Help needed lost passcode for JB Ipad2 4.3.3

[TIMECMDR]

Hi There

Thanks for the response mate

I love reading "knowledge is power"

I have downloaded Ifun and have managed to get into the ipad.

I can not seem to locate the mobile lock/ passcode document... :-(

I am not so bothered about the data my main objective is to be able to either take off the passcode or be able to keep 4.3.3 firmware thus enabling me to jailbreak the device..

Are you saying i may be able to disable or reset the passcode using ifun?

Thanks in advance

T

Yes, you may be able to disable or reset the password using iFunBox. I'm still looking for the file myself. (I have hidden files showing, so you probably missed it.)

I hope it works, I did have the hidden files visible but still could nto locate it....probalby missed it all the same.

Keep us posted buddy

T

 

[evove]

I had found the location of the Keychain. This is for accounts on the device. This .db file should be taken seriously and used as a reference for a built in app to email you your forgotten password.

 

[evove]

Tue Sep 13 12:11:56 2011 pid=1936 (0x2ff83000) __handle_changepasscode_block_invoke_1: oldpass=NULL newpass=SECRET has blob
Tue Sep 13 12:11:56 2011 pid=1936 (0x2ff83000) __handle_changepasscode_block_invoke_1: success

I found the logs with a Resource ID. Looking for the resource.

 

[TIMECMDR]

Tue Sep 13 12:11:56 2011 pid=1936 (0x2ff83000) __handle_changepasscode_block_invoke_1: oldpass=NULL newpass=SECRET has blob
Tue Sep 13 12:11:56 2011 pid=1936 (0x2ff83000) __handle_changepasscode_block_invoke_1: success

I found the logs with a Resource ID. Looking for the resource.

Where are these logs located? I will check on my ipad too

I hope you find the resource too........

 

[evove]

Tue Sep 13 12:11:56 2011 pid=1936 (0x2ff83000) __handle_changepasscode_block_invoke_1: oldpass=NULL newpass=SECRET has blob
Tue Sep 13 12:11:56 2011 pid=1936 (0x2ff83000) __handle_changepasscode_block_invoke_1: success

I found the logs with a Resource ID. Looking for the resource.

Where are these logs located? I will check on my ipad too

I hope you find the resource too........

Dig around in /var to find those. I didn't bother to take down the directory. Lol.

 

[evove]

Hey Mickey, can you decrypt SQlite? I think I found the file. I just need it decrypted to be sure. I no longer own a computer, so it would be a challenge for me.

 

[evove]

I could email you my .db files, and you replace yours with mine, including the location they belong. From what I can tell, they aren't tied to a device by ID, and they do include email information (which I could care less about). I could just tell you my password and you could try it on yours. Either way, if you can't get in, a restore is needed.

Or we can go the easy way, and jailbreak 4.3.3 (downgrade without blobs).

 

[TIMECMDR]

I could email you my .db files, and you replace yours with mine, including the location they belong. From what I can tell, they aren't tied to a device by ID, and they do include email information (which I could care less about). I could just tell you my password and you could try it on yours. Either way, if you can't get in, a restore is needed.

Or we can go the easy way, and jailbreak 4.3.3 (downgrade without blobs).

OK..........in the easy way does it involve restoring using itunes from a downloaded 4.3.3 ipsw?........if this is the case i have tried it with no joy as it throws a 3194 error when i try doing this.... I have also edited the host file with different ip address and it still threw up the 3194 error

I dont mind replacing the . DB files and using your passcode if that works and it is ok with you too

Thanks for your time and effort mate

T

 

[evove]

I could email you my .db files, and you replace yours with mine, including the location they belong. From what I can tell, they aren't tied to a device by ID, and they do include email information (which I could care less about). I could just tell you my password and you could try it on yours. Either way, if you can't get in, a restore is needed.

Or we can go the easy way, and jailbreak 4.3.3 (downgrade without blobs).

OK..........in the easy way does it involve restoring using itunes from a downloaded 4.3.3 ipsw?........if this is the case i have tried it with no joy as it throws a 3194 error when i try doing this.... I have also edited the host file with different ip address and it still threw up the 3194 error

I dont mind replacing the . DB files and using your passcode if that works and it is ok with you too

Thanks for your time and effort mate

T

All you have to do is download TinyUmbrella, uncheck point to Cydia, and start TSS Server to rid of most errors. Including 3194.

 

[evove]

This is a resource for the display of the lock I believe. I'm used to Android, but it all looks familiar. (What the Passcode screen does when certain things are done)

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
**<key>items</key>
**<array>
** *<dict>
** * *<key>cell</key>
** * *<string>PSGroupCell</string>
** *</dict>
** *<dict>
** * *<key>action</key>
** * *<string>togglePasscode:</string>
** * *<key>cell</key>
** * *<string>PSButtonCell</string>
** * *<key>customControllerClass</key>
** * *<string>DevicePINController</string>
** * *<key>label</key>
** * *<string>PASSCODE_OFF</string>
** * *<key>mode</key>
** * *<integer>1</integer>
** * *<key>pane</key>
** * *<string>DevicePINPane</string>
** *</dict>
** *<dict>
** * *<key>cell</key>
** * *<string>PSGroupCell</string>
** *</dict>
** *<dict>
** * *<key>action</key>
** * *<string>showPINSheet:</string>
** * *<key>cell</key>
** * *<string>PSButtonCell</string>
** * *<key>customControllerClass</key>
** * *<string>DevicePINController</string>
** * *<key>label</key>
** * *<string>CHANGE_PASSCODE</string>
** * *<key>mode</key>
** * *<integer>2</integer>
** * *<key>pane</key>
** * *<string>DevicePINPane</string>
** *</dict>
** *<dict>
** * *<key>cell</key>
** * *<string>PSGroupCell</string>
** *</dict>
** *<dict>
** * *<key>cell</key>
** * *<string>PSLinkListCell</string>
** * *<key>deferItemSelection</key>
** * *<true/>
** * *<key>detail</key>
** * *<string>PSListItemsController</string>
** * *<key>get</key>
** * *<string>graceValue:</string>
** * *<key>label</key>
** * *<string>PASSCODE_REQ</string>
** * *<key>set</key>
** * *<string>setGraceValue:specifier:</string>
** * *<key>shortTitles</key>
** * *<array>
** * * *<string>ALWAYS_SHORT</string>
** * * *<string>1_MIN</string>
** * * *<string>5_MIN</string>
** * * *<string>15_MIN</string>
** * * *<string>1_HOUR_SHORT</string>
** * * *<string>4_HOURS_SHORT</string>
** * *</array>
** * *<key>staticTextMessage</key>
** * *<string>SECURITY_MSG</string>
** * *<key>validTitles</key>
** * *<array>
** * * *<string>ALWAYS</string>
** * * *<string>1_MINUTE</string>
** * * *<string>5_MINUTES</string>
** * * *<string>15_MINUTES</string>
** * * *<string>1_HOUR</string>
** * * *<string>4_HOURS</string>
** * *</array>
** * *<key>validValues</key>
** * *<array>
** * * *<integer>0</integer>
** * * *<integer>60</integer>
** * * *<integer>300</integer>
** * * *<integer>900</integer>
** * * *<integer>3600</integer>
** * * *<integer>14400</integer>
** * *</array>
** *</dict>
** *<dict>
** * *<key>cell</key>
** * *<string>PSGroupCell</string>
** * *<key>footerText</key>
** * *<string>SIMPLE_PASSCODE_TEXT</string>
** * *<key>id</key>
** * *<string>SIMPLE_PASSCODE_GROUP</string>
** *</dict>
** *<dict>
** * *<key>cell</key>
** * *<string>PSSwitchCell</string>
** * *<key>customControllerClass</key>
** * *<string>DevicePINController</string>
** * *<key>get</key>
** * *<string>isSimplePasscodeEnabled:</string>
** * *<key>label</key>
** * *<string>SIMPLE_PASSCODE</string>
** * *<key>pane</key>
** * *<string>DevicePINPane</string>
** * *<key>set</key>
** * *<string>setSimplePasscodeEnabled:specifier:</string>
** *</dict>
** *<dict>
** * *<key>cell</key>
** * *<string>PSGroupCell</string>
** * *<key>requiredCapabilities</key>
** * *<array>
** * * *<string>ipad</string>
** * *</array>
** *</dict>
** *<dict>
** * *<key>cell</key>
** * *<string>PSSwitchCell</string>
** * *<key>default</key>
** * *<true/>
** * *<key>defaults</key>
** * *<string>com.apple.springboard</string>
** * *<key>key</key>
** * *<string>SBPictureFrameEnabled</string>
** * *<key>label</key>
** * *<string>ENABLE_PICTURE_FRAME</string>
** * *<key>requiredCapabilities</key>
** * *<array>
** * * *<string>ipad</string>
** * *</array>
** *</dict>
** *<dict>
** * *<key>cell</key>
** * *<string>PSGroupCell</string>
** * *<key>footerText</key>
** * *<string>VOICE_DIAL_TEXT</string>
** * *<key>requiredCapabilities</key>
** * *<array>
** * * *<string>telephony</string>
** * * *<string>voice-control</string>
** * *</array>
** *</dict>
** *<dict>
** * *<key>cell</key>
** * *<string>PSSwitchCell</string>
** * *<key>get</key>
** * *<string>voiceDial:</string>
** * *<key>label</key>
** * *<string>VOICE_DIAL</string>
** * *<key>requiredCapabilities</key>
** * *<array>
** * * *<string>telephony</string>
** * * *<string>voice-control</string>
** * *</array>
** * *<key>set</key>
** * *<string>setVoiceDial:specifier:</string>
** *</dict>
** *<dict>
** * *<key>cell</key>
** * *<string>PSGroupCell</string>
** * *<key>id</key>
** * *<string>WIPE_DEVICE_TEXT</string>
** *</dict>
** *<dict>
** * *<key>cell</key>
** * *<string>PSSwitchCell</string>
** * *<key>default</key>
** * *<false/>
** * *<key>defaults</key>
** * *<string>com.apple.springboard</string>
** * *<key>get</key>
** * *<string>wipeEnabled:</string>
** * *<key>key</key>
** * *<string>SBDeviceWipeEnabled</string>
** * *<key>label</key>
** * *<string>WIPE_DEVICE</string>
** * *<key>set</key>
** * *<string>setWipeEnabled:specifier:</string>
** *</dict>
**</array>
**<key>title</key>
**<string>Passcode Lock</string>
</dict>
</plist>

These are the associated strings.

"15_MIN" = "After %@ min.";
"15_MINUTES" = "After %@ minutes";
"1_HOUR" = "After %@ hour";
"1_HOUR_SHORT" = "After %@ hour";
"1_MIN" = "After %@ min.";
"1_MINUTE" = "After %@ minute";
"4_HOURS" = "After %@ hours";
"4_HOURS_SHORT" = "After %@ hours";
"5_MIN" = "After %@ min.";
"5_MINUTES" = "After %@ minutes";
"ALWAYS" = "Immediately";
"ALWAYS_SHORT" = "Immediately";
"CANCEL" = "Cancel";
"CHANGE_PASSCODE" = "Change Passcode";
"DATA_ENCRYPTED_TEXT_IPAD" = "Data protection is enabled.";
"DATA_ENCRYPTED_TEXT_IPHONE" = "Data protection is enabled.";
"DATA_ENCRYPTED_TEXT_IPOD" = "Data protection is enabled.";
"ENABLE_PICTURE_FRAME" = "Picture Frame";
"OK" = "OK";
"OK_LAST_STEP" = "Save";
"Passcode Lock" = "Passcode Lock";
"PASSCODE_OFF" = "Turn Passcode Off";
"PASSCODE_ON" = "Turn Passcode On";
"PASSCODE_REQ" = "Require Passcode";
"PMCHANGE" = "Change Passcode";
"PMENTER" = "Enter Passcode";
"PMREMOVE" = "Turn off Passcode";
"PMSET" = "Set Passcode";
"SECURITY_MSG" = "Shorter times are more secure";
"SIMPLE_PASSCODE" = "Simple Passcode";
"SIMPLE_PASSCODE_TEXT" = "A simple passcode is a 4 digit number.";
"SMS_PREVIEW" = "Show SMS Preview";
"VOICE_DIAL" = "Voice Dial";
"VOICE_DIAL_TEXT" = "iPod Voice Control is always enabled.";
"WIPE_DEVICE" = "Erase Data";
"WIPE_DEVICE_ALERT_CANCEL" = "Cancel";
"WIPE_DEVICE_ALERT_OK" = "Enable";
"WIPE_DEVICE_ALERT_TITLE_IPAD" = "All data on this iPad will be erased after 10 failed passcode attempts.";
"WIPE_DEVICE_ALERT_TITLE_IPHONE" = "All data on this iPhone will be erased after 10 failed passcode attempts.";
"WIPE_DEVICE_ALERT_TITLE_IPOD" = "All data on this iPod will be erased after 10 failed passcode attempts.";
"WIPE_DEVICE_TEXT_IPAD" = "Erase all data on this iPad\nafter %@ failed passcode attempts.";
"WIPE_DEVICE_TEXT_IPHONE" = "Erase all data on this iPhone\nafter %@ failed passcode attempts.";
"WIPE_DEVICE_TEXT_IPOD" = "Erase all data on this iPod\nafter %@ failed passcode attempts.";

You can find this in:


String Reference

file://localhost/var/stash/Applications/Preferences.app/English.lproj/Passcode Lock.strings

.Plist

file://localhost/var/stash/Applications/Preferences.app/Passcode Lock.plist

I'm still looking for the file that determines that the Passcode Lock is required. Cause if I find it, all I have to do is change the PASSCODE_ON string to PASSCODE_OFF.

THEN DONE! WOOOO! Now it's just a hunt.

 

[evove]

Do me a favor, go to file://localhost/var/Keychains/keychain-2.db and delete the keychain-2.db file, then close iFunBox. Restart your device then unlock the device, if the Passcode lock is missing, your in. Hurry and go to settings and make sure the Passcode lock is off.

Reply soon. Thanks.

Edit--

If that doesn't work, try it again, but don't restart your device.

 

[TIMECMDR]

Do me a favor, go to file://localhost/var/Keychains/keychain-2.db and delete the keychain-2.db file, then close iFunBox. Restart your device then unlock the device, if the Passcode lock is missing, your in. Hurry and go to settings and make sure the Passcode lock is off.

Reply soon. Thanks.

Edit--

If that doesn't work, try it again, but don't restart your device.

Sorry for the late reply

I have already tried this with and without reboot passcode stays on both ways :-(

 

[Mickey330]

Stop!

You cannot jailbreak iOS 4.3.5 on the iPad2, tethered or not! The only jailbreak for the iPad2 is with iOS 4.3.3.

And, I've removed the link evove posted for two reasons: (1) It is to another forum - and it's against this forum's rules to link to another forum/external site and (2) you cannot downgrade from iOS 4.3.5 to iOS 4.3.3 without SHSH blobs. The method people have found elsewhere on the Internet is for the iPhone and, to my knowledge, it doesn't even work for that! No one, that I know of, can downgrade from iOS 4.3.5 to iOS 4.3.3 without SHSH blobs.

Oh, and TIMECMDR, I'm not having any luck finding anything using iBackupBot. I'm thinking Apple did real good at protecting an iPad with a passcode installed. I'll keep looking ... but I'm not holding out hope. Sorry.

Marilyn

 

[TIMECMDR]

Stop!

You cannot jailbreak iOS 4.3.5 on the iPad2, tethered or not! The only jailbreak for the iPad2 is with iOS 4.3.3.

And, I've removed the link evove posted for two reasons: (1) It is to another forum - and it's against this forum's rules to link to another forum/external site and (2) you cannot downgrade from iOS 4.3.5 to iOS 4.3.3 without SHSH blobs. The method people have found elsewhere on the Internet is for the iPhone and, to my knowledge, it doesn't even work for that! No one, that I know of, can downgrade from iOS 4.3.5 to iOS 4.3.3 without SHSH blobs.

Oh, and TIMECMDR, I'm not having any luck finding anything using iBackupBot. I'm thinking Apple did real good at protecting an iPad with a passcode installed. I'll keep looking ... but I'm not holding out hope. Sorry.

Marilyn

Marilyn

Thank you very much for the help it is appreciated. I will leave it as is until I here from yourself or some other Ipad2 guru.......
I am currently going through various passcodes with my kid in the hope he may remember. I noticed that if i plug the device into the notebook where it was previously synced I can re enter another 6 passcodes.....and so on.

IF this doesn't work I will just have to restore to 4.3.5 :-(

Thank again

T

 

[Poser]

wait a week, something might be possible, I'm looking into this now.