Using Easy Jtag for Data Recovery - Page 3 - GSM-Forum

genhack23 · 07-19-2018, 11:47

Quote:

Reading Android Info

Partition [/system] Not Found, Try Extended Search..
Partition #61 is [/system]. Mount..
Reading data..

Vendor = unknown
Brand = Huawei
Model = generic_a53_32
Device ID = generic_a53_32
Name ID = generic_a53_32
Android version = 7.0
Firm version = System 5.1.0.78(0H7S)
Firm date = Wed Oct 4 19:12:13 CST 2017
SDK version = 24
ID = NRD90M
CPU ABI = armeabi-v7a
CPU ABI2 = armeabi
CPU ABI LIST = armeabi-v7a,armeabi
CPU ABI LIST32 = armeabi-v7a,armeabi
Product = generic_a53_32

Ok so i have the same problem no ways guys need a key master blobs stored in cpu.. unique for each device like ios!

genhack23 · 07-19-2018, 15:26

For who have a working phone you can do that

Quote:

http://bits-please.********.com/2016...ster-keys.html

You need to extract
Simply invoke the python script fde_bruteforce.py using:

The crypto footer from the device
The leaked KeyMaster keys

For other i think the only ways is swap emmc and cpu e recover the data...

coderinside · 07-19-2018, 19:09

I hve the same situation in motorola xt1550 phone is short i remove emmc then dectect in easy jtag fully encrypted data

genhack23 · 07-19-2018, 20:15

Quote:

Originally Posted by coderinside

I hve the same situation in motorola xt1550 phone is short i remove emmc then dectect in easy jtag fully encrypted data

remove the short...
For my case, after i backup the full image i try to solve the motherboard hw, reball the pm the phone was in full working condition... Done, see in my twitter the little story https://twitter.com/Nick_Il_Vento

>>PakFones<< · 07-21-2018, 08:06

Quote:

Originally Posted by coderinside

I hve the same situation in motorola xt1550 phone is short i remove emmc then dectect in easy jtag fully encrypted data

My problem still not solved but if someone have full short phone just watch this video to remove shortage easily.

tahernike · 12-20-2018, 13:15

i try many phone new type
like g610f j250f c7000 c9000
always give me that

Code:

Setting interface to EasyJtag2/ISP
Setting bus width to 1 Bit
Setting frequence to 36 Mhz
CMD Pullup Level: 2749 mV
CMD Active Level: 2807 mV
EMMC Device Information :
EMMC CID: 150100434A4E4234521097F959BF2431
EMMC CSD: D02701320F5903FFF6DBFFEF8E40400D
EMMC Manufacture : SAMSUNG , EMMC NAME: CJNB4R , HEX: 434A4E423452 , S/N: 97F959BF , rev. 0x10
EMMC Manufacture ID: 0x15 , OEM ID: 0x00 , Device Type: BGA (Discrete embedded) , Date: 2/2017
   EMMC ROM 1 (Main User Data) Capacity: 59640 MB (000E8F800000)
   EMMC ROM 2/3 (Boot Partition 1/2) Capacity: 4096 KB (000000400000)
   EMMC RPMB (Replay Protected Memory Block) Capacity: 4096 KB (000000400000)
EMMC Permanent Write Protection: No
EMMC Temporary Write Protection: No
Extended CSD Information :
Extended CSD rev: 1.8 (MMC 5.1)
Boot configuration [PARTITION_CONFIG]: 0x38 , Boot from: ROM1 (Main User Area)
Boot Bus Config: 0x00 , width 1bit
H/W Reset Function [RST_N_FUNCTION]: 0x01, RST_n signal is permanently enabled
Supported partition features [PARTITIONING_SUPPORT]: 0x07
Device supports partitioning features
Device can have enhanced technological features in partitions and user data area
Device can have extended partitions attribute
Partition Settings [PARTITION_SETTING_COMPLETED]: 0x00
Backup saved: CJNB4R_97F959BF_20181220_141126.extcsd
EMMC Init completed.

Scan from: CJNB4R

Vendor: Samsung
Searching GPT ...
GPT header is found and is valid

GPT header successfully parsed

Scan done

Mount [efs] successfully   PartType: LINUX
Mount [persist] successfully   PartType: LINUX
Mount [dsp] successfully   PartType: LINUX
Mount [modem] successfully   PartType: FAT16
Mount [apnhlos] successfully   PartType: FAT16
Mount [persdata] successfully   PartType: LINUX
Mount [system] successfully   PartType: LINUX
Mount [cache] successfully   PartType: LINUX
Mount [userdata] SKIPPED   PartType: Full Disk Encryption

NoName® · 12-20-2018, 13:17

Quote:

Originally Posted by tahernike

i try many phone new type

like g610f j250f c7000 c9000

always give me that

Code:

Setting interface to EasyJtag2/ISP

Setting bus width to 1 Bit

Setting frequence to 36 Mhz

CMD Pullup Level: 2749 mV

CMD Active Level: 2807 mV

EMMC Device Information :

EMMC CID: 150100434A4E4234521097F959BF2431

EMMC CSD: D02701320F5903FFF6DBFFEF8E40400D

EMMC Manufacture : SAMSUNG , EMMC NAME: CJNB4R , HEX: 434A4E423452 , S/N: 97F959BF , rev. 0x10

EMMC Manufacture ID: 0x15 , OEM ID: 0x00 , Device Type: BGA (Discrete embedded) , Date: 2/2017

   EMMC ROM 1 (Main User Data) Capacity: 59640 MB (000E8F800000)

   EMMC ROM 2/3 (Boot Partition 1/2) Capacity: 4096 KB (000000400000)

   EMMC RPMB (Replay Protected Memory Block) Capacity: 4096 KB (000000400000)

EMMC Permanent Write Protection: No

EMMC Temporary Write Protection: No

Extended CSD Information :

Extended CSD rev: 1.8 (MMC 5.1)

Boot configuration [PARTITION_CONFIG]: 0x38 , Boot from: ROM1 (Main User Area)

Boot Bus Config: 0x00 , width 1bit

H/W Reset Function [RST_N_FUNCTION]: 0x01, RST_n signal is permanently enabled

Supported partition features [PARTITIONING_SUPPORT]: 0x07

Device supports partitioning features

Device can have enhanced technological features in partitions and user data area

Device can have extended partitions attribute

Partition Settings [PARTITION_SETTING_COMPLETED]: 0x00

Backup saved: CJNB4R_97F959BF_20181220_141126.extcsd

EMMC Init completed.



Scan from: CJNB4R



Vendor: Samsung

Searching GPT ...

GPT header is found and is valid



GPT header successfully parsed



Scan done



Mount [efs] successfully   PartType: LINUX

Mount [persist] successfully   PartType: LINUX

Mount [dsp] successfully   PartType: LINUX

Mount [modem] successfully   PartType: FAT16

Mount [apnhlos] successfully   PartType: FAT16

Mount [persdata] successfully   PartType: LINUX

Mount [system] successfully   PartType: LINUX

Mount [cache] successfully   PartType: LINUX

Mount [userdata] SKIPPED   PartType: Full Disk Encryption

There is no way , without knowledge of password pin etc , used for FDE encryption.

Sakalalina · 01-24-2019, 13:53

Quote:

Originally Posted by NoName®

There is no way , without knowledge of password pin etc , used for FDE encryption.

