psu/ideviceunback.git

2. Build it
   $ make

3. Run it!
   $ ./ideviceunback -h
   

   ...or...
   

   $ ./ideviceunback -v -i path/to/backup -o output/path
   
   

Sample usage with ilibmobiledevice:

Prerequisite: Install Homebrew

1. Install ilibmobiledevice tool and dependencies:
   $ mkdir -p ~/ideviceprobe/limd-build
   $ cd ~/ideviceprobe/limd-build
   $ curl -o ./limd-build-macos.sh -L is.gd/kdT2Nl
   $ bash ./limd-build-macos.sh -n
   
   

2. Install ideviceunback from this repo:
   $ cd ~/ideviceprobe/
   $ git clone https://github.com/bdh777psu/ideviceunback.git
   $ cd ~/ideviceprobe/ideviceunback
   $ make
   
   

3. With your iDevice plugged in and paired to your Mac, turn OFF backup encryption
   $ idevicebackup2 encryption off --interactive
   
   

4. Perform iDevice backup:
   $ mkdir ~/ideviceprobe/idevicebackup
   $ idevicebackup2 backup --full ~/ideviceprobe/idevicebackup
   
   

5. Unbackup the previous iDevice backup:
   $ mkdir ~/ideviceprobe/ideviceunbacked
   $ cd ~/ideviceprobe/ideviceunback
   $ ./ideviceunback -v -i ~/ideviceprobe/idevicebackup/* -o ~/ideviceprobe/ideviceunbacked
   
   

6. Open the un-backedup contents of your iDevice for inspection:
   $ open ~/ideviceprobe/ideviceunbacked
   
   

Sample exposed data points commonly of interest (results might vary):

Camera Roll: ~/ideviceprobe/ideviceunbacked/Media/DCIM/102APPLE
Plain SMS messages: ~/ideviceprobe/ideviceunbacked/Library/SMS

If searching for data contained in SQLite dbs, SQLite Pro can be used to browse the file contents.