How to interface with iOS lockdownd

I used nmap to portscan my iPod Touch, and found a single port open, which was port 62078, labeled as "iphone-sync". I did some research, and found that the proccess behind it was a program called "lockdownd" which could be used to interface with the iPod.

I was wondering if and how I could use this to interface with and possibly control my iPod.


Solution 1:

Port 62078 is the port on which the iOS lockdown daemon listens on. Normally it is interacted with via usbmuxd which is a protocol that allows arbitrary TCP connections to be made over a USB connection.

lockdownd can be used to do a lot of nifty things with the built-in services Apple expose on unjailbroken devices. The goto library for interfacing with this service seems to be libimobiledevice which is an open-source library implementing the usbmuxd and other iOS protocols. For a better overview of the capabilities of lockdownd and the iMobileDevice library, take a look at some of the packaged tools the library provides. If you know C, the source code for these tools is here.