Samsung Galaxy S7 S...
 
Notifications
Clear all

Samsung Galaxy S7 SM-G935F adb backup

13 Posts
6 Users
0 Likes
2,275 Views
SamBrown
(@sambrown)
Posts: 97
Trusted Member
Topic starter
 

Hi, I have a Galaxy S7 with Android 7.0.

If someone knows how to root that device with Android 7.0 (1.1.2017, encrypted) please let me know. 8)

In the meantime, I am running the adb backup command to extract data and I am not sure what I am doing wrong.
I did "adb backup -shared" four times and each time the resulting file has a different file size. WTF?

Also, there are several folders missing in that extraction, for example DCIM and WhatsApp.
I have no problem getting the WhatsApp folder via "adb pull /sdcard/WhatsApp" but I don't understand why it isn't contained in the -shared adb backup. I thought the "shared" backup should give me everything from the internal SD Card.
Has anybody had similar experiences?

 
Posted : 05/05/2017 2:17 pm
passcodeunlock
(@passcodeunlock)
Posts: 792
Prominent Member
 

Recent versions of Android applications sometimes specify which data or it's components can be backed up or not.

Rooting the device is not possible if the BL is locked, oem unlock will wipe the device, so don't do it.

 
Posted : 05/05/2017 4:24 pm
SamBrown
(@sambrown)
Posts: 97
Trusted Member
Topic starter
 

Yes but I thought that only applies to the "apps" part (/data/data) of the adb backup, not the "shared" (internal SD) part?

 
Posted : 05/05/2017 5:17 pm
(@mcman)
Posts: 189
Estimable Member
 

That's the international model isn't (with the Exynos processor)? If so, the bootloader should be unlocked and I believe there's a TWRP package for it which should get you full access.

https://forum.xda-developers.com/s7-edge/development/recovery-official-twrp-hero2lte-3-0-0-0-t3334084

Just make sure it's the correct model and chip (the US version with the snapdragon chip is a locked bootloader and won't work as passcodeunlock mentioned) and be careful around the dm-verity step as it can cause problems if you're not careful.

Jamie

 
Posted : 05/05/2017 5:48 pm
SamBrown
(@sambrown)
Posts: 97
Trusted Member
Topic starter
 

Yes, unlocking the boot loader is not the problem, unfortunately the device is encrypted. I could dump it within TWRP but then I'd only get the encrypted storage. cry

So far every tutorial for rooting the G935F I have found wants me to wipe the device in the process.

 
Posted : 05/05/2017 6:19 pm
passcodeunlock
(@passcodeunlock)
Posts: 792
Prominent Member
 

First step first! Please create the physical dump… I sent you a PM )

 
Posted : 05/05/2017 7:07 pm
(@shaky)
Posts: 7
Active Member
 

Hello all!

I am really interest about this topic. I have a Galaxy S7 Edge (SM-G935F) with Android Nougat to play with. I also have couple Edges that are our "customers" (Nougat). I am working in law enforcement. I noticed that Cellebrite gives only a Logical extraction option when trying to work with this phone. Logical extraction via Cellebrite works just fine, but there is no apps data of course. Both phones was passcode / pattern locked, but "customers" were willing to give the codes to us.

So I got this test phone and my plan was to root it. Like mentioned above, there is a TWRP available for S7 and S7 Edge running Android 7.0 Nougat. I flashed TWRP to test phone and I used adb pull and got the encrypted user data out from the phone. Then I flashed latest SuperSU and no-verity to phone and just wanted to see if phone boots. Like I already knew, it wont. The Samsung logo just appears and nothing else happens. I rebooted to TWRP and wiped the phone. Then the boot works. I flashed stock Android Nougat and then TWRP again and tried everything that I came up with, but still the same result.

I contacted to our national NBI laboratory and they said that at this moment they are unable to decrypt the encrypted sda.

So at least this moment the root is not and option for me to get physical dump from S7 Edge. I know that this is available via Cellebrite CAIS, but not all crimes are so serious that we will use that option.

So my question is that is there a way to get some info from that encrypted user data? Or can it be decrypted? If I am lucky and I can get some better results or tips, I will post them to here.

 
Posted : 08/05/2017 10:32 am
passcodeunlock
(@passcodeunlock)
Posts: 792
Prominent Member
 

In many cases the physical dump of sda can be decrypted, but in some cases our method fails, since it depends on the settings which were used on the device.

 
Posted : 08/05/2017 12:32 pm
(@shaky)
Posts: 7
Active Member
 

Hi,

Thank you for you answer. I hope there would be answers, but I know that this one is really pain in our buts )!

I have not been able to root without wipe. It also seems that situation is the same in all around the world…except Cellebrite CAIS.

May I ask if you (passcodeunlock) are using hashcat for the decryption or do you have your own software in use? Normally I wouldn't ask, but I am starting to be a little bit desperate D. And of course I understand quite well, that not all information is not for public..or at least not for free D.

But keep up the good work and hopefully we can all get some better news soon.

 
Posted : 16/05/2017 11:48 am
(@patrick-bell)
Posts: 9
Active Member
 

I have just written up a walkthrough on how to root a galaxy s7 Edge without rooting the data to obtain a physical extraction with cellebrite.

You can view it here

http//blog.pnb.io/

http//blog.pnb.io/2017/05/how-to-root-galaxy-s7-edge-without.html

If you have any feedback I'd love to hear it!

 
Posted : 16/05/2017 6:23 pm
Page 1 / 2
Share: