Which locked drive can be opened without the recovery key on hand?

boots the target machine from a second USB drive built by the installer with a BitLocker TPM exploit, unlocking the volume in place of a manual key-retrieval process

Which passwords and saved data are sitting in a suspect's browser profile?

pulls saved passwords, payment card data, autofill entries, download history, bookmarks, and browsing history out of Chrome, Chromium-based browsers, Edge, and Firefox

Can this disk image be trusted as unaltered evidence later?

logs a checksum alongside the captured image's path and capture time automatically during imaging, giving a verifiable record without a separate hashing step

What did this user do, and in what order, across all their apps and devices?

merges timestamped events from browser, USB, and program-execution artifacts into one chronology for cross-artifact review

Can I see what's on a drive without imaging the whole thing first?

builds a searchable table of file names, paths, sizes, and timestamps as a lightweight snapshot, browseable and searchable on another machine without copying file contents

Which iCloud backups can be pulled for this account, including recent iOS releases?

downloads backups created on current iOS/iPadOS releases as well as iOS/iPadOS beta builds, and delivers the low-level extraction agent to the device pairing-free over a controlled USB or network bridge

ElcomSoft release history — The Cyber Toolchain

announced Oct 9, 2026 · issue 103

iOS Forensic Toolkit 10.12 gains bootloader-level full file system and keychain extraction for Apple HomePod mini (macOS and Linux editions).

New supported platformAdds bootloader-level extraction for Apple HomePod mini using the usbliter8 SecureROM exploit, returning a full file system image and decrypted keychain regardless of installed audioOS version.
HomePod mini extraction is available in the macOS and Linux editions of iOS Forensic Toolkit 10.12.

2 details in Everything

Elcomsoft Phone Breaker 11.05: iCloud extraction support for iOS 27 and the iPhone 18 range (2026-10-06) Oct 6, 2026 · issue 096

New supported platform iCloud extraction support for iOS 27, iPadOS 27, and iPhone 18

changelog Sep 25, 2026 · issue 085

iOS Forensic Toolkit 10.11 adds bootloader-level extraction for Apple Watch Series 4/5 and Apple TV 4K 2nd Gen, yielding full file system images and decrypted keychains.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Adds bootloader-level extraction for Apple Watch Series 4 and Series 5, producing a full file system image and decrypted keychain.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Adds bootloader-level extraction for Apple TV 4K 2nd Generation, producing a full file system image and decrypted keychain.
Extends low-level extraction support beyond the A11 generation of Apple silicon for the first time.

Adds bootloader-level extraction for Apple Watch Series 4 and Series 5, producing a full file system image and decrypted keychain.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Adds bootloader-level extraction for Apple TV 4K 2nd Generation, producing a full file system image and decrypted keychain.

1 more in Everything

docs update Sep 24, 2026 · issue 084

ElcomSoft: Adds bootloader-level low-level extraction support for Apple TV 4K 2nd Generation using the usbliter8 SecureROM exploit (requires a custom adapter with a microcontroller board running ElcomSoft custom firmware).

Extends low-level extraction coverage beyond checkm8-compatible devices to newer SoCs via the usbliter8 exploit.

1 more in Everything

iOS Forensic Toolkit 10.11: bootloader extraction for Apple Watch Series 4 and 5, Apple TV 4K 2nd Gen (2026-09-21) Sep 21, 2026 · issue 082

iOS Forensic Toolkit 10.11 brings bootloader-level full file system and keychain extraction to Apple Watch Series 4/5 and Apple TV 4K 2nd Gen.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Adds bootloader-level extraction for Apple Watch Series 4 and Series 5, producing a full file system image and decrypted keychain.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Adds bootloader-level extraction for Apple TV 4K 2nd Gen, producing a full file system image and decrypted keychain.
Extends low-level extraction support past the A11 generation of Apple silicon for the first time.

Adds bootloader-level extraction for Apple Watch Series 4 and Series 5, producing a full file system image and decrypted keychain.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Adds bootloader-level extraction for Apple TV 4K 2nd Gen, producing a full file system image and decrypted keychain.

1 more in Everything

announced Sep 21, 2026 · issue 082

ElcomSoft: Adds bootloader-level keychain and full file system extraction for Apple TV 4K 2nd Gen (A12 Bionic) via the usbliter8 SecureROM exploit, recovering accounts, authentication tokens, paired device records, network history, and Siri-related artifacts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Adds support for tvOS 26.5 and 26.6.
Adds support for audioOS 26.5 and 26.6.

2 more in Everything

changelog Sep 8, 2026 · issue 068

Elcomsoft Quick Triage 2.2 adds a timeline, plugin architecture, and file system snapshot artifact.

Adds a timeline view that merges events from different artifacts into a single chronology.
Introduces a plugin architecture that rebuilds artifact support as a plugin system.
Adds file system snapshot as a new artifact type.
Extends password recovery capabilities.
Extends full-text search capabilities.

+1 more show less

Extends BitLocker key extraction capabilities.

Adds a timeline view that merges events from different artifacts into a single chronology.
Introduces a plugin architecture that rebuilds artifact support as a plugin system.
Adds file system snapshot as a new artifact type.

3 more in Everything

docs update Sep 3, 2026 · issue 063

Elcomsoft Quick Triage 2.2 adds Timeline view, file system snapshots, a plugin architecture, MSA password attacks, and expanded full-text search.

New Timeline view merges events from every timestamped artifact into a single chronology.
New file system snapshot capability copies file system metadata without extracting file contents.
New plugin architecture enables third-party and custom artifact parsers.
Adds MSA (Microsoft Account) password attacks.
Full-text search now parses OpenDocument format files.

+1 more show less

Full-text search now supports recursive archive parsing.

6 details in Everything

announced Sep 3, 2026 · issue 064

ElcomSoft: New Timeline view merges events from browser activity, network activity, recent files, Jump Lists, device activity, and program execution into a single chronology with an event table and histogram, quick filtering, event cards, and jump-to-source-artifact links.

└──▷ HOW TO FIND IT

Review the unified timeline to establish a chronological sequence of user activity across browser, USB, and program-execution artifacts during an investigation.

📍In Elcomsoft Quick Triage 2.2, open your case project, then go to the Timeline view. Use the histogram to scope a time range of interest, type in the filter box to narrow events by keyword, and click any event card to jump directly to the source artifact (e.g., Prefetch or SRUM entry).

Capture a lightweight file system inventory of a suspect drive without imaging full file contents, for later off-site browsing and search.

📍In Elcomsoft Quick Triage 2.2, start a new project and select the target drive as the source. In the artifact selection list, enable File system snapshot. After acquisition, browse the resulting metadata table, search by file name or mask, and sort by creation or modification time on any analysis machine.

Extract BitLocker keys from all mounted volumes during a live triage session before shutting down the target machine.

📍In Elcomsoft Quick Triage 2.2, begin a live-session acquisition and enable the BitLocker key extraction option to collect keys for all drives currently mounted in the system.

Timeline exports to PDF and XLS.
New plugin-based artifact architecture enables six new artifact type plugins: Microsoft Defender logs, Windows Update Store (WUS), CAM database, Jump Lists, Windows Search index, and Prefetch files.
New file system snapshot artifact captures drive file system metadata (names, paths, sizes, creation and modification timestamps) as a searchable table without copying file contents, browseable on another computer with search by file name or mask and sorting by creation or modification time.
New live-session acquisition option extracts available BitLocker keys for all mounted volumes in the system.
Password recovery now automatically attempts an MSA hash attack with MSA-specific rules when the NTLM hash yields no result, including MSA hash extraction.

+1 more show less

Full-text search now parses OpenDocument files (.odt, .ods, .odp) and recursively parses nested archives up to 10 levels deep.

6 details in Everything

Elcomsoft Quick Triage 2.2 adds a timeline, a plugin system, and file system snapshots (2026-09-03) Sep 3, 2026 · issue 063

Elcomsoft Quick Triage 2.2 adds a merged event timeline, plugin architecture, and file system snapshot artifact.

New timeline view merges events from different artifacts into a single chronology for cross-artifact investigation.
New plugin architecture rebuilds artifact support, enabling extensible artifact collection.
New file system snapshot artifact type available for collection and analysis.
Extended password recovery capabilities.
Extended full-text search capabilities.

+1 more show less

Extended BitLocker key extraction capabilities.

6 details in Everything

changelog Aug 31, 2026 · issue 060

└──▷ HOW TO FIND IT

When imaging a suspect drive during triage, use the new checksum logging to produce a verifiable record of the disk image for chain-of-custody.

📍During bootable triage in Elcomsoft System Recovery 8.38, select Create Disk Image, then enable checksum logging on the imaging options screen before starting the acquisition.

To leverage the BitLocker TPM exploit against a locked drive, use the installer to build a second USB flash drive with the YellowKey or GreatXML exploit, then boot the target machine with both drives attached.

📍During Elcomsoft System Recovery 8.38 installation, when prompted, select Create BitLocker exploit USB, choose either YellowKey or GreatXML, and write to a second USB flash drive.

Adds a built-in BitLocker TPM exploit library supporting the YellowKey and GreatXML exploits, with the installer offering to build a second USB flash drive loaded with the exploit during setup.
Adds checksum logging for disk images captured during triage.

announced Aug 26, 2026 · issue 058

Elcomsoft System Recovery 8.38 adds BitLocker TPM exploit USB creation, browser artefact extraction, and image checksum logging.

Installer can now create a separate bootable USB drive preloaded with a BitLocker TPM exploit — supports YellowKey and GreatXML — turning a previously manual multi-step process into a guided setup click.
New browser artefact extraction capability pulls saved passwords, payment card data, form autofill data, download history, bookmarks, and browsing history from Google Chrome, Chromium-based browsers, Microsoft Edge, Mozilla Firefox, and others.
Disk imaging now automatically logs a checksum with each captured image's path and capture time, eliminating the need for a separate post-capture hashing utility.

3 details in Everything

Elcomsoft System Recovery 8.38: Built-In BitLocker TPM Exploit Library, Browser Artefact Extraction, and Imaging Checksums (2026-08-26) Aug 26, 2026 · issue 057

Elcomsoft System Recovery 8.38 adds built-in BitLocker TPM exploit provisioning, imaging checksums, and browser artefact extraction.

└──▷ HOW TO FIND IT

During ESR installation, provision a second USB drive loaded with the YellowKey or GreatXML BitLocker TPM exploit so you arrive on-site ready to unlock encrypted drives without the recovery key.

📍During Elcomsoft System Recovery installation, when prompted, insert a second USB flash drive and select YellowKey or GreatXML to provision the BitLocker exploit drive alongside your main boot drive.

Adds checksum logging for disk images during the imaging workflow.
Updates the imaging library with new capabilities.

2 details in Everything

changelog Aug 8, 2026 · issue 039

ElcomSoft releases EIFT Firewall, a free macOS companion app for safe iOS extraction agent sideloading

EIFT Firewall: a new free tool for controlled agent sideloading (2026-08-03) Aug 3, 2026 · issue 034

ElcomSoft releases EIFT Firewall, a free macOS app for controlled USB-network agent sideloading to iOS devices.

New free macOS companion app EIFT Firewall replaces the 2023 firewall script for sideloading the iOS Forensic Toolkit low-level extraction agent.
Creates a temporary, controlled USB network path between a Mac and a connected evidentiary iOS device to safely deliver the extraction agent.

2 details in Everything

EIFT Firewall: a new free tool for controlled agent sideloading Aug 3, 2026 · release notes

ElcomSoft releases EIFT Firewall, a macOS companion app for controlled USB network isolation during iOS agent sideloading

Adds EIFT Firewall, a new macOS application that creates a temporary, controlled USB network path to allow agent signature validation while blocking all other internet access during sideloading.
Generates a .tar.gz forensic report archive after each session containing the profile receipt, session status, teardown result, connected-device details, DNS decision log, runtime log, and a manifest with SHA-256 hashes.

2 details in Everything

changelog Jul 23, 2026 · issue 023

Elcomsoft Phone Breaker 11.03 adds universal binary for macOS and restores SMS-based iCloud two-factor authentication.

Ships as a universal binary for macOS, running natively on both Apple Silicon and Intel Macs.

1 detail in Everything

└──▷ BREAKING ON UPGRADE

!The pre-login 2FA status check is removed, as Apple no longer supports it.

docs update Jul 23, 2026 · docs issue 004

Elcomsoft Phone Breaker 11.03 adds universal binary for macOS and restores SMS-based iCloud two-factor authentication.

Ships as a universal binary for macOS, running natively on both Apple Silicon and Intel Macs.

1 detail in Everything

└──▷ BREAKING ON UPGRADE

!The pre-login 2FA status check is removed, as Apple no longer supports it.

Elcomsoft Phone Breaker 11.03: universal binary for Macs, SMS two-factor authentication restored (2026-07-16) Jul 16, 2026 · issue 017

Elcomsoft Phone Breaker 11.03 adds universal binary for macOS and restores SMS-based iCloud 2FA sign-in.

Ships as a universal binary, running natively on both Apple Silicon and Intel Macs without Rosetta translation.
Removes the pre-login 2FA status check that Apple no longer supports, enabling successful authentication flows.

2 details in Everything

iOS Forensic Toolkit 10.10 adds pairing-free sideloading of the extraction agent (2026-06-24) Jun 24, 2026 · issue 014

iOS Forensic Toolkit 10.10 enables pairing-free sideloading of the extraction agent via wired or wireless network bridge.

Supports pairing-free sideloading of the low-level extraction agent, eliminating the need to pair the device before delivery.
Delivers the extraction agent over a wired or wireless network bridge as alternative sideloading methods.

2 details in Everything

iOS Forensic Toolkit 10.10 adds pairing-free sideloading of the extraction agent Jun 24, 2026 · release notes

iOS Forensic Toolkit 10.10 adds pairing-free sideloading for extraction agent via network bridge

Adds pairing-free sideloading mode for the extraction agent, using a wired or wireless network bridge to bypass Stolen Device Protection.
Adds support for iOS 16.7.16 in the extraction agent compatibility matrix.

2 details in Everything

Elcomsoft Phone Breaker 11.2: downloads iOS 26 iCloud backups (2026-06-18) Jun 18, 2026 · issue 014

Elcomsoft Phone Breaker 11.2 adds support for downloading iCloud backups from iOS/iPadOS 26 and iOS 27 beta.

Supports downloading iCloud backups created on iOS 26 and iPadOS 26 devices.
Supports downloading iCloud backups from iOS/iPadOS 27 beta builds.

2 details in Everything

Elcomsoft Phone Breaker 11.2: downloads iOS 26 iCloud backups (2026-06-18) Jun 18, 2026 · release notes

Elcomsoft Phone Breaker 11.2 adds preliminary support for downloading iCloud backups from iOS/iPadOS 26 and 27 beta

└──▷ HOW TO FIND IT

Download an iCloud backup from a device running the latest iOS 26 or iPadOS 27 beta using Elcomsoft Phone Breaker 11.2.

📍In Elcomsoft Phone Breaker, initiate the iCloud backup download process on a device running iOS/iPadOS 26 or iOS/iPadOS 27 beta.

Elcomsoft Phone Breaker 11.1: reliable iCloud backup extraction May 26, 2026 · release notes

Elcomsoft Phone Breaker 11.1 completes cloud extraction overhaul with reliable iCloud backup downloads

Delivers complete and dependable extraction of iCloud backups by resolving previous download interruption issues in the EPB 11 point release

1 detail in Everything

ElcomSoft Phone Breaker 11: full overhaul of iCloud extraction (2026-04-30) Apr 30, 2026 · release notes

ElcomSoft Phone Breaker 11 overhauls iCloud extraction to address Apple's latest authentication and encryption protocol changes.

Introduces a completely overhauled iCloud extraction mechanism in version 11 to support Apple's updated authentication and encryption protocols.

1 detail in Everything

iOS Forensic Toolkit 10.02 adds agent-based extraction for iOS 26 Apr 29, 2026 · release notes

iOS Forensic Toolkit 10.02 adds full agent-based extraction support for iOS/iPadOS 26/26.0.1 (excluding A19/M5 devices).

Agent acquisition: adds official support for agent-based full file system extraction and keychain decryption on iOS/iPadOS 26 and 26.0.1.
Extended logical acquisition now supports crash & diagnostics logs on all devices.
Extended logical acquisition now supports Apple Unified Logs on Apple Watch.

3 details in Everything

Elcomsoft Quick Triage receives a major update (2026-04-28) Apr 28, 2026 · release notes

Elcomsoft Quick Triage v2.1 adds extraction capabilities, performance optimizations, and workflow features

Expands data extraction capabilities for rapid in-field acquisition
Introduces substantial performance optimizations to the core engine
Adds new workflow features to assist on-site investigators

3 details in Everything

Elcomsoft System Recovery 8.37 expands support for Microsoft Accounts, adds Entra ID (2026-04-23) Apr 23, 2026 · release notes

Elcomsoft System Recovery 8.37 adds support for Microsoft Entra ID and enhanced Microsoft Accounts

iOS Forensic Toolkit 10.01 expands agent-based extraction up to iOS 18.7.1 for M-series iPads (2026-04-21) Apr 21, 2026 · release notes

iOS Forensic Toolkit 10.01 expands agent-based extraction to iPads running iPadOS 16.6.1 through 18.7.1

Adds agent-based low-level extraction support for M-series iPads (including Apple Silicon models)

1 detail in Everything

iOS Forensic Toolkit 10.0 expands agent-based extraction up to iOS 18 Apr 14, 2026 · release notes

iOS Forensic Toolkit 10.0 adds agent-based extraction for iOS 18 and checkm8 support for tvOS/audioOS

Adds agent-based extraction support for the full iOS 17 branch (17.0 to 17.7.8)
Adds initial agent-based extraction support for iOS 18 (versions 18.0 through 18.7.1)
Expands checkm8 acquisition support to Apple TV (tvOS 26.3, 26.4) and Apple HomePod (audioOS 26.3, 26.4)
Enhanced extended logical acquisition for iOS/iPadOS 26 family extracts additional shared files not available via local backups

4 details in Everything

Elcomsoft Distributed Password Recovery goes 64-bit, adds NVIDIA Blackwell support (2026-03-26) Mar 26, 2026 · release notes

Elcomsoft Distributed Password Recovery 5.0 adds NVIDIA Blackwell GPU support

Adds native support for NVIDIA Blackwell GPUs (RTX 50 series) and modern CUDA toolkits

1 detail in Everything

iOS Forensic Toolkit 9.0: full unlocking and perfect acquisition support for iPhone 6/6 Plus and other Apple A8/A8X devices (2026-02-11) Feb 11, 2026 · release notes

ElcomSoft iOS Forensic Toolkit 9.0 adds full unlocking, perfect acquisition, and on-device passcode recovery for iPhone 6/Plus (A8/A8X) devices.

Adds full unlock and perfect acquisition support for iPhone 6, iPhone 6 Plus, iPad Mini 4, iPad Air 2 and other Apple A8/A8X devices
Enables on-device passcode recovery for supported A8/A8X devices
Supports low-level extraction for Apple TV 4 (HD), Apple TV 4K (1st gen) and HomePod devices running tvOS/audioOS 26

3 details in Everything

Elcomsoft Quick Triage Dec 30, 2025 · release notes

New Elcomsoft Quick Triage (EQT) tool adds rapid in-field forensic triage and VHDX container support for Windows systems.

Introduces Elcomsoft Quick Triage (EQT), a new GUI-based forensic triage solution for rapid data acquisition on Windows systems.
Adds support for collecting communications databases, email archives, user documents, and registry data from live systems or mounted disk images.
Enables on-the-fly indexing of acquired data into an instantly searchable database within the EQT interface during acquisition.
Supports storing all evidence in a single VHDX-based container file with metadata for later examination.

4 details in Everything

Elcomsoft System Recovery 8.36 adds Windows Server 2025 support, BitLocker key exporting, and enhanced SRUM analysis (2025-11-14) Nov 14, 2025 · release notes

Elcomsoft System Recovery 8.36 adds Windows Server 2025 support and BitLocker key exporting

└──▷ HOW TO FIND IT

Export BitLocker keys from a recovered Windows volume for decryption elsewhere.

📍Select the target drive in the UI and choose Export BitLocker Keys.

Adds Windows Server 2025 ntds.dit database support for digital triage.
Adds BitLocker key exporting capability.

2 details in Everything

iOS Forensic Toolkit 8.81 adds iOS 17 and 18 support for checkm8 extractions Nov 6, 2025 · release notes

iOS Forensic Toolkit 8.81 adds checkm8 full file system and keychain extraction for iOS/iPadOS/tvOS/audioOS 17 and 18.

Adds support for bootloader-level checkm8 extractions on devices running iPadOS, tvOS, or audioOS 17 and 18
Enables full file system extraction and keychain decryption for iOS 17/18 via the checkm8 exploit path on macOS and Linux

2 details in Everything

iOS Forensic Toolkit 8.80 enhances logical acquisition, adds support for Apple Unified Logs Oct 13, 2025 · release notes

iOS Forensic Toolkit 8.80 adds Apple Unified Logs extraction to logical acquisition and new Windows HFS image mounting tool

Adds support for extracting Apple Unified Logs during advanced logical acquisition
Adds a free Windows tool to mount acquired HFS images
Significantly accelerates media files and diagnostic log acquisition performance
Extends support for iOS 15 (15.8.5) and iOS 16 (16.7.12) on checkm8-compatible devices

4 details in Everything

Elcomsoft Distributed Password Recovery adds support for 8 password management apps Sep 30, 2025 · release notes

ElcomSoft Distributed Password Recovery 4.71 adds support for Bitwarden, Dropbox, Enpass and 5 other password managers

Adds support for Bitwarden (Windows local account, Chromium-based Browser Extensions, Firefox Browser Extensions)
Adds support for Dropbox Passwords (Edge Browser Extensions, Chrome Extensions, Firefox Browser Extensions)
Adds support for Enpass, Kaspersky, Keeper, Roboform, Sticky Password, and Zoho Vault password managers for Windows

3 details in Everything

Elcomsoft System Recovery 8.35 adds SRUM support, enhances disk imaging speed Aug 15, 2025 · release notes

Elcomsoft System Recovery 8.35 adds SRUM parsing and a group password attack mode

Adds support for extracting data from the Windows System Resource Usage Monitor (SRUM) database to reconstruct activity timelines
Adds a group password attack that automatically chains mini-attacks against common password types
Adds password filtering via include/exclude masks during attack execution

3 details in Everything

iOS Forensic Toolkit 8.70: expanded Apple Watch support and offline agent installation May 15, 2025 · release notes

iOS Forensic Toolkit 8.70 adds logical acquisition for Apple Watch S6-S10/SE2/Ultra and offline agent installation.

Adds support for logical acquisition of Apple Watch Series 6 through Ultra 2 devices via third-party adapters
Enables offline installation of the low-level extraction agent with any Apple Developer account regardless of age
Extends checkm8 exploit support to iOS/iPadOS 15.8.4 and 16.7.11

3 details in Everything

Elcomsoft System Recovery 8.34 adds features, enhances disk imaging speed Apr 29, 2025 · release notes

Elcomsoft System Recovery 8.34 adds BitLocker AD key extraction, Win11 hidden volume support, and 800+ new artifacts.

Adds BitLocker recovery key extraction for all Active Directory users by analyzing the ntdis.dat file on the domain controller
Adds support for detecting and processing hidden volumes in Windows 11
Adds support for over 800 new file system artefacts with sorting and filtering capabilities
Enables exporting file system artefacts to external storage in raw format or using friendly names
Event Viewer now loads EVT and EVTX log files from any location, not just standard system directories

5 details in Everything

Elcomsoft System Recovery 8.33 adds built-in log viewer Dec 19, 2024 · release notes

Release 8.33 improves field efficiency by enabling direct EVTX analysis via a new built-in viewer and enhancing system artifact parsing.

Elcomsoft Distributed Password Recovery introduces intelligent load balancing, performance optimizations Nov 14, 2024 · release notes

Elcomsoft Distributed Password Recovery 4.70 adds intelligent load balancing and in-depth agent performance reporting.

Adds intelligent load balancing that distributes work to GPUs and CPUs based on their estimated performance metrics rather than equal splits

1 detail in Everything

iOS Forensic Toolkit 8.61 expands support for iOS versions and devices Sep 3, 2024 · release notes

iOS Forensic Toolkit 8.61 adds iOS 15.8.3/16.7.10 checkm8 support and fixes 16GB iPad Pro agent extraction

Adds checkm8 support for iOS 15.8.3 on macOS & Linux editions.
Adds checkm8 support for iOS 16.7.10 on macOS & Linux editions.
Outputs extended product version information including version and build number.

3 details in Everything

Advanced Intuit Password Recovery 3.14 supports Intuit QuickBooks 2024 Aug 29, 2024 · release notes

Advanced Intuit Password Recovery 3.14 adds instant unlock capability for QuickBooks 2024 databases

Adds QuickBooks 2024 support with instant password reset for .QBW files

1 detail in Everything

iOS Forensic Toolkit 8.60 enhances agent-based low-level extraction in Linux and Windows editions Jul 9, 2024 · release notes

iOS Forensic Toolkit 8.60 adds agent-based low-level extraction via sideloading with free Apple IDs on Linux and Windows

Adds support for using regular, non-developer Apple IDs to sideload and sign the extraction agent on Windows and Linux editions
Enables full-image filesystem acquisition and decrypted keychain copy via agent-based low-level extraction on Linux and Windows

2 details in Everything

ElcomSoft Phone Breaker 10.14: faster, better, more convenient Jun 6, 2024 · release notes

ElcomSoft Phone Breaker 10.14 adds GPU-accelerated iOS backup speedup, new Apple model support, and backup password validation.

GPU-accelerated password recovery for iOS backups is up to 30% faster due to the switch to a 64-bit code base on Windows
Added support for all the latest iPhone and iPad models
Adds the ability to test a backup password without decrypting the whole backup
Supports checking encrypted backups for passwords set by the most common forensic tools (default passwords)

4 details in Everything

└──▷ BREAKING ON UPGRADE

!BlackBerry support is deprecated in this release.

iOS Forensic Toolkit 8.56 expands support for iOS versions and devices May 22, 2024 · release notes

iOS Forensic Toolkit 8.56 adds checkm8 extraction for iOS 7 on ARMv8 and official support for iOS/iPadOS 16.7.8.

Adds checkm8 bootloader-level extraction support for iOS 7 on ARMv8 devices (iPhone 5s, iPad Mini 2/3, first-gen iPad Air)
Adds official checkm8 extraction support for iOS/iPadOS 16.7.8 on iPhone 8, iPhone X, and compatible iPads
Enables handling of devices returning incorrect UDID during extraction queries

3 details in Everything

Elcomsoft System Recovery and Advanced Office Password Recovery updated May 21, 2024 · release notes

ESR adds configurable E01 compression; AOPR gains Intel ARC GPU and OneNote O365 support

Elcomsoft System Recovery allows specifying the compression level when creating E01 disk images
Advanced Office Password Recovery adds GPU acceleration support on Intel ARC boards
Advanced Office Password Recovery adds support for the latest build of OneNote for Office 365

3 details in Everything

Elcomsoft Phone Viewer 5.52 improves Signal and Telegram support May 14, 2024 · release notes

Elcomsoft Phone Viewer 5.52 adds support for Telegram secret chats and improves Signal/Telegram parsing compatibility

Improves compatibility with the latest versions of Signal and Telegram apps

1 detail in Everything

Passcode removal requirement dropped for most checkm8 extractions Apr 30, 2024 · release notes

ElcomSoft iOS Forensic Toolkit 8.55 adds Astra Linux and Linux-arm64 editions; waives passcode requirement for checkm8 extractions on most devices.

Waives the screen lock passcode removal requirement during checkm8 extractions for most devices running iOS/iPadOS 16.

1 detail in Everything

Elcomsoft Phone Viewer 5.50 packs multiple compatibility improvements Mar 19, 2024 · release notes

Elcomsoft Phone Viewer 5.50 adds support for iPhone 15 series and iOS 16/17 data sets.

Adds compatibility with iPhone 15, 15 Plus, 15 Pro, and 15 Pro Max devices
Enhances analysis of file system images extracted from iOS 16 and iOS 17 devices
Improves macOS Sonoma compatibility

3 details in Everything

Bootloader-level extraction for 16.7.6 and 15.8.2 Mar 15, 2024 · release notes

Elcomsoft iOS Forensic Toolkit 8.54 adds checkm8-based bootloader-level extraction for macOS/Linux on iOS 16.7.6/15.8.2

Adds support for checkm8-based bootloader-level extraction of iOS 16.7.6 and 15.8.2 in macOS and Linux editions.
Adds full iOS 16 support for checkm8 extractions in the Linux edition using a fused file system.

2 details in Everything

Elcomsoft Distributed Password Recovery introduces resource management capabilities Feb 20, 2024 · release notes

Elcomsoft Distributed Password Recovery 4.60 adds resource management, EHE, and expanded GPU/CPU acceleration.

Adds a separate service for distributing recovery agents across multiple servers to enable parallel jobs in multi-user environments
Adds Enhanced Hash Extraction (EHE) with support for new versions of LastPass and 1Password
Adds Intel Arc support for all plugins currently supporting hardware acceleration on Intel GPUs
Adds GPU acceleration for iTunes backups on AMD and Intel cards
Enables CPU acceleration for Intuit formats

5 details in Everything

Enhanced support for legacy devices Feb 1, 2024 · release notes

ElcomSoft iOS Forensic Toolkit 8.53 adds mounting HFS images on Windows and improved checkm8 version detection.

Adds the ability to mount HFS disk images extracted from legacy 32-bit Apple devices on Windows systems, powered by a custom WinFsp runtime integration.
Adds a new iOS version determination method for checkm8-compatible devices based on Secure Enclave Processor (SEP) information instead of OS data.
Adds support for iOS 16.7.5 and 15.8.1 on checkm8-compatible devices.

3 details in Everything

Supporting Sage 50 Accounting Canadian Edition Jan 17, 2024 · release notes

ASAPR v2.78 adds instant password reset for Sage 50 Accounting Canadian Edition

Extends ASAPR's recovery capabilities to include BLB, MUD, and ADF/PAD files associated with Sage 50 (Peachtree) Accounting 2023/2024 editions.

1 detail in Everything

Low-level extraction of iOS 16.6.1 Jan 3, 2024 · release notes

iOS Forensic Toolkit 8.52 adds low-level extraction support for iOS 16.5.1 through 16.6.1 on A11+ chips.

Adds agent-based low-level extraction for iOS 16.5.1, 16.6, and 16.6.1 on devices with A11 Bionic and newer chips
Expands agent-based low-level extraction to include iPad models with A12X/A12Z Bionic and newer chips (including M1 and M2)

2 details in Everything

Elcomsoft iOS Forensic Toolkit 8.51: improved compatibility and enhanced functionality Dec 27, 2023 · release notes

Elcomsoft iOS Forensic Toolkit 8.51 adds iOS 16.7.3/4 checkm8 support and logical extraction info file output.

Adds checkm8 extraction support for iOS 16.7.3 and 16.7.4 on compatible legacy devices
Enables saving complete device information to a file during logical extraction via the info command with -a and -s switches
Improves progress output visibility when acquiring device backups

3 details in Everything

Elcomsoft iOS Forensic Toolkit 8.50 expands capabilities for Linux users and legacy devices Nov 30, 2023 · release notes

ElcomSoft EIFT 8.50 adds a Linux edition with bootloader extraction and supports Apple Watch S0-S2.

Introduces the Linux edition of Elcomsoft iOS Forensic Toolkit, enabling logical and agent-based low-level extraction on Debian, Ubuntu, Kali Linux, and Mint.
Adds support for Apple Watch Series 0 (original), Series 1, and Series 2 via bootloader-level extraction to obtain keychain and full file system images.
Improves iOS version identification accuracy during bootloader-level extraction to nearly 100%, resolving previous ambiguity in download link selection.

3 details in Everything

Elcomsoft iOS Forensic Toolkit 8.41: portable Windows edition Oct 5, 2023 · release notes

Elcomsoft iOS Forensic Toolkit 8.41 adds Windows edition, portable package, CLI control, and selective folder/metadata extraction.

Introduces the first-ever Windows edition of Elcomsoft iOS Forensic Toolkit 8
Enables a fully portable deployment model that eliminates installation requirements
Provides a new command-line interface for workflow automation and script integration
Adds selective folder extraction capabilities to the low-level extraction agent
Configures the extraction agent to accept an output directory path with automatic file naming

5 details in Everything

Low-level extraction support for iOS 16.5 Aug 2, 2023 · release notes

Elcomsoft iOS Forensic Toolkit adds extraction support for iOS 16.5 and checkm8 on newer OS versions

Adds low-level extraction support for iOS 16.4.1, 16.4.1 (a), and 16.5 on devices with A12-A16 and M1/M2 chips.
Adds low-level extraction support for iOS 15.4 through 16.5 on devices with Apple A11 Bionic chips.
Expands checkm8-based extraction support to iOS/iPadOS/tvOS 16.6 and iOS/iPadOS 15.7.8.
Adds the ability to check for current license status (expiration date) and renew licenses.

4 details in Everything

Elcomsoft iOS Forensic Toolkit 8.32 receives a maintenance update Jul 18, 2023 · release notes

Elcomsoft iOS Forensic Toolkit 8.32 adds legacy device support for iPod Touch 2nd gen and iPhone 3G.

Comprehensive low-level extraction for last-gen iPhones with iOS 16.4 Jul 10, 2023 · release notes

Elcomsoft iOS Forensic Toolkit gains full low-level extraction and keychain decryption for iPhone 14/M-series iPads running iOS 16.0–16.4

Enables full file system extraction via a proprietary extraction agent on iOS 16 devices (up to 16.4) using A12 Bionic or newer chips
Adds keychain decryption capability, allowing access to online account passwords, tokens, keys, and sandboxed app data
Extends support for full low-level extraction to iPhone 14/14 Pro range and iPads with Apple M1/M2 chips

3 details in Everything

Low-level extraction supported for last-gen iPhones with iOS 16 Jun 30, 2023 · release notes

ElcomSoft iOS Forensic Toolkit adds low-level file system extraction for iOS 16 on A12+ devices and checkm8 support for iOS 16.5.1

checkm8 extraction for iOS 15.7.6 and 16.5 Jun 23, 2023 · release notes

ElcomSoft iOS Forensic Toolkit 8.23 adds checkm8 extraction for iOS 15.7.6 and 16.5.

Added checkm8 extraction support for iOS/iPadOS 15.7.6
Added checkm8 extraction support for iOS/iPadOS 16.5

2 details in Everything

Supporting Sage 50 Accounting 2023 and Sage 50 Accounts 2023 Jun 15, 2023 · release notes

Advanced Sage Password Recovery adds support for Sage 50 Accounting 2023 and related versions

Adds instant password reset capability for Sage 50 Accounting (Peachtree) 2023 databases
Adds instant password recovery for all users in Sage 50 Accounts 2023
Adds support for Sage 50 Accounting Canadian Edition (Simply Accounting) 2023 data formats

3 details in Everything

Full low-level extraction for the entire iOS 15 range May 2, 2023 · release notes

ElcomSoft iOS Forensic Toolkit adds full low-level extraction for iOS/iPadOS 15.6-15.7.2 via new agent.

Adds support for full file system and keychain extraction on iOS/iPadOS 15.6 through 15.7.2 using the new proprietary extraction agent
Extends low-level extraction coverage to devices with A12 and newer chips, including iPhone 8/X through iPhone 13 and M1-based iPads

2 details in Everything

Elcomsoft iOS Forensic Toolkit 8.21 add auto-DFU and automated screen shot capture Apr 12, 2023 · release notes

Elcomsoft iOS Forensic Toolkit 8.21 adds auto-DFU and automated screenshot capture via Raspberry Pi Pico

Adds support for automated DFU mode switching for iPhone 8, iPhone 8 Plus, and iPhone X devices using a pre-programmed Raspberry Pi Pico board
Adds ability to generate long, scrollable screen shots on all compatible iOS devices using a pre-programmed Raspberry Pi Pico board
Expands checkm8 extraction support to include devices running iOS 15.7.3-15.7.5 and 16.4-16.4.1

3 details in Everything

Elcomsoft tools gain support for NVIDIA Ada Lovelace boards, nearly double password recovery speeds Apr 6, 2023 · release notes

Elcomsoft tools gain support for NVIDIA Ada Lovelace (RTX 40) boards for near-doubled password recovery speeds

Adds support for NVIDIA GeForce RTX 40 series (Ada Lovelace architecture) in Advanced Office Password Recovery 7.20, Wireless Security Auditor 7.50, and Advanced PDF Password Recovery 5.20.

1 detail in Everything

iOS Forensic Toolkit 8.20 and 7.80 add partial file system extraction for iOS 16.1.2 and older Mar 30, 2023 · release notes

iOS Forensic Toolkit adds partial low-level file system extraction for iOS 15-16 on A11-A16 and M1/M2 devices

Adds partial file system extraction for iOS versions up to 16.1.2 on A11 through A16 Bionic chips
Adds support for iPads with Apple M1 and M2 chips via the new extraction method

2 details in Everything

Elcomsoft iOS Forensic Toolkit 8.13 adds checkm8 extraction for first-generation HomePod Mar 23, 2023 · release notes

Elcomsoft iOS Forensic Toolkit 8.13 adds checkm8 extraction for first-generation HomePod and legacy devices

Adds checkm8 extraction support for first-generation Apple HomePod devices.
Adds full iOS 4 through iOS 6 support for 32-bit devices via the checkm8 toolchain.
Adds checkm8 support for iPod Touch 3rd generation.

3 details in Everything

Advanced PDF Password Recovery and Archive Password Recovery updates Jan 17, 2023 · release notes

Archive Password Recovery 4.66 adds RAR5 passwords >16 chars and SFX support; PDF tool 5.11 fixes crashes.

Adds RAR5 password support longer than 16 characters in Advanced Archive Password Recovery 4.66
Enhances File Open dialog to recognize .exe extensions for self-extracting archives

2 details in Everything

Elcomsoft iOS Forensic Toolkit 8.11 decrypts iOS 15.5 keychain Jan 10, 2023 · release notes

ElcomSoft iOS Forensic Toolkit 8.11 adds keychain decryption support for iOS/iPadOS up to 15.5.

Adds keychain acquisition for iOS 15.2 to 15.5 via the extraction agent
Improves keychain acquisition for iOS 14 and older versions

2 details in Everything

Elcomsoft Phone Viewer 5.40 updated for iOS 16 Dec 20, 2022 · release notes

Elcomsoft Phone Viewer 5.40 adds support for iOS 16 local/cloud backups and file system images

Adds support for iOS 16 iTunes and iCloud backup formats

1 detail in Everything

Advanced Intuit Password Recovery 3.13 supports Quicken 2021/2022 and QuickBooks 2022/2023 Dec 7, 2022 · release notes

ElcomSoft Advanced Intuit Password Recovery 3.13 adds Quicken 2021/2022 and QuickBooks 2022/2023 support

Adds instant unlock capability for QuickBooks 2022 and 2023 databases
Improves Windows 11 compatibility

2 details in Everything

Elcomsoft Phone Breaker 10.12: better compatibility, iCloud-related improvements Nov 1, 2022 · release notes

Elcomsoft Phone Breaker 10.12 adds detection for iPhone 14/SE 2022 iCloud backups and iOS 16 compatibility.

Recognizes iCloud backups created by iPhone 14 series devices
Recognizes iCloud backups created by iPhone SE 2022 devices
Improves compatibility with iOS 16 backups

3 details in Everything

└──▷ BREAKING ON UPGRADE

!Windows 7/8/8.1 support is deprecated

Elcomsoft iOS Forensic Toolkit 8.0 brings forensically sound bootloader-based extraction for select iPhone & iPad models Sep 22, 2022 · release notes

Elcomsoft iOS Forensic Toolkit 8.0 adds checkm8 extraction, CLI, and new commands.

Adds checkm8 extraction for all supported iPhones & iPads enabling forensically sound bootloader-level acquisition.
Introduces a new command-line interface allowing full workflow control and scriptable automation.
Adds pairing/unpairing commands to manage device associations via the CLI.
Adds ssh and scp commands for direct device interaction from the CLI.

4 details in Everything

Elcomsoft iOS Forensic Toolkit 7.60 extends agent-based full file system extraction Aug 25, 2022 · release notes

Elcomsoft iOS Forensic Toolkit 7.60 adds agent-based full file system extraction for iOS 15.2-15.3.1 on A11-A15/M1 devices

Adds agent-based full file system extraction support for iOS 15.2 through 15.3.1 on Apple A11-A15 and M1 devices.
Extends keychain decryption support to iOS 9.0 through iOS 15.1.1.

2 details in Everything

Elcomsoft Distributed Password Recovery 4.45 supports Windows Hello PIN codes and LUKS2 encryption Aug 16, 2022 · release notes

Elcomsoft tools add LUKS2 support and Windows Hello PIN attack capability on TPM-less systems.

Elcomsoft Forensic Disk Decryptor extracts encryption metadata from LUKS2 disks and containers.
Elcomsoft Distributed Password Recovery 4.45 attacks Windows Hello PIN codes on systems without a Trusted Platform Module (TPM).
Elcomsoft Distributed Password Recovery 4.45 adds support for IZArc archives.

3 details in Everything

Elcomsoft System Recovery 8.30 recovers PIN-protected Windows accounts, supports LUKS2 encryption Aug 4, 2022 · release notes

Elcomsoft System Recovery 8.30 adds in-place PIN recovery for Windows 10/11 without TPM, LUKS2 detection, and Azure account detection

Supports PIN-protected Windows accounts with in-place recovery on systems without a Trusted Platform Module (TPM)
Adds support for detecting and extracting metadata from LUKS2 encrypted disks
Adds filters to bootable forensic tools including timeline, installed apps, and recent files

3 details in Everything

Elcomsoft iOS Forensic Toolkit 8.0 beta 12 improves iPhone 7 extraction Prerelease Jul 28, 2022 · release notes

Elcomsoft iOS Forensic Toolkit 8.0 beta 12 improves iPhone 7 extraction support

Enables checkm8-based low-level extraction for iPhone 7 and iPhone 7 Plus running iOS 14 or 15 without removing the screen lock passcode

1 detail in Everything

Elcomsoft iOS Forensic Toolkit 8.0 beta 11 adds iOS 15.6 RC support Prerelease Jul 20, 2022 · release notes

Elcomsoft iOS Forensic Toolkit 8.0 beta 11 adds checkm8-based low-level extraction for iOS 15.6 RC, iPadOS 15.6 RC, tvOS 15.6 RC, and watchOS 8.7 RC.

Adds forensically sound checkm8-based low-level extraction and full keychain decryption support for Apple devices running iOS 15.6 RC
Adds forensically sound checkm8-based low-level extraction and full keychain decryption support for Apple devices running iPadOS 15.6 RC
Adds forensically sound checkm8-based low-level extraction and full keychain decryption support for Apple TV devices running tvOS 15.6 RC
Adds support for compatible Apple Watch devices running watchOS 8.7 RC

4 details in Everything

Elcomsoft iOS Forensic Toolkit 7.50 closes the gap in keychain extraction Jul 7, 2022 · release notes

Elcomsoft iOS Forensic Toolkit 7.50 adds agent-based keychain extraction for iOS 14.5–15.1.1 and M1 iPad Pro 5th gen.

Adds agent-based keychain extraction support for iOS versions 14.5 through 14.8.1
Adds agent-based keychain extraction support for iOS versions 15.0 through 15.1.1
Adds agent acquisition support for M1-based iPad Pro 5th generation devices (up to iOS 15.1)
Enables keychain decryption without requiring the device passcode

4 details in Everything

Elcomsoft iOS Forensic Toolkit 8.0 beta 9 adds checkm8 extraction of 14 iPad and iPod Touch devices Prerelease Jun 21, 2022 · release notes

Elcomsoft iOS Forensic Toolkit 8.0 beta 9 adds checkm8 extraction support for 14 new iPad, iPod Touch, and Apple TV models.

Adds checkm8 exploit support for iPad 5, 6, 7; iPad Mini 2, 3, 4; iPad Air 1, 2; iPad Pro 1/2 (9.7"/12.9"); iPod Touch 6, 7; and Apple TV 4, 4K.
Expands low-level extraction engine to support all iOS versions compatible with the newly added devices, up to iOS 15.5.
Improves passcode cracking performance for legacy A4/A5/A6 processor devices.

3 details in Everything

Elcomsoft iOS Forensic Toolkit 7.40 extends agent-based full file system extraction Jun 9, 2022 · release notes

Elcomsoft iOS Forensic Toolkit 7.40 adds agent-based full file system extraction for iOS 14.x and up to iOS 15.1 on supported devices.

Extends agent-based full file system extraction to all supported devices running iOS 14.8.1
Adds agent-based extraction support for iOS builds 14.4 through 14.8.1 on devices based on Apple A14 Bionic SoC
Enables agent-based acquisition up to and including iOS 15.1 for most devices, with selective support for iOS 15.1.1

3 details in Everything

Elcomsoft iOS Forensic Toolkit 8.0 beta 7 unlocks and extracts legacy iOS devices Prerelease May 12, 2022 · release notes

Elcomsoft iOS Forensic Toolkit 8.0 beta 7 adds checkm8-based extraction for iPhone 4s, iPad 2/3 and other legacy Apple devices via Raspberry Pi Pico

Adds checkm8 support for iPhone 4s, enabling bootloader-based extraction on devices requiring specific USB controllers via a custom firmware image for the Raspberry Pi Pico board.
Adds checkm8 support for iPad 2 and 3, enabling low-level forensically sound acquisition of these legacy tablets.
Adds checkm8 support for iPad Mini (1st gen), iPod Touch 5, and Apple TV 3, expanding the range of devices eligible for checkm8-based extraction.

3 details in Everything

iOS Forensic Toolkit Update supports iPhone 13 Apr 29, 2022 · release notes

iOS Forensic Toolkit adds low-level file system extraction for iPhone 13 devices and checkm8 acquisition support in beta v8.0.

Advanced Office Password Recovery: WordPerfect Office and Lotus SmartSuite support Apr 4, 2022 · release notes

Advanced Office Password Recovery 7.10 adds native support for unlocking Lotus SmartSuite and WordPerfect Office formats.

Adds Lotus SmartSuite file support (WordPro, 1-2-3, Organizer, Approach, Freelance Graphics)
Adds WordPerfect file support (WordPerfect, QuattroPro, Paradox)

2 details in Everything

Elcomsoft System Recovery 8.20 adds Windows 11 support, bootable triage tools Mar 23, 2022 · release notes

Elcomsoft System Recovery 8.20 adds Windows 11 support and new bootable forensic triage tools for in-field investigations.

Adds Forensic Tools: list of installed apps (system-wide) to the bootable environment for immediate system-wide app inventory.
Adds Forensic Tools: Timeline (per user) to analyze user activity timelines directly from the bootable drive.
Adds Forensic Tools: Recent files and folders (per user) to access recently accessed items without full disk imaging.
Adds support for Windows 11, including local users and domain caches (SAM - local user database and DCC - domain cached credentials).
Adds support for Windows Server 2022, including AD (NTDS.DIT - domain database).

5 details in Everything

Elcomsoft Phone Viewer 5.33 updated with Windows 11, macOS 12 Monterey support Mar 18, 2022 · release notes

Elcomsoft Phone Viewer 5.33 adds macOS 12 Monterey and Windows 11 support

Adds macOS 12 Monterey support for the Mac edition of the tool
Adds Windows 11 support for the Windows edition of the tool

2 details in Everything

Elcomsoft iOS Forensic Toolkit 8.0 beta 5: forensically sound checkm8 extraction of Apple Watch 3 Prerelease Feb 10, 2022 · release notes

ElcomSoft iOS Forensic Toolkit 8.0 beta 5 adds forensically sound checkm8 extraction for Apple Watch Series 3 and low-level support for iOS 15.0/15.0.1

Enables low-level, bootloader-based extraction of Apple Watch Series 3 using the checkm8 exploit via commercial adapters.
Adds low-level extraction agent support for iOS 15.0 and 15.0.1 on A11–A13 devices (iPhone 8/X through iPhone 11).

2 details in Everything

Elcomsoft iOS Forensic Toolkit 8.0 beta 4: forensically sound checkm8 extraction of iPhone 8, 8 Plus and iPhone X Prerelease Feb 3, 2022 · release notes

Elcomsoft iOS Forensic Toolkit 8.0 beta 4 adds checkm8 extraction for iPhone 8/Plus/X

Adds forensically sound checkm8 extraction for iPhone 8, 8 Plus and iPhone X running iOS 11 through 15.3.
Enables full file system and keychain decryption on iOS 11–13 without passcode removal.
Supports limited extraction on iOS 14–15 (up to 15.3) requiring screen lock passcode removal.

