open /var/mobile/Library/Preferences/com.apple.restrictionspassword.plist
you can find this kinds:
<key>RestrictionsPasswordKey</key> <data> xxxxxxxxxxxxxxxxxxxxxxxxxxx= </data> <key>RestrictionsPasswordSalt</key> <data> XXXXXX== </data>
$key=```echo "key" |base64 -d | xxd -p``` $salt=```echo "salt" |base64 -d | xxd -p```
finallytry matching hashed 0000~9999(PBKDF2-HMAC-SHA1,salt=salt,iterations=1000) and the givenkey
more info:http://hashcat.net/forum/archive/index.php?thread-2892.html