LG FORTUNE LG-M153 ...
 
Notifications
Clear all

LG FORTUNE LG-M153 Screen Lock Bypass?

14 Posts
6 Users
0 Likes
2,596 Views
UnallocatedClusters
(@unallocatedclusters)
Posts: 577
Honorable Member
Topic starter
 

Colleagues,

I have a numeric screen locked LG Fortune model LG-M513 (Qualcomm Snapdragon 210 MSM8909) running Android 6.0.1 Marshmallow.

I can place the phone in "download mode" which brings up a "Firmware Update" screen, but that is as far as I have gotten to attempt to bypass the screen lock.

In "download mode", the phone is displaying the following

"633A S0.0 AS0.0 B74 SS V LG-M153 06.0.1 Hrev_10 M15310a"

I search FF for references to this phone model but did not find any.

Any suggestions to bypass the screenlock?

 
Posted : 18/04/2018 6:16 pm
Igor_Michailov
(@igor_michailov)
Posts: 529
Honorable Member
 

May be the article can help you

Unlocking The Screen of an LG Android Smartphone with AT Modem Commands

https://articles.forensicfocus.com/2017/02/03/unlocking-the-screen-of-an-lg-android-smartphone-with-at-modem-commands/

 
Posted : 19/04/2018 6:09 am
 RonS
(@rons)
Posts: 358
Reputable Member
 

The LG-M153 is supported using the Cellebrite UFED EDL method.

Ron

 
Posted : 19/04/2018 7:37 pm
UnallocatedClusters
(@unallocatedclusters)
Posts: 577
Honorable Member
Topic starter
 

Hello Igor -

Thank you very much for pointing me to your article!

I read your article but would like to confirm the applications I need to download, install and use to replicate the steps your article shows.

If possible, please confirm my applications, versions and sources are correct below

1) FROM PIC 2 HUAWEI MODEM TERMINAL V0.32

Download Source??? https://www.unlock4modems.com/downloads/huawei-modem-terminal-v0-32/

2) FROM PICS 3 & 4 I cannot determine the software being shown nor a source to download the software from. I do see "IDA" but cannot tell what application this is.

Is it possible that I only need the Huawei Modem Terminal V0.32 software, which I will use to send the "AT%KEYLOCK=0" command to the phone (as shown in PIC 8)???

Also, is it "safe" to download and install the Huawei Modem Terminal software to my main forensic laptop? By safe, I mean there is no spyware/malware/backdoor included; I am not a malware expert at all, but do read the news https://www.theverge.com/2018/1/14/16890110/new-bill-ban-huawei-zte-phones-tech-congress-mike-conaway-cybersecurity

I have a laptop I could install the Huawei Modem Terminal to and then later wipe if need be, but I would rather not "infect" my main forensic laptop with additional backdoors beyond what ever backdoors my government's NSA may or may not have in place.

 
Posted : 19/04/2018 8:41 pm
UnallocatedClusters
(@unallocatedclusters)
Posts: 577
Honorable Member
Topic starter
 

The LG-M153 is supported using the Cellebrite UFED EDL method.

Ron

Hello Ron,

I attempted the EDL method with the newest cable but had no success at all. I will give it a go again.

[EDIT1] I tried every variation of the Generic Qualcomm EDL download mode acquisition but no success. I am able to put the phone in "download mode" by holding the up volume key and then connecting the phone to the USB cable but no success on extracting data. I am able to use Cellebrite Cable 523 per the instructions (option 5) to put the phone in download mode, but a window comes up asking to verify if debugging mode is enabled. Obviously debugging mode is not enabled but I have tried both "yes" and "abort" options with no success. When I search in Phone Detective for this particular model, nothing comes up. [EDIT1]

** This particular phone was found on the hood of my client's car. My client believes her ex-boyfriend left the LG phone after ripping out all of the electrical wiring under her car's hood.

My Pro Bono cases seem to have interesting circumstances like this.

I will have to consult with the legal assistance lawyer who engaged me on this case, but I assume that the phone owner does not have any reasonable expectations of privacy having left the phone at the scene of an apparent crime.

I was able to use Cellebrite to extract the MSISDN number from the SIM card, which I then reported to the attorney and suggested she issue a subpoena to Cricket mobile for information regarding the phone owner (call logs and cell tower data).

It is only a theory at this point that the phone belongs to my client's ex-boyfriend and that the ex-boyfriend was the person who vandalized her car.

I am hoping to extract evidence which LE can then leverage to arrest the ex-boyfriend (I am a civilian forensic specialist and not LE).

 
Posted : 19/04/2018 8:48 pm
(@mcman)
Posts: 189
Estimable Member
 

A little late but if you have AXIOM I would give our LG bypass a try, works really well for a lot of LG devices. I haven't tried your specific model as I don't have many Cricket devices on hand but can't hurt to try.

Jamie
Magnet Forensics

 
Posted : 27/04/2018 7:43 pm
UnallocatedClusters
(@unallocatedclusters)
Posts: 577
Honorable Member
Topic starter
 

Jamie,

I do have Axiom and will give it a try. I will report my results

 
Posted : 27/04/2018 8:16 pm
passcodeunlock
(@passcodeunlock)
Posts: 792
Prominent Member
 

Axiom (and many other softwares) might be using the same AT commands which Igor posted at the very beginning of the thread )

 
Posted : 28/04/2018 8:11 am
 RonS
(@rons)
Posts: 358
Reputable Member
 

The LG-M153 is supported using the Cellebrite UFED EDL method.

Ron

Hello Ron,

I attempted the EDL method with the newest cable but had no success at all. I will give it a go again.

[EDIT1] I tried every variation of the Generic Qualcomm EDL download mode acquisition but no success. I am able to put the phone in "download mode" by holding the up volume key and then connecting the phone to the USB cable but no success on extracting data. I am able to use Cellebrite Cable 523 per the instructions (option 5) to put the phone in download mode, but a window comes up asking to verify if debugging mode is enabled. Obviously debugging mode is not enabled but I have tried both "yes" and "abort" options with no success. When I search in Phone Detective for this particular model, nothing comes up. [EDIT1]

** This particular phone was found on the hood of my client's car. My client believes her ex-boyfriend left the LG phone after ripping out all of the electrical wiring under her car's hood.

My Pro Bono cases seem to have interesting circumstances like this.

I will have to consult with the legal assistance lawyer who engaged me on this case, but I assume that the phone owner does not have any reasonable expectations of privacy having left the phone at the scene of an apparent crime.

I was able to use Cellebrite to extract the MSISDN number from the SIM card, which I then reported to the attorney and suggested she issue a subpoena to Cricket mobile for information regarding the phone owner (call logs and cell tower data).

It is only a theory at this point that the phone belongs to my client's ex-boyfriend and that the ex-boyfriend was the person who vandalized her car.

I am hoping to extract evidence which LE can then leverage to arrest the ex-boyfriend (I am a civilian forensic specialist and not LE).

You need to put the phone into EDL mode.
If this is not accomplished using our special cable, you might need to short the internal phone eMMC CLK and CMD lines to GND.

I suggest you approach support and ask for the EDL method document that has this in more details.

Multiple customers used this method to get a physical extraction from this specific model.

Best regards,
Ron

 
Posted : 28/04/2018 1:49 pm
UnallocatedClusters
(@unallocatedclusters)
Posts: 577
Honorable Member
Topic starter
 

Many thanks for your reply Ron- I will contact support

 
Posted : 28/04/2018 2:19 pm
Page 1 / 2
Share: