Android devices wit...
 
Notifications
Clear all

Android devices with PIN screen lock and without USBdeb. on  

  RSS
Thomass30
(@thomass30)
Active Member

Hello
I'm relatively new to Mobile Forensics so please be understanding )
Is there any technique or maybe some application which can acquire data from Android mobile devices which are locked with PIN screen or Pattern and the usb debugging is off. ?
I get phone to analyze and I dont know someone's google account or anything that could somehow help me.
I was using mobilEdit on pin locked screen to collect data but it only works when usb debugging is on.

Quote
Posted : 01/08/2017 12:59 am
Igor_Michailov
(@igor_michailov)
Senior Member

Oxygen Software, UFED, XRY, Susteen, etc.

ReplyQuote
Posted : 01/08/2017 10:24 am
Thomass30
(@thomass30)
Active Member

Oxygen, XRY also needs to enable usb debugging to collect data from the phone.

ReplyQuote
Posted : 02/08/2017 1:28 am
passcodeunlock
(@passcodeunlock)
Senior Member

Depending on the device, the manufacturer and the Android version, there are many ways to bypass the screen locks. For some models chip-off or JTAG reading is also possible. There isn't an universal answer for this question.

If you got a specific device locked, provide as much informations as possible about the device and you might get answers leading to solve your problem.

With all the knowledge, for some questions the answer will be "not possible now, wait until it will be possible" )

ReplyQuote
Posted : 02/08/2017 1:56 am
UnallocatedClusters
(@unallocatedclusters)
Senior Member

Here is one option to test

https://multi-com.eu/,details,id_pr,16519,key,xpin-clip-with-cables-set.html

I would recommend purchasing the same model phone as your real evidence to test the XPIN's unlock feature.

"XPIN Clip allows you to get user passcode from iPhone, iPad 7.x.x and PIN, Backup PIN, PatternLock from Android phones/tablets that supports USB OTG. XPIN Clip does not require resetting your device which entails deleting data and reverts the device to factory settings. XPIN Clip work without USB debugging, root, custom recovery, lost data, lost warranty - KNOX flag or unlocking bootloader in some devices). XPIN CLIP is also helpfull for forensic investigation where in some cases you can not undermine the integrity of the data (like root, custom recovery etc.)"

ReplyQuote
Posted : 02/08/2017 4:53 am
OxygenForensics
(@oxygenforensics)
Active Member

Oxygen, XRY also needs to enable usb debugging to collect data from the phone.

Oxygen Forensic Detective offers various screen lock bypass methods that require no USB Debugging enabled. Right now we have these methods for Samsung, LG, Motorola and Chinese MTK and Spreadtrum devices.

ReplyQuote
Posted : 02/08/2017 2:10 pm
Bolo
 Bolo
(@bolo)
Member

in short

Platform of phone used
* SPD, MTK - as long as no Secure loader requiere you can get dump, pattern by Inferno Dongle or using leatest update from Compelson (in case of MediaTek)
* QC (most of MSN family) - if you can access EDL (9008) you can use Inferno, Medusa PRO (leatest update) or even free QPST using old Sahara or Firehorse (switch from 9006 to 9008)

In some manufacturers is easy too….
* LG - bypass using simple AT commands, Oxygen, MobilEdit
* some Samsung - using MTK exploit can downloaad some FileSystem which often got password/patter.key (<6.x)

Hardware solutions
* JTAG - old method disabled in most of new phones
* ISP eMMC/eMCP - availble in most of new phones where there are signals on pads or even on layer on phone (phone will be workign after physical accusition)
* Chip Off

BF soutions
* as example XPIN Clip as long as phone supports OTG

as other writes….. give more info to get more precise answer

ReplyQuote
Posted : 03/08/2017 12:54 am
arcaine2
(@arcaine2)
Active Member

On top of using Inferno i'd also add Infinity CM2 that also has nice Partition Manager for QC based phones, plus, imo is a bit safer to use than Inferno. It also doesn't really matter for Snapdragon based devices if bootloader is locked or not as long as you can access 9008 or 9006 mode.

It's also worth mentioning that those tools will work as long as device you're working with is not encrypted by default. Most of devices that were launched with Android 6 (QC, SPD and MTK) and higher these days are so they can by bypassed only on live, working system if there's some exploit working or via OTG method depends on configuration.

ReplyQuote
Posted : 03/08/2017 1:17 am
Thomass30
(@thomass30)
Active Member

Thanks for all replies
The phone i was talking about is Samsung Galaxy J1 Duos SM-J100H with probably android 4.4.4
It has screen PIN lock
This model doesnt support USB OTG which is needed for XPIN Clip.

ReplyQuote
Posted : 03/08/2017 4:41 am
passcodeunlock
(@passcodeunlock)
Senior Member

Both UFED and Oxygen Forensics Detective can dump this phone bypassing the screen lock.

ReplyQuote
Posted : 03/08/2017 11:23 pm
Thomass30
(@thomass30)
Active Member

Both this program are so expensive 😯

ReplyQuote
Posted : 04/08/2017 2:30 am
jaclaz
(@jaclaz)
Community Legend

Both UFED and Oxygen Forensics Detective can dump this phone bypassing the screen lock.

Both this program are so expensive 😯

Maybe these two facts are somehow connected? ?

jaclaz

ReplyQuote
Posted : 04/08/2017 2:50 am
arcaine2
(@arcaine2)
Active Member

Both this program are so expensive 😯

For that phone you have an option to flash TWRP recovery, extract pattern.key from filesystem and decode it manually with knowledge and tools that are available via google. This will trip knox counter, void warranty and leave a mark on your device (i believe TWRP creates TWRP directory in /data/media/0 the moment you boot it).

ReplyQuote
Posted : 04/08/2017 4:12 am
p38cyq
(@p38cyq)
Junior Member

I have a similar problem. Cannot root the device, nor enter a PIN the screen is U/S, ie. defective,so no inputs possible.
Device is a Samsung tablet, SM-T550.
Any thoughts?

ReplyQuote
Posted : 17/08/2017 9:25 pm
SamBrown
(@sambrown)
Member

If you can still see something on the screen and just the touch input doesn't work
Try connecting a mouse with an USB-OTG cable. If this is successful you can use the wired mouse to pair a bluetooth mouse which then will free the usb port for data acquisition.

ReplyQuote
Posted : 24/08/2017 7:42 am
Share: