DO NOT DEAL WITH THIS MEMBER
Aug 13, 2024 06:39 AM
(This post was last modified: Aug 13, 2024 07:10 AM by Monogram6.)
Okay, so i have this old phone that i do not know the pin to (it is only 4 digits), the data there is unencrypted and i would like to access it.
What are the tools, paid or free that could let me access the data or perhaps bruteforce the 4 digit pin through my computer or a raspberry pi (brute force would be preferable).
the phone is a huawei p8 lite (ALE-L21).
Thanks in advance for any help.
DO NOT DEAL WITH THIS MEMBER
(Aug 13, 2024 07:06 AM)shadowcrow Wrote: Is USB-debugging on?
i do not know how do i check it if the phone is locked?
connect it with a cable to your computer and check if you can get a connection with adb for example ( https://developer.android.com/tools/adb)
DO NOT DEAL WITH THIS MEMBER
Aug 13, 2024 07:18 AM
(This post was last modified: Aug 13, 2024 07:19 AM by Monogram6.)
this is what adb returned:
daemon not running; starting now
daemon started successfully
List of devices attached
i ran the command 2 times and no devices were showed in my terminal so i am gonna assume debugging is off
but for some reason there my computer registers the phone as a cd rom but it only has 6mb of space and when i click on it there is only the hisuite application.
This is an emulated discdrive with software from huawei.
With usb debugging of you have to find a vulnerability for the device or the androidversion on it.
You could try flashing twrp as custom recovery but it could lead to a complete factory reset.
DO NOT DEAL WITH THIS MEMBER
(Aug 13, 2024 07:57 AM)shadowcrow Wrote: This is an emulated discdrive with software from huawei.
With usb debugging of you have to find a vulnerability for the device or the androidversion on it.
You could try flashing twrp as custom recovery but it could lead to a complete factory reset.
Yeah man, im not really that advanced i was hoping that there was some way for a program to detect the data or something since its unencrypted or perhaps i could install some kind of bruteforce tool on my linux computer
Aug 13, 2024 10:17 AM
(This post was last modified: Aug 13, 2024 10:24 AM by DramaKing.)
(Aug 13, 2024 07:57 AM)shadowcrow Wrote: This is an emulated discdrive with software from huawei.
With usb debugging of you have to find a vulnerability for the device or the androidversion on it.
You could try flashing twrp as custom recovery but it could lead to a complete factory reset.
You have to unlock the bootloader to flash TWRP. You can't unlock the bootloader without unlocking the phone and enabling developer options.
(Aug 13, 2024 08:12 AM)Monogram6 Wrote: Yeah man, im not really that advanced i was hoping that there was some way for a program to detect the data or something since its unencrypted or perhaps i could install some kind of bruteforce tool on my linux computer
I would try bruteforcing the PIN. Try 10 common PINs. If it doesn't lock you out, you know that the device is vulnerable (probably is) and can try an automated attack.
I would also try a lockscreen bypass if that doesn't work, name CVE-2022-20465 (details available online). You can also try software that claims to unlock Android devices. I would think that such a tool should work on Marshmellow.
DO NOT DEAL WITH THIS MEMBER
Aug 13, 2024 10:35 AM
(This post was last modified: Aug 13, 2024 10:42 AM by Monogram6.)
Thanks, i will definitely try some of the screen unlock tools but from what i have seen none of those tools work without erasing data which is all i care about.
Definitely do what Drama did, type in a bunch of popular pins and see if it locks you out for a period of time, or warns you that it will lock you out. If it doesn't, then you can use brute force tools like: https://github.com/urbanadventurer/Andro...Bruteforce
Since it's only 4 digits, there are only 10,000 possible scenarios which is basically nothing in brute force time.
(Aug 13, 2024 10:17 AM)DramaKing Wrote: You have to unlock the bootloader to flash TWRP. You can't unlock the bootloader without unlocking the phone and enabling developer options.
Not on this old phone
https://xdaforums.com/t/huawei-p8-lite-i...p.3597170/
you can start in fastboot mode and flash it via ADB - that should do the trick without factory reset - but NO GUARANTEE for that - it is a risk.
I would definitife try the bruteforce method with nethunter and the HID-Attack first.
Aug 13, 2024 12:34 PM
(This post was last modified: Aug 13, 2024 12:37 PM by DramaKing.)
(Aug 13, 2024 12:25 PM)shadowcrow Wrote: Not on this old phone
https://xdaforums.com/t/huawei-p8-lite-i...p.3597170/
you can start in fastboot mode and flash it via ADB - that should do the trick without factory reset - but NO GUARANTEE for that - it is a risk.
Ah. All I did was check the process for unlocking the bootloader, rather than seeing if it was strictly needed. Which, come to think of it, even in fastboot, ADB debugging should still need to be enabled. Not 100% sure, but I'm reasonably confident on that one.
(Aug 13, 2024 12:25 PM)shadowcrow Wrote: I would definitife try the bruteforce method with nethunter and the HID-Attack first.
OP may not have the option or be willing to take the risk of flashing Nethunter full with HID support on another phone.
(Aug 13, 2024 10:46 AM)notagh0st Wrote: Definitely do what Drama did, type in a bunch of popular pins and see if it locks you out for a period of time, or warns you that it will lock you out. If it doesn't, then you can use brute force tools like: https://github.com/urbanadventurer/Andro...Bruteforce
Since it's only 4 digits, there are only 10,000 possible scenarios which is basically nothing in brute force time.
Reasonable assumption, but don't assume.
Data in the phone is NOT plain. If the phone is not Android 3, the data is encrypted. You have to enter the PIN.
You don't have much options available. Except bruteforcing as you say.
Aug 13, 2024 12:50 PM
(This post was last modified: Aug 13, 2024 12:51 PM by shadowcrow.)
(Aug 13, 2024 12:38 PM)globalroot Wrote: Data in the phone is NOT plain. If the phone is not Android 3, the data is encrypted. You have to enter the PIN.
You don't have much options available. Except bruteforcing as you say.
Are you sure about that?
Ok full-disk-encryption was implemented in 4.4 but I thought it was optional until andoid 8 or 9 or so (If I remember this right), when they moved from full-disk to file-level-encryption. I flashed many androids these days but this was 6-7 years ago so I don't remember clearly.
@DramaKing: Nethunter can be started without flashing in a busybox but I am not sure if it has HID-support.
(Aug 13, 2024 12:50 PM)shadowcrow Wrote: Are you sure about that?
Ok full-disk-encryption was implemented in 4.4 but I thought it was optional until andoid 8 or 9 or so (If I remember this right), when they moved from full-disk to file-level-encryption. I flashed many androids these days but this was 6-7 years ago so I don't remember clearly.
@DramaKing: Nethunter can be started without flashing in a busybox but I am not sure if it has HID-support.
The encryption type really doesn't matter much. The /data is encrypted. And I don't think he is using some low Android version.
|
