GSM Shop
GSM-Forum  

Welcome to the GSM-Forum forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features.
Only registered members may post questions, contact other members or search our database of over 8 million posts.

Registration is fast, simple and absolutely free so please - Click to REGISTER!

If you have any problems with the registration process or your account login, please contact contact us .

Go Back   GSM-Forum > Other Gsm/Mobile Related Forums > GSM Programming & Reverse Engineering

GSM Programming & Reverse Engineering Here you can post all Kind of GSM Programming and Reverse Engineering tools and Secrets.

Reply
 
LinkBack Thread Tools Display Modes
Old 07-17-2018, 13:28   #1 (permalink)
No Life Poster
 
>>PakFones<<'s Avatar
 
Join Date: Jul 2007
Location: My Computer
Posts: 1,297
Member: 553178
Status: Offline
Sonork: 100.1592454
Thanks Meter: 933
Donate money to this user
Possibility to decrypt and mount userdata.img


Hi, Masters can you please tell me about decrypt and mount userdata.img from Android 7.0 based phone? Because of FDE (Full Disk Encryption) is implemented. Actually i have a dead MTK based phone and want to recover user data from it? I have screen lock password also but unfortunately phone is in dead condition. I have dumped 16GB full emmc using easy jtag.



  • Can we write this user data partition to other phone which have same memory size?
  • Can we decrypt userdata.img via brute force?
  • Is there any possibility to run userdata.img on emulator?
  • Is there any possibility to unlock userdata.img using screen lock?
Thanks in advance.


Regards!
  Reply With Quote
Old 07-23-2018, 12:04   #2 (permalink)
No Life Poster
 
rogerboogie's Avatar
 
Join Date: Jan 2005
Location: the earth
Age: 36
Posts: 989
Member: 103024
Status: Offline
Thanks Meter: 592
Quote:
Originally Posted by >>PakFones<< View Post
Hi, Masters can you please tell me about decrypt and mount userdata.img from Android 7.0 based phone? Because of FDE (Full Disk Encryption) is implemented. Actually i have a dead MTK based phone and want to recover user data from it? I have screen lock password also but unfortunately phone is in dead condition. I have dumped 16GB full emmc using easy jtag.



  • Can we write this user data partition to other phone which have same memory size?
  • Can we decrypt userdata.img via brute force?
  • Is there any possibility to run userdata.img on emulator?
  • Is there any possibility to unlock userdata.img using screen lock?
Thanks in advance.


Regards!

I think the best way you have to try is , desoldering AP cpu from dead board and then solder back on working board , laso you can solder back emmc from broken phone , by this way , crypto on userdata will be the same and need to power on Again with all data intact
  Reply With Quote
The Following User Says Thank You to rogerboogie For This Useful Post:
Old 07-26-2018, 20:55   #3 (permalink)
Freak Poster
 
Join Date: May 2014
Posts: 252
Member: 2182001
Status: Offline
Thanks Meter: 49
Quote:
Originally Posted by >>PakFones<< View Post
Hi, Masters can you please tell me about decrypt and mount userdata.img from Android 7.0 based phone? Because of FDE (Full Disk Encryption) is implemented. Actually i have a dead MTK based phone and want to recover user data from it? I have screen lock password also but unfortunately phone is in dead condition. I have dumped 16GB full emmc using easy jtag.



  • Can we write this user data partition to other phone which have same memory size?
  • Can we decrypt userdata.img via brute force?
  • Is there any possibility to run userdata.img on emulator?
  • Is there any possibility to unlock userdata.img using screen lock?
Thanks in advance.


Regards!
My dear friend, in the other post i put a link about how android crypt the user data, read it and try to learn something. About the solution on your problem the best ways is swap cpu and emmc, to a working motherboard, android phone are more easy than iphone cpu... And about my problem solved to my dead motherboard is not short to ground , is a short under ball of pm, and about the video "How find a short" i think the video is a very tresh example, for 3 reason:
-You need see schematic before probe a line with a 3.7v of full charged battery
-With schematic you can see where the line start and where the line die...
-With schematic you can see all component about this line....
A simple example to demistifing the video coud be a shorted coil, you never see a short.. And many more component... After that if you need to recover data swap cpu+emmc...
Ps: Sorry for the off-topic
  Reply With Quote
Old 11-06-2018, 15:18   #4 (permalink)
No Life Poster
 
>>PakFones<<'s Avatar
 
Join Date: Jul 2007
Location: My Computer
Posts: 1,297
Member: 553178
Status: Offline
Sonork: 100.1592454
Thanks Meter: 933
Donate money to this user
Quote:
Originally Posted by genhack23 View Post
My dear friend, in the other post i put a link about how android crypt the user data, read it and try to learn something. About the solution on your problem the best ways is swap cpu and emmc, to a working motherboard, android phone are more easy than iphone cpu... And about my problem solved to my dead motherboard is not short to ground , is a short under ball of pm, and about the video "How find a short" i think the video is a very tresh example, for 3 reason:
-You need see schematic before probe a line with a 3.7v of full charged battery
-With schematic you can see where the line start and where the line die...
-With schematic you can see all component about this line....
A simple example to demistifing the video coud be a shorted coil, you never see a short.. And many more component... After that if you need to recover data swap cpu+emmc...
Ps: Sorry for the off-topic

Today again i have a Redmi Note4 with Android 7.0 firmware. Phone is rebooting after logo because of CPU going over heated during boot up process. I have dumped all emmc including uaserdata.img it's near 24GB.


Is there any chance to decrypt uaser data partition without entering code from screen because CPU is faulty phone can't power on normally. Is there any chance by writing all firmware including userdata to other phone?
  Reply With Quote
Old 11-06-2018, 20:13   #5 (permalink)
No Life Poster
 
nessyb's Avatar
 
Join Date: Jan 2013
Location: GsmWorld
Posts: 1,226
Member: 1866877
Status: Offline
Thanks Meter: 392
Quote:
Originally Posted by genhack23 View Post
My dear friend, in the other post i put a link about how android crypt the user data, read it and try to learn something. About the solution on your problem the best ways is swap cpu and emmc, to a working motherboard, android phone are more easy than iphone cpu... And about my problem solved to my dead motherboard is not short to ground , is a short under ball of pm, and about the video "How find a short" i think the video is a very tresh example, for 3 reason:
-You need see schematic before probe a line with a 3.7v of full charged battery
-With schematic you can see where the line start and where the line die...
-With schematic you can see all component about this line....
A simple example to demistifing the video coud be a shorted coil, you never see a short.. And many more component... After that if you need to recover data swap cpu+emmc...
Ps: Sorry for the off-topic
Where is the link i need it also
  Reply With Quote
Old 11-09-2018, 22:43   #6 (permalink)
Moderator
 
Brka's Avatar
 
Join Date: Jun 1999
Location: Serbia
Age: 42
Posts: 6,145
Member: 163
Status: Offline
Thanks Meter: 5,460
@PakFones,

Forget about decrypt. If data in phone is SO IMPORTANT to user,
it automatically means that HE IS READY TO PAY FOR IT, and not small amount.

By meaning of IMPORTANT, if person doesn't want to pay more than 5xx $,
or even worse less than 1xx $, just don't waste time and show him the door.

Those "I need my IMPORTANT data" guys are everywhere, and just because
some idiots are telling them that "it's EASY to recover data" they think "we will pay small amount".
Well, point them to those "EASY recover data" guys in that situation,
because data recovery cant be cheap - it requires hardware skills,
same identical working phone, and lot of working hours wasted.

