Possibility to decrypt and mount userdata.img

[>>PakFones<<]

Hi, Masters can you please tell me about decrypt and mount userdata.img from Android 7.0 based phone? Because of FDE (Full Disk Encryption) is implemented. Actually i have a dead MTK based phone and want to recover user data from it? I have screen lock password also but unfortunately phone is in dead condition. I have dumped 16GB full emmc using easy jtag.

• Can we write this user data partition to other phone which have same memory size?
• Can we decrypt userdata.img via brute force?
• Is there any possibility to run userdata.img on emulator?
• Is there any possibility to unlock userdata.img using screen lock?

Thanks in advance.


Regards!

[rogerboogie]

Originally Posted by >>PakFones<<

Hi, Masters can you please tell me about decrypt and mount userdata.img from Android 7.0 based phone? Because of FDE (Full Disk Encryption) is implemented. Actually i have a dead MTK based phone and want to recover user data from it? I have screen lock password also but unfortunately phone is in dead condition. I have dumped 16GB full emmc using easy jtag.

• Can we write this user data partition to other phone which have same memory size?
• Can we decrypt userdata.img via brute force?
• Is there any possibility to run userdata.img on emulator?
• Is there any possibility to unlock userdata.img using screen lock?

Thanks in advance.


Regards!

I think the best way you have to try is , desoldering AP cpu from dead board and then solder back on working board , laso you can solder back emmc from broken phone , by this way , crypto on userdata will be the same and need to power on Again with all data intact

[genhack23]

Originally Posted by >>PakFones<<

Hi, Masters can you please tell me about decrypt and mount userdata.img from Android 7.0 based phone? Because of FDE (Full Disk Encryption) is implemented. Actually i have a dead MTK based phone and want to recover user data from it? I have screen lock password also but unfortunately phone is in dead condition. I have dumped 16GB full emmc using easy jtag.

• Can we write this user data partition to other phone which have same memory size?
• Can we decrypt userdata.img via brute force?
• Is there any possibility to run userdata.img on emulator?
• Is there any possibility to unlock userdata.img using screen lock?

Thanks in advance.


Regards!

My dear friend, in the other post i put a link about how android crypt the user data, read it and try to learn something. About the solution on your problem the best ways is swap cpu and emmc, to a working motherboard, android phone are more easy than iphone cpu... And about my problem solved to my dead motherboard is not short to ground , is a short under ball of pm, and about the video "How find a short" i think the video is a very tresh example, for 3 reason:
-You need see schematic before probe a line with a 3.7v of full charged battery
-With schematic you can see where the line start and where the line die...
-With schematic you can see all component about this line....
A simple example to demistifing the video coud be a shorted coil, you never see a short.. And many more component... After that if you need to recover data swap cpu+emmc...
Ps: Sorry for the off-topic

[>>PakFones<<]

Originally Posted by genhack23

My dear friend, in the other post i put a link about how android crypt the user data, read it and try to learn something. About the solution on your problem the best ways is swap cpu and emmc, to a working motherboard, android phone are more easy than iphone cpu... And about my problem solved to my dead motherboard is not short to ground , is a short under ball of pm, and about the video "How find a short" i think the video is a very tresh example, for 3 reason:
-You need see schematic before probe a line with a 3.7v of full charged battery
-With schematic you can see where the line start and where the line die...
-With schematic you can see all component about this line....
A simple example to demistifing the video coud be a shorted coil, you never see a short.. And many more component... After that if you need to recover data swap cpu+emmc...
Ps: Sorry for the off-topic

Today again i have a Redmi Note4 with Android 7.0 firmware. Phone is rebooting after logo because of CPU going over heated during boot up process. I have dumped all emmc including uaserdata.img it's near 24GB.


Is there any chance to decrypt uaser data partition without entering code from screen because CPU is faulty phone can't power on normally. Is there any chance by writing all firmware including userdata to other phone?

[nessyb]

Originally Posted by genhack23

My dear friend, in the other post i put a link about how android crypt the user data, read it and try to learn something. About the solution on your problem the best ways is swap cpu and emmc, to a working motherboard, android phone are more easy than iphone cpu... And about my problem solved to my dead motherboard is not short to ground , is a short under ball of pm, and about the video "How find a short" i think the video is a very tresh example, for 3 reason:
-You need see schematic before probe a line with a 3.7v of full charged battery
-With schematic you can see where the line start and where the line die...
-With schematic you can see all component about this line....
A simple example to demistifing the video coud be a shorted coil, you never see a short.. And many more component... After that if you need to recover data swap cpu+emmc...
Ps: Sorry for the off-topic

Where is the link i need it also

[Brka]

@PakFones,

Forget about decrypt. If data in phone is SO IMPORTANT to user,
it automatically means that HE IS READY TO PAY FOR IT, and not small amount.

By meaning of IMPORTANT, if person doesn't want to pay more than 5xx $,
or even worse less than 1xx $, just don't waste time and show him the door.

Those "I need my IMPORTANT data" guys are everywhere, and just because
some idiots are telling them that "it's EASY to recover data" they think "we will pay small amount".
Well, point them to those "EASY recover data" guys in that situation,
because data recovery cant be cheap - it requires hardware skills,
same identical working phone, and lot of working hours wasted.

As mentioned before - userdata partition needs same CPU,
soldered to working board, together with eMMC (if not faulty),
or userdata partition written onto working phone + original board cpu.


b.r.
Alex

[eyestrain]

Very well said, and it is true. If you are familiar with celebrite devices, they are not cheap. Military and Intelligence are using this product to decrypt data from any devices. we are using one in our shop. https://www.cellebrite.com/en/produc...xtract-decode/

If your client are really willing to pay, it cost a penny, and not a free information that can be found in the internet.

This makes sense.

just don't waste time and show him the door.

[hitech care]

Originally Posted by >>PakFones<<

Hi, Masters can you please tell me about decrypt and mount userdata.img from Android 7.0 based phone? Because of FDE (Full Disk Encryption) is implemented. Actually i have a dead MTK based phone and want to recover user data from it? I have screen lock password also but unfortunately phone is in dead condition. I have dumped 16GB full emmc using easy jtag.

• Can we write this user data partition to other phone which have same memory size?
• Can we decrypt userdata.img via brute force?
• Is there any possibility to run userdata.img on emulator?
• Is there any possibility to unlock userdata.img using screen lock?

Thanks in advance.


Regards!

Kindly Upload Somewhere Full Dump User Area N PM Me Link... Or PM Me We Will Discuss There..Also Mention Brand N Model Name Of Phone

[>>PakFones<<]

Originally Posted by Brka

@PakFones,

Forget about decrypt. If data in phone is SO IMPORTANT to user,
it automatically means that HE IS READY TO PAY FOR IT, and not small amount.

By meaning of IMPORTANT, if person doesn't want to pay more than 5xx $,
or even worse less than 1xx $, just don't waste time and show him the door.

Those "I need my IMPORTANT data" guys are everywhere, and just because
some idiots are telling them that "it's EASY to recover data" they think "we will pay small amount".
Well, point them to those "EASY recover data" guys in that situation,
because data recovery cant be cheap - it requires hardware skills,
same identical working phone, and lot of working hours wasted.

As mentioned before - userdata partition needs same CPU,
soldered to working board, together with eMMC (if not faulty),
or userdata partition written onto working phone + original board cpu.


b.r.
Alex

100% agree with you.

[>>PakFones<<]

Originally Posted by hitech care

Kindly Upload Somewhere Full Dump User Area N PM Me Link... Or PM Me We Will Discuss There..Also Mention Brand N Model Name Of Phone

I will try to upload...