±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36317
New Yesterday: 0 Visitors: 169

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Bada OS help needed

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

nsumer
Member
 

Bada OS help needed

Post Posted: Nov 29, 19 20:49

Hello,
I was given a Samsung phone's physical image. It has Bada 1.2 OS and i have never dealed with Bada OS.

Ufed PA decodes some artefacts, but there is no SMS or browser artefacts.
When i performed search on the image i found some words look like part of Sms and some URL addresses.

Is there any manual method to decode SMS and browser visits?
Thank for any info in advance.  
 
  

arcaine2
Senior Member
 

Re: Bada OS help needed

Post Posted: Dec 01, 19 12:08

Check if DB2 viewer available in Mobile Revelator can open those database files. You should be able to at least view SMS.  
 
  

nsumer
Member
 

Re: Bada OS help needed

Post Posted: Dec 02, 19 18:27

- arcaine2
Check if DB2 viewer available in Mobile Revelator can open those database files. You should be able to at least view SMS.

Thanks for the info. I could not find any db2 database file. But I could get some sms messages when I open lifelog.db with Sqlite viewer.

Regards.  
 
  

polar
Member
 

Re: Bada OS help needed

Post Posted: Dec 03, 19 18:00

It's been a long while since I saw a Bada phone, so I can't be sure if the following is true for your phone:
  • The first few (50?) characters of SMS messages are stored in the lifelog SQLite database: /User/OspSys/Lifelog/Database/lifelog.db.
  • SMS messages are stored in PDU format in /User/Msg/SMS/{RCVD,SENT,FAILED}. Being standard SMS PDUs, these can be carved from a flash dump as well.
  • SMS templates are stored in /User/Msg/Preset/Preset.dat.

_________________
Arun Prasannan
CCL-Forensics Ltd. 
 
  

arcaine2
Senior Member
 

Re: Bada OS help needed

Post Posted: Dec 03, 19 19:06

- nsumer
- arcaine2
Check if DB2 viewer available in Mobile Revelator can open those database files. You should be able to at least view SMS.

Thanks for the info. I could not find any db2 database file. But I could get some sms messages when I open lifelog.db with Sqlite viewer.


I only have dump from Bada 2.0 phone, but you're not looking for files with .db2 extention. Instead you should look at the OS partition, DB2 directory and then phonedb_data.00 as well as DB2/unlimitdb/phonedb_vol2.00.

I don't see lifelog.db or a directory structure like @polar mention on my dump, but there were some changes done between Bada 1.4 and 2.0.  
 
  

nsumer
Member
 

Re: Bada OS help needed

Post Posted: Dec 05, 19 13:56

Thank you very much for the informations.  
 

Page 1 of 1