GrayKey and Premium.
Most of these are law enforcement-only.
Now, I say "most" because I know some consulting agencies can
get versions of Premium that do full file system
extractions but not unlock.
Because they're assuming if someone gives you
consent to a device, you obviously have the passcode.
Law enforcement can brute force.
You can use dictionary files.
You can do many types of extractions before first unlock
and after first unlock.
There are so many things you can do.
But keep in mind, as new iPhones are released,
new iOS versions are released, there
are always going to be hurdles.