Keychain Data
The iOS keychain is an encrypted storage system for secrets such as passwords, encryption keys, etc.
As described by Apple:
Computer users often have small secrets that they need to store securely. For example, most people manage numerous online accounts. Remembering a complex, unique password for each is impossible, but writing them down is both insecure and tedious. Users typically respond to this situation by recycling simple passwords across many accounts, which is also insecure.
Objection can be used to dump the keychain data:
1
ios keychain dump
Copied!
Extracted Secrets from the Keychain using Objection
Alternatively, Keychain data can be extracted on a jailbroken iOS device by using the Keychain Dumper tool. This tool extracts all keychain data in a readable format.
Keychains are used to store passwords and other sensitive information and should not be accessible by the user or attacker.
Dumping the keychain using Keychain-Dumper
Copy link