As mentioned before - userdata partition needs same CPU,
soldered to working board, together with eMMC (if not faulty),
or userdata partition written onto working phone + original board cpu.


b.r.
Alex
__________________
Always press THANKS button if my post was helpful!
Please DO NOT send me PM's for help, You can ask for help on forum
Do not post THANKS posts - use thanks button !
ALWAYS use SEARCH button before posting!
  Reply With Quote
The Following 3 Users Say Thank You to Brka For This Useful Post:
Show/Hide list of the thanked
Old 11-10-2018, 16:15   #7 (permalink)
No Life Poster
 
eyestrain's Avatar
 
Join Date: Feb 2006
Location: Somewhere in British Territory
Posts: 1,007
Member: 237911
Status: Offline
Thanks Meter: 613
Very well said, and it is true. If you are familiar with celebrite devices, they are not cheap. Military and Intelligence are using this product to decrypt data from any devices. we are using one in our shop. https://www.cellebrite.com/en/produc...xtract-decode/

If your client are really willing to pay, it cost a penny, and not a free information that can be found in the internet.

This makes sense.
Quote:
just don't waste time and show him the door.
  Reply With Quote
The Following User Says Thank You to eyestrain For This Useful Post:
Old 11-10-2018, 21:11   #8 (permalink)
No Life Poster
 
hitech care's Avatar
 
Join Date: Nov 2012
Location: Ek India Happy Wala.. :-)
Posts: 2,398
Member: 1834832
Status: Offline
Thanks Meter: 1,118
Smile

Quote:
Originally Posted by >>PakFones<< View Post
Hi, Masters can you please tell me about decrypt and mount userdata.img from Android 7.0 based phone? Because of FDE (Full Disk Encryption) is implemented. Actually i have a dead MTK based phone and want to recover user data from it? I have screen lock password also but unfortunately phone is in dead condition. I have dumped 16GB full emmc using easy jtag.



  • Can we write this user data partition to other phone which have same memory size?
  • Can we decrypt userdata.img via brute force?
  • Is there any possibility to run userdata.img on emulator?
  • Is there any possibility to unlock userdata.img using screen lock?
Thanks in advance.


Regards!
Kindly Upload Somewhere Full Dump User Area N PM Me Link... Or PM Me We Will Discuss There..Also Mention Brand N Model Name Of Phone
  Reply With Quote
The Following User Says Thank You to hitech care For This Useful Post:
Old 11-10-2018, 21:42   #9 (permalink)
No Life Poster
 
>>PakFones<<'s Avatar
 
Join Date: Jul 2007
Location: My Computer
Posts: 1,297
Member: 553178
Status: Offline
Sonork: 100.1592454
Thanks Meter: 933
Donate money to this user
Quote:
Originally Posted by Brka View Post
@PakFones,

Forget about decrypt. If data in phone is SO IMPORTANT to user,
it automatically means that HE IS READY TO PAY FOR IT, and not small amount.

By meaning of IMPORTANT, if person doesn't want to pay more than 5xx $,
or even worse less than 1xx $, just don't waste time and show him the door.

Those "I need my IMPORTANT data" guys are everywhere, and just because
some idiots are telling them that "it's EASY to recover data" they think "we will pay small amount".
Well, point them to those "EASY recover data" guys in that situation,
because data recovery cant be cheap - it requires hardware skills,
same identical working phone, and lot of working hours wasted.

As mentioned before - userdata partition needs same CPU,
soldered to working board, together with eMMC (if not faulty),
or userdata partition written onto working phone + original board cpu.


b.r.
Alex
100% agree with you.
  Reply With Quote
Old 11-10-2018, 21:43   #10 (permalink)
No Life Poster
 
>>PakFones<<'s Avatar
 
Join Date: Jul 2007
Location: My Computer
Posts: 1,297
Member: 553178
Status: Offline
Sonork: 100.1592454
Thanks Meter: 933
Donate money to this user
Quote:
Originally Posted by hitech care View Post
Kindly Upload Somewhere Full Dump User Area N PM Me Link... Or PM Me We Will Discuss There..Also Mention Brand N Model Name Of Phone
I will try to upload...
  Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


 



All times are GMT +1. The time now is 02:36.



Powered by Searchlight © 2018 Axivo Inc.
vBulletin Optimisation provided by vB Optimise (Pro) - vBulletin Mods & Addons Copyright © 2018 DragonByte Technologies Ltd.
- GSM Hosting Ltd. - 1999-2017 -
Page generated in 0.34393 seconds with 7 queries

SEO by vBSEO