Access LG L34C Pass...
 
Notifications
Clear all

Access LG L34C Passcode Locked Phone

11 Posts
7 Users
0 Likes
888 Views
(@sav114)
Posts: 4
New Member
Topic starter
 

I keep running into LG L34C passcode locked phones that I can't get in to. I looked into JTAG and have a Riff Box and Medusa Box. The Riff Box does not support the MSM8610 that the LG34C has in it. Medusa has a couple phones that say they are based on the MSM8610 but Medusa does not have the probing capability to identify the TAPS like the Riff Box does. I figured if I could identify the TAPS, I could try using one of the MSM8610 supported phones and the Medusa Box.

The LG L34C appears to be the Tracfone version of an LG L40 because the board is marked with LG L40 on one side and then Tracfone L34C on the other. So if anyone has TAPS for a L40, I'd be interested.

The two L34C's I currently have use a pattern lock for one and a number lock on the other. Neither has USB debugging enabled. Also, I can't get into the bootloader menu regardless of the buttons combinations I try.

I've looked all over the internet and couldn't find anything helpful. If anyone has any ideas, I'd be all ears.

Scott

 
Posted : 12/03/2015 10:55 pm
(@trewmte)
Posts: 1877
Noble Member
 

Have you looked here

http//octoplusbox.com/

 
Posted : 12/03/2015 11:10 pm
nightworker
(@nightworker)
Posts: 134
Estimable Member
 

you can do it xry or cellebrite call help from another lab i think

 
Posted : 12/03/2015 11:14 pm
(@sav114)
Posts: 4
New Member
Topic starter
 

Thanks for the responses.

I had looked at the Octoplus box and didn't see the L34C as supported.

I also tried Cellebrite, which does not support the L34C but I know I can get logical extractions from from unlocked phones using the VS410PP. However, with USB debugging not enabled, it's not working. We don't have XRY at our shop but we're trying to find a close department that does as I saw someone was able to get a dump on an L40 using the a D329L

 
Posted : 13/03/2015 2:30 am
(@chrisw706)
Posts: 8
Active Member
 

This phone has some very small taps on the board. You would need to use 40 Guage wire. I'm not sure what the setting would be to get the file. I have not had one yet. chip off can also be done on it. if you want chip off done and are willing to ship to California send me a pm with contact info.

Chris

 
Posted : 13/03/2015 7:22 am
(@trewmte)
Posts: 1877
Noble Member
 

I suggested Octoplusbox for two reasons [1] I thought you may wish to send an email to them and [2] as you mentioned L40 in your post, the L40 if my memory serves me correctly (plus a little help from google) is also known as LG D160f and the LG D160f is supported.

I could be wrong of course and this investigation route may not work, but maybe worth a try.

http//octoplusbox.com/en/features/models/

D-series D100, D100AR, D100F, D100G, D100J, D105, D105F, D107F, D120, D120AR, D120F, D120G, D120J, D125, D125F, D125G, D127F, D150, D157, D157F, D160, D160AR, D160F, D160G, D160GO, D160J, D160TR, D165, D165AR, D165F, D165G, D170, D175F, D180F, D213, D213AR, D213C, D213CF, D213CJ, D213F, D213K, D213N, D213TR, D221, D221C, D225, D227, D228, D280, D280AR, D280F, D280G, D280N, D280NR, D280TR, D285, D285F, D285G, D290, D290G, D290N, D290TR, D295, D295F, D300f, D300g, D315, D315H, D315I, D315K, D315S, D320, D320AG, D320AR, D320F, D320F8, D320G8, D320J8, D320N, D320TR, D321, D325, D325F, D325F8, D325G8, D329, D331, D335, D337, D370, D370TR, D373, D373EU, D375, D375AR, D380, D385, D390, D390N, D390NS, D400, D400H, D400HN, D400N, D405, D405H, D405N, D405TR, D415, D415BK, D415RD, D415RDGO, D500, D500BK, D500BKGO1, D505, D520, D520BK, D605, D610, D618, D620, D620FR, D620J, D620K, D620R, D631, D680, D681, D682, D682TR, D683, D684, D685, D686, D690, D690N, D693, D693N, D700, D722, D722K, D725WP, D726, D800, D800P, D800T, D801, D801BK, D801HW, D801WH, D801Z, D802, D802T, D802TA, D802TR, D803, D805, D806, D820, D820BK, D821, D830, D838, D850, D850PR, D851, D851TN, D851WH, D852, D852G, D855, D855AR, D855K, D855P, D855TR, D950, D950G, D950P, D950W, D951, D955, D956, D957, D958, D959, D959BK, D959TS

 
Posted : 14/03/2015 11:04 am
(@sav114)
Posts: 4
New Member
Topic starter
 

Thanks TREWMTE! That explanation make a lot more sense and you are clearly more versed in mobile forensics than I am. I appreciate the info.

 
Posted : 17/03/2015 5:44 pm
(@ryanp)
Posts: 19
Active Member
 

sav114, how'd you make out with this? I'm facing the same situation with a pin locked L34c, USB Debugging disabled.

 
Posted : 14/05/2015 7:36 pm
(@sav114)
Posts: 4
New Member
Topic starter
 

I didn't make out yet….. I just came across the pinouts for the LG E410G from RIFF and the taps are visually very similar to the L34C board (which you probably know is marked as an L40). RIFF has the taps identified for the E410G but I'd need to likely use Octoplus because of the MSM8610. The taps on the L34C are super small so I think I'll end up creating a jig instead of trying to solder and then attempt with Octoplus. I just have not gotten to it yet.

On another forum I had asked if anyone had done a chip off of an MSM8610 and if they could identify the points on the chip which would correspond to the needed taps. I figure if I know that I can take the chip off a test phone and use on-board tracing to correctly identify all the taps. So far, I have not gotten a response from someone knows chip-off and I can't find a datasheet on the MSM8610 which would have the information.

That's where I'm at. If you get it before me, I'd be very interested. The L34C is a very popular phone here that I keep coming across.

Scott

 
Posted : 14/05/2015 11:44 pm
(@ci2019)
Posts: 53
Trusted Member
 

Thanks for the responses.

I had looked at the Octoplus box and didn't see the L34C as supported.

I also tried Cellebrite, which does not support the L34C but I know I can get logical extractions from from unlocked phones using the VS410PP. However, with USB debugging not enabled, it's not working. We don't have XRY at our shop but we're trying to find a close department that does as I saw someone was able to get a dump on an L40 using the a D329L

I just got a no security enabled L34C (Tracfone) yesterday. After updating Cellebrite to the May 2015 release, it does support up to logical on it.

However there was a weird issue. At least on the L34C I had, the USB debugging option was greyed out. However in Cellebrite, with the T100 tip, once you tell it to go ahead and acquire the USB debugging option will cycle from greyed out to selectable several times. If you're quick, you can check it when it turns selectable.

I know this reply doesn't have much to do with a security enabled phone but just wanted to throw this up in case someone was searching for L34C issues.

Jon

 
Posted : 15/05/2015 6:49 pm
Page 1 / 2
Share: