> For the complete documentation index, see [llms.txt](https://book.turbosec.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://book.turbosec.net/android-and-ios.md).

# Android & iOS

## iTunes Backups & Trust Certs

\
When backing up an iPhone, iTunes accesses the iPhone in a privileged state - similar to using the sudo command on Linux to run a command with root privileges.\
iPhones will only backup to trusted computers. When plugging into a new device, the iPhone will ask the user whether or not they wish to trust the computer

![](/files/-Ml3_-Q5o6l3d8ECIRDE)

"Trusting" a computer involves generating a pair certificate on both the iPhone and computer. If the certificate matches up on both devices, the iPhone can be backed up. This process is a fantastic security measure by Apple, namely to prevent attacks such as "[Juice Jacking](https://en.wikipedia.org/wiki/Juice_jacking)".

### Image / Dump analysis

Create an image if possible and use any text/hex editor like notepad or sublime, you can also use Sqlite to open db files