3 details in Everything

iOS Forensic Toolkit 7.10 adds low-level extraction for iOS 14.4 through 14.8 Jan 13, 2022 · release notes

ElcomSoft iOS Forensic Toolkit 7.10 adds low-level agent-based file system extraction for iOS 14.4-14.8 on A11-A13 devices.

Adds agent-based full file system acquisition for iOS 14.4 – 14.8 on A11/A12/A13 devices
Adds agent-based keychain acquisition for iOS 14.4 – 14.8 on A11 devices
Adds agent-based keychain acquisition for iOS 14.4.x on A12/A13 devices

3 details in Everything

Elcomsoft targets backup encryption, recovers Acronis, Macrium, and Veeam passwords Jan 6, 2022 · release notes

Elcomsoft Distributed Password Recovery 4.43 adds backup password recovery for Acronis, Macrium, and Veeam with metadata extraction

Elcomsoft Distributed Password Recovery 4.43 recovers encryption passwords for Acronis True Image, Acronis Cyber Protect Home Office, Macrium Reflect 8, and Veeam Backup & Replication
Elcomsoft Hash Extractor extracts encrypted backup metadata to a small file, allowing password attacks without loading multi-gigabyte backup files
GPU-accelerated recovery is enabled for Acronis, Macrium, and Veeam formats

3 details in Everything

Elcomsoft adds support for BestCrypt Volume Encryption 5 Dec 28, 2021 · release notes

ElcomSoft products add support for Jetico BestCrypt Volume Encryption v4 and v5

Adds BestCrypt Volume Encryption detection and metadata extraction to Elcomsoft System Recovery 8.01.
Adds BestCrypt Volume Encryption detection to the free tool Elcomsoft Encrypted Disk Hunter 1.10.
Adds BestCrypt Volume Encryption detection and metadata extraction to Elcomsoft Forensic Disk Decryptor 2.19.

3 details in Everything

Elcomsoft Phone Breaker 10.1: bugfix and maintenance release Dec 23, 2021 · release notes

Elcomsoft Phone Breaker 10.1 adds offline trusted device iCloud extraction and Cellebrite UFED keychain support.

Supports offline trusted device iCloud extractions without requiring the iPhone to maintain an active Internet connection
Adds support for the .plist keychain format used by Cellebrite UFED
Adds compatibility with macOS 12 Monterey

3 details in Everything

iOS Forensic Toolkit 8.0 beta 3: forensically sound checkm8 extraction of iPhone 7, iOS 15.2 support Prerelease Dec 22, 2021 · release notes

iOS Forensic Toolkit 8.0 beta 3 adds forensically sound checkm8 extraction for iPhone 7 and iOS 15.2 support

Adds forensically sound, bootloader-based checkm8 extraction for iPhone 7 and 7 Plus running iOS 10 through 13.
Adds support for extracting file systems from devices running iOS 15.2 (iPhone 6s/6s Plus/SE/7/7 Plus).
Adds keychain decryption capability for all supported devices running iOS 15.x.

3 details in Everything

Advanced Office Password Recovery: guaranteed recovery of legacy DOC/XLS documents Dec 20, 2021 · release notes

Advanced Office Password Recovery adds guaranteed recovery for legacy .doc/.xls via 40-bit keys and Thunder Tables.

Adds guaranteed-timeframe recovery for legacy .doc/.xls documents by targeting the 40-bit encryption key instead of the password
Forensic edition unlocks 100% of Word documents in less than a minute with Thunder Tables®
Forensic edition unlocks 97% of Excel documents in several minutes with Rainbow Tables

3 details in Everything

└──▷ BREAKING ON UPGRADE

!Removed run as administrator

iOS Forensic Toolkit 8.0 beta 2 brings forensically-sound checkm8 extraction and iOS 15 support Prerelease Nov 17, 2021 · release notes

iOS Forensic Toolkit 8.0 beta 2 adds forensically-sound checkm8 extraction for iOS 15 and macOS Monterey support

Adds bootloader-based, forensically-sound checkm8 extraction for iPhone 5s/6/6s/SE devices running iOS 14 up to 14.8.1 and iOS 15 up to 15.1 (file system only)
Adds verification of chain of custody via checksum matching for subsequent extractions when device is powered off between runs

2 details in Everything

Elcomsoft System Recovery 8.0 - a forensically sound field analysis tool with write-blocking disk imaging Nov 3, 2021 · release notes

Elcomsoft System Recovery 8.0 adds write-blocking disk imaging and .E01 support for forensically sound field triage

Adds write-blocking mode to prevent data modification during initial analysis steps
Adds support for saving disk images in the digitally signed .E01 forensic format

2 details in Everything

Elcomsoft iOS Forensic Toolkit 7.03 simplifies agent sideloading in macOS, improves support for legacy devices Sep 8, 2021 · release notes

Elcomsoft iOS Forensic Toolkit 7.03 adds app-specific password support for agent sideloading and rewrites the macOS disk image decryption engine.

macOS, developer Apple ID accounts: added the ability to sign acquisition agent with app-specific password
Agent-based acquisition for all 64-bit models becomes more flexible thanks to the improved agent signing/sideloading.

2 details in Everything

iOS Forensic Toolkit 7.02 simplifies macOS installations, fixes corrupted file system extraction Jul 15, 2021 · release notes

iOS Forensic Toolkit 7.02 adds agent-based file size limiting for corrupted filesystems and simplified macOS install

Adds Acquisition agent option to restrict maximum file size during low-level extraction (default 512 GB)
Enables drag-and-drop installation on macOS via a single notarized app bundle

2 details in Everything

Elcomsoft Phone Viewer 5.31 update previews OneDrive deleted files metadata Jul 13, 2021 · release notes

Elcomsoft Phone Viewer 5.31 adds OneDrive deleted file metadata preview

Adds the ability to preview metadata for files deleted from OneDrive without recovering them first.

1 detail in Everything

Elcomsoft System Recovery update simplifies digital field triage Jun 17, 2021 · release notes

Elcomsoft System Recovery 7.08 adds Wi-Fi password extraction, Windows license key retrieval, and embedded FAR file manager.

Adds ability to extract saved Wi-Fi passwords from examined hosts for use in custom dictionaries.
Adds extraction of Windows license keys to identify the owner of the computer being examined.
Bundles Far Manager (FAR) as an embedded two-panel file manager for in-field navigation.
Moves password hints and QA extraction to a separate menu item for easier access.

4 details in Everything

ElcomSoft adds OneDrive, Microsoft Timeline extraction Jun 15, 2021 · release notes

ElcomSoft Phone Breaker 9.70 adds OneDrive file download and Windows Timeline extraction

Adds OneDrive file downloading capability to ElcomSoft Phone Breaker 9.70, including OneDrive Vault contents and metadata for recently deleted files.
Adds support for extracting and analyzing Windows 10 Timeline data in ElcomSoft Phone Breaker 9.70 and Elcomsoft Phone Viewer 5.30, providing timestamped app usage and web visit history.

2 details in Everything

Forensic Disk Decryptor 2.18 extracts VeraCrypt on-the-fly encryption keys Jun 3, 2021 · release notes

Forensic Disk Decryptor 2.18 adds RAM key extraction for recent VeraCrypt versions

Adds support to extract on-the-fly encryption keys from RAM dumps of recent VeraCrypt versions (including 1.24 Update 7)

1 detail in Everything

└──▷ BREAKING ON UPGRADE

!RAM dumps created with third-party tools or older versions of EFDD will not allow discovering the encryption keys stored by recent versions of VeraCrypt; EFDD 2.18 must be used to both analyze and capture memory dumps.

iOS Forensic Toolkit 8.0 beta brings forensically-sound checkm8 extraction for select iPhone & iPad models Prerelease May 19, 2021 · release notes

iOS Forensic Toolkit 8.0 beta adds checkm8-based RAM extraction for iPhone 5s/6/6s/SE

Adds checkm8 based RAM extraction enabling forensically sound full file system and keychain decryption for select older iOS devices without booting the device OS.
Expands device support to include iPhone 5s, iPhone 6/6 Plus/6s/6s Plus, and iPhone SE (1st Gen) via checkm8 exploitation.
Adds bypass of USB restricted mode and supports locked/disabled devices in BFU state during acquisition.

3 details in Everything

Elcomsoft Wireless Security Auditor supports NVIDIA Ampere boards Apr 12, 2021 · release notes

Elcomsoft Wireless Security Auditor 7.40 adds support for NVIDIA Ampere RTX 3000-series GPUs

Adds support for NVIDIA's latest RTX 3000-series boards based on the Ampere architecture.

1 detail in Everything

ElcomSoft extracts passwords from instant messengers Apr 8, 2021 · release notes

Adds password extraction for PalTalk, Pigin, Psi Jabber, Gadu-Gadu, Gajim, Trillian, BigAnt, Brosix and Skype backup/restore

Advanced IM Password Recovery v4.91 adds support for extracting account passwords from the latest versions of PalTalk, Pigin, Psi Jabber client, Gadu-Gadu, Gajim, Trillian, BigAnt, and Brosix instant messengers.
Advanced IM Password Recovery v4.91 enables backup and restore of Skype passwords.

2 details in Everything

Elcomsoft breaks RAR5 and 7Zip passwords Apr 6, 2021 · release notes

Elcomsoft Advanced Archive Password Recovery 4.60 adds RAR5/7Zip format support and multithreaded dictionary engine.

Enables multithreaded dictionary attacks using multiple CPU cores

1 detail in Everything

Supporting Sage 50 Accounting and Sage 50cloud Accounts Mar 29, 2021 · release notes

Advanced Sage Password Recovery adds instant password support for Sage 50 Accounting 2021 and Sage 50cloud Accounts

Elcomsoft iOS Forensic Toolkit 7.0: low-level extraction without a jailbreak for iPhone 12, iOS 14.x Mar 18, 2021 · release notes

Elcomsoft iOS Forensic Toolkit 7.0 adds low-level jailbreak-free extraction for iPhone 12 and iOS 14 via built-in agent

Adds support for A14 Bionic devices (full iPhone 12 range and iPad Air 4th generation)
Adds support for Apple devices running iOS 14.0 through 14.3 via extraction agent (full file system and keychain)

2 details in Everything

Elcomsoft iOS Forensic Toolkit 6.71: extended Recovery mode support and plenty of bugfixes Feb 18, 2021 · release notes

EIFT 6.71 adds bootloader and iOS version extraction in Recovery mode, allows skipping backup creation.

Adds bootloader version and iOS version data retrieval when connecting via Recovery mode
Allows returning to the main menu without creating a backup when the password is unknown

2 details in Everything

iOS Forensic Toolkit 6.70: Full Support for iPhone 4, 5 and 5c Feb 2, 2021 · release notes

iOS Forensic Toolkit 6.70 adds passcode unlocking and physical imaging for legacy iPhone 4, 5, and 5c models.

Adds passcode unlock capability for iPhone 4 and 5 models
Enables full physical acquisition (data partition imaging) for iPhone 4, 5, and 5c

2 details in Everything

Elcomsoft Forensic Disk Decryptor 2.17 instantly unlocks Windows 10 (20H2) BitLocker volumes Jan 21, 2021 · release notes

Elcomsoft Forensic Disk Decryptor 2.17 adds memory imaging for Windows 10 (20H2) BitLocker volumes

Adds support for creating forensic RAM images of computers running Windows 10 Feature Update (20H2)
Enables decryption and mounting of BitLocker-encrypted disks in Windows 10 (20H2) using keys extracted from memory or hibernation files

2 details in Everything

Elcomsoft breaks BestCrypt containers, supports NVIDIA Ampere cards Dec 17, 2020 · release notes

Elcomsoft tools add BestCrypt 9 container support, MyOffice decryption, and AMD/Intel GPU acceleration for ZIP/RAR.

Adds Jetico BestCrypt 9 container extraction to Elcomsoft Forensic Disk Decryptor 2.16
Adds BestCrypt attack capability to Elcomsoft Distributed Password Recovery
Adds MyOffice document and spreadsheet support to Advanced Office Password Recovery 6.63
Adds AMD and Intel GPU acceleration for ZIP and RAR password recovery in Elcomsoft Distributed Password Recovery

4 details in Everything

iOS Forensic Toolkit 6.60: jailbreak-free extraction for iOS 9.0 through 13.7 Dec 3, 2020 · release notes

iOS Forensic Toolkit 6.60 adds jailbreak-free agent-based extraction for iOS 9.0–13.7 and extended logical acquisition for A14 devices.

Adds full file system and keychain decryption support for iOS 13.5.1 through 13.7 via the extraction agent, extending jailbreak-free coverage to iOS 9.0–13.7 with no gaps
Enables extended logical acquisition on A14 Bionic devices including iPhone 12 models and new iPad Air

2 details in Everything

Advanced Intuit Password Recovery 3.11 breaks Quicken 2020 and QuickBooks 2021 passwords Nov 2, 2020 · release notes

Tool now supports Quicken 2020 and QuickBooks 2021 with GPU-accelerated recovery or instant password reset.

Elcomsoft iOS Forensic Toolkit 6.52: plugging the last gap Oct 21, 2020 · release notes

Elcomsoft iOS Forensic Toolkit 6.52 adds jailbreak-free file system and keychain extraction for iPhone 5s/6 on iOS 12.

Adds full file system and keychain decryption support for iPhone 5s and iPhone 6 running iOS 12.3 through iOS 12.4.8 without jailbreak
Extends zero-jailbreak keychain and file system extraction coverage to all Apple devices supporting iOS 9.0 through iOS 13.5 (including iPhone 6s through iPhone 11 Pro Max)

2 details in Everything

Elcomsoft Phone Viewer 5.20 updated for iOS 14 Oct 8, 2020 · release notes

Elcomsoft Phone Viewer 5.20 adds iOS 14 backup support and Magnet AXIOM .tar import.

Adds preliminary support for iOS 14 local and iCloud backup formats
Adds support for .tar files created with Magnet AXIOM Acquire

2 details in Everything

Elcomsoft iOS Forensic Toolkit 6.51 adds support for iOS 14 Oct 5, 2020 · release notes

Elcomsoft iOS Forensic Toolkit 6.51 adds iOS 14 logical acquisition and jailbreak-based filesystem/keychain extraction.

Adds extended logical acquisition for all iOS 14 and iPadOS 14 devices
Adds full file system and keychain decryption for select iPhone models on iOS 14 via checkra1n jailbreak
Allows setting SSH port number and root password in scripts instead of prompts

3 details in Everything

iOS Forensic Toolkit 6.50: jailbreak-free extraction without an Apple Developer Account Sep 3, 2020 · release notes

iOS Forensic Toolkit 6.50 adds jailbreak-free extraction for iOS up to 13.5 without an Apple Developer account

Drops the requirement for a paid Apple Developer Account to extract file systems and decrypt keychains on macOS
Adds agent-based extraction support for iOS versions up to and including iOS 13.5

2 details in Everything

Elcomsoft iOS Forensic Toolkit 6.40: iPhone 5 and 5c passcode unlock Aug 25, 2020 · release notes

Elcomsoft iOS Forensic Toolkit 6.40 adds software-based passcode unlock for iPhone 5/5c.

Adds support for unlocking encrypted iPhones (iPhone 5 and 5c) protected with an unknown screen lock passcode via software-only brute force.
Introduces a smart attack for 6-digit passcodes that prioritizes common passwords and date-of-birth combinations before full brute-force.

2 details in Everything

Elcomsoft adds LUKS encryption support Aug 18, 2020 · release notes

ElcomSoft tools add LUKS encrypted disk detection, metadata extraction, and GPU-accelerated password attack support

Elcomsoft Forensic Disk Decryptor 2.13 can now recognize LUKS-encrypted partitions, display their information, and save the encryption metadata.
Elcomsoft System Recovery 7.06 can now extract encryption metadata from LUKS volumes attached to a suspect's computer by booting the target into Windows PE.
Elcomsoft Distributed Password Recovery 4.22 now supports launching GPU-accelerated attacks on LUKS encryption passwords using extracted metadata.

3 details in Everything

Elcomsoft Internet Password Breaker 3.30 extracts passwords from Tor and 360 Safe browsers Aug 11, 2020 · release notes

Elcomsoft Internet Password Breaker 3.30 adds extraction support for Qihoo 360 Safe and Tor browsers

Adds Qihoo 360 Safe Browser password extraction capability
Adds Tor Browser password extraction capability

2 details in Everything

iOS Forensic Toolkit 6.30: jailbreak-free iOS 9 support, user data extraction Aug 6, 2020 · release notes

iOS Forensic Toolkit 6.30 adds jailbreak-free iOS 9 support and a user data only extraction mode

Adds jailbreak-free file system and keychain acquisition for all 64-bit devices running iOS 9 via an extraction agent
Adds a new acquisition option to extract user data only, skipping static system files

2 details in Everything

Elcomsoft Encrypted Disk Hunter discovers encrypted disk volumes on live systems Jul 28, 2020 · release notes

New portable CLI tool Elcomsoft Encrypted Disk Hunter discovers live encrypted volumes on Windows, macOS and Linux

Adds Elcomsoft Encrypted Disk Hunter as a new portable command-line tool for discovering encrypted disk volumes on live systems
Enables detection of TrueCrypt/VeraCrypt, BitLocker, PGP WDE, FileVault2, and LUKS full-disk encryption tools across Windows 7–10, macOS, and Linux
Adds driver chain analysis to report potential encrypted volumes even when not currently mounted or attached

3 details in Everything

Elcomsoft Phone Breaker 9.61 adds iOS 14 support, fixes iCloud backups Jul 21, 2020 · release notes

Elcomsoft Phone Breaker 9.61 introduces new cloud backup capabilities for iOS 14 beta devices and restores previously broken support for older iOS versions.

Advanced Office Password Recovery 6.60 adds Hancom Office, iWork 2020 v10 support Jul 13, 2020 · release notes

Advanced Office Password Recovery 6.60 adds support for Hancom Office 2020 and iWork 2020 document formats

Adds full compatibility with documents created by Hancom Office Word 2020
Adds full compatibility with workbooks created by Hancom Office Cell 2020
Adds full compatibility with documents produced by iWork 2020 v10

3 details in Everything

Elcomsoft Internet Password Breaker 3.20 extracts Yandex Browser, Tencent QQ and UC Browser passwords Jul 7, 2020 · release notes

Elcomsoft Internet Password Breaker 3.20 adds password extraction for Yandex Browser, QQ Browser, and UC Browser.

New: added support for current versions of Yandex Browser to extract stored passwords using the latest encryption scheme
New: added support for QQ Browser to decrypt and retrieve saved credentials from the Windows desktop version
New: added support for UC Browser to access stored passwords from the Windows desktop client

3 details in Everything

Elcomsoft System Recovery adds BitLocker support Jun 30, 2020 · release notes

Elcomsoft System Recovery 7.05 extends its Windows PE-based password recovery toolkit to natively identify and mount BitLocker-encrypted volumes using three protector types.

Supports Password, Recovery Key, and USB Key protectors for BitLocker volumes

1 detail in Everything

iOS Forensic Toolkit 6.20: filling the gaps Jun 16, 2020 · release notes

iOS Forensic Toolkit 6.20 expands jailbreak-free extraction to iOS 10, limited iOS 12 on older iPhones, and adds keychain support for Apple TV.

Adds full file system and keychain acquisition for iOS 10 without a jailbreak
Adds support for iPhone 5s and iPhone 6 running previously unsupported versions of iOS 12 with file system extraction only
Adds keychain decryption support for Apple TV 4 (HD) and Apple TV 4K on tvOS 13.4 through 13.4.5

3 details in Everything

ElcomSoft Phone Breaker 9.60 and Elcomsoft Phone Viewer 5.10 streamline iCloud data analysis Jun 11, 2020 · release notes

ElcomSoft Phone Breaker 9.60 groups iCloud data into three categories; Viewer 5.10 adds Keychain display.

ElcomSoft Phone Breaker 9.60 streamlines access to iCloud data by grouping synced content into iCloud Synced Data, iCloud Drive, and iCloud Backups categories.
Elcomsoft Phone Viewer 5.10 adds support for displaying Keychain records extracted from local backups, physical acquisitions, or cloud sources.

2 details in Everything

Elcomsoft iOS Forensic Toolkit 6.10: jailbreaking all the way Jun 8, 2020 · release notes

Elcomsoft iOS Forensic Toolkit 6.10 adds keychain acquisition and file system extraction for specific iOS 13 versions via unc0ver v5 and checkra1n.

Adds keychain acquisition for iOS 13.5, 13.4.1, 13.4 and 13.3.1 with unc0ver v5 jailbreak
Adds keychain acquisition for iOS 13.5 and 13.5.1 with checkra1n jailbreak

2 details in Everything

└──▷ BREAKING ON UPGRADE

!Removes support for rootlessJB jailbreak; users must use agent-based acquisition instead

Forensic Disk Decryptor 2.12 and System Recovery 7.04 Display File System Data, Expand VeraCrypt Support May 27, 2020 · release notes

Forensic Disk Decryptor 2.12 and System Recovery 7.04 expand VeraCrypt/GPT support and add cached credential discovery.

Adds VeraCrypt volume support for GPT partitions in Forensic Disk Decryptor
Enables automatic file system information display (NTFS, FAT32, ExFAT, ReFS, HFS+, APFS) in both tools
Adds plaintext password discovery for cached domain credentials in System Recovery

3 details in Everything

iOS Forensic Toolkit 6.0: jailbreak-free extraction for iOS 11 through 13.4.1 May 26, 2020 · release notes

iOS Forensic Toolkit 6.0 adds jailbreak-free file system extraction for iOS 13.3.1–13.4.1 on iPhone 6s through 11.

Elcomsoft Distributed Password Recovery 4.21 updated with stronger privacy control, breaks Mozilla Firefox master password May 21, 2020 · release notes

Elcomsoft Distributed Password Recovery 4.21 adds Firefox master password attacks and portable Elcomsoft Hash Extractor

Adds attack capability for Mozilla Firefox master passwords in Elcomsoft Distributed Password Recovery
Adds portable version of Elcomsoft Hash Extractor for extracting hashes from live systems
Adds support for Microsoft Office, Open Document, Apple iWork, Hancom and Adobe Acrobat to Elcomsoft Hash Extractor

3 details in Everything

iOS Forensic Toolkit 5.50: iPhone extraction simplified May 12, 2020 · release notes

iOS Forensic Toolkit 5.50 adds redesigned acquisition channel allowing wireless extractions and new iOS 13.x support.

Adds a redesigned communication channel between the host and iPhone that removes the need to disable Wi-Fi during logical acquisitions
Adds support for iOS 13.5 (beta)
Adds acquisition time reporting for time-consuming operations

3 details in Everything

Elcomsoft Phone Viewer 5.0 displays Telegram secret chats Apr 29, 2020 · release notes

Elcomsoft Phone Viewer 5.0 adds Telegram secret chat display and Signal 3.1.0.20 support

Adds ability to display Telegram conversation histories including secret chats and attachments from TAR images.

1 detail in Everything

Elcomsoft System Recovery update: enhanced password extraction and account recovery algorithms Apr 28, 2020 · release notes

Enhanced password extraction and recovery algorithms with automatic Firefox credential usage

Utilizes an enhanced, smarter and significantly more efficient algorithm for account password recovery
Automatically extracts stored passwords from the target system (including various system passwords and Firefox browser passwords) to use in preliminary attacks
Targets password reuse by implementing attacks on similar passwords

3 details in Everything

Elcomsoft Internet Password Breaker 3.10 extracts Edge Chromium passwords, updates Chrome support Apr 15, 2020 · release notes

Elcomsoft Internet Password Breaker 3.10 adds the ability to extract stored passwords from the newest Chromium-based Microsoft Edge browser and updates compatibility with the latest builds of Google Chrome and Opera.

Sage and Microsoft SQL update: ready for 2020 Apr 9, 2020 · release notes

ASAPR and ASQLPR add support for Sage 2019/2020 and MS SQL 2019 formats

Adds Advanced Sage Password Recovery support for Swiftpage Act! 2020 (v22)
Adds Advanced Sage Password Recovery support for Sage 50 Accounting (Peachtree) 2020 (v27)
Adds Advanced Sage Password Recovery support for the Canadian edition of Simply Accounting
Adds Advanced Sage Password Recovery support for Sage 50 Accounts 2019 (v25)
Adds Advanced SQL Password Recovery support for MS SQL 2019 databases

5 details in Everything

Elcomsoft breaks VeraCrypt containers, expands cloud support with Microsoft Azure deployment Apr 2, 2020 · release notes

Elcomsoft Distributed Password Recovery 4.20 adds VeraCrypt, Azure, Tally Vault and APFS FileVault support

Added VeraCrypt container support for encrypted volume password attacks.
Added on-demand deployment of agents in Microsoft Azure cloud instances.
Added support for FileVault 2 volumes located on APFS-formatted partitions.
Added support for Tally Vault passwords with CPU-only attack capability.
Dictionaries can be added from the program console.

+3 more show less

Improved flexible masks to enable attacks based on advanced password templates.
Added support for macOS Catalina keychain passwords.
Added support for PMKID in WPA/WPA2-PSK password recovery.

8 details in Everything

ElcomSoft Phone Breaker 9.50 fixes iCloud access, upgrades Home licenses to Pro Apr 1, 2020 · release notes

ElcomSoft Phone Breaker 9.50 adds iCloud 2FA support, Cellebrite keychain browsing, and iOS 13 Apple Maps extraction.

Adds support for extracting Apple Map data protected with end-to-end encryption (iOS 13)
Enables opening and viewing keychain (plist) files obtained with Cellebrite UFED 4PC

2 details in Everything

└──▷ BREAKING ON UPGRADE

!Home edition is deprecated; existing Home licenses are automatically migrated to Professional edition.

Elcomsoft System Recovery and Forensic Disk Decryptor updates: macOS encryption and VeraCrypt support Mar 31, 2020 · release notes

ESR 7.2 adds macOS bootable drive creation and hash extraction for HFS+/APFS; FDD 2.11 adds VeraCrypt support

Elcomsoft System Recovery 7.2 now creates a bootable flash drive that extracts hashes from encrypted HFS+ and APFS volumes on macOS computers
Elcomsoft Forensic Disk Decryptor 2.11 receives full support for VeraCrypt volumes, enabling hash extraction for password attacks
Elcomsoft System Recovery 7.2 automatically saves password hashes to the bootable flash drive via a countdown timer when keyboard/mouse drivers are unavailable

3 details in Everything

iOS Forensic Toolkit 5.30: jailbreak-free extraction for multiple Apple devices Feb 20, 2020 · release notes

iOS Forensic Toolkit 5.30 adds jailbreak-free agent-based extraction for iOS 11-12.4 devices

Adds agent-based extraction that accesses the file system without jailbreaking
Enables full file system extraction and keychain decryption on iOS 11 through 12.4 (except 12.3 and 12.3.1)
Increases extraction performance to over 1 GB per minute

3 details in Everything

Advanced Office Password Recovery: it’s all about the speed Feb 19, 2020 · release notes

Advanced Office Password Recovery 6.50 adds up to 4x CPU speedup and enhanced NVIDIA GPU acceleration.

Doubling or quadrupling recovery speed for CPU-only attacks on specific Microsoft Office versions in version 6.50
Improving GPU-assisted attack speed by 30% to nearly double on certain NVIDIA video cards

2 details in Everything

iOS Forensic Toolkit 5.21 extracts keychain from locked iOS devices Dec 20, 2019 · release notes

iOS Forensic Toolkit 5.21 adds BFU keychain extraction via checkra1n for A7-A11 devices and unambiguous filenames

Adds BFU (before first unlock) keychain extraction and decryption support for Apple devices with A7 through A11 SoC using the checkra1n jailbreak.

1 detail in Everything

ElcomSoft Phone Breaker 9.40 is out with support for Skype chats, files and metadata Dec 19, 2019 · release notes

ElcomSoft Phone Breaker 9.40 expands forensic capabilities by adding native support for extracting and viewing Skype chat histories, media files, and associated metadata, including data for recently deleted conversations.

iOS Forensic Toolkit 5.20 adds future-proof file system extraction support for Apple devices with checkra1n jailbreak Nov 27, 2019 · release notes

iOS Forensic Toolkit 5.20 adds checkra1n-based physical acquisition for pre-A12 devices and BFU extraction

Adds file system extraction and keychain decryption support for Apple devices running iOS 12 through 13.3 using the checkra1n jailbreak exploit
Enables partial acquisition for devices in Before First Unlock (BFU) state or with unknown screen lock passcode
Allows partial file system extraction for devices currently in USB restricted mode
Automatically populates the default root password alpine during jailbreak prompts to reduce manual typing

4 details in Everything

ElcomSoft Phone Breaker 9.30 is out with new iCloud engine, low-level iCloud Drive access, iOS 13.2 and macOS Catalina support Nov 14, 2019 · release notes

EPB 9.30 adds low-level iCloud Drive container access and iOS 13.2 backup support

Adds advanced iCloud Drive structure analysis for deep extraction of secure container data
New iCloud downloading engine supports downloading backups from all iOS versions up to 13.2
Adds support for local iTunes backups produced by release versions of iOS 13.x
Adds full support for macOS Catalina (macOS 10.15)

4 details in Everything

Elcomsoft Phone Breaker 9.20 extracts Screen Time passwords and Voice Memos from iCloud Oct 1, 2019 · release notes

Elcomsoft Phone Breaker 9.20 adds extraction of iOS Screen Time passwords and Voice Memos from iCloud backups.

Adds extraction of Apple's Voice Memos audio clips from iCloud synced data in Elcomsoft Phone Breaker
Adds parsing and display of Screen Time data in Elcomsoft Phone Viewer 4.70
Adds parsing and viewing of Voice Memos audio clips in Elcomsoft Phone Viewer 4.70
Replaces Bundle ID's with friendly names for native Apple applications in Elcomsoft Phone Viewer

4 details in Everything

Elcomsoft iOS Forensic Toolkit 5.10 with iOS 12.2 and 12.4 file system acquisition Sep 6, 2019 · release notes

Elcomsoft iOS Forensic Toolkit 5.10 adds file system extraction and keychain decryption for iOS 12.2/12.4

Adds physical file system extraction capability for devices running iOS 12.2 and iOS 12.4.
Enables keychain decryption to extract passwords and authentication credentials on non-A12/A12X devices.

2 details in Everything

Elcomsoft Phone Viewer 4.60 reveals Restrictions and Screen Time passwords, decrypts Signal history Aug 29, 2019 · release notes

Elcomsoft Phone Viewer 4.60 adds Restrictions/Screen Time password recovery and Signal history decryption.

Adds the ability to recover iOS 7 through 11 Restrictions passwords by brute-forcing the fixed 4-digit hash in the background during backup load
Adds the ability to reveal iOS 12 Screen Time passwords extracted from the keychain via physical acquisition or known-password local backups
Adds the ability to decrypt and display Signal conversation histories, account info, call logs, and attachments from encrypted database files obtained via physical acquisition
Improves backup opening time by allowing pre-selection of data categories for local/cloud backups and file system images

4 details in Everything

Elcomsoft Cloud Explorer 2.20 Fixes Google Photos Support, Downloads More Historical Data Aug 8, 2019 · release notes

Elcomsoft Cloud Explorer 2.20 adds pre-filtering for Google Photos and supports new Google data types.

Adds the ability to pre-filter Google Photos downloads by custom criteria (e.g., date range) before acquisition
Expands Google Account acquisition to include Visited tree data, Android web history, Google Assistant Voice search requests, Google Lens Search history, Google Play Books, and Google Play Movies & TV

2 details in Everything

└──▷ BREAKING ON UPGRADE

!Google Photos EXIF metadata is no longer extracted due to API restrictions (known issue)
!Location history view defaults to OpenStreetMap instead of Google Maps

ElcomSoft Phone Breaker 9.15 supports iOS 13 and iPadOS beta, extracts iCloud tokens from macOS Jul 25, 2019 · release notes

Phone Breaker 9.15 adds iCloud backup support for iOS 13/iPadOS betas and cross-machine iCloud token extraction from macOS

Adds support for downloading iCloud backups created by devices running iOS 13 and iPadOS beta versions
Enables extraction of fully-featured iCloud authentication tokens from macOS computers for use on any other machine

2 details in Everything

ElcomSoft Phone Breaker 9.10 fixes iCloud backups downloading for iOS 11.2-12.4 Jun 4, 2019 · release notes

ElcomSoft Phone Breaker 9.10 adds experimental iCloud backup support for iOS 11.2-12.4 and faster decryption

Adds experimental support for downloading iCloud backups from iOS 11.2 through 12.4 devices with two-factor authentication enabled
Enables full access to iCloud synchronized data (including Health and Messages) in the Windows version of the tool
Implements multi-threaded decryption engine utilizing all available CPU and GPU resources for local iTunes backups

3 details in Everything

Elcomsoft Phone Viewer 4.50 adds data export support, allows evidence analysis in external tools May 16, 2019 · release notes

ElcomSoft Phone Viewer 4.50 adds data exporting to Microsoft Excel format for iOS evidence

Elcomsoft System Recovery 6.0 Extracts Hibernation Files and Data to Break Full Disk Encryption Passwords Apr 25, 2019 · release notes

ESR 6.0 adds hiberfil.sys extraction, FDE auto-detection, and Windows 10/Server 2019 support

Adds automatic detection of full-disk encryption (BitLocker, PGP, TrueCrypt/VeraCrypt)
Adds hiberfil.sys saving to flash drive for hibernation key extraction
Adds SYSKEY password search capability in addition to reset
Adds user-defined dictionary support with mutations
Adds support for Windows 10 October 2018 Update and Windows Server 2019

5 details in Everything

Elcomsoft Explorer for WhatsApp Supports iOS 12, New Google Drive Backups Mar 21, 2019 · release notes

v2.70 enhances iCloud 2FA flexibility and adds new auth token support for Drive downloads.

Adds support for one-time codes delivered via an SMS or generated offline from the device Settings app to pass Two-Factor Authentication checks for iCloud accounts
Adds support for new authentication tokens produced by recent versions of the iCloud app in Windows and macOS to download WhatsApp backups from iCloud Drive

2 details in Everything

Elcomsoft Phone Viewer 4.40 shows trusted devices, adds local Apple Health support Feb 28, 2019 · release notes

Elcomsoft Phone Viewer 4.40 adds trusted device listing and local Apple Health data extraction.

Adds the ability to view trusted devices downloaded from iCloud via Elcomsoft Phone Breaker.
Enables extraction and decryption of Apple Health data from password-protected iTunes backups and iOS file system images (TAR/ZIP).

2 details in Everything

Elcomsoft iOS Forensic Toolkit 5.0 enables iOS 12 physical extraction Feb 21, 2019 · release notes

Elcomsoft iOS Forensic Toolkit 5.0 enables physical acquisition for iOS 12 devices using a new rootless jailbreak method.

Adds support for physical acquisition of Apple devices running all versions of iOS 12 up to and including iOS 12.1.2
Enables file system extraction for all devices supported by the rootless jailbreak without altering the system partition
Allows decryption of keychain passwords and authentication credentials for protected parts of the file system

3 details in Everything

Advanced Intuit Password Recovery supports Quicken/QuickBooks 2018-2019 Feb 14, 2019 · release notes

Adds Quicken/QuickBooks 2018-2019 support and CUDA 10 GPU acceleration for password recovery

Adds QuickBooks 2018 & QuickBooks 2019 support (instant password reset)
Adds support for CUDA 10 video cards (NVIDIA GeForce 2xxx series, NVIDIA Quadro RTX 6000/5000, NVIDIA Tesla T4)

2 details in Everything

Elcomsoft iOS Forensic Toolkit supports the entire range of iOS 11 devices with iOS 11.4 and 11.4.1 jailbreak Feb 6, 2019 · release notes

Elcomsoft iOS Forensic Toolkit extends physical acquisition support to iOS 11.4/11.4.1 via jailbreak.

Adds support for physical acquisition on iOS 11.4 and iOS 11.4.1 devices using unc0ver and Electra jailbreaks
Enables file system extraction for the entire range of iOS 11 devices, including access to protected keychain items and application sandboxes

2 details in Everything

Advanced PDF Password Recovery and Advanced Office Password Recovery updates Feb 5, 2019 · release notes

Multi-core password recovery for Acrobat 9 and 40-bit PDFs; OpenCL migration for AMD in Advanced Office.

Adds multi-core password recovery for Acrobat 9 attacks (masks and brute force)
Adds multi-core password recovery for PDF files with 40-bit protection (attacks on encryption key)
Migrates AMD support to OpenCL in Advanced Office Password Recovery

3 details in Everything

Elcomsoft Phone Viewer 4.30 supports GrayKey images, Microsoft Store version of iTunes Jan 24, 2019 · release notes

Elcomsoft Phone Viewer 4.30 adds GrayKey ZIP support and auto-detection for Microsoft Store iTunes backups.

Added support for GrayKey *.ZIP archives (physical extraction)
Windows 10: added the ability to automatically detect backup location for Microsoft Store version of Apple iTunes

2 details in Everything

Elcomsoft Internet Password Breaker 3.10 Extracts Mozilla Firefox Passwords, Adds XML Export Dec 28, 2018 · release notes

Elcomsoft Internet Password Breaker 3.10 adds XML export and Firefox support

Adds XML export for extracted passwords
Adds support for the latest versions of Mozilla Firefox including the 64-bit version

2 details in Everything

Elcomsoft Phone Viewer 4.21 Optimizes Health Performance, Adds Mindfulness and Sleep Support Dec 27, 2018 · release notes

Elcomsoft Phone Viewer 4.21 adds Mindfulness/Sleep Health data, HEIC support, System filter, and 5x Health parsing speed

Adds parsing of new data categories (Mindfulness, Sleep) in the Health section
Adds System filter for shared locations in Messages
Adds support for viewing HEIC (HEIF) images and attachments in the built-in gallery
Improves Health parsing performance by a factor of 5

4 details in Everything

Elcomsoft Explorer for WhatsApp Use Jailbreak to Decrypts WhatsApp Cloud Backups Dec 20, 2018 · release notes

Elcomsoft Explorer for WhatsApp 2.60 adds jailbreak-based iCloud backup decryption and HEIC/image support

Adds the ability to decrypt stand-alone WhatsApp backups from iCloud Drive using an iPhone keychain extracted from a jailbroken device, bypassing the need for a WhatsApp activation code.
Adds support for HEIC (HEIF) images in decrypted backups.
Adds support for system messages.

3 details in Everything

Elcomsoft Distributed Password Recovery 4.1 Breaks Bitcoin Wallet Passwords Dec 19, 2018 · release notes

EDPR 4.1 adds Bitcoin wallet password attacks, OpenCL for AMD/Intel, and Turing GPU support

Adds Bitcoin support to attack passwords protecting Bitcoin Core and compatible wallets (Classic, XT, Unlimited).
Adds OpenCL support for AMD GPUs and built-in Intel graphics as a replacement for SPIR.
Adds CUDA10 support for NVIDIA Turing architecture boards (GeForce RTX 2080 Ti, RTX 2080, RTX 2070, Quadro RTX 8000/6000/5000, Tesla T4).
Adds espr_mozilla support for the new key4.db password database format.
Adds espr_pgp support for PGPZip 10.1.1 files under 1KB.

+1 more show less

Adds 7zip support for extracting passwords from 7-Zip archives.

6 details in Everything

└──▷ BREAKING ON UPGRADE

!Removed SPIR support.

ElcomSoft Phone Breaker 9.05 with Faster Download Speeds and iCloud Backups Fix Dec 18, 2018 · release notes

ElcomSoft Phone Breaker 9.05 nearly doubles iCloud sync download speeds and enables downloading iCloud backups from iOS 11.2–12.1.1.

Improves download performance for synced iCloud data, nearly doubling the speed for large datasets such as Health or Message records
Enables downloading iCloud backups created by all iOS versions from 11.2 through 12.1.1 (including accounts with Two-Factor Authentication) via a workaround that triggers an Apple ID lock and password reset

2 details in Everything

Elcomsoft iOS Forensic Toolkit 4.11 Adds Support for New iPad Pro Models, Apple Watch Extraction Dec 17, 2018 · release notes

Elcomsoft iOS Forensic Toolkit 4.11 adds Apple Watch extraction and new iPad Pro models

Adds logical acquisition support for all generations of Apple Watch devices.
Adds advanced logical acquisition for iPad Pro 11 and iPad Pro 12.9 (2018) models.
Adds macOS Mojave platform support.

3 details in Everything

Elcomsoft System Recovery 5.40 Supports Windows 10 October Update, Offers SYSKEY Recovery Dec 4, 2018 · release notes

Elcomsoft System Recovery 5.40 adds SYSKEY lookup via caches, Windows 10/Server 2019 support, and custom dictionary mutations

Adds the ability to look up for SYSKEY passwords through various caches and databases as an alternative to resetting them
Adds support for Windows 10 October 2018 Update and Windows Server 2019
Adds the ability to use custom dictionaries to recover passwords, allowing up to four levels of mutations

3 details in Everything

ElcomSoft Phone Breaker 9.0 Extracts Apple Health Data from iCloud Nov 29, 2018 · release notes

ElcomSoft Phone Breaker 9.0 enables remote extraction of synced Apple Health data from iCloud for forensic analysis.

Adds the ability to remotely extract synced Apple Health data (including step counts, distances, timestamps, and CDA documents) directly from a user's iCloud account without relying on local backups or device physical access.

1 detail in Everything

Elcomsoft iOS Forensic Toolkit 4.10 Adds Support for DFU/Recovery Modes and New iPhone Models Nov 21, 2018 · release notes

ElcomSoft iOS Forensic Toolkit 4.10 adds DFU/Recovery mode support and logical acquisition for iPhone Xs/Xr/iPad Pro

Adds the ability to connect to devices booted in DFU or Recovery modes to access device information even when USB Restricted Mode is engaged.
Adds logical acquisition support for iPhone Xs, Xs Max, and iPhone Xr devices, extracting extended device info, media files (photos/videos), crash logs, and shared files regardless of backup password.
Expands platform support to include the latest generation of Apple devices including iPhone Xs, Xs Max, Xr, new iPad Pro, and all 64-bit iPhone/iPad devices starting with iPhone 5s.

3 details in Everything

ElcomSoft Phone Breaker 8.40 Extracts Message Attachments from iCloud Nov 15, 2018 · release notes

ElcomSoft Phone Breaker 8.40 adds extraction of synced iCloud Messages and attachments

Adds capability to extract media files, documents, and other attachments from iCloud Messages
Enables access to complete sync'd conversation histories including attached files, locations, and content in near real-time

2 details in Everything

Elcomsoft Explorer for WhatsApp Supports iOS 12, New Google Drive Backups Oct 17, 2018 · release notes

Elcomsoft Explorer for WhatsApp 2.50 adds iOS 12 and new Google Drive backup support

Adds extraction of WhatsApp conversations from local backups produced by iOS 12 devices.
Adds support for obtaining and decrypting new-style WhatsApp backups (post-November 2018) stored in the user’s Google Account.
Improves downloading of stand-alone WhatsApp backups from iCloud Drive.

3 details in Everything

└──▷ BREAKING ON UPGRADE

!Drops support for Windows XP and older versions of macOS; minimum requirements are now macOS 10.11, Windows 7 SP1, or Windows Server 2008 R2.

Elcomsoft Phone Viewer Adds Apple Pay Support Aug 30, 2018 · release notes

ElcomSoft Phone Viewer 4.0 adds Apple Pay/Wallet transaction parsing, location data extraction, deleted iOS 11/12 message recovery, and per-app media grouping.

Adds parsing of Apple Pay transactions and associated card information from physical acquisitions
Enables access to location data from various sources beyond previous capabilities
Recovers deleted text messages from iOS 11/12 backups
Groups media files (images/videos) by application source to reduce visual clutter

4 details in Everything

Forensic Disk Decryptor 2.10 with VeraCrypt and TPM Support Aug 16, 2018 · release notes

EFDD v2.10 adds VeraCrypt container support and full TPM-enhanced BitLocker decryption via memory/hibernation

Adds VeraCrypt encrypted container support (all configurations) for known password, page file, or hibernation file extraction

1 detail in Everything

Elcomsoft Distributed Password Recovery 4.0 with Automatic Dictionary Distribution and Intel GPU Acceleration Aug 14, 2018 · release notes

EDPR 4.0 adds Intel GPU acceleration, automatic dictionary distribution, new hash extractor, and extended format support.

Enables hardware acceleration using Intel HD Graphics, UHD Graphics, and Intel Iris built-in GPUs for password recovery
Adds NVIDIA Volta support with CUDA 9 to double performance on multiple formats
Introduces automatic dictionary distribution from a central server to all remote agents over LAN or Internet
Includes the new Elcomsoft Hash Extractor tool for extracting password hashes from supported password managers
Replaces the Disk Encryption Info tool with an evaluation version of Elcomsoft Forensic Disk Decryptor supporting TrueCrypt, Bitlocker, PGP Disk, FileVault, and DMG

5 details in Everything

└──▷ BREAKING ON UPGRADE

!The Disk Encryption Info tool is removed from the package

Elcomsoft iOS Forensic Toolkit 4.0 Adds Physical Extraction of iOS Keychain Jun 20, 2018 · release notes

Elcomsoft iOS Forensic Toolkit 4.0 introduces physical keychain extraction and crash log access for 64-bit iOS devices.

Adds Physical Extraction of iOS Keychain capability to extract and decrypt keychain items on jailbroken 64-bit devices, bypassing Secure Enclave
Adds automatic screen lock prevention during acquisition to ensure full file extraction
Adds crash log extraction from both jailbroken and non-jailbroken iOS devices

3 details in Everything

└──▷ BREAKING ON UPGRADE

!Drops support for legacy hardware; older Apple devices are no longer supported by the default build.

ElcomSoft Phone Breaker 8.30 Extracts iMessages from iCloud Jun 14, 2018 · release notes

ElcomSoft Phone Breaker 8.30 adds first-ever remote extraction of encrypted iMessage conversations from iCloud for iOS 11.4+ devices.

Adds remote extraction of encrypted iMessage conversation histories synced to iCloud for iPhone devices running iOS 11.4 and newer.
Enables near real-time access to iMessages via iCloud synchronization, distinct from daily iCloud backups.
Expands iCloud data extraction support to include Keychain, call logs, Safari data, calendars, notes, contacts, Apple Maps, Wallet, and iBooks.

3 details in Everything

Elcomsoft Phone Viewer Now Supports TAR Images and Locations Jun 7, 2018 · release notes

ElcomSoft Phone Viewer 3.70 adds TAR image support and aggregated location view

Adds native processing and viewing of TAR images produced by physical acquisition tools like Elcomsoft iOS Forensic Toolkit and GrayKey.
Adds an aggregated location data view that combines evidence from frequent/significant locations, cache files, Apple Maps, Google Maps, EXIF data, calendar events, and the UBER app.

2 details in Everything

Elcomsoft Explorer for WhatsApp Adds WhatsApp Business Support May 29, 2018 · release notes

Elcomsoft Explorer for WhatsApp 2.40 adds extraction and decryption capabilities for WhatsApp Business on Android.

Enables physical acquisition of WhatsApp Business databases from rooted Android devices (Android 4.0-8.1)
Enables cloud acquisition of WhatsApp Business backups from Google Drive without manual phone number entry

2 details in Everything

Elcomsoft Cloud Explorer 2.10: Passwordless Authentication and Google Drive Support May 17, 2018 · release notes

Elcomsoft Cloud Explorer 2.10 adds forensically sound Google Drive extraction and passwordless auth via GTEX.

Adds Google Token Extractor (GTEX) tool to extract authentication tokens from Chrome or Google Backup and Sync for passwordless access
Adds integrated support for forensically sound extraction of Google Drive files

2 details in Everything

Elcomsoft iOS Forensic Toolkit 3.0: Physical Acquisition for iOS 10.x and iOS 11 Feb 20, 2018 · release notes

EIFT 3.0 adds physical acquisition for iOS 10-11 and new jailbreaks

Adds physical acquisition support for all iOS 10 devices up to iOS 10.2 and iOS 11.0 through 11.1.2.
Adds LiberIOS jailbreak support for iOS 11.0-11.1.2.
Adds Electra jailbreak support for iOS 11.0-11.1.2.
Adds h3lix jailbreak support for iOS 10.0-10.3.3 (32-bit).
Adds Meridian jailbreak support for iOS 10.0-10.3.3 (64-bit).

+3 more show less

Enables bit-precise image capture of 32-bit devices via supported jailbreaks.
Enables file system imaging of 64-bit iPhones and iPads via supported jailbreaks.
Adds app data extraction without jailbreak for Adobe Reader, Microsoft Office, and MiniKeePass.

8 details in Everything

Elcomsoft Phone Breaker 8.20 Extracts More Synced Data Including Wi-Fi and Apple Maps Feb 8, 2018 · release notes

Elcomsoft Phone Breaker 8.20 adds extraction of synced iCloud data including Wi-Fi networks and Apple Maps.

Adds extraction of synced iOS data types: user/account info, Wi-Fi access points, Apple Maps routes/searches/bookmarks, Wallet items, and iBooks content
Elcomsoft Phone Viewer updated to display the newly extracted synced data categories

2 details in Everything

Forensic Disk Decryptor 2.0 Provides All in One Solution for Accessing Encrypted Volumes Jan 31, 2018 · release notes

Forensic Disk Decryptor 2.0 adds plain-text/escrow key support, built-in kernel memory dumping, EnCase .E01 support, and portable USB installation.

Adds the ability to mount or decrypt encrypted volumes using plain-text passwords, escrow keys, or recovery keys in addition to extracted cryptographic keys
Adds a built-in kernel-level memory dumping tool for imaging computer RAM directly from Windows 7 through Windows 10 Fall Creators Update
Adds support for EnCase .E01 format and encrypted DMG images
Adds automatic detection of encryption algorithms and parameters (including TrueCrypt) for provided container paths
Adds a portable installation mode allowing the toolkit to be run from a user-provided USB flash drive

5 details in Everything

Elcomsoft Wireless Security Auditor: Microsoft Signed NDIS Driver, Attacks Targeting the Human Factor Jan 25, 2018 · release notes

Wireless Security Auditor 7.11 adds human-factor hybrid attacks, MS-signed NDIS driver for generic adapters, and V100/iGPU support.

Adds a new hybrid attack engine targeting the human factor to break passwords based on natural dictionary words with frequent mutations
Enables seamless installation and full compatibility with Windows 10 (including Fall Creators Update) for wireless traffic interception using generic Wi-Fi adapters via a Microsoft-signed NDIS driver
Adds GPU acceleration support for NVIDIA Tesla V100 architecture, achieving recovery rates up to 650,000 passwords per second
Adds SPIR support for AMD-made boards to improve performance and compatibility
Enables GPU acceleration for built-in Intel Iris graphics, boosting recovery speeds 2 to 3 times compared to CPU-only processing

5 details in Everything

Elcomsoft Explorer for WhatsApp Extracts Android WhatsApp Backups from Google Drive Jan 24, 2018 · release notes

Elcomsoft Explorer for WhatsApp 2.30 adds extraction and decryption of Android WhatsApp stand-alone backups from Google Drive.

iOS Forensic Toolkit 2.50 Provides Forensic Extraction of Pictures and Videos from iOS Devices Jan 9, 2018 · release notes

iOS Forensic Toolkit 2.50 adds direct extraction of photos, videos, and other media from locked iOS devices via pairing records without local backups

Adds Media Files extraction capability for iPhone and iPad running all iOS versions using lockdown files (pairing records)
Enables extraction from locked devices (passcode-protected) without requiring a local backup or cloud access
Extends extraction scope to include camera roll, photo/video editing info, iBooks content, voice recordings, and iTunes media library

3 details in Everything

Advanced Sage Password Recovery and Advanced Office Password Recovery Updated Dec 20, 2017 · release notes

ASAPR adds Act! 20/Act! Premium and Sage 50 targets; AOPR supports CUDA 9/Volta GPUs and 64 CPU cores

Advanced Sage Password Recovery (ASAPR) adds support for Act! Premium Version 20.0.159.0 (Update 4), Sage 50 Accounting Canadian Edition (Release 2018.0), Sage 50 Complete Accounting 2018 US Edition (Peachtree), and Sage 50 Accounts v23 (2017)
Advanced Office Password Recovery (AOPR) adds support for NVIDIA cards based on the Volta architecture (Tesla V100, Titan V) using CUDA 9 and SPIR engines
Advanced Office Password Recovery (AOPR) adds support for up to 64 CPU cores
Advanced Office Password Recovery (AOPR) adds support for Intel HD adapters for Microsoft Office files
Advanced Office Password Recovery (AOPR) adds support for VBA backdoor with VBE7.dll versions 7.01.1075 (32-bit) and 7.01.1071/1075 (64-bit)

+1 more show less

Advanced Office Password Recovery (AOPR) adds support for Excel Binary File Format (.xlsb) for password to open scenarios

6 details in Everything

Elcomsoft Explorer for WhatsApp 2.25 Improves iCloud Two-Factor Authentication Support Nov 30, 2017 · release notes

ElcomSoft Explorer for WhatsApp 2.25 adds stealth iCloud 2FA detection and longer token support

Adds ability to detect iCloud two-factor authentication presence without triggering push notifications during account setup
Updates token-based logins to support Apple's new, longer tokens for accounts with two-factor authentication

2 details in Everything

Elcomsoft Phone Breaker 8.1 Adds 2FA Detection, Supports SMS Authentication Nov 28, 2017 · release notes

Elcomsoft Phone Breaker 8.1 adds discreet 2FA detection for Apple accounts and SMS code support.

Discreetly detects whether an Apple account has two-factor authentication enabled without triggering a push notification on the user's device
Adds support for one-time codes delivered as text messages (SMS) for two-factor authentication

2 details in Everything

Elcomsoft Cloud Explorer 2.0: Google Prompt and FIDO Keys Support, New Mac Edition Nov 23, 2017 · release notes

Elcomsoft Cloud Explorer 2.0 adds Mac edition and supports Google Prompt and FIDO Keys for 2FA.

Adds new Mac edition of Elcomsoft Cloud Explorer, providing full feature parity with the Windows version for macOS users
Adds support for Google Prompt as a secondary authentication method for Google accounts
Adds support for FIDO Keys (including Yubico) as a secondary authentication method

3 details in Everything

iOS Forensic Toolkit 2.40 Extracts More Information from Locked iPhones Nov 9, 2017 · release notes

iOS Forensic Toolkit 2.40 adds extraction of device info from locked iPhones via lockdown records in cold boot situations.

Adds support for extracting device information (model, OS version, MAC/IMEI addresses, backup status, synced accounts) from iOS devices that are locked with an unknown passcode and have never been unlocked since reboot.
Enables extraction of comprehensive app details (names, versions, permissions, data folder names) from iOS devices that have been unlocked at least once, providing an alternative when local backups are encrypted with unknown passwords.

2 details in Everything

Advanced Intuit Password Recovery 3.0 Supports Quicken and QuickBooks 2006-2017 Nov 2, 2017 · release notes

Advanced Intuit Password Recovery 3.0 adds GPU-accelerated attacks for Quicken 2006-2017 password recovery

Supports recovering passwords for Intuit Quicken files saved by versions 2006 through 2017 using brute-force and dictionary attacks.
Supports instant password removal for QuickBooks databases in .QBW format from versions 2006 through 2017.
Supports .QDF (Quicken) and .QBW (QuickBooks) file formats from Intuit apps released between 2006 and 2017.

3 details in Everything

Elcomsoft Explorer for WhatsApp 2.20 Updated with iOS 11 and Excel Export Support Oct 19, 2017 · release notes

Elcomsoft Explorer for WhatsApp 2.20 adds iOS 11 support and Excel export

Adds full iOS 11 support, enabling extraction of WhatsApp backups from iPhone devices running the latest Apple mobile OS.
Adds export into Microsoft Excel format (XLSX), allowing experts to save extracted evidence as a spreadsheet.

2 details in Everything

Elcomsoft Phone Viewer 3.50 Adds iOS 11 Support, New Applications and Wi-Fi Plugins Sep 28, 2017 · release notes

Elcomsoft Phone Viewer 3.50 adds iOS 11 backup support and new Applications and Wi-Fi plugins.

Enables compatibility with iOS 11 backups produced by iPhones and iPads.
Adds the Applications plugin to view installed app lists, acquisition dates, versions, categories, and associated Apple IDs.
Adds the Wi-Fi plugin to display saved networks, SSIDs, passwords, BSSIDs, encryption standards, and connection timestamps.

3 details in Everything

Elcomsoft Cloud Explorer 1.40 adds XLSX Export, Android Oreo Support, Extracts SMS Text Messages, Call Logs from Google Account Sep 21, 2017 · release notes

Elcomsoft Cloud Explorer 1.40 adds XLSX export and support for Android Oreo SMS/call log extraction from Google accounts

Adds XLSX export capability to allow in-depth evidence analysis via Excel
Adds support for Android Oreo (Android 8.0) to extract SMS text messages and call logs from Google Account backups

2 details in Everything

Elcomsoft Phone Breaker 8.0 Adds iOS 11 Support Sep 14, 2017 · release notes

Elcomsoft Phone Breaker 8.0 adds iOS 11 support and includes Two-Factor Authentication in Professional edition.

Adds iOS 11 support for decrypting local backups, downloading system backups, files, media, and synced data from iCloud Drive.
Adds access to iCloud Keychain items (passwords, financial info, auth credentials) for iOS 11 devices.
Includes Two-Factor Authentication support in Professional edition (previously Forensic Edition exclusive).

3 details in Everything

iOS 9.3.5 Physical Acquisition Made Possible with Phoenix Jailbreak Aug 24, 2017 · release notes

iOS Forensic Toolkit adds physical acquisition for 32-bit iOS devices on iOS 9.3.5 via Phoenix jailbreak

Adds physical acquisition support for 32-bit iOS devices running iOS 9.3.5 using the Phoenix jailbreak, enabling full imaging and decryption of data partitions.
Enables extraction of keychain items and sandboxed app data from legacy devices including iPhone 4s, 5/5c, iPad 2/3/4, iPad mini, and iPod 5g.
Provides access to browser cache, temporary files, email messages, location history, and app data that explicitly disables backups on iOS 9.3.5.

3 details in Everything

Elcomsoft Phone Breaker 7.0 Extracts Passwords from iCloud Keychain Aug 22, 2017 · release notes

ElcomSoft Phone Breaker 7.0 introduces forensic extraction capabilities for Apple's iCloud Keychain, enabling access to stored sensitive data.

Extract and decrypt iCloud Keychain records.

1 detail in Everything

Elcomsoft Distributed Password Recovery 3.40 Adds Support for Popular Password Managers Aug 10, 2017 · release notes

Elcomsoft Distributed Password Recovery 3.40 adds attack support for 1Password, KeePass, LastPass, and Dashlane databases

Adds support to attack the master password of 1Password encrypted databases
Adds support to attack the master password of KeePass encrypted databases
Adds support to attack the master password of LastPass encrypted databases
Adds support to attack the master password of Dashlane encrypted databases

4 details in Everything

Elcomsoft Distributed Password Recovery Adds Support for Amazon P2 Instances Aug 1, 2017 · release notes

Elcomsoft Distributed Password Recovery adds support for Amazon EC2 P2 instances with NVIDIA Tesla K80 GPUs

Elcomsoft Explorer for WhatsApp Extracts iPhone WhatsApp Backups from iCloud Jul 20, 2017 · release notes

Elcomsoft Explorer for WhatsApp Extracts iPhone WhatsApp Backups from iCloud 2.10 adds extraction of stand-alone iCloud Drive backups.

Adds support for extracting and decrypting WhatsApp stand-alone backups stored in iCloud Drive by registering the tool as a new device to obtain the encryption key.

1 detail in Everything

iOS Forensic Toolkit 2.30 Adds Support for iPhone 4s, 5, 5c with iOS 9.1-9.3.4 Jul 13, 2017 · release notes

iOS Forensic Toolkit 2.30 adds full physical acquisition for iPhone 4s/5/5c running iOS 9.1-9.3.4 via Home Depot jailbreak.

Elcomsoft Phone Breaker 6.60 Offers Over-the-Air Windows 10 Acquisition Jun 22, 2017 · release notes

Elcomsoft Phone Breaker 6.60 adds over-the-air extraction of Edge browsing history, Bing search logs, call logs, and location history from Windows 10 and Mobile devices.

Adds extraction of call logs and location history from Windows 10, Windows 10 Mobile, and Windows Phone 8.1 devices via Microsoft cloud backups
Adds support for extracting data from Microsoft Accounts protected with two-factor authentication

2 details in Everything

Elcomsoft Cloud Explorer 1.31 Features New Authentication Engine, Makes Use of Authentication Tokens Jun 15, 2017 · release notes

Elcomsoft Cloud Explorer 1.31 introduces a token-based authentication engine replacing browser extraction.

Adds token caching for credentials with full 2FA support to eliminate re-authentication in subsequent acquisitions
Implements phone-specific protocols (Google proprietary) for authentication, replacing HTTP-based browser extraction

2 details in Everything

Elcomsoft Phone Breaker 6.50 Extracts Deleted Notes from iCloud May 19, 2017 · release notes

Elcomsoft Phone Breaker 6.50 adds extraction of deleted iCloud Notes and fixes iCloud backup access.

Adds the ability to extract notes from the user’s iCloud account that were previously deleted.
Updates Elcomsoft Phone Viewer with filters to distinguish between existing and deleted notes.

2 details in Everything

Elcomsoft Explorer for WhatsApp 2.02 Fixes iCloud Authentication Issues May 15, 2017 · release notes

Elcomsoft Explorer for WhatsApp 2.02 adds WhatsApp 2.17.20+ call log parsing and fixes iCloud auth

Adds support for parsing WhatsApp version 2.17.20+ call logs

1 detail in Everything

Elcomsoft Cloud Explorer 1.30 Supports Android O, Extracts SMS Text Messages, Routes and Places from Google Account Apr 26, 2017 · release notes

Elcomsoft Cloud Explorer 1.30 adds SMS extraction from Android backups and enhanced Routes/Places location data.

Adds ability to extract SMS text messages from Google Account backups for Pixel/Pixel XL devices and Android O Developer Preview
Enables over-the-air acquisition of video files directly from the user's Google Account
Enhances location history display by processing Google's Places and Routes categories to show human-readable place names instead of raw coordinates

3 details in Everything

Elcomsoft Phone Viewer 3.30 Shows Unread Notifications Extracted from Device Backups Mar 2, 2017 · release notes

Elcomsoft Phone Viewer 3.30 adds support for extracting and viewing unread iOS notifications from iCloud and local backups.

Adds extraction of unread iOS notifications from iCloud and iTunes local backups in version 3.30
Enables display of historical notification data spanning several years in the Elcomsoft Phone Viewer UI

2 details in Everything

Elcomsoft System Recovery 5.30 Supports Windows 10 Anniversary Update and Windows Server 2016 Feb 16, 2017 · release notes

Elcomsoft System Recovery 5.30 adds Windows 10 Anniversary Update SAM encryption support and Windows Server 2016 compatibility

Elcomsoft Phone Breaker 6.40 Extracts Deleted Safari Browsing History from iCloud Feb 9, 2017 · release notes

Elcomsoft Phone Breaker 6.40 and Phone Viewer 3.25 extract deleted iCloud Safari history.

Adds extraction of deleted Safari browsing history records from iCloud in Elcomsoft Phone Breaker 6.40
Adds filtering of deleted Safari browsing history records in Elcomsoft Phone Viewer version 3.25

2 details in Everything

Elcomsoft eXplorer for WhatsApp Gets Android Support Feb 2, 2017 · release notes

Elcomsoft eXplorer for WhatsApp v2.0 adds extraction and decryption of WhatsApp data from rooted and unrooted Android devices.

Adds full support for extracting and decrypting WhatsApp conversations from rooted (Android 4.0–7.1.1) and unrooted (Android 4.0–6.0.1) Android devices
Enables extraction of video call information from the latest versions of WhatsApp
Adds compatibility with iTunes backups for iOS up to version 10.2

3 details in Everything

With Yalu102 Jailbreak, iOS Forensic Toolkit 2.20 Enables Physical Acquisition of iOS 10.2 Devices Jan 30, 2017 · release notes

iOS Forensic Toolkit 2.20 adds physical acquisition support for iOS 10.x via Yalu102 jailbreak

Enables physical acquisition of iOS devices running version 10.0.0 through 10.2 using the Yalu102 semi-tethered jailbreak
Grants access to data unavailable in logical acquisitions, including browser cache, temporary files, downloaded mail, extended location history, and app data that explicitly disables backups

2 details in Everything

iOS Forensic Toolkit 2.20 Adds Limited iOS 10, iPhone 7/7 Plus and macOS Sierra Support Jan 26, 2017 · release notes

iOS Forensic Toolkit 2.20 expands hardware and OS support to include iPhone 7/7 Plus and iOS 10 logical acquisition.

Enables logical acquisition of iPhone 7 and 7 Plus models running iOS 10 up to iOS 10.2
Enables backup extraction for Apple devices running iOS 10, 10.1 and 10.2

2 details in Everything

Elcomsoft Phone Breaker 6.30 Extracts iPhone Synced Data in Real Time Dec 21, 2016 · release notes

ElcomSoft Phone Breaker 6.30 extracts real-time iPhone cloud data including web browsing, notes, and calendars

Adds extraction of user’s recent Web browsing activities from the cloud in near real time
Adds extraction of user's notes and calendars from the cloud with little or no delay
Updates Elcomsoft Phone Viewer to display synced call notes, calendars, and Safari data

3 details in Everything

New Wireless Security Auditor makes Wi-Fi sniffing easier, and doubles password cracking speeds by adding support for NVIDIA Pascal cards Dec 1, 2016 · release notes

ElcomSoft Wireless Security Auditor adds general Wi-Fi adapter sniffing and NVIDIA Pascal support

Built-in Wi-Fi sniffer now supports general Wi-Fi adapters via a custom NDIS driver, removing the previous AirPCap-only limitation
Password cracking speeds doubled by adding support for NVIDIA Pascal GPU architecture

2 details in Everything

Elcomsoft Distributed Password Recovery has been updated Nov 14, 2016 · release notes

Elcomsoft Distributed Password Recovery update improves GPU performance, OS X keychain speed, and FileVault partition support

Enables operating on encrypted partitions directly for FileVault instead of requiring the whole disk.
Adds faster OS X keychain cracking with speeds up to three times faster on modern GPU cards.

2 details in Everything

Elcomsoft Phone Breaker has been updated Oct 19, 2016 · release notes

Elcomsoft Phone Breaker 6.11 adds password recovery for 1Password containers in iOS 10 iCloud backups.

Elcomsoft eXplorer for WhatsApp Gets iOS 10 Support Oct 12, 2016 · release notes

ElcomSoft eXplorer for WhatsApp adds iOS 10 support, Two-Factor Auth, and iCloud credential persistence

Adds support for Apple’s Two-Factor Authentication (in addition to the already working Two-Step Verification), allowing to acquire WhatsApp backups from devices protected with a secondary code.
Allows specifying path to backup storage via a new option.

2 details in Everything

Elcomsoft Cloud Explorer 1.20 Adds Support for Android 7.0 Nougat, Extracts Wi-Fi Passwords Oct 3, 2016 · release notes

Adds extraction of synced Android call logs and saved Wi-Fi passwords (SSID, password) for Android 7.0 Nougat.

Adds extraction of call logs synced to Google Drive for Android 7.0 Nougat devices
Adds extraction of saved Wi-Fi network details including SSID and password from Android 7.0 Nougat

2 details in Everything

Elcomsoft Phone Viewer 3.0: iOS 10 Support, New Mac Edition Sep 27, 2016 · release notes

ElcomSoft Phone Viewer 3.0 adds iOS 10 backup support and a new Mac edition.

Adds iOS 10 support for viewing data extracted from local and cloud backups produced by Apple's latest mobile iOS
Introduces a new Mac edition of ElcomSoft Phone Viewer that supports iOS 10 out of the box

2 details in Everything

Elcomsoft Forensic Disk Decryptor has been updated Sep 14, 2016 · release notes

Elcomsoft Forensic Disk Decryptor now supports PGP volume decryption via Recovery Key.

Adds recovery_key input to decrypt or mount PGP volumes

1 detail in Everything

Elcomsoft Phone Breaker 6.0: iCloud Photo Library, FileVault 2, Apple ID Password, 2FA Support Aug 25, 2016 · release notes

ElcomSoft Phone Breaker 6.0 adds iCloud Photo Library recovery including deleted items, FileVault 2 extraction via iCloud, and Apple ID two-factor auth support.

Adds iCloud Photo Library support to access files and photos, including those deleted more than 30 days ago
Adds ability to extract FileVault 2 escrow keys from iCloud to decrypt DMG, DD, and EnCase images
Updates Keychain Explorer to automatically discover Apple ID password or authentication token in the keychain
Adds support for Apple’s two-factor authentication replacing the previous two-step verification method

4 details in Everything

Updates: Advanced IM Password Recovery, Advancxed Sage Password Recovery, Advanced SQL Password Recovery Aug 17, 2016 · release notes

ElcomSoft password recovery tools add support for latest IM clients, Sage accounting apps, and SQL Server 2016.

Advanced IM Password Recovery adds support for Miranda, Ipswitch IM, Pidgin, Gadu-Gadu, ooVoo, BigAnt, and Brosix.
Advanced IM Password Recovery adds backup/restore support for ICQ 10, Yahoo! IM 0.8.109, and Skype 7.26.66.101.
Advanced Sage Password Recovery adds support for ACT! 2016, PeachTree 50 Accounting 2016/2017, and 50 Accounting Canadian Edition 2016.
Advanced SQL Password Recovery adds support for Microsoft SQL Server 2016.

4 details in Everything

Elcomsoft iOS Forensic Toolkit 2.1 Adds Physical Acquisition of Latest Versions of iOS, Implements Built-In Logical Acquisition Aug 11, 2016 · release notes

Elcomsoft iOS Forensic Toolkit 2.1 adds physical acquisition for iOS up to 9.3.3 and built-in logical acquisition

Adds physical acquisition support for jailbroken iOS devices running iOS 9.3.3
Implements full logical acquisition allowing iTunes-style backups without iTunes, including passcode recovery via lockdown files or temporary passwords

2 details in Everything

Elcomsoft Cloud Explorer Adds Gmail Support Aug 3, 2016 · release notes

Elcomsoft Cloud Explorer 1.10 adds Gmail acquisition via API, HTML reporting, Google Permissions view, and Backup Code support.

Adds automated downloading and offline analysis for Gmail messages using the Google Gmail API
Adds built-in Gmail analyzer with searching and filtering for labels, categories, folders, and messaging threads
Adds HTML reporting capability for User Info, History, Chrome, Dashboard, Media, Locations, Calendars, Notes, Chats, Google Keep, and Contacts findings
Adds Google Permissions view to show apps or services requesting access to the user's Google Account
Updates two-factor authentication form to accept Backup Codes

5 details in Everything

Advanced Office Password Recovery Adds Support for NVIDIA Pascal Architecture and Latest AMD GPUs Aug 2, 2016 · release notes

Adds support for NVIDIA Pascal (GTX1080) and AMD Fiji/Carrizo GPU architectures.

Adds hardware support for NVIDIA GTX1080 and other cards built on the Pascal architecture
Adds hardware support for AMD Fiji and Carrizo cores: R9 Nano, R9 Fury, Radeon Pro Duo, Radeon R7
Improves VBA Backdoor engine compatibility with certain applications

3 details in Everything

Elcomsoft Distributed Password Recovery Doubles the Speed with NVIDIA Pascal Jul 26, 2016 · release notes

Elcomsoft Distributed Password Recovery adds NVIDIA Pascal GPU support and FileVault 2 forensics

Enhances Mac OS X forensics with new detection and recovery capabilities for FileVault 2, OS X accounts, and DMG passwords.

1 detail in Everything

Elcomsoft Phone Viewer gets direct access to encrypted backups, adds media albums and Web plugin Jun 23, 2016 · release notes

Elcomsoft Phone Viewer 2.20 adds direct encrypted iTunes backup access and a Web plugin for browsing history.

Enables direct access to password-protected iTunes backups without external decryption tools
Adds media albums to sort pictures and videos
Adds a new Web plugin to display user’s search and browsing history, bookmarks and open tabs

3 details in Everything

Elcomsoft System Recovery UEFI Support Jun 16, 2016 · release notes

Adds UEFI bootloader support for creating bootable media on 32/64-bit systems.

Enables creation of bootable media with UEFI bootloaders for 32-bit and 64-bit systems.

1 detail in Everything

New version of Elcomsoft Forensic Disk Decryptor is now available Jun 6, 2016 · release notes

ElcomSoft Forensic Disk Decryptor gains decryption via Microsoft Account Recovery Key and Active Directory.

Adds the ability to decrypt BitLocker volumes by extracting the Recovery Key from a user's Microsoft Account.
Adds support for RAW (DD) images as input for all supported crypto containers.

2 details in Everything

Elcomsoft Phone Breaker 5.30 Mar 30, 2016 · release notes

Elcomsoft Phone Breaker 5.30 adds auto-resume, job transfer, in-flight attack modification, and OneNote performance gains

Adds automatic crash recovery that resumes attacks from the last auto-save position instead of restarting
Enables seamless transfer of the current attack job to a different computer for continued execution
Allows users to modify active attacks on the fly without restarting from the beginning
Adds compatibility with iOS 9.3, including accounts with two-step verification
Adds a one-click button to launch Elcomsoft Phone Viewer and open downloaded backups

5 details in Everything

Reset Microsoft Account Credentials Mar 18, 2016 · release notes

ElcomSoft System Recovery adds Microsoft Account credential reset capabilities via online authentication and hashed password export.

Supports online authentication via Microsoft Account for Windows 8, 8.1, and Windows 10 accounts
Allows exporting hashed passwords to recover original Microsoft Account passwords

2 details in Everything

Breaking Windows 10 XTS-AES BitLocker Mar 4, 2016 · release notes

ElcomSoft Forensic Disk Decryptor adds support for Windows 10 XTS-AES BitLocker via memory hibernation extraction

Adds support for the XTS-AES encryption algorithm used by BitLocker volumes created in Windows 8, 8.1 and Windows 10.
Enables on-the-fly decryption where keys are automatically extracted from system memory dumps or hibernation files.

2 details in Everything

New version of Elcomsoft Explorer for WhasApp is now available Feb 10, 2016 · release notes

Elcomsoft Explorer for WhatsApp 1.10 adds iOS 9.3 cloud backup support and removes iCloud for Windows dependency.

Adds support for cloud backups created by iOS 9.3
Waives the requirement to have iCloud for Windows installed, enabling use on Windows Server

2 details in Everything

iOS 9.3 Support, iCloud for Windows Not Required Feb 4, 2016 · release notes

Elcomsoft Phone Breaker 5.20 adds iOS 9.3 backup support and direct iCloud access via custom API.

Adds iOS 9.3 cloud backup support for devices currently in beta
Waives the requirement to have iCloud for Windows installed by working via a 100% custom API
Adds iCloud Drive support for installations running on older versions of OS X (10.9 and earlier)

3 details in Everything

New version of Elcomsoft Distributed Password Recovery Nov 26, 2015 · release notes

Adds NVIDIA GPU support for OS X keychain recovery, Intel AVX2 and async WPA/WPA2 acceleration, and AMD/NVIDIA IKE support in Elcomsoft Distributed Password Recovery

Adds support for GPU-accelerated (NVIDIA) recovery of OS X keychain passwords
Implements Intel AVX2 support and asynchronous recovery for WPA/WPA2 (-PSK) passwords, boosting the recovery speed significantly when using multiple GPU units
Extends Internet Key Exchange (IKE) support to both AMD and NVIDIA acceleration algorithms
Triples the speed of recovering BitLocker passwords

4 details in Everything

WhatsApp Acquisition and Analysis Nov 25, 2015 · release notes

ElcomSoft Explorer for WhatsApp adds iOS backup acquisition and built-in viewing

Adds ElcomSoft Explorer for WhatsApp to acquire data from local (iTunes) and cloud (iCloud) iOS backups
Adds support for downloading stand-alone WhatsApp backups directly from iCloud Drive
Adds automatic decryption of WhatsApp databases (requires password)
Adds built-in viewer with simultaneous viewing of multiple WhatsApp databases

4 details in Everything

Physical Acquisition for 64-bit Apple Devices Nov 18, 2015 · release notes

Version 2.0 adds physical acquisition for jailbroken iOS devices, full iOS 9 support, and limited data pull from unknown-passcode devices.

Adds physical acquisition capability for jailbroken iOS devices equipped with 64-bit chips.
Enables full iOS 9 support for physical acquisition on both jailbroken 32-bit and 64-bit devices.
Enables pulling a limited amount of data from jailbroken devices locked with an unknown passcode.

3 details in Everything

Elcomsoft Phone Viewer 2.0 adds iOS 9, Media Gallery with EXIF and location tracking Nov 11, 2015 · release notes

Elcomsoft Phone Viewer 2.0 adds iOS 9 backup support, a new Media Gallery with EXIF data and location mapping, and multimedia search/filtering.

Adds support for cloud and local iOS 9 backups
Introduces Media Gallery with full EXIF support and location mapping

2 details in Everything

Cloud Acquisition of iOS 9 Oct 29, 2015 · release notes

ElcomSoft Phone Breaker 5.0 adds iCloud acquisition support for iOS 9 backups.

Adds over-the-air cloud acquisition capability for device backups from iPhones and iPads running iOS 9
Enables customers using iCloud extraction to acquire iOS 9 iCloud backups by updating to version 5.0

2 details in Everything

Elcomsoft Advanced Office Password Recovery 6.20 Oct 19, 2015 · release notes

Version 6.20 extends tool coverage to Microsoft Office 2016 documents and enables full GPU acceleration for all supported formats.

Advanced IM Password Recovery has been updated Sep 7, 2015 · release notes

Advanced IM Password Recovery adds Brosix support and updates protocols for latest client versions.

Adds Brosix to supported instant messaging platforms
Updates support for PalTalk, Miranda, Ipswitch, Piodgin, QIP, Gadu-Gadu, IMVU, Hajim, ooVoo, Trillian Astra and BigAnt to latest versions
Updates Backup/restore function to support the latest ICQ, Skype and Mail.Ru Agent

3 details in Everything

Elcomsoft Distributed Password Recоvery has been updated: new plugins, support for new versions, bug fixes, performance improvements Sep 1, 2015 · release notes

ElcomSoft Distributed Password Recovery adds GPU PGP passphrase recovery, new SHA plugins, and automatic agent updates

Adds PGP private key passphrase recovery on NVIDIA GPU
Adds support for Symantec PGP 10.3
Adds new SHA256 plugin
Adds new SHA512 plugin
Adds automatic agent updates from the server

5 details in Everything

Elcomsoft Phone Breaker has been updated Aug 31, 2015 · release notes

ElcomSoft Phone Breaker adds support for iTunes backups with empty passwords

New Elcomsoft Phone Breaker decrypts BlackBerry Password Keeper for BB 10 (instantly!) and recovers 1Password master password Aug 11, 2015 · release notes

Elcomsoft Phone Breaker 4.10 adds BlackBerry 10 Password Keeper decryption, 1Password master password recovery, and UI-integrated iCloud token extraction.

Adds instant decryption of BlackBerry Password Keeper containers for BB 10 without needing to attack the master password
Enables recovery of the master password for 1Password containers
Integrates commands for extracting iCloud authentication tokens directly into the user interface

3 details in Everything

Breaking Documents Gains Convenience Jul 27, 2015 · release notes

Advanced Office Password Recovery gains GPU support for iWork 2009/2014 and attack resume capability

Adds GPU acceleration for Apple iWork 2009 and 2014 documents in both Standard and Professional editions.
Enables VBA Backdoor support for 64-bit Microsoft Office 2010 and 2013 to remove macro passwords.
Adds automatic attack resume capability, allowing interrupted password attacks to continue from the last checkpoint.

3 details in Everything

Elcomsoft Phone Viewer update: performance boost and usability enhancements May 19, 2015 · release notes

Elcomsoft Phone Viewer update improves performance for handling thousands of items and adds support for latest iOS and BlackBerry versions.

Elcomsoft Phone Breaker is finally coming to Mac OS! Apr 28, 2015 · release notes

Elcomsoft Phone Breaker for Mac OS adds native iCloud acquisition and token extraction.

Adds macOS platform support to Elcomsoft Phone Breaker with native GUI and CLI tools on Mac OS X 10.7+.
Adds binary authentication token extraction from hard drives to acquire iCloud accounts without knowing Apple ID/password.
Adds encrypted backup decryption and keychain data access capabilities for the macOS edition.

3 details in Everything

Elcomsoft Phone Breaker Supports Apple iCloud Drive, Decrypts Keychain from iCloud Backups Mar 12, 2015 · release notes

Elcomsoft Phone Breaker adds iCloud Drive support and iCloud backup keychain decryption

Adds over-the-air acquisition of Apple accounts migrated to iCloud Drive
Enables decryption of iCloud backup keychains when the correct securityd key is supplied

2 details in Everything

Elcomsoft Forensic Disk Decrypted has been updated Feb 25, 2015 · release notes

Elcomsoft Forensic Disk Decryptor adds Chinese language support and new startup privilege check.

Adds Chinese language support to the application interface.
Adds a check for administrative privileges on program start, running with proper privileges by default if possible.

2 details in Everything

Breaking the Vicious Cycle of Hardware Upgrades: Elcomsoft Distributed Password Recovery Makes Simultaneous Use of GPU Acceleration Units That Are Generations Apart, Adds GPU Accelerated ZIP/RAR Password Recovery Feb 3, 2015 · release notes

DPR supports mixed-generation GPU acceleration and hardware-accelerated ZIP/RAR recovery.

Enables simultaneous use of mixed-generation GPU acceleration units regardless of model or manufacturer
Adds hardware acceleration for ZIP (including WinZip/AES) and RAR (up to RAR 5) password recovery

2 details in Everything

Elcomsoft iOS Forensic Toolkit Adds Acquisition Support for iOS 8 Devices, Extracts Apple ID and Password Jan 27, 2015 · release notes

Elcomsoft iOS Forensic Toolkit adds physical acquisition support for iOS 8 and Apple ID extraction

Adds physical acquisition support for all 32-bit iOS 8 devices (iPhone 4S, 5, 5C; iPad 2-4; original iPad Mini; iPod Touch 5th gen)
Adds Apple ID and password extraction capability to enable real-time iCloud backup acquisition

2 details in Everything

Elcomsoft Phone Breaker Adds Support for Apple Two-Step Verification, Extracts More Data from iCloud, Supports Latest Apple Devices and iOS 8.1, Doubles GPU Acceleration Speeds Dec 17, 2014 · release notes

Elcomsoft Phone Breaker adds iCloud two-factor extraction, iOS 8.1 support and doubled GPU speed

Adds acquisition of iCloud accounts featuring two-step (two-factor) authentication
Extends iCloud data extraction to iWork documents, WhatsApp chats, and third-party app data
Enables extraction of iCloud authentication tokens from hard drives and forensic disk images
Doubles GPU acceleration speeds for brute-force attacks using latest NVIDIA graphic cards
Supports latest Apple hardware including iPhone 6/6 Plus, iPad Air 2, and iPad Mini 2 running iOS 8.1

5 details in Everything

Meet Elcomsoft Phone Viewer: View the contents of iTunes/iCloud, Windows Phone and BlackBerry 10 backups! Dec 12, 2014 · release notes

Introducing Elcomsoft Phone Viewer for browsing and recovering data from mobile device backups

New product Elcomsoft Phone Viewer launches to view contents of iTunes/iCloud, Windows Phone and BlackBerry 10 backups
Enables browsing of contacts, messages, call logs, notes, and calendar data from supported backup sources
Adds ability to recover deleted messages specifically from iOS backups
Supports unlocking and processing of unlocked, unencrypted backups produced by iOS, BlackBerry 10 and Windows Phone 8/8.1

4 details in Everything

New version of Advanced Sage Password Recovery now available Dec 11, 2014 · release notes

Advanced Sage Password Recovery adds support for 50 Accounting, Swiftpage ACT! v17 and Peachtree 2015 applications.

New version of Advanced Office Password Recovery: now much faster! Dec 9, 2014 · release notes

Advanced Office Password Recovery 6.03 adds performance optimizations for Office 2007+ and OpenDocument/Hancom formats with up to 5x GPU acceleration.

Adds performance optimizations for Microsoft Office 2007/2010/2013 documents, OpenDocument files (OpenOffice, LibreOffice, Lotus Symphony), and Hancom Office files

1 detail in Everything

Elcomsoft iOS Forensic Toolkit has been updated, now with iOS 7.1 (jailbroken) support Sep 4, 2014 · release notes

ElcomSoft iOS Forensic Toolkit v7.1 release adds platform support for iOS 7.1 jailbroken devices and improves detection logic.

Elcomsoft Phone Password Breaker 3.1 is now available. Aug 5, 2014 · release notes

Elcomsoft Phone Password Breaker 3.1 adds XML export, Keychain decryption filters, and BlackBerry 10 support.

Adds XML export for device and backup lists via a new GUI option
Adds iCloud account total/used space display in the UI
Adds record filtering in Keychain Explorer to show only successfully decrypted items
Moves log files and password caches to %appdata%\Elcomsoft\Elcomsoft Phone Password Breaker from the program folder
Adds support for BlackBerry 10 backup format introduced in BB OS 10.2.1.2977

5 details in Everything

ElcomSoft Adds OpenOffice and Hangul Office Support, Employs Social Engineering for Password Recovery Apr 10, 2014 · release notes

Advanced Office Password Recovery adds OpenOffice/Hangul OpenDocument formats and AMD/NVIDIA GPU support

Adds password recovery for documents in OpenDocument format used by OpenOffice and Hangul Office (including Hanword, Hancell, and Hanshow)
Adds GPU acceleration support for AMD Radeon R9 series (R270, R280, R290) and NVIDIA GeForce GTX 750 (Maxwell) for faster password recovery
Enables social engineering-like attacks in a fully automated recovery process based on models of human behavior

3 details in Everything

Elcomsoft Wireless Security Auditor has been updated Apr 1, 2014 · release notes

Adds support for NVIDIA GeForce GTX 750 and 750 Ti (Maxwell) GPUs in Elcomsoft Wireless Security Auditor

New GPU support: GeForce GTX 750 and 750 Ti (Maxwell)

1 detail in Everything

Elcomsoft Distributed Password Recovery and Advanced EFS Data Recovery have been updated Mar 27, 2014 · release notes

EDPR gains Hancom Office support with GPU acceleration and new GPU card support; AEFSDR adds Windows 8/Server 2012 compatibility

Adds HanWord and HanCell file recovery for Hancom Office versions 2010 and 2014 in Elcomsoft Distributed Password Recovery
Adds GPU acceleration support specifically for HanCell files in Elcomsoft Distributed Password Recovery
Adds support for AMD Radeon R7 (R240, R250, R260, R265) and R9 (R270, R280, R290) series video cards in Elcomsoft Distributed Password Recovery
Adds support for NVIDIA GeForce GTX 750 (Maxwell) video cards in Elcomsoft Distributed Password Recovery
Adds full compatibility with Windows 8.0 and Windows 8.1 for Advanced EFS Data Recovery

+1 more show less

Adds full compatibility with Windows Server 2012 for Advanced EFS Data Recovery

6 details in Everything

New version of Elcomsoft Phone Password Breaker is now available Mar 18, 2014 · release notes

EPPB adds support for iOS 7.1 iCloud backup encryption and third-party app data extraction.

Enables extraction of 3rd party app data (WhatsApp, Skype, Viber) from encrypted backups

1 detail in Everything

ElcomSoft Gives iOS Forensics a Boost, Adds Physical Acquisition Support for iOS 7 Devices Jan 30, 2014 · release notes

Adds physical acquisition support for jailbroken iOS 7 and specific iOS 6.1.x devices

Adds support for previously unavailable iOS versions 6.1.3 through 6.1.5

1 detail in Everything

New version of Elcomsoft Phone Password Breaker is now available Jan 22, 2014 · release notes

Adds GPU acceleration for AMD R7/R9 cards and improves iCloud backup download reliability

Enables GPU acceleration on latest AMD video cards (R7 and R9 series) to speed up password cracking operations

1 detail in Everything

Elcomsoft iOS Forensic Toolkit has been updated Nov 8, 2013 · release notes

Elcomsoft iOS Forensic Toolkit v1.22 adds support for iOS 7 passcode recovery, keychain decryption, and disk image decryption on iPhone 4 via DFU mode.

New versions of iOS Forensic Toolkit and Elcomsoft Phone Password Breaker are now available Oct 22, 2013 · release notes

iOS Forensic Toolkit 1.21 adds Guided passcode cracking and persistent SSH; EPPB 2.20 fixes iOS 7 iCloud decryption.

Adds Guided mode to iOS Forensic Toolkit that allows detecting passcode type or performing brute-force/dictionary attacks with selected options

1 detail in Everything

Elcomsoft Phone Password Breaker has been updated Oct 11, 2013 · release notes

Elcomsoft Phone Password Breaker adds Viber support and improved iCloud backup parsing

Adds Viber to the Social and Communications category for data extraction
Shows proper device icons for iPhone 5C and iPhone 5S in iCloud backup browser
Displays user-friendly device names (e.g., iPad Mini (GSM+CDMA)) instead of internal identifiers (e.g., iPad2,7) in iCloud backup list

3 details in Everything

iOS 7 Support, Keychain Decryption and Flexible iCloud Downloading Oct 3, 2013 · release notes

ElcomSoft Phone Password Breaker adds iOS 7 support, keychain decryption from backups, and flexible iCloud downloading.

Adds full iOS 7 support for local and cloud backups
Adds capability to decrypt iOS 7 keychains from password-protected iTunes backups
Adds expanded categories for selective downloading from iCloud

3 details in Everything

ElcomSoft Speeds Up Phone Password Breaker, Enables Real-Time iCloud Recovery Aug 22, 2013 · release notes

ElcomSoft Phone Password Breaker adds real-time selective iCloud data recovery and large dataset support with persistent auth tokens.

Enables selective recovery of certain types of data stored in Apple iCloud for true real-time access to forensically significant information
Adds robust support for large data sets stored in the cloud, resolving the issue of authentication token expiring mid-session

2 details in Everything

Product updates: AOPR, ARCHPR, ASAPR, EDPR Aug 21, 2013 · release notes

ElcomSoft updates add Sage 50 support and Office VBA backdoor; improves GPU speed

Advanced Office Password Recovery now supports VBA password removal for Office 2010 SP2 via a VBA backdoor.
Advanced Sage Password Recovery adds support for Sage 50 Accounting 2014.
Elcomsoft Distributed Password Recovery improves TrueCrypt password recovery speed on latest NVIDIA cards by 1.5 - 2 times.

3 details in Everything

ElcomSoft Adds Physical Acquisition Support for iPhone 5 and iPad 4 Jul 17, 2013 · release notes

ElcomSoft iOS Forensic Toolkit v1.3 supports automated physical acquisition of jailbroken iOS 5/6 devices including iPhone 5 and iPad 4.

Elcomsoft Internet Password Breaker has been updated Jul 4, 2013 · release notes

ElcomSoft Internet Password Breaker adds Firefox 18 and IE 10 support

Adds support for Firefox 18 saved passwords
Adds support for Internet Explorer 10 saved passwords
Expands Firefox profile scanning to all user profiles, not just default ones

3 details in Everything

Microsoft Office 2007/2010 and Office 2013 Passwords Now Recovered with AMD OpenCL and NVIDIA CUDA Reaching Faster Password Recovery Speeds Jul 2, 2013 · release notes

Updates enable GPU acceleration via AMD OpenCL and NVIDIA CUDA for Office password recovery, replacing CPU-only performance with parallel compute speeds.

AMD OpenCL and NVIDIA CUDA platforms are now utilized for Microsoft Office 2007/2010 and 2013 password recovery tasks.
Performance is accelerated by leveraging compatible GPUs instead of relying solely on CPU processing.

2 details in Everything

Elcomsoft Wireless Security Auditor and Elcomsoft Phone Password Breaker have been updated Jan 15, 2013 · release notes

Elcomsoft Wireless Security Auditor adds CUDA 3.5 support with AMD temperature monitoring and brute-force mask filters; Phone Password Breaker gains Apple device detection.

Adds NVIDIA CUDA 3.5 support (incl. GeForce GTX 690) to Elcomsoft Wireless Security Auditor
Adds AMD Radeon HD 7000 Series support with temperature display in Elcomsoft Wireless Security Auditor
Adds detection for iPhone 5, iPod Touch 5G, iPad 4 and iPad Mini to Elcomsoft Phone Password Breaker

3 details in Everything

└──▷ BREAKING ON UPGRADE

!Legacy Radeon HD 4800 Series cards are no longer supported in Elcomsoft Wireless Security Auditor

New version of Advanced IM Password Recovery has been released Dec 14, 2012 · release notes

Adds support for Microsoft Lync 2013 and Windows Live Messenger 2012 in Advanced IM Password Recovery

Adds Lync 2013 protocol support to recover credentials from that specific instant messaging platform
Adds Windows Live Messenger 2012 protocol support to recover credentials from that specific instant messaging platform
Updates internal protocols for Psi Jabber and Miranda clients to handle their latest versions

3 details in Everything

New versions of Advanced Sage Password Recovery and Elcomsoft Blackberry Backup Explorer have been released. Oct 8, 2012 · release notes

Advanced Sage Password Recovery adds support for Accounting versions 2012/2013; Blackberry Backup Explorer adds batch operations and deduplication.

Adds password change/reset capability for Advanced Sage Password Recovery on 50 Accounting versions 2012 and 2013
Adds batch operations for .bbb files in Elcomsoft Blackberry Backup Explorer

2 details in Everything

ElcomSoft Breaks Microsoft Office 2013 Passwords Sep 26, 2012 · release notes

Advanced Office Password Recovery and Distributed Password Recovery now support Microsoft Office 2013 document formats

Elcomsoft Phone Password Breaker has been updated Aug 22, 2012 · release notes

Adds support for .bbb files created with Blackberry Desktop Manager 7.x

Advanced IM Password Recovery has been updated Jul 5, 2012 · release notes

Advanced IM Password Recovery 4.30 adds support for Windows Live Messenger, PalTalk, Miranda, ICQ, Yahoo! IM, and Skype.

Advanced PDF Password Recovery supports Acrobat X Jun 14, 2012 · release notes

Advanced PDF Password Recovery adds support for Adobe Acrobat X format

New Elcomsoft iOS Forensic Toolkit: now with new iPad support, other improvements Jun 6, 2012 · release notes

ElcomSoft iOS Forensic Toolkit v1.15 adds iPad 3 support and faster passcode recovery for simple codes

Adds support for new iPad (iPad 3), including passcode cracking on jailbroken devices

1 detail in Everything

Elcomsoft Blackberry Backup Explorer has been updated Jun 1, 2012 · release notes

Elcomsoft Blackberry Backup Explorer adds support for .bbb files from Blackberry Desktop Manager 7.x

Adds Support for .bbb file created with Blackberry Desktop Manager 7.x to read emails, sms, contacts, calendar events, memos, phone calls, tasks, bookmarks, notes, options, and other information

1 detail in Everything

ElcomSoft Discovers an Alternative Way of Accessing iPhone User Data, Provides Forensic Access to iCloud Backups May 15, 2012 · release notes

Elcomsoft Phone Password Breaker adds forensic access to iCloud backups.

Adds capability to retrieve iPhone user data directly from Apple iCloud storage in plain, unencrypted form
Enables retrieval of backups to multiple devices registered with the same Apple ID without physical device access

2 details in Everything

ElcomSoft Adds AMD Radeon 7000 Series Support and New Wi-Fi Attacks Targeting the Human Factor Mar 8, 2012 · release notes

ElcomSoft Phone Password Breaker and Wireless Security Auditor add AMD Radeon 7000 Series OpenCL acceleration

Adds universal OpenCL acceleration support for AMD Radeon Graphics hardware to Elcomsoft Phone Password Breaker
Enables new Wi-Fi attacks in Elcomsoft Wireless Security Auditor targeting human-factor password weaknesses

2 details in Everything

ElcomSoft Recovers iWork Passwords, Supports Apple Numbers, Pages, and Keynote Apps Feb 9, 2012 · release notes

ElcomSoft Distributed Password Recovery adds iWork (Numbers, Pages, Keynote) password support.

Adds support for recovering passwords in Apple Numbers documents
Adds support for recovering passwords in Apple Pages documents
Adds support for recovering passwords in Apple Keynote presentations

3 details in Everything

Elcomsoft iOS Forensic Toolkit Update: Acquisition of iPhone 4S and iPad 2 Devices Jan 28, 2012 · release notes

Adds physical acquisition support for iPhone 4S and iPad 2 devices.

Elcomsoft iOS Forensic Toolkit supports original iPhone and iPod Touch 1st and 2nd generations. Nov 11, 2011 · release notes

Elcomsoft iOS Forensic Toolkit v.1.11 adds support for original iPhone and iPod Touch 1st/2nd gen devices.

ElcomSoft Updates iOS Forensic Toolkit with iOS 5 Support and Faster Acquisition Times Nov 1, 2011 · release notes

Adds iOS 5 support and 2-2.5x faster physical acquisition speeds to iOS Forensic Toolkit.

Adds iOS 5 as a supported system for passcode recovery and physical acquisition analysis alongside iOS 3.x and 4.x.
Improves physical acquisition speed by 2 to 2.5 times, enabling 16-Gb iPhone 4 acquisition in ~20 minutes and 32-Gb in ~40 minutes.

2 details in Everything

ElcomSoft Recovers BlackBerry Device Passwords Sep 29, 2011 · release notes

ElcomSoft Phone Password Breaker adds BlackBerry device password recovery via encrypted media card analysis

Adds the ability to recover BlackBerry device passwords by analyzing information stored on encrypted media cards when the Device Password security option is enabled.

1 detail in Everything

Recover Passwords to BlackBerry Password Keeper and BlackBerry Wallet Aug 30, 2011 · release notes

Adds recovery of master passwords for BlackBerry Password Keeper and sensitive data in BlackBerry Wallet

Adds the ability to recover master passwords protecting passwords stored in BlackBerry Password Keeper
Adds the ability to recover financial information kept in BlackBerry Wallet

2 details in Everything

New version of Elcomsoft Blackberry Backup Explorer now available. Aug 17, 2011 · release notes

Blackberry Backup Explorer adds Password Keeper reading and new contact export fields.

Adds ability to read Password Keeper data (logins and passwords) from backups in the Professional edition
Adds support for Recent Contacts and Text Messages data types, and extraction of .ico files from Browser Cache
Exports the Mobile2 field for contacts into Excel and Outlook

3 details in Everything

ElcomSoft Recovers Passwords to US Government-Certified BlackBerry PlayBook Backups Aug 1, 2011 · release notes

ElcomSoft Phone Password Breaker adds support for recovering passwords from US Government-Certified BlackBerry PlayBook backups

ElcomSoft All-In-One iOS Forensic Toolkit: Now with Keychain Decryption, Windows Support and iOS 4.3.5 Acquisition Jul 25, 2011 · release notes

ElcomSoft All-In-One iOS Forensic Toolkit adds Keychain Decryption, Windows support, and iOS 4.3.5 acquisition

Added Keychain decryption capability to extract all records including iTunes backup password
Added logical acquisition support for iOS devices
Added instant passcode recovery for devices running iOS 3.x
Added support for iPhone 3G and 3GS running iOS 3.x
Added support for iOS 4.3.5 (GSM) and 4.2.10 (CDMA)

+2 more show less

Added Windows version of the toolkit alongside existing MacOS X support
Added automatic log file creation during operations

7 details in Everything

Elcomsoft Blackberry Backup Explorer has been updated Jul 12, 2011 · release notes

Adds Duration field to Phone Call Logs and Hotlist; improves non-English BB data parsing.

Adds the Duration column to Phone Call Logs and Phone Hotlist views
Improves parsing support for SMS messages, tasks, phone logs, notes, calendar, saved email messages, and contacts in languages other than English

2 details in Everything

Advanced IM Password Recovery has been updated Jun 10, 2011 · release notes

Adds Microsoft Lync 2010 and Google Talk support to Advanced IM Password Recovery

Adds Microsoft Lync (ex Office Communicator) 2010 v4.0 protocol support
Adds Google Talk (Labs Edition) protocol support

2 details in Everything

ElcomSoft Investigates iPhone Hardware Encryption, Provides Enhanced Forensic Access to Protected User Data May 24, 2011 · release notes

Updates Elcomsoft Phone Password Breaker to access protected file system dumps from hardware-encrypted iOS devices.

└──▷ HOW TO FIND IT

Analyze a decrypted file system dump from an iOS device with hardware encryption enabled.

📍Elcomsoft Phone Password Breaker

Enables near-instant forensic access to encrypted information stored in iPhone devices via physical dump analysis.

1 detail in Everything

New versions of Elcomsoft Wireless Security Auditor and Elcomsoft Phone Password Breaker now available Apr 13, 2011 · release notes

Elcomsoft Wireless Security Auditor gains advanced mask and combination attacks; both tools update GPU support.

Adds advanced mask attack to Elcomsoft Wireless Security Auditor for setting complex password masks from different character sets
Adds combination attack to Elcomsoft Wireless Security Auditor to combine two dictionary words with optional delimiters and mutations
Adds full AMD Radeon 6000-series support (including the 6990 dual-GPU) to Elcomsoft Wireless Security Auditor
Adds ATI Radeon 6000-series GPU support to Elcomsoft Phone Password Breaker
Adds support for Apple iPad 2 in Elcomsoft Phone Password Breaker

5 details in Everything

Elcomsoft Distributed Password Recovery has been updated Mar 3, 2011 · release notes

ElcomSoft Distributed Password Recovery adds GPU-accelerated recovery for iOS/BlackBerry backups and SQL Server Compact databases

Adds password recovery for iPhone, iPod and iPad backups created with Apple iTunes with GPU acceleration (NVIDIA, ATI and Tableau TACC1441)
Adds password recovery for BlackBerry backups made in BlackBerry Desktop Software with GPU acceleration (NVIDIA, ATI and Tableau TACC1441)

2 details in Everything

Elcomsoft Phone Password Breaker has been updated: added support for new Blackberry Desktop Software (versions/encryption) Dec 24, 2010 · release notes

Adds support for new BlackBerry Desktop Software backups with stronger encryption and GPU acceleration

Enables hardware acceleration for BlackBerry backups using NVIDIA & ATI cards, as well as Tableau TACC1441, for the new encryption type.

1 detail in Everything

Elcomsoft Distributed Password Recovery has been updated Dec 22, 2010 · release notes

Elcomsoft Distributed Password Recovery adds multi-file queueing and MSI-based deployment

Allows adding multiple password-protected files to the queue for batch processing
Introduces Windows Installer (MSI) for simpler and more convenient deployment

2 details in Everything

New version of Elcomsoft Wireless Security Auditor Dec 20, 2010 · release notes

Elcomsoft Wireless Security Auditor adds NVIDIA GTX 570/580 and ATI Radeon HD 6000 support plus a word attack option

ElcomSoft Updates Phone Password Breaker with New Features and Better Speed Dec 9, 2010 · release notes

ElcomSoft Phone Password Breaker adds iPhone backup decryption and GPU acceleration support

Adds ability to decrypt iPhone backups for forensic access
Supports newest video accelerators (NVIDIA GTX 580 and AMD Radeon HD 6000 series) to boost BlackBerry password recovery speed by 1.5x via Intel AES-NI

2 details in Everything

ElcomSoft Breaks Firefox, Safari, Opera, and Chrome Passwords Nov 11, 2010 · release notes

ElcomSoft Internet Password Breaker expands browser coverage to include Firefox, Safari, Opera, and Chrome

Adds support for extracting passwords from Mozilla Firefox
Adds support for extracting passwords from Apple Safari
Adds support for extracting passwords from Google Chrome
Adds support for extracting passwords from Opera

4 details in Everything

Updates: Advanced Instant Messengers Password Recovery, Advanced Sage Password Recovery Oct 22, 2010 · release notes

Advanced Instant Messengers Password Recovery 4.0 and Advanced Sage Password Recovery 2.0 add support for newer messenger versions and Sage accounting products.

Advanced Instant Messengers Password Recovery 4.0 updates support to include AOL Instant Messenger 7.4, Windows Live Messenger 2011, PalTalk 9.9, QIP Infium 9040, and Trillian Astra 4.2.
Advanced Sage Password Recovery 2.0 adds support for Sage 50 Accounts (versions 2004-2011), Sage Instant Accounts, and Sage Simply Accounting (versions 2002-2011).

2 details in Everything

ElcomSoft Cracks BlackBerry Backups Sep 30, 2010 · release notes

ElcomSoft Phone Password Breaker adds BlackBerry support for unlocking encrypted device backups.

New version of Advanced Office Password Recovery Aug 18, 2010 · release notes

Advanced Office Password Recovery gains GPU acceleration, multi-CPU/core support, MS Office 2010 and Unicode dictionary support

Adds patent-pending GPU acceleration for password recovery tasks
Enables multi-CPU and multiple core support with zero scalability overhead
Supports simultaneous CPU/GPU operation
Adds MS Office 2010 document format support
Adds Unicode dictionary (wordlist) support

5 details in Everything

New product: Advanced Sage Password Recovery Aug 12, 2010 · release notes

New product Advanced Sage Password Recovery for Windows enables immediate password recovery for Sage PeachTree and ACT! databases.

New Distributed Password Recovery supports NVIDIA Fermi, ATI Radeon and Tableau TACC1441 Jul 8, 2010 · release notes

New Distributed Password Recovery adds support for NVIDIA Fermi, ATI Radeon, and Tableau TACC1441 hardware

Adds support for NVIDIA Fermi chips (GTX 465/470/480) to accelerate password recovery
Adds support for ATI Radeon 4000 and 5000 series boards for wider hardware compatibility
Adds support for Tableau TACC1441 as a supported platform for password breaking

3 details in Everything

New versions of EWSA, AWOPR, AEFSDR May 12, 2010 · release notes

AWOPR 1.35 adds Corel WordPerfect Office X5 support; EWSA 2.11 speeds up mutations engine.

Advanced WordPerfect Office Password Recovery 1.35 now supports Corel WordPerfect Office X5 (version 15)
Elcomsoft Wireless Security Auditor 2.11 updates the mutations engine for notably faster performance

2 details in Everything

Advanced EFS Data Recovery has been updated; now with Windows 7 support! Apr 15, 2010 · release notes

Advanced EFS Data Recovery adds support for decrypting EFS files on Windows 7.

Supports handling files encrypted with EFS on Windows 7 (Professional, Enterprise and Ultimate editions).

1 detail in Everything

New versions of EWSA and EPPB: now with support of ATI Radeon HD 5000 series cards! Mar 16, 2010 · release notes

EWSA and EPPB now support ATI Radeon HD 5000 series cards for accelerated password recovery

New version of Elcomsoft Distributed Password Recovery has been released Mar 2, 2010 · release notes

Elcomsoft Distributed Password Recovery adds GPU acceleration for Lotus Notes ID and OpenDocument files with improved dictionary attack speeds.

Implements GPU acceleration for Lotus Notes ID files (with AES encryption)
Implements GPU acceleration for OpenDocument (OpenOffice, StarOffice etc) files
Seriously improves the speed of dictionary attacks

3 details in Everything

New version of AIMPR is now available Feb 24, 2010 · release notes

Advanced IM Password Recovery adds Wippien and BigAnt support

New versions of Proactive Password Auditor and Proactive System Password Recovery now available. And don't miss our new survey and 30% discount! Dec 23, 2009 · release notes

Proactive Password Auditor adds Windows 7 support; Proactive System Password Recovery gains Safari password extraction.

New version of Elcomsoft Distributed Password Recovery now available Oct 14, 2009 · release notes

Elcomsoft Distributed Password Recovery adds a password cache to automatically unlock documents sharing discovered passwords.

Updates: Elcomsoft Wireless Security Auditor, Advanced Office Password Recovery Jul 29, 2009 · release notes

Advanced Office Password Recovery 4.13 adds Excel 2007 40-bit support and customizable attacks via attacks.xml.

Advanced ACT Password Recovery has been updated Jul 22, 2009 · release notes

Adds support for ACT! 2010 and improved local password extraction.

Adds ACT! 2010 (beta) platform support
Improves the feature to extract/decrypt locally saved passwords

2 details in Everything

New version of Elcomsoft Wireless Security Auditor now available Jul 16, 2009 · release notes

Elcomsoft Wireless Security Auditor 1.03 can now extract WPA-PSK password hashes locally if Wireless Zero Configuration is active.

Adds ability to extract WPA-PSK password hashes from the local system when Wireless Zero Configuration is being used

1 detail in Everything

New version of Distributed Password Recovery has been released Jul 1, 2009 · release notes

Distributed Password Recovery adds TheBat! support and GPU acceleration for DCC

Added support for TheBat! and TheBat! Voyager mail clients master passwords (masterkey.dat), as well as passwords to TheBat! backup files (*.tbk).
Implemented GPU acceleration for DCC (Domain Cached Credentials) passwords.

2 details in Everything

New version of Proactive System Password Recovery now available May 26, 2009 · release notes

Proactive System Password Recovery adds support for 64-bit Windows XP through Server 2008

ElcomSoft Makes PGP® Disk Password Recovery Faster and More Affordable Apr 23, 2009 · release notes

ElcomSoft EDPR adds GPU acceleration for PGP Disk and Windows logon password recovery

Adds NVIDIA GPU acceleration (GeForce 8 series and up) to speed up recovery of passwords to 128-bit and 256-bit PGP® Disks and PGP® Whole Disk Encryption up to 200 times
Extends GPU acceleration support to Windows logon passwords (LM/NTLM), MD5, WPA/WPA2-PSK, and MS Office 2007

2 details in Everything

Near-Instant Recovery of Password-Protected Excel Spreadsheets Apr 16, 2009 · release notes

ElcomSoft Advanced Office Password Breaker adds Rainbow Table support for near-instant recovery of Excel spreadsheets protected with 40-bit encryption

Adds Rainbow Tables support to enable near-instant recovery of 97% of password-protected Excel spreadsheets using 40-bit encryption (Excel 97-2000 and compatibility mode)

1 detail in Everything

New version of Elcomsoft Wireless Security Auditor now available Apr 10, 2009 · release notes

Elcomsoft Wireless Security Auditor has been updated to support ATI Radeon drivers up to version 9.4.

Support for latest ATI Radeon drivers (9.4 at this time).

1 detail in Everything

Wireless Security Auditor has been updated Feb 19, 2009 · release notes

Wireless Security Auditor adds multilingual UI (English, German, Russian) and multiple dictionary support.

Wireless Security Auditor now includes a multilingual user interface supporting English, German, and Russian.
Wireless Security Auditor supports multiple dictionaries for credential analysis.

2 details in Everything

ElcomSoft Launches a Powerful Tool to Audit Wireless Network Security Jan 15, 2009 · release notes

ElcomSoft Wireless Security Auditor launches with GPU acceleration for WPA/WPA2 PSK password recovery via advanced dictionary attacks.

ElcomSoft Claims Adobe Acrobat 9 Is a Hundred Times Less Secure Nov 26, 2008 · release notes

Advanced PDF Password Recovery 5.0 adds support for Adobe Acrobat 9 format with significantly faster recovery.

Adds support for unlocking password-protected PDF files created by Adobe Acrobat 9.
Increases password recovery speed for Adobe Acrobat 9 files by approximately a hundred times.

2 details in Everything

Updates: ARCHPR, AIMPR, ACTPR, ASQLPR Oct 31, 2008 · release notes

New messenger support and direct database access in ElcomSoft Professional suite

Advanced IM Password Recovery 3.70 adds support for ooVoo and Digsby messengers
Advanced ACT Password Recovery 2.40 supports ACT! 2009 files directly without ODBC drivers

2 details in Everything

Elcomsoft Distributed Password Recovery accelerates the recovery of WPA and WPA2 encryption Oct 9, 2008 · release notes

Elcomsoft Distributed Password Recovery adds GPU acceleration for WPA/WPA2 cracking using NVIDIA cards.

Adds support for NVIDIA GPU acceleration to accelerate the recovery of WPA and WPA2 encryption by up to 100 times.

1 detail in Everything

New product available: Advanced SQL Password Recovery Sep 18, 2008 · release notes

New product: Advanced SQL Password Recovery for MS SQL Server databases.

Provides a new GUI tool to instantly change or reset user/admin passwords in Microsoft SQL Server 2000/2005/2008 .mdf files.

1 detail in Everything

New version of Elcomsoft Distributed Password Recovery: now supports Microsoft Project 2007, OpenDocument, and provides GPU acceleration for Microsoft Office 2007 password recovery. Jul 16, 2008 · release notes

ElcomSoft Distributed Password Recovery 2.60 adds support for MS Project 2007, OpenDocument, and GPU acceleration for Office 2007.

Adds Microsoft Project 2007 file support
Adds OpenDocument file support
Adds GPU acceleration for Microsoft Office 2007 (Word, Excel, PowerPoint) password recovery

3 details in Everything

New version of Advanced Office Password Recovery Jul 15, 2008 · release notes

Advanced Office Password Recovery now handles Microsoft Project 2007 format files.

New version of Advanced EFS Data Recovery has been released Jun 5, 2008 · release notes

Advanced EFS Data Recovery now supports Personal Information Exchange certificates (PKCS #12 / .PFX)

New version of Proactive System Password Recovery has been released May 29, 2008 · release notes

PSPR adds mail/FTP server emulation for plaintext password capture and improves WPA-PSK support.

Improves WPA-PSK support on Windows Vista and Windows Server 2008

1 detail in Everything

Elcomsoft System Recovery 3.0 supports Windows Server 2008 and Vista SP1 Mar 27, 2008 · release notes

Elcomsoft System Recovery 3.0 adds support for Windows Server 2008 and Vista SP1

Adds Windows Server 2008 and Vista SP1 to the list of supported operating systems for recovery operations.
Includes built-in drivers for third-party SATA, RAID, and SCSI adapters from vendors including Intel, NVIDIA, VIA, SiS, Adaptec, Promise, and LSI.

2 details in Everything

Sector-level disk scanning decrypts files with deleted keys, even on reformatted drives Feb 27, 2008 · release notes

AEFSDR Pro v4.0 adds sector-level disk scanning to recover EFS keys from deleted or reformatted drives

Adds sector-level disk scanning to find deleted encryption certificates on reformatted drives.
Enables recovery of EFS-encrypted files when the system drive (containing keys) has been reinstalled, while data partitions remain intact.
Allows decryption of files on systems where Windows is protected by SYSKEY or when private/master keys have been tampered with.

3 details in Everything

New version of Advanced Archive Password Recovery has been released Feb 15, 2008 · release notes

Advanced Archive Password Recovery 4.0 adds WavPack, BZip2, PPMd support and >4GB archive handling

Adds support for archives larger than 4 GB in version 4.0 of Advanced Archive Password Recovery
Adds support for modern compression methods WavPack, BZip2, and PPMd in version 4.0
Increases speed on archives with AES encryption by 2.5 to 3 times in version 4.0

3 details in Everything

New versions of Advanced EFS Data Recovery and Proactive System Password Recovery have been released Dec 27, 2007 · release notes

Advanced EFS Data Recovery 3.3 adds named data stream support; Proactive System Password Recovery 5.2 improves Windows Vista Domain Cached Credentials export.

New version of Elcomsoft Distributed Password Recovery has been released - now with support of Oracle and UNIX passwords and further hardware acceleration on NVIDIA GeForce cards. Special time-limited offer: save from 20% to 50% on ElcomSoft software! Dec 20, 2007 · release notes

Elcomsoft Distributed Password Recovery adds Oracle and UNIX password support and NVIDIA GeForce hardware acceleration

Adds Oracle password hash recovery capability, supporting both legacy DES-based hashes and the new v11 SHA1-based hash formats.
Adds UNIX/Linux password hashing algorithm support including Traditional DES, BSDi DES, Kerberos AFS DES, OpenBSD Blowfish, FreeBSD MD5, PHPass MD5, and Apache MD5.
Introduces further hardware acceleration for attacks on NVIDIA GeForce cards.

3 details in Everything

New version of Advanced IM Password Recovery now available; ACTPR and PSPR have been also updated Nov 22, 2007 · release notes

Advanced IM Password Recovery 3.60 adds credential backup/restore transfer capability.

New Technology Removes 40-bit Adobe PDF Encryption in Minutes. Guaranteed. Oct 18, 2007 · release notes

Advanced PDF Password Recovery v4 introduces thunder tables for guaranteed 40-bit decryption and content management.

Introduces thunder tables technology using pre-computed hash tables to guarantee removal of all 40-bit Adobe PDF encryption keys in minutes rather than days.
Adds PDF content management features allowing the removal of forms, JScript code, and digital signatures without requiring an external PDF editor.
Supports all Adobe Acrobat versions up to 8.0.

3 details in Everything

New version of Advanced PDF Password Recovery now available Sep 6, 2007 · release notes

Advanced PDF Password Recovery 3.10 adds CLI and new dictionaries

Adds a command line interface for batch processing
Adds German and Russian dictionaries

2 details in Everything

New version of Advanced MailBox Password Recovery now available Aug 28, 2007 · release notes

Advanced MailBox Password Recovery 1.9 adds TheBat! Voyager and updates mail client support

Adds TheBat! Voyager support in manual mode (requires master password)
Updates support for IncrediMail, Pegasus, Calypso, and Foxmail

2 details in Everything

New version of Advanced ACT! Password Recovery now available Aug 27, 2007 · release notes

Advanced ACT! Password Recovery 2.30 adds SQL Native Client support and improved registry handling.

Adds support for ACT! installations using SQL Native Client only.
Adds more reliable handling of ACT! 2007 passwords stored in the Windows Registry.

2 details in Everything

New version of Advanced Office Password Recovery now available Jul 24, 2007 · release notes

Advanced Office Password Recovery 3.14 expands capacity for large Outlook PST archives.

Adds Outlook .PST files larger than 2 gigabytes support to Advanced Office Password Recovery

1 detail in Everything

Advanced Intuit Password Recovery 2.0 provides instant removal of Quicken 2003..2007 passwords Jun 21, 2007 · release notes

The tool now leverages a discovered backdoor in Intuit's RSA implementation to unlock protected data files instantly, eliminating the need for brute force.

Break 40-bit Adobe PDF Encryption in Minutes with Elcomsoft's Advanced PDF Password Recovery Mar 15, 2007 · release notes

ElcomSoft APDFPR Enterprise adds rainbow attack subsystem with pre-computed hash tables for fast 40-bit PDF decryption.

Supports all Adobe Acrobat versions up to 8.0, including those using AES encryption.
Adds support for Windows Vista and Windows Server 2003.

2 details in Everything

Elcomsoft System Recovery Goes Corporate with Active Directory Support Mar 12, 2007 · release notes

Elcomsoft System Recovery adds Active Directory support for domain controller recovery

Adds full Active Directory support, extending password and account management capabilities to domain controllers running Windows 2000 Server, Advanced Server, and Windows Server 2003.
Enables dumping password hashes from the Active Directory database in addition to local SAM/SYSTEM files for offline recovery.
Allows resetting or changing passwords for Domain Administrator and other account types directly through the recovered environment.

3 details in Everything

New version of Elcomsoft System Recovery has been released Feb 1, 2007 · release notes

Elcomsoft System Recovery now supports Windows Vista, improves VMware compatibility, and adds a test mode for password attacks

Adds support for Windows Vista as a target operating system
Improves VMware compatibility for virtual machine recovery scenarios
Introduces a built-in option to test short and simple passwords using pre-configured brute-force and dictionary methods

3 details in Everything

New version of Elcomsoft Distributed Password Recovery has been released Jan 29, 2007 · release notes

Elcomsoft Distributed Password Recovery adds support for PGP whole disk encryption, Microsoft Money, OneNote, Quicken, and MD5 hashes.

New version Advanced Instant Messangers Password Recovery has been released Jan 25, 2007 · release notes

Advanced Instant Messengers Password Recovery 3.40 adds support for Pandion, IMVITE Messenger and Oyco Messenger.

Adds support for recovering passwords from Pandion, IMVITE Messenger and Oyco Messenger.
Updates existing protocols for AIM, AIM Pro, Windows Live Messenger, PalTalk, Miranda, Ipswitch IM, Simple Instant Messenger, Gaim, Google Talk, Meca Messenger, QIP, Gizmo Project, MySpace IM, Gadu-Gadu, Mail.Ru Agent and ScatterChat.

2 details in Everything

New versions of Proactive Password Auditor and Advanced EFS Data Recovery have been released. Dec 20, 2006 · release notes

Proactive Password Auditor 1.70 adds NTLM Rainbow tables and DEP/Vista support; Adv EFS 3.10 supports DES keys and folder-scoping.

Adds Rainbow Attack for NTLM authentication in Proactive Password Auditor, allowing pre-computed hash tables to reduce password finding time
Enables Proactive Password Auditor to run on machines with DEP (Data Execution Prevention) enabled and supports Windows Vista
Adds configurable LM hash and NT hash fields to the main window of Proactive Password Auditor, which can be saved in reports
Allows Users passwords report in Proactive Password Auditor to be fully customizable regarding included fields
Supports personal keys encrypted with DES algorithms in Advanced EFS Data Recovery 3.10

+2 more show less

Adds the ability to search for encrypted files within a given folder only in Advanced EFS Data Recovery 3.10
Adds Select encrypted option to the File tree tab in Advanced EFS Data Recovery 3.10

7 details in Everything

New versions of Advanced Office Password Recovery, Advanced VBA Password Recovery and Advanced Intuit Password Recovery have been released. Nov 20, 2006 · release notes

ElcomSoft releases new versions of Office, VBA, and Intuit password recovery tools with updated format support.

Adds backdoor-based extraction for Office 2007 VBA projects in Advanced Office Password Recovery 3.11
Adds support for Office 2007 VBA projects via the backdoor mechanism in Advanced VBA Password Recovery 1.62
Adds support for Quicken 2007 in Advanced Intuit Password Recovery 1.41

3 details in Everything

New versions of Advanced ACT! Password Recovery, Advanced IM Password Recovery and Advanced WordPerfect Office Password Recovery have been released Nov 9, 2006 · release notes

New protocol and file format support added to Advanced ACT!, IM, and WordPerfect Office Password Recovery tools

Adds ACT! 2007 database support and .pad file handling to Advanced ACT! Password Recovery 2.20
Adds support for non-local ACT! databases in Advanced ACT! Password Recovery 2.20
Adds support for latest versions of MSN Messenger, Google Talk and AIM in Advanced Instant Messengers Password Recovery 3.30

3 details in Everything

New versions of Advanced Office Password Recovery and Advanced Intuit Password Recovery now available. Jul 24, 2006 · release notes

New localized charsets in Advanced Office Password Recovery and QuickBooks 2006 support in Advanced Intuit Password Recovery

Adds predefined character sets for Arabic, Armenian, Czech, French, German, Greek, Hebrew, Korean, Japanese (Katakana/Hiragana), and Russian to Advanced Office Password Recovery
Enables preliminary attack on machines with Japanese and Russian locales in Advanced Office Password Recovery
Adds beta support for Office 2007 and Corel Draw 12 VBA backdoor in Advanced Office Password Recovery
Sets My Documents as the default file opening path in Advanced Office Password Recovery
Adds password removal support for QuickBooks 2006 in Advanced Intuit Password Recovery

5 details in Everything

New versions of AIMPR, AOLPR and PSPR have been released. Jul 5, 2006 · release notes

AIMPR 3.20 adds Windows Live Messenger and MySpaceIM; PSPR 4.8 extracts IIS metabase passwords.

Adds Windows Live Messenger, MySpaceIM and Exodus to Advanced IM Password Recovery 3.20 messenger support.
Enables extraction of Microsoft Internet Information Services (IIS) passwords from the IIS metabase in Proactive System Password Recovery 4.8.

2 details in Everything

New version of Elcomsoft Distributed Password Recovery has been released: now with support of Adobe PDF (both 40-bit and 128-bit encryption) Jun 22, 2006 · release notes

Adds Adobe PDF password recovery support to ElcomSoft Distributed Password Recovery.

Adds support for recovering user and owner passwords from Adobe PDF files with 40-bit and 128-bit encryption.

1 detail in Everything

New version of Proactive System Password Recovery has been released Jun 2, 2006 · release notes

Proactive System Password Recovery v4.7 adds eight new attack types and IPR subsystem

Adds support for eight distinct attack types on logon password hashes: brute-force, dictionary, user names (with mutations), digits, data/time combinations, repeated symbols, keyboard combinations (like qwerty, zxcvbn etc), and IPR (all passwords previously found in the system, with mutations)
Introduces the IPR (Intelligent Password Recovery) subsystem for recovering previously found system passwords with mutations
Adds SmartDic (Smart Dictionary) feature for dictionary-based attacks
Enables resuming of brute-force and dictionary attacks to continue previous sessions
Improves Windows Vista compatibility

5 details in Everything

New version of Advanced VBA Password Recovery now available. May 15, 2006 · release notes

Advanced VBA Password Recovery adds backdoor debug tech to bypass Corel anti-tampering checks.

Adds backdoor feature using debug-related technology to bypass Corel software's detection of debugging applications.

1 detail in Everything

New version of Elcomsoft Distributed Password Recovery has been released. Apr 27, 2006 · release notes

Elcomsoft Distributed Password Recovery adds support for PKCS #12 (.PFX) certificates

New version of Advanced ACT! Password Recovery has been released Mar 24, 2006 · release notes

Advanced ACT! Password Recovery gains ability to change security roles in ACT! databases

Adds the capability to change security roles of users in ACT! 2005/2006 databases (e.g. Restricted to Administrator)

1 detail in Everything

Advanced PDF Password Recovery has been updated. Mar 22, 2006 · release notes

Advanced PDF Password Recovery now supports installation and operation without Administrator privileges.

Adds the capability to install and run Advanced PDF Password Recovery under a standard user account (no Admin rights required).

1 detail in Everything

New version of Advanced IM Password Recovery has been released Mar 21, 2006 · release notes

Advanced IM Password Recovery adds support for Office Communicator 2005, Gizmo, SIP/Exchange in MSN Messenger 5.1, and updates for Qnext/Messenger2.

Adds recovery of passwords stored by Microsoft Office Communicator 2005
Adds support for extracting credentials from the Gizmo Project client
Adds support for SIP and Exchange protocols in MSN Messenger 5.1
Updates protocol parsing to cover the latest Qnext version (2.3.663)
Updates protocol parsing to cover the latest Messenger2 version (2.0)

5 details in Everything

New version of Elcomsoft Distributed Password Recovery has been released Mar 7, 2006 · release notes

Adds PGP secret key, disk, and self-decrypting archive support to Elcomsoft Distributed Password Recovery

Adds support for PGP secret keys
Adds support for PGP disks
Adds support for self-decrypting archives

3 details in Everything

New product has been released: Elcomsoft Distributed Password Recovery Feb 7, 2006 · release notes

New product Elcomsoft Distributed Password Recovery enables distributed network-based password recovery for MS Office files.

New version of Proactive Password Auditor has been released. Feb 2, 2006 · release notes

ElcomSoft Proactive Password Auditor adds multi-threaded attacks, DEP support, and new reporting columns

Enables brute-force and mask attacks (LM and NTLM) with multi-threading for better performance on SMP systems
Adds HKEY_CURRENT_USER registry path to save program parameters instead of HKEY_LOCAL_MACHINE
Introduces a new audit time column in the user list view
Adds DEP (Data Execution Prevention) compatibility allowing the program to run even when DEP is enabled
Expands rainbow tables generation with more charset options and per-table size display

+6 more show less

Adds hot keys Ctrl+A to select all users and Ctrl-U to clear selection in the UI
Adds a new window displaying individual thread status (speed, current password, passwords checked) during multi-threaded attacks
Supports SAM and SYSTEM files from Windows Vista
Adds ability to import multiple rainbow tables at once
Adds option to hide found passwords with asterisks in the UI
Adds Passwords by time - running total report view

11 details in Everything

└──▷ BREAKING ON UPGRADE

!The Use SYSKEY option has been changed to 'Don't use SYSKEY (NT4 prior to SP3)'
!Options 'dump from local memory' and 'using Credential Manager passwords in User Info attack' are disabled when running with DEP enabled

New version of Advanced IM Password Recovery has been released Jan 26, 2006 · release notes

Adds support for AIM Triton and QIP protocols to Advanced IM Password Recovery.

New product has been released: Proactive Security Auditor FE (Freeware Edition) Dec 13, 2005 · release notes

ElcomSoft releases Proactive Security Auditor FE for identifying and installing security updates.

Releases Proactive Security Auditor FE (Freeware Edition) as a new freeware product for system administrators.

1 detail in Everything

New version of Advanced IM Password Recovery now available Nov 22, 2005 · release notes

Adds Meca Messenger, Qnext, Bubbler (Five Across), and Easy Message to Advanced IM Password Recovery

Added support for Meca Messenger passwords.
Added support for Qnext passwords.
Added support for Bubbler (Five Across) passwords.
Added support for Easy Message passwords.

4 details in Everything

New version of Advanced Office Password Recovery has been released, now with complete Microsoft Money 2006 support. Nov 2, 2005 · release notes

Adds complete Microsoft Money 2006 file support and Get Dictionaries UI button

Complete support for Microsoft Money 2006 files (MS Passport passwords) enabled

1 detail in Everything

New version of Advanced Archive Password Recovery has been released Sep 27, 2005 · release notes

Advanced Archive Password Recovery adds AES support for WinZip and UI improvements

Adds support for strong WinZip encryption (AES)
Improved user interface

2 details in Everything

New version of Advanced IM Password Recovery has been released Aug 31, 2005 · release notes

Advanced IM Password Recovery expands its cyber tooling capabilities by supporting Google Talk and MSN Messenger (7.5) protocols.

Google Talk support added to the recovery engine.
MSN Messenger version 7.5 support added to the recovery engine.

2 details in Everything

Updated version of Proactive System Password Recovery has been released. Jul 30, 2005 · release notes

Proactive System Password Recovery adds program password protection and intelligent recovery subsystem

Adds program password protection to prevent unauthorized access to the tool itself
Extracts WEP and WPA-PSK encryption keys from connected wireless adapters
Introduces an intelligent password recovery subsystem for improved credential acquisition

3 details in Everything

Updated version of Advanced IM Password Recovery now available. Jul 11, 2005 · release notes

Advanced IM Password Recovery 2.70 adds non-admin installation and support for latest messenger versions

Enables installation and operation under accounts without Administrator privileges via Non-Admin mode
Adds detection of Yahoo! IM 7.0 passwords
Adds detection of PalTalk 8.0 passwords
Adds detection of Miranda 0.4.0.1 passwords
Adds detection of Rediff Bol 7.0 passwords

+2 more show less

Adds detection of Ipswitch 2.03 passwords
Adds detection of Gaim 1.3.1 passwords

7 details in Everything

New version of Proactive System Password Recovery (former Advanced Windows Password Recovery) has been released. Jun 24, 2005 · release notes

Proactive System Password Recovery v7 adds Domain Cached Credentials support and built-in crypto APIs

Adds Domain Cached Credentials password recovery capability to the tool's extraction surface.
Supports SYSKEY not stored on floppy disk or generated from startup password, expanding valid source configurations.
Removes external dependency on system-installed crypto APIs by bundling them directly into the application binary.

3 details in Everything

New version of Advanced Instant Messengers Password Recovery has been released Apr 11, 2005 · release notes

Adds support for iWon, Blowsearch, MessageMate and updates legacy messenger versions.

Added iWon support to the recovery database
Added Blowsearch support to the recovery database
Added MessageMate support to the recovery database
Updated detection for Trillian 3.1, Praize Messenger 4.5, Gaim 1.2.1, Global-IM 2.5.0.13, Messenger2 1.5, and Picasa Hello 1.0

4 details in Everything

Updated versions of Advanced PDF Password Recovery (Standard and Professional) and Advanced RAR Password Recovery now available. Mar 31, 2005 · release notes

Advanced PDF/RAR Password Recovery adds drag-and-drop UI support and internationalized installers.

New version of Advanced Windows Password Recovery now available. Mar 30, 2005 · release notes

New AD database backup capability added to Advanced Windows Password Recovery

Adds the ability to back up the Active Directory database as a new operational surface.

1 detail in Everything

Advanced ACT! Password Recovery has been updated. Mar 21, 2005 · release notes

Advanced ACT! Password Recovery adds ability to copy recovered passwords to the Clipboard.

Advanced Office Password Recovery has been updated Mar 11, 2005 · release notes

Adds Russian and Polish language support to setup and UI.

Added Polish help file.

1 detail in Everything

New version of Advanced EFS Data Recovery has been released Mar 2, 2005 · release notes

Advanced EFS Data Recovery adds a configuration wizard, auto disk/file selection, and support for large/Unicode files

Adds a new interactive wizard to guide users through the recovery process
Enables automatic selection of the system disk for key scanning via the updated engine
Enables automatic selection of decryptable files, disabling buttons when none are found
Adds support for NTFS disks with MFT sizes other than 1024 bytes
Extends file size limit to allow decryption of files larger than 4 GB

5 details in Everything

New version of Advanced Windows Password Recovery now available. Feb 21, 2005 · release notes

New Protected Storage editor, 'Brute-force and dictionary attacks on Remote Assistance passwords', Windows Script decoder, and SAM records viewer added to Advanced Wind

Adds Protected Storage editor for inspecting protected storage data
Adds Brute-force and dictionary attacks on Remote Assistance passwords capability
Adds Windows Script decoder for decoding scripts
Adds SAM records viewer for viewing SAM records

4 details in Everything

New version of Advanced Office Password Breaker has been released. Feb 16, 2005 · release notes

Advanced Office Password Breaker auto-starts attacks on file open and improves UI stability for PivotTables.

Automatically starts password cracking attack immediately when a file is opened using default options
Improved user interface for better usability
Adds error-free processing of files containing PivotTables

3 details in Everything

New version of Advanced Instant Messengers Password Recovery now available. Jan 28, 2005 · release notes

Adds support for Picasa Hello to Advanced Instant Messengers Password Recovery.

New version of Advanced Intuit Password Recovery has been released Jan 14, 2005 · release notes

Advanced Intuit Password Recovery adds QuickBooks 2005 support

New product now available: Advanced Office Password Recovery. Dec 16, 2004 · release notes

New product Advanced Office Password Recovery released with UI support for Office files and IE Content Advisor.

Launches Advanced Office Password Recovery (AOPR) as a new GUI tool for recovering lost or forgotten passwords in Microsoft Office files up to version 2003.
Adds brute-force and dictionary attack capabilities optimized for speed to recover password to open for Word/Excel 97/2000/XP/2003.
Integrates support for resetting MS Internet Explorer (3/4/5) Content Advisor password and opening password-protected VBA projects via a backdoor.
Expands recovery surface to include user-level passwords, owner info, Outlook, Project, Money, PowerPoint, Visio, Publisher, OneNote, Backup, Schedule+, and Mail.

4 details in Everything

Advanced VBA Password Recovery has been updated Dec 9, 2004 · release notes

Adds support for Microsoft Office 2003 documents to Advanced VBA Password Recovery

Advanced Intuit Password Recovery has been updated Oct 19, 2004 · release notes

Adds support for Quicken Lawyer, Willmaker Plus, multiple international Quicken/QuickBooks versions.

Adds support for Quicken Lawyer 2001/2002/2003
Adds support for Quicken 2005
Adds support for international Quicken versions: 98 German, 2000 Spanish, 2002 UK, and 2004 French
Adds support for international QuickBooks versions: 2000/2002/2004 UK, 2001/2003/2004 Canadian, and 2005 German

4 details in Everything

New version of of Advanced Instant Messengers Password Recovery has been released Sep 24, 2004 · release notes

Adds Messenger2 support and updates for latest ICQ, Trillian, T-Online, Praize, PalTalk, Indiatimes, Ipswitch IM, Gaim, Global-IM, and Psi versions

+ added support for Messenger2
+ updated support for latest versions of messengers: ICQ 4.12 Lite Edition build 1836, Trillian 2.013, T-Online Messenger 5.5, Praize Messenger 4.1, PalTalk 5.0 final build 553, Indiatimes Messenger 5.0, Ipswitch IM 2.0, Gaim 1.0.0, Global-IM 2.0.5, Psi Jabber client 0.9.2

2 details in Everything

New version of Advanced ACT Password Recovery now available Sep 24, 2004 · release notes

The release introduces new capability to extract the last entered ACT! password directly from the Windows Registry.

Advanced Mailbox Password Recovery has been updated Sep 20, 2004 · release notes

Advanced Mailbox Password Recovery v1.7.0.198 adds support for TheBat! 3.0 and latest versions of Pegasus, BeckyMail, and MailThem Pro

New version of Advanced Windows Password Recovery now available Sep 15, 2004 · release notes

Adds manual decryption modes for secrets and RAS cached passwords

Enables manual Secrets decryption capability
Enables manual decryption of RAS entries capability
Enables manual decryption of RAS cached passwords capability

3 details in Everything

New version of Advanced Lotus Password Recovery now available Sep 14, 2004 · release notes

Advanced Lotus Password Recovery adds FTP/proxy extraction and Freelance graphics support.

Adds support for extracting passwords to FTP/proxy sites
Adds support for Freelance graphics files (*.prz)
Enables extracting all Organizer passwords (Owner/Assistant/Reader)

3 details in Everything

Advanced Windows Password Recovery has been updated Sep 3, 2004 · release notes

Adds dump of SAM/SYSTEM hashes, SECURITY secrets, Net password decryption, and external Registry modifications

Adds dumping password hashes from SAM and SYSTEM binary files with SYSKEY support
Adds extracting secrets from binary SECURITY files
Adds manual decryption of Net passwords
Adds the ability to change or reset passwords in external Registry files
Adds decrypting .NET Passport password (auto and manual)

+1 more show less

Adds decrypting .NET Framework built-in account password in secrets

6 details in Everything

New version of Advanced Intuit Password Recovery has been released. Jun 24, 2004 · release notes

New support for Quicken 2002-2005 and QuickBooks legacy versions including DOS and international variants.

Added support for Quicken 2002/2003 (UK)
Added support for Quicken 2003/2004 transaction password
Added support for Quicken 2004 (US, Canadian, German, Australian, New Zealand)
Added support for Quicken 2005 (German)
Added support for QuickBooks 3.0 (for DOS)

+2 more show less

Added support for QuickBooks 2003 (Australian and New Zealand)
Added support for QuickBooks 2004 (US and German)

7 details in Everything

New version of Advanced Outlook Password Recovery has been released May 27, 2004 · release notes

Advanced Outlook Password Recovery introduces new toolbar and system menu design.

New version of Advanced Instant Messengers Password Recovery has been released Apr 29, 2004 · release notes

Adds support for Psi Jabber client and updates compatibility with multiple messenger versions.

Added Psi Jabber client (0.9.1) to the list of supported messengers for password recovery
Updated support for ICQLite 4.0, Trillian 2.012, PalTalk 5.0 final build 524, Miranda 0.3.3, Ipswitch IM 1.0.4.30, Simple Instant Messenger 0.9.3, Gaim 0.76, and Global-IM 2.0.2

2 details in Everything

New version of Advanced Mailbox Password Recovery now available Apr 28, 2004 · release notes

Adds TheBat!, Becky, and IncrediMail support with improved XP compatibility

Added support for latest version of TheBat!
Added support for latest version of Becky
Added support for latest version of IncrediMail

3 details in Everything

New versions of Advanced Outlook Express Password Recovery and Advanced Internet Explorer Password Recovery have been released Apr 5, 2004 · release notes

Advanced Outlook Express Password Recovery adds Accounts and Identities reports; IE tool adds Autocomplete report

Updated version of Advanced WordPerfect Office Password Recovery now available. Mar 16, 2004 · release notes

New capability to decrypt QuattroPro files with non-printable passwords in Advanced WordPerfect Office Password Recovery

Adds the ability to decrypt QuattroPro files that contain non-printable passwords.

1 detail in Everything

Advanced Windows Password Recovery has been updated. Feb 20, 2004 · release notes

Adds software registry branch saving, expanded dictionary, and NT compatibility fixes

Adds support for saving the SOFTWARE Registry branch during password recovery processes.
Integrates an updated dictionary (wordlist) containing approximately 240,000 common passwords to enhance cracking capabilities.
Enables compatibility with Windows NT systems that lack Service Packs.
Improves logon password extraction reliability under specific edge-case circumstances.

4 details in Everything

New version of Advanced EFS Data Recovery has been released: now with Windows Server 2003 and domain users support! Feb 12, 2004 · release notes

Adds Windows Server 2003 encryption support, domain user key decryption, and new UI option to Advanced EFS Data Recovery

Select highlighted option on Encrypted files tab
Decryption of keys of domain users
Use of autologon password to decrypt keys

3 details in Everything

New version of Advanced Office XP Password Recovery now available. Jan 23, 2004 · release notes

Advanced Office XP Password Recovery adds debug logging for PST files and a larger dictionary

Adds Debug logging while opening PST files to help diagnose Unknown file format errors on Outlook PST files
Extends the internal dictionary with about 240,000 words and common passwords to improve password cracking coverage

2 details in Everything

Updated version of Advanced RAR Password Recovery now available Nov 19, 2003 · release notes

ElcomSoft's Advanced RAR Password Recovery adds performance improvements and Windows XP theme support.

Improved brute-force attack speed for faster password recovery.
Added support for Windows XP themes in the user interface.

2 details in Everything

Advanced Office XP Password Recovery has been updated Sep 9, 2003 · release notes

Adds Money 2004 Passport account support to ElcomSoft's Advanced Office XP Password Recovery

Added support for Money 2004 Passport accounts
Added support for PowerPoint XP (2002) read-only password

2 details in Everything

Advanced IM Password Recovery new version Sep 4, 2003 · release notes

Adds recovery support for QQQ, Global-IM, and updates for existing messengers.

Adds QQQ messenger support for password recovery
Adds Global-IM messenger support for password recovery

2 details in Everything

New version of Advanced EFS Data Recovery - now with Windows XP Service Pack 1 (AES encryption) support! Aug 13, 2003 · release notes

Advanced EFS Data Recovery adds decryption support for Windows XP SP1 encrypted files

Added support for Windows XP Service Pack 1 (AES encryption)

1 detail in Everything

New version of Advanced EFS Data Recovery now with Windows XP support! Jul 15, 2003 · release notes

Advanced EFS Data Recovery adds support for Windows XP encrypted files.

Added Windows XP platform support for EFS file decryption.

1 detail in Everything

New version of Advanced IM Password Recovery has been released. Apr 28, 2003 · release notes

Adds support for Vista IM to Advanced IM Password Recovery

Added Vista IM support.

1 detail in Everything

New version of Advanced Intuit Password Recovery Mar 7, 2003 · release notes

Advanced Intuit Password Recovery adds QuickBooks 2003 file support

New version of Advanced PDF Password Recovery has been released -- now with support of Kinko's Document Format (KDF) files and improved Windows XP compatibility. Oct 1, 2002 · release notes

Advanced PDF Password Recovery adds KDF support and improves Windows XP compatibility

Adds support for Kinko's Document Format (KDF) files

1 detail in Everything

New version of Advanced Instant Messengers Password Recovery now available -- added support for 6 new messengers. Sep 30, 2002 · release notes

Advanced Instant Messengers Password Recovery adds support for 6 new messengers.

We have started a new product line, eBook Processing Software. Advanced eBook Explorer now available, absolutely FREE! May 20, 2002 · release notes

New tool type added: GUI-based eBook Processing Software

Advanced eBook Explorer is now available as a new free product in the ElcomSoft lineup.

1 detail in Everything

Updated versions of Advanced Intuit Password Recovery, Advanced WP Office Password Recovery and Advanced PDF Password Recovery have been released; Multilingual Wordlists now available on CD! Apr 26, 2002 · release notes

Advanced Intuit, WP Office, and PDF Password Recovery updated with multilingual wordlists available on CD.

New version of Advanced Instant Messengers Password Recovery has been released -- now with Jabber IM support. Feb 1, 2002 · release notes

Advanced Instant Messengers Password Recovery adds Jabber IM support to its extraction capabilities.

ElcomSoft

Summary

How ElcomSoft helps

Languages

Features

What ElcomSoft offers you

release 14 total

release 13 total

release 13 total

release 11 total

release 9 total

docs

release 9 total

release 7 total

example

release 8 total

release

docs

example

release

release

example

release

example

release

release

release

example

release

release

release

release

example

release

example

release

release

release

release

release

release

release

release

release

release

release

release

release

release

release

release

release

release

release

release 74 total

release 7 total

release

release

release

release

release

release

release

release

release

release

docs

example

release

release 25 total

release 50 total

release 45 total

release 45 total

release 37 total

release 24 total

docs

example

release 26 total

release 20 total

docs