Galaxy S5 Mini - Fi...
 
Notifications
Clear all

Galaxy S5 Mini - Fingerprint replication

Page 1 / 2
CatimbaBR
(@catimbabr)
New Member

Hi guys!

This is my first post here on Forensic Focus! P

Could anyone help me with information about fingerprints on Galaxy S5 mini. I'm trying to fake a fingerprint in order to access its contents.

This is the situation I have

1 - I have 3 different photos of fingerprints from the same thumb. The photos have been collected from ID and other documents that have the fingerprints printed on it.

2 - I have scanned those photos with the maximum quality allowed by my scanner.

3 - I edited the photos with photoshop (inverted and rotated them). I have something similar to this . Black background etc.

4 - Then I printed the fingerprints in a transparency sheet.

5 - I put some glue on the images and detached it after it was dry.

It doesn't work!!! The sensor doe not recognize a thing. It is like if I was touching the sensor with AIR. Nothing happens. No error.

I think that it is because my fake fingerprints are to thick. I tried to make a thin layer of glue in another transparency bu now it won't detach from the transparency.

Does anyone have tips about how to do it?

Thank you guys!!!!

Quote
Topic starter Posted : 05/05/2015 7:05 am
danielb
(@danielb)
Junior Member

So I presume the alternative password is not available?

Are you sure they used the thumb? I personally would use my index finger.

Have you tried the toner way
https://nakedsecurity.sophos.com/2013/09/22/chaos-computer-club-claims-to-have-cracked-the-iphone-5s-fingerprint-sensor/

ReplyQuote
Posted : 05/05/2015 3:08 pm
jaclaz
(@jaclaz)
Community Legend

Check the technoques used in successful iPhone fingerprint sensor bypassing
https://blog.lookout.com/blog/2013/09/23/why-i-hacked-apples-touchid-and-still-think-it-is-awesome/
http//www.ccc.de/en/updates/2013/ccc-breaks-apple-touchid

the Samsung sensor should not be that much different ?
https://nakedsecurity.sophos.com/2014/04/17/samsung-galaxy-s5-fingerprint-hacked-iphone-5s-all-over-again/

To better "lift" the vinilic glue from the print, you may want to try using instead of "normal" transparent paper the self-adhesive type which is more glossy, thus glue should bond less strongly or, as actually advised here
http//dasalte.ccc.de/biometrie/fingerabdruck_kopieren.en
the kind for slide projection.

jaclaz

ReplyQuote
Posted : 05/05/2015 4:14 pm
CatimbaBR
(@catimbabr)
New Member

So I presume the alternative password is not available?

Are you sure they used the thumb? I personally would use my index finger.

Have you tried the toner way
https://nakedsecurity.sophos.com/2013/09/22/chaos-computer-club-claims-to-have-cracked-the-iphone-5s-fingerprint-sensor/

Hi! I'm 100% sure it is the thumb and I have tried exactly the 'toner mode'.

In fact it is not about using one finger or another. The sensor is not recognizing the 'glue'. If I touch it with my finger it will say that the fingerprint is invalid. With the glue replication…nothing!

ReplyQuote
Topic starter Posted : 05/05/2015 4:28 pm
CatimbaBR
(@catimbabr)
New Member

To better "lift" the vinilic glue from the print, you may want to try using instead of "normal" transparent paper the self-adhesive type which is more glossy, thus glue should bond less strongly or, as actually advised here
http//dasalte.ccc.de/biometrie/fingerabdruck_kopieren.en
the kind for slide projection.

jaclaz

Actually I'm trying to use the exact same techniques. o

The first thing I need to do is to better lift the glue as you said. I don't have any information about the thickness of the glue layer. The layer I've managed to lift was very thick. When I tried to do a thin one, I cannot lift it! How much glue should I put on it?

Another thing I have noticed is that with the transparency sheets that I bought when I put the glue over the image, it starts to deteriorate as if the toner was 'melting'. It would be like moistening a piece of paper. The image starts to get blurred.

Other aspect! My transparency sheets have a plastic side and a side that is 'mat'. I should print on the second side, right? The problem is that side also has a very very thin layer of plastic and when I am lifting the glue this plastic which should remain attached to the transparency detaches with the glue.

What is this other type of transparency you said? I'm thinking to buy this other one but I don't really know what it is.

I'm also thinking about putting a very thin layer of liquid glycerin to facilitate the lifting.

ReplyQuote
Topic starter Posted : 05/05/2015 4:47 pm
jaclaz
(@jaclaz)
Community Legend

You will surely need to try several different kinds of "Overhead Projector Transparency" paper before finding a suitable one.

Transparency paper for Laser printers should be a little better (than that for Inkjet printers) for this use.

A suitable material may be an acetate film, *like*
http//www.amazon.co.uk/Laser-Copier-Acetate-Colour-Sheets/dp/B00J6CI9QU/ref=sr_1_4?s=officeproduct&ie=UTF8&qid=1430829619&sr=1-4&keywords=acetate+A4+laser

Basically (and loosely) plastic films tend to be either acetates or vinylic
http//www.grafixplastics.com/acetate_what.asp
http//www.grafixplastics.com/vinyl_what.asp

If you are using "wood glue", the glue you are using is a vinylic one and my (educated) guess is that it will adhere much more to a vynilic plastic than to an acetate. ?

The fact that your "paper" smudges may mean that it is intended as an inkjet paper which is definitely more porous (to allow the ink to stay) or may be it is a "simpler" tracing paper
http//en.wikipedia.org/wiki/Tracing_paper

jaclaz

ReplyQuote
Posted : 05/05/2015 6:50 pm
danielb
(@danielb)
Junior Member

I was just making sure you didn't spend alot of time recreating a thumbprint, without ensuring you were using the right print.

Depending on the case etc if possible have you tried your own finger/thumb on the reader to make sure its reading ok? Again just to rule out the reader having a problem?
Ive looked at a S5 mini before and got round the fingerprint by eventually using / guessing the alternative password, this depends on what info you have on the user of the phone.

ReplyQuote
Posted : 05/05/2015 9:20 pm
C.R.S.
(@c-r-s)
Active Member

I never tried that, but I guess, one must use a glue mixture, that is recognised by capacitive sensors.
Unlike iPhones, the Galaxy S5 devices contain a swipe reader that is activated by sensing the lower screen area above the home button. So it might seem to be alright with a very thin fake fingerprint on a real digit, since you can interact with the touch-screen. However, the capacitive fingerprint reader must recognize the tiny valleys of the fake fingerprint and not only the presence of a digit. This probably won't happen, when using some off-the-shelf glue. I'd try to make thick "fake digits" from a mixture with toner, dactyloscopy powder or something else, which is recognized by the touch screen without a human finger behind it. Then the engraved fingerprint in this material should be recognized as well.

ReplyQuote
Posted : 06/05/2015 3:51 am
CatimbaBR
(@catimbabr)
New Member

Great guys!

If anyone here has another tip… D

I will try to
- buy higher quality transparency to do it all over again
- put some glycerin below the glue layer (don't think it is going to work)
- Make a mixture with glue and graphite powder (does the sensor reacts to that?)

ReplyQuote
Topic starter Posted : 06/05/2015 4:45 am
jaclaz
(@jaclaz)
Community Legend

I never tried that, but I guess, one must use a glue mixture, that is recognised by capacitive sensors.
Unlike iPhones, the Galaxy S5 devices contain a swipe reader that is activated by sensing the lower screen area above the home button. So it might seem to be alright with a very thin fake fingerprint on a real digit, since you can interact with the touch-screen.
However, the capacitive fingerprint reader must recognize the tiny valleys of the fake fingerprint and not only the presence of a digit. This probably won't happen, when using some off-the-shelf glue. I'd try to make thick "fake digits" from a mixture with toner, dactyloscopy powder or something else, which is recognized by the touch screen without a human finger behind it. Then the engraved fingerprint in this material should be recognized as well.

Well, not according to the people that actually published the hack
https://nakedsecurity.sophos.com/2014/04/17/samsung-galaxy-s5-fingerprint-hacked-iphone-5s-all-over-again/

In fact, in the SRLabs video showing the Galaxy S5 being tricked, the researchers say that the wood glue replica they used was left over from last October when they were having a crack at the iPhone 5s.

It is entirely possible that your "modified" hack works fine or even better, but the original uses thin, "normal" wood glue fingerprint replica.

jaclaz

ReplyQuote
Posted : 06/05/2015 5:12 pm
dandaman_24
(@dandaman_24)
Active Member

You could also try liquid latex, used to make casts by modellers. Build the layers up over time.

ReplyQuote
Posted : 06/05/2015 6:17 pm
jaclaz
(@jaclaz)
Community Legend

You could also try liquid latex, used to make casts by modellers. Build the layers up over time.

… or good ol' "gummy candy" gelatin
http//cryptome.org/gummy.htm
http//web.mit.edu/6.857/OldStuff/Fall03/ref/gummy-slides.pdf

jaclaz

ReplyQuote
Posted : 06/05/2015 6:54 pm
danielb
(@danielb)
Junior Member

I was just making sure you didn't spend alot of time recreating a thumbprint, without ensuring you were using the right print.

Depending on the case etc if possible have you tried your own finger/thumb on the reader to make sure its reading ok? Again just to rule out the reader having a problem?
Ive looked at a S5 mini before and got round the fingerprint by eventually using / guessing the alternative password, this depends on what info you have on the user of the phone.

Have you had any luck getting the scanner to pick up your "replica" print yet?

If not were you able to rule out the scanner being faulty?

ReplyQuote
Posted : 07/05/2015 2:20 pm
jaclaz
(@jaclaz)
Community Legend

Have you had any luck getting the scanner to pick up your "replica" print yet?

If not were you able to rule out the scanner being faulty?

In fact it is not about using one finger or another. The sensor is not recognizing the 'glue'. If I touch it with my finger it will say that the fingerprint is invalid. With the glue replication…nothing!

jaclaz

ReplyQuote
Posted : 07/05/2015 2:53 pm
C.R.S.
(@c-r-s)
Active Member

It is entirely possible that your "modified" hack works fine or even better, but the original uses thin, "normal" wood glue fingerprint replica.

Meanwhile, I had a look at Karsten's videos. The iPhone edition covers the entire manufacturing process https://www.youtube.com/watch?v=h1n_tS9zxMc
They use graphite spray to achieve surface capacitivity.

I know crews who are into this, and that they are constantly experimenting with different glue mixtures. I just didn't know, whether for mechanical or dielectic reasons.

ReplyQuote
Posted : 08/05/2015 1:27 am
Page 1 / 2
Share:
Share to...