Has anybody come across the message
INVALID ODIN CMD?
I have a Galaxy S5 running Android 4.4.2 and a full physical fails constantly saying Firmware not supported.
After its put into download mode, during the attempt to read from CelleBrite it pops up on the phone screen with that Invalid message?
There is nothing on the device that looks like its rooted, but I obviously can install any Terminal or Apps to check if its rooted. It boots up OK.
Any thoughts, ideas or help is much appreciated.
DG.
cant help with that code but had the very same issue with Galaxy running 4.4.2. I was able to obtain a logical using Cellebrite, although the data extracted was not complete.
I used another tool for a separate logical and combined the two reports.
Cellebrite pushed an update for the Touch yesterday but I have not had a chance to test.
I have not come across the invalid ODIN error.
It is possible to obtain a physical dump if you root the handset using CF-auto root. Once rooted, a physical read can be obtained (i used oxygen forensics for the dump).
Obviously there are risks involved when rooting a device + you are amending data on the device. But you will then get a full physical dump D
Thanks.
I got onto CelleBrite as it claims the device was supported. I'm waiting on specific handset version verification.
I'm not rooted it manually, not a decision I would take likely.
I managed to get some WhatsApp out with Bjoern Kerler WhatsApp extractor tool, so I'm happy with that.
I'm still confused as to the error, but for now the logical will have to do.
@4Rensics Please don't chat about stuff or tools which were released for Law Enforcement only and not for the public over here, thanks.
As for the solution to get all data, you can use the "PingPong" Temp-root (see xda-developers), which works for Android 5 as well. Dumping should then be easy with UFED/XRY/Mister without worries.
Cheers
@4Rensics Please don't chat about stuff or tools which were released for Law Enforcement only and not for the public over here, thanks.
If WhatsApp Extractor has been used as the tool to acquire evidence then disclosure may be unavoidable. Disclosed at Court is disclosure in the public domain. I doubt the Court would take notice of your request telling the tool users not to discuss the product. Alternatively the Court might become suspicious and exclude the evidence based upon a suggestion that tool cannot be relied upon due to "hidden secrets". That would be a pity for that to happen since Bjoern you must have worked very hard to put the tool together.
If you use physical dump or Android backup method in Oxygen Forensic Suite you will extract information from Samsung S5 v.4.4.2 uncluding actual and deleted WhatsApp data account, contacts, chats, shared images, locations, contacts.