Do you mean pattern code?
So if we have the pin/pattern we can decrypt the data?

c3llf3r · 03-18-2019, 03:59

of emmc will it be possible to read the user's data partition and then write it to another cell of the same model that works very well?
Will it be possible for me to see your user data?
thank you very much I hope soon answer.

simpleprince49 · 05-07-2019, 15:33

Quote:

Originally Posted by SILVER ANJEL

s7 s7edge is support?

phone has ufs storage this is deferent type

layder · 05-07-2019, 22:05

At new phones userdata is crypted

25gianni25 · 06-12-2019, 16:25

I have problem to extract data from samsung a520f.
This is my log:

Vendor: Qualcomm
Searching GPT ...
GPT header is found and is valid

GPT header successfully parsed

Scan done

Mount [efs] successfully PartType: LINUX
Mount [system] successfully PartType: LINUX
Mount [cache] successfully PartType: LINUX
Mount [preload] successfully PartType: LINUX
Mount [USERDATA] SKIPPED PartType: Full Disk Encryption

I try with easyjtag plus, classic and emmc file manager addon 1.17 but nothing. Any solution?

layder · 06-12-2019, 19:50

Currently there are no solutions

perhaps in the future it will be possible to somehow recognize the partition encryption keys

vamonosdemarcha · 06-28-2019, 12:24

HELP USERDATA] SKIPPED PartType: Full Disk Encryption

I do not have access to the data partition I need to remove pattern or read it

layder · 06-29-2019, 08:15

There are no simple way to decode data from crypted partition - only format it, and data lost (with password settings)

05-07-2019, 22:05	#41 (permalink)
layder Product Supporter Join Date: Jun 2002 Location: Belarus Age: 47 Posts: 3,191 Member: 13148 Status: Offline Thanks Meter: 2,949	At new phones userdata is crypted Last edited by layder; 05-07-2019 at 22:32.

06-12-2019, 16:25	#42 (permalink)
25gianni25 Insane Poster Join Date: Feb 2009 Location: italy Posts: 60 Member: 971036 Status: Offline Thanks Meter: 1	I have problem to extract data from samsung a520f. This is my log: Vendor: Qualcomm Searching GPT ... GPT header is found and is valid GPT header successfully parsed Scan done Mount [efs] successfully PartType: LINUX Mount [system] successfully PartType: LINUX Mount [cache] successfully PartType: LINUX Mount [preload] successfully PartType: LINUX Mount [USERDATA] SKIPPED PartType: Full Disk Encryption I try with easyjtag plus, classic and emmc file manager addon 1.17 but nothing. Any solution? Last edited by 25gianni25; 06-12-2019 at 16:26. Reason: ext forensic too

06-28-2019, 12:24	#44 (permalink)
vamonosdemarcha Junior Member Join Date: Apr 2017 Posts: 9 Member: 2701984 Status: Offline Thanks Meter: 0	HELP USERDATA] SKIPPED PartType: Full Disk Encryption HELP USERDATA] SKIPPED PartType: Full Disk Encryption I do not have access to the data partition I need to remove pattern or read it

07-19-2018, 19:09	#33 (permalink)
coderinside Freak Poster Join Date: Oct 2016 Location: india Posts: 336 Member: 2636476 Status: Offline Thanks Meter: 61	I hve the same situation in motorola xt1550 phone is short i remove emmc then dectect in easy jtag fully encrypted data

03-18-2019, 03:59	#39 (permalink)
c3llf3r Insane Poster Join Date: May 2005 Age: 46 Posts: 95 Member: 149217 Status: Offline Thanks Meter: 21	of emmc will it be possible to read the user's data partition and then write it to another cell of the same model that works very well? Will it be possible for me to see your user data? thank you very much I hope soon answer.

06-12-2019, 19:50	#43 (permalink)
layder Product Supporter Join Date: Jun 2002 Location: Belarus Age: 47 Posts: 3,191 Member: 13148 Status: Offline Thanks Meter: 2,949	Currently there are no solutions perhaps in the future it will be possible to somehow recognize the partition encryption keys

06-29-2019, 08:15	#45 (permalink)
layder Product Supporter Join Date: Jun 2002 Location: Belarus Age: 47 Posts: 3,191 Member: 13148 Status: Offline Thanks Meter: 2,949	There are no simple way to decode data from crypted partition - only format it, and data lost (with password settings)