> For the complete documentation index, see [llms.txt](https://book.turbosec.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://book.turbosec.net/android-and-ios.md).

# Android & iOS

## iTunes Backups & Trust Certs

\
When backing up an iPhone, iTunes accesses the iPhone in a privileged state - similar to using the sudo command on Linux to run a command with root privileges.\
iPhones will only backup to trusted computers. When plugging into a new device, the iPhone will ask the user whether or not they wish to trust the computer

![](https://864121778-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-Mk3RnfEHBP3zuZMsnli%2F-Ml3Zh4RHje118jBJ4_O%2F-Ml3_-Q5o6l3d8ECIRDE%2Fimage.png?alt=media\&token=21592663-d22f-4b15-85f7-e78e52cc362b)

"Trusting" a computer involves generating a pair certificate on both the iPhone and computer. If the certificate matches up on both devices, the iPhone can be backed up. This process is a fantastic security measure by Apple, namely to prevent attacks such as "[Juice Jacking](https://en.wikipedia.org/wiki/Juice_jacking)".

### Image / Dump analysis

Create an image if possible and use any text/hex editor like notepad or sublime, you can also use Sqlite to open db files