Android & iOS

iTunes Backups & Trust Certs

When backing up an iPhone, iTunes accesses the iPhone in a privileged state - similar to using the sudo command on Linux to run a command with root privileges. iPhones will only backup to trusted computers. When plugging into a new device, the iPhone will ask the user whether or not they wish to trust the computer

"Trusting" a computer involves generating a pair certificate on both the iPhone and computer. If the certificate matches up on both devices, the iPhone can be backed up. This process is a fantastic security measure by Apple, namely to prevent attacks such as "Juice Jacking".

Image / Dump analysis

Create an image if possible and use any text/hex editor like notepad or sublime, you can also use Sqlite to open db files