Magnet AXIOM - Flas...
 
Notifications
Clear all

Magnet AXIOM - Flash Recovery image (Android Encrypted)

6 Posts
4 Users
0 Likes
1,130 Views
(@nirtester)
Posts: 5
Active Member
Topic starter
 

Hi,

my firm just installed the latest Magnet AXIOM 1.2.3.8027 and on their website, they mentioned "We also now support 1,200 Android recovery images".

I tried to perform Flash recovery image for
Samsung SM-N950F Galaxy Note 8
Samsung SM-G930U Galaxy S7
*These devices are Encrypted by default and come with Android 7+.
I tried few times and everytime the process failed when trying to Flash the recovery image.

So anyone knows if Magnet really supports Encrypted android devices? and if so, how can I extract the data using the TWRP method?

Thanks

 
Posted : 23/01/2018 2:07 pm
(@arcaine2)
Posts: 235
Estimable Member
 

Flashing custom recovery image failes rather due to FRP enabled on device than encryption. You can still use 3rd party recovery on encrypted device but just won't be able to decrypt the data without knowing the key.

 
Posted : 23/01/2018 5:49 pm
Mreza
(@mreza)
Posts: 84
Trusted Member
 

Recovery images will not work if the device has a locked bootloader by either the manufacturer or carrier or if it has FRP (Factory Reset Protocol) enabled."

https://www.magnetforensics.com/uncategorized/android-recovery-acquisitions-magnet-axiom/

 
Posted : 23/01/2018 6:14 pm
(@nirtester)
Posts: 5
Active Member
Topic starter
 

Thanks for your answers.
but both of the devices were FRP - OFF.
I enabled the OEM unlock from Developers options & removed the Google account.

 
Posted : 24/01/2018 6:25 am
Mreza
(@mreza)
Posts: 84
Trusted Member
 

Thanks for your answers.
but both of the devices were FRP - OFF.
I enabled the OEM unlock from Developers options & removed the Google account.

Which version of Android is installed on the devices?That could be a problem. Contact Magnet technical support team.

 
Posted : 24/01/2018 1:59 pm
(@mcman)
Posts: 189
Estimable Member
 

Recovery flashing and encryption are 2 different things.

As others have mentioned, make sure there's no locked bootloader/no FRP turned on as that will fail any recovery method.

You could do a recovery flash of an encrypted device but it's just going to give you a physical dump that's encrypted, not very useful. The recovery still works but it depends on the OS of the phone and the state it's in whether or not you can disable encryption. Some models/OS versions ship with encryption on and you can't turn it off, others allow you to turn it off, it varies from device/OS/carrier.

The only way to do a recovery flash and remove encryption is to replace/edit the bootloader. Bootloader attacks are different than recovery flashing and we don't currently support those at this time, so unfortunately if you're dealing with encrypted devices, you'll have to deal with the encryption yourself prior to recovery flashing.

Now I'm not sure why your devices are failing and at what point they're failing but it likely isn't due to encryption, I would check with our support team and reach out to them and they should help you troubleshoot any issues in the process. They would need exact model numbers and OS versions likely to help troubleshoot recovery issues.

Hope that helps,
Jamie
Magnet Forensics

 
Posted : 24/01/2018 4:00 pm
Share: