Blackberry Password...
 
Notifications
Clear all

Blackberry Password hash

13 Posts
9 Users
0 Reactions
1,447 Views
(@thepm)
Reputable Member
Joined: 17 years ago
Posts: 254
Topic starter  

I've read in some Blackberry forensics document a while ago that the SHA-1 hash of the password of a BB device is stored somewhere on the device.

1- Does someone know if that is still the case?

2- Does someone know if there is a way to retrieve this hash from the device?

Thanks.


   
Quote
 N1XY
(@n1xy)
Eminent Member
Joined: 15 years ago
Posts: 25
 

I can't say yes or no but I have heard this too, no idea where I heard it!

I think I am correct in saying the Blackberry is known for its security. I would think even if you do find it you will need to authenticate yourself to get at it in a readable state by software means.

An interesting question however, it is a shame nobody seems to have more insight.
Please let me know what you find out!


   
ReplyQuote
(@nivva3)
New Member
Joined: 15 years ago
Posts: 4
 

Also very interested, please let me know if anyone hears anything else about this! Thanx


   
ReplyQuote
(@captainf)
Trusted Member
Joined: 17 years ago
Posts: 60
 

As far as I know most BB devices are locked down the point where you cannot get anything out if it is password protected. RIM wont help you with this either.

If the device has a media card you can try taking that out and imaging that but I dont think you will get call registers etc.


   
ReplyQuote
ForensicRanger
(@forensicranger)
Estimable Member
Joined: 16 years ago
Posts: 122
 

..and if the material on the media card is encrypted, you're also not going to have much luck…

BB prides itself on security - and does a brilliant job of it. Once you've used up the allotted amount of pw tries, it'll start wiping, after that, it'll start scrubbing - after that.. there is no previous data left.


   
ReplyQuote
(@thepm)
Reputable Member
Joined: 17 years ago
Posts: 254
Topic starter  

Since my initial post, I've found out that the only thing that can be done right now with password protected Blackberrys is "chip-off" forensic.

I don't know the details, but if you remove some chips from the BB PCB and use specialized hardware and software, you can recover the data.

However, you need very specialized training and about 200K$ worth of equipment.


   
ReplyQuote
(@dcampbell)
New Member
Joined: 14 years ago
Posts: 2
 

Does anyone know of a business with the training and equipment to accomplish this that offers a data recovery service?


   
ReplyQuote
(@thepm)
Reputable Member
Joined: 17 years ago
Posts: 254
Topic starter  

Does anyone know of a business with the training and equipment to accomplish this that offers a data recovery service?

You can contact FTS (http//www.forensicts.co.uk/). They have the ability to do what you need.


   
ReplyQuote
(@dcampbell)
New Member
Joined: 14 years ago
Posts: 2
 

Many Thanks!


   
ReplyQuote
(@thepm)
Reputable Member
Joined: 17 years ago
Posts: 254
Topic starter  

Also, since you are in the US, you might want to know that they have an office in the US. I don't know where exactly, but you might find this info on their website.


   
ReplyQuote
Page 1 / 2
Share: