DFU Pico Dongle (PWNED, Auto-DFU)

DFU Pico Dongle is a hardware add-on for the checkm8 exploit, designed for data extraction from supported iPhone and iPad devices, operating in both pwned DFU and Auto-DFU modes. Based on the Raspberry Pi Pico, the device simplifies the process of switching an iPhone or iPad into DFU mode and executing the initial steps of the exploit. To unlock or extract data, a custom firmware is required, which is included free of charge with Elcomsoft iOS Forensic Toolkit or availabel for free at Github.

Compatibility in Pwned DFU Mode

Supported devices:

• iPhone 4s
• iPod Touch 5
• iPad 2 and iPad 3
• iPad Mini (1st generation)
• Apple TV 3

Supported processors:

• A5 (S5L8940)
• A5 Rev A (S5L8942)
• A5X (S5L8945)

The device must be functional enough to be switched into DFU mode.

Compatibility in Auto-DFU Mode (Automatic Switching)

Supported devices:

• iPhone 8
• iPhone 8 Plus
• iPhone X

Switching a device into DFU (Device Firmware Update) mode is a necessary step for performing low-level forensic data extraction using the checkm8 exploit. Entering DFU mode requires a precise sequence of button presses with specific timing. If any button on the device is malfunctioning, the process becomes difficult or even impossible without disassembling the device.

The set includes all the necessary cables for both pwned DFU and Auto-DFU modes.

Flashing the Device

For pwned DFU mode, use the file: picom8.uf2
For Auto-DFU mode, use the file: picoDFU.uf2

Flashing Process:

1. Switch the device to PC mode and hold the "BOOTSEL" button.
2. Connect the DFU Pico Dongle to the computer using a USB A-A cable.
3. The computer will detect the device as a USB storage drive.
4. To flash the firmware, drag and drop the appropriate file (picom8.uf2 or picoDFU.uf2) into the DFU Pico Dongle storage.
5. The DFU Pico Dongle will reboot and be ready for use.
   • In pwned DFU mode, the mode switch remains in the same position as for PC mode.
   • In Auto-DFU mode, select one of the two options: MODE 1 or MODE 2.

Additional Information:

• MODE 2 functions similarly to MODE 1 but with reversed communication signals. This serves as an alternative if MODE 1 does not successfully enter DFU mode.

Warning:

Before connecting the DFU Pico Dongle to the target device, the device must first be switched into Recovery Mode.

Software to download from Elcomsoft IOS Forensic installation. It also works with versions from GitHub i.e. https://github.com/MattTheTekie/ipwndfu-pico and https://github.com/SmartMaster35Rus/pi-pico-checkm8-mod