[ Date Index ]
[ Thread Index ]
[ <= Previous by date /
thread ]
[ Next by date /
thread => ]
Re: [LUG] OT: Accessing files on an android phone with broken screen
- To: list@xxxxxxxxxxxxx
- Subject: Re: [LUG] OT: Accessing files on an android phone with broken screen
- From: comrade meowski <mr.meowski@xxxxxxxx>
- Date: Thu, 30 Sep 2021 21:49:29 +0100
- Arc-authentication-results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none
- Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Dc9kFzwgSa8oka2LMEX8y1ShYuSpH/OIywJeBiTpFvM=; b=ngyMK9dhVrXc9jJrDhXmvBwctqx7Zd+7G0Bn8f8slTUGOw9EvnVY4OdIH5WsRzRLkZ4UTstTquqqGqu7q1a2y5ET0gHgyoiLGZ2V8ZSXqq8cu1jMWZHkrYTxDFeBfSmajDAiEp3L58mhQaS/xRreXUU749TChhrRrjgMaHGpelwoFi1zqHR1BBA030HhVEdoahsr0bKsejdqpCRQqqkLttNVkuSpFBNVzS478m69fj4ZXH+/RWG84bj5qo+Z13EoE7HUdG/7yjtt6qK490MnYhUFbx3vL5ozX8u4RDP0N76fVCZo+MEnz/pCT3DkfIDVEel315JR+Oim33CYOAMuLg==
- Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=jyuNSrMvzOfEjizX3unj7zprSPI2WoSQ6gcaAHwT0S7Yd3bIixo5sW5hhtOQsLn17L5sWNB8cd+vpjvjXp2JL51HY89SgCSVHdakknak/q6OkEGogE7fJbIoipYX+F5NZw0cVF2ln2fOFLuOV87URTrwZY1fknE9X23r+aiQst4RqTwwph55T5THSRYJMc1l5eD1j9PHoo4aFe1koQ92ScPIATpjw0EE6HrKidgGoop4DoEIiUTVRbZcGWA25fi0tep15Lq2+iHANsKxamEwdfCOyuU9DknJ6uPjz9axBs+LrpfKdYZIShNkES0lwaUEIOSyR+BJwuaEYJfIOlAHsQ==
- Content-language: en-GB
- Delivered-to: dclug@xxxxxxxxxxxxxxxxxxxxx
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=dcglug.org.uk; s=1618045561; h=Sender:Content-Type: Content-Transfer-Encoding:Reply-To:List-Subscribe:List-Help:List-Post: List-Unsubscribe:List-Id:Subject:MIME-Version:In-Reply-To:From:References:To: Date:Message-ID:Cc:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner:List-Archive; bh=b7M0t6NwGRKyfXtGidateDCJ3O0RGNj7xBHuenMkmtw=; b=a9IWOWeZSzywFogu77tkQ8eZp yS1j+pLnPWY5+cEivoV/rybkb+oMYz1bcgSzQTnl20NLTj7JMh07l1AppARywxR223yErVFxOZq/2 K/X5bXCvjJDvwqOc1tLLOPTuMGOIhdKfFpVwwbNXHjy7zYqErucSFDQqAg15iHFt6MlF4=;
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=live.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Dc9kFzwgSa8oka2LMEX8y1ShYuSpH/OIywJeBiTpFvM=; b=M3oIlINz4mjIlLS/lAIbkamKBIYPsxErQcXBzj5Wa+BYpJxOTUovivj1gAPXbO3BOmBCev/Bf4FI+wz74rscI3w4niDOUV/OwR2HWNLRv6XhAdmGD7ruRoZWVExA5lnT6CKclqvTBN5AXOL0yBxbxRor/+EA9HZl3sgJTvKaThrhB2LtHOcZ3N/w9e1GVBrHoepiGJRIs2L58eV/GSD94PmIN82hZakOgT1+WBCpUWS9hTVNAC7/kAydFM/Ed3ky6ihQdJ0DjWz5VfMPRVsbfK2bkbrUYgdQrqsfvnyYtPl8lYAZTFrhJvLSWqWpDToghKh+A7+faxwqq65t/nVMiw==
On 30/09/2021 20:36, Dom Rodriguez/shymega wrote:
Unlikely. You would need adb to access the phone, and if it's not enabled, and
trusts the computer accessing the phone, there's no way you can get in.
In the same vein if the phone's bootloader has been previously unlocked
- which it should have been on day one - you can use the hardware reset
keys to access download and recovery modes, remotely unlock the
encrypted /data partition and retrieve your data via root access adb
(this trumps adb access to a running phone as a user). You can perform
this operation "blind" on a phone with a non-responsive screen as well.
You can even boot a custom TWRP recovery image via fastboot - much like
booting a live CD on a PC - to aid the process but the whole chain
depends on having unlocked the bootloader first. The catch 22 is if you
haven't then unlocking the bootloader now (which once again can be done
blind) triggers a complete wipe ¯\_(ツ)_/¯
I recover a lot of phones professionally so run into this a lot. The
first thing I do with all phones I build for clients is unlock the
bootloader, enable adb and enroll my main PC's adb keys on it. Of course
this can't help you now, you either did it or you didn't.
You're still not screwed though - the final option is the most fun
anyway. That device is way past EOL and hasn't had security fixes in
forever. The phone is on your network so you know it's IP address:
Metasploit time.
--
The Mailing List for the Devon & Cornwall LUG
https://mailman.dcglug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq
