android message rec...
 
Notifications
Clear all

android message recovery

2 Posts
2 Users
0 Reactions
462 Views
(@blonde)
New Member
Joined: 14 years ago
Posts: 4
Topic starter  

Has anyone information relating to the recovery of deleted android SMS messages via SQLite. I am conducting research at the moment on another subject but think there may be a link.
I have also been finding it difficult to find info if on the actual embedded database type.
If anyone has any info or can point me in the right direction it would be most helpful.


   
Quote
(@alexc)
Reputable Member
Joined: 16 years ago
Posts: 301
 

The SQLite databases on Android are Auto-vacuum enabled by default, so the yields of recovered data directly from the database file itself can be a little disappointing in a lot of circumstances. That being said, if you can obtain an image of the flash chip (either by using a tool like Cellebrite if the device is supported, rooting and netcat/dd-ing or JTAGing) the possibility of getting deleted records back is far higher; indeed we've had a lot of success working this way (using Epilog to do the recovery).

The SQLite file format is very well documented and there are some really good resources out there discussing how this can be abused to recover deleted records for example Richard Drinkwater's write up of the record structure. I've also recently written up some information about the Write Ahead Log (a SQLite journalling system now in wide use) and how you can use it to recover additional data (and what pitfalls you may encounter if you don't understand how it works).

Hope that's of use to you.


   
ReplyQuote
Share: