[Q] Android Forensic Analysis without root device - Android Q&A, Help & Troubleshooting

Hi all, I'm new in the forum.
I'm working on Motorola Xoom MZ605.
My question is....Is there any way to get root on that tablet without lost the data? and my other question is, Is possible to get temporary root?
I need to extract all the information from the tablet making a bit to bit copy but I don`t have permission to do that.
Can somebody tell me how to?

filippifranco said:
Hi all, I'm new in the forum.
I'm working on Motorola Xoom MZ605.
My question is....Is there any way to get root on that tablet without lost the data? and my other question is, Is possible to get temporary root?
I need to extract all the information from the tablet making a bit to bit copy but I don`t have permission to do that.
Can somebody tell me how to?
Click to expand...
Click to collapse
You have 3 options that I know of offhand:
1) Use a Cellebrite Forensic device. Unless you have one, it's too expensive to buy. (~$10K). I've had pretty good success with them.
2) Use Oxygen Forensics. I just bought their auto-rooting module ($3K for the toolset) a coupee weeks ago, but I've tried 3 phones and haven't gotten a bit-for-bit copy of any of the 3. I don't think it is reliable enough to recommend.
3) root the phone via an exploit that will leave a "su" command in place. Then use "adb shell" to access the phone from a PC. Then put a virgin sdcard in the phone and use dd to make a bit-for-bit copy of all the partitions.
I've been in computer forensics for 10 years and testified several times as an expert. I believe I could convince a jury that any of the above are legitimate methods, but I've yet to try method 3 for a real case.
If you truly need something that will hold up in court, I suggest you find an experienced cell phone forensic examiner and have then use a cellebrite. It's a pretty common tool among cell phone forensic experts.
Greg

Related

Will the HERO be a ROOTED phone?

I used to work with WM 5 & 6 phones, had plenty of them and enjoyed them all until I discovered the HTC Magic. What a giant leap forward!! Especially when using Google Apps as we do. I am however a bit reluctant to root the magic as it doesn’t seem like a walk in the park. I really miss being able to backup SMS messages and all the other apps that only run on rooted devices.
So my question is if the HERO is a rooted device or not.
Does anybody have an answer to this question? I’m so tempted to preorder one
the answer to the question should be probably yes seing how people have the system dump files. so its just a matter of time
In the meantime, you can back up SMS and MMS with GBackup from Market - backs up to Gmail automatically - can also back up call log and pics...
Dayzz
Apologies for my ignorance but what does rooting the phone mean? I've just come from using a Windows mobile phone - which I have been using since the original SPV!
Root access comes from Unix - Linux operating system speak (which is what Android runs on). Root basically means administrator privileges. So if you can run under root access then you have privileges to change/modify/do anything.
In the phone out of the box you do not have root to protect the phone from modifications that could brick it. People who do modifications under root access need to either know what they are doing, or follow a script from someone who knows what they are doing.
Ofcourse it's not 'rooted' when you unpack it from the box.
Eventually I'll guess the Hero will be rooted, but when and how... we'll just have to wait.
dipje said:
Ofcourse it's not 'rooted' when you unpack it from the box.
Click to expand...
Click to collapse
Easy son... He asked, I provided.
barryallott said:
Easy son... He asked, I provided.
Click to expand...
Click to collapse
wasn't ment to be offensive in any way ...
barryallott said:
Root access comes from Unix - Linux operating system speak (which is what Android runs on). Root basically means administrator privileges. So if you can run under root access then you have privileges to change/modify/do anything.
In the phone out of the box you do not have root to protect the phone from modifications that could brick it. People who do modifications under root access need to either know what they are doing, or follow a script from someone who knows what they are doing.
Click to expand...
Click to collapse
But as in Unix /Linux you use an ordinary login for normal day to operations and su to to use root. You have to consciously change your privelidges which is safer!!
Simon
Lots of useful info on allsorts, including rooting and other hacks here
http://forum.xda-developers.com/showthread.php?t=542452
Daisy xx

[Q] Proscan PLT7044k, Rooting, Roms, Any way to make it Suck Less?

A friend of mine picked up a Proscan PLT7044k. Great cheap tablet from BigLots they wanted to gift me as a late birthday present. Sure it's cheap, but cheap can be good right? Especially if it's a backup device or something to tinker with.
Trouble is we're running into some issues. Fine. Great it's a cheap Chinese tablet. We both get that we're not expecting nexus or ipad mini or even kindle fire quality. However GetJar is, apparently, not working correctly, Amazon Marketplace (which it was linked to in the device) will not let you change settings, and My friend isn't wanting to try rooting to get google play working just yet because we're not sure if the Thread found on the matter has all the bugs worked out.
This Thread seems to be closest to what 'we' want but the model number is different (it's supposed t obe the same device save for the one we're working with included a hardware keyboard/case, but one never knows.)
Of Note when queried my friend only saw a one gig internal storage device instead of the four gig advertised and described the external media slot as a SD slot instead of a micro-sd.
So, since I am, for the moment, treating this device as different and not wanting to risk bricking before info can be gained on if it's worht keeping or taken back, trying to figure out the following:
Very minimum how does one get google play on this gizmo.
Is there anything that can be done about the touch screen lag?
Is there a CyanogenMod port that will work or other custom rom that might help with the issues of lag?
Any advice would be welcome/useful. Even 'RTFM' with links to other threads.
Edit: Be Aware my 'primary' computer is running linux (peppermint OS3, ubuntu 12.04 based distro.)
I just got this tablet. You have root accesses out of the box. There are 2 ways I have installed play store. Through root explorer and through adb push. google gapps for jellybean. here is the manual and firmware proscanvideo.com/item.asp?itemnmbr=PLT7044K . I can make a tute anyone needs.
I ended up taking mine back and getting a Nook Touch. Sure I'll still need to root the thing to get much use out of it beyond being an e-reader but even with it not-rooted it's still actually a pretty good experiance.
Sorry Icouldn't be a trailblazer to anyone getting a proscan and wanting to improve on it.
a noob, but I honestly have tried...
Tearran said:
I just got this tablet. You have root accesses out of the box. There are 2 ways I have installed play store. Through root explorer and through adb push. google gapps for jellybean. here is the manual and firmware proscanvideo.com/item.asp?itemnmbr=PLT7044K . I can make a tute anyone needs.
Click to expand...
Click to collapse
ok, I have tried very VERY hard to find out how to root my proscan plt7044k. I've tried following the few links that I have found, and have found them to be broken. Or the items just won't download onto my computer or just flat don't work. It appears that what I have to do is to find a driver for this thing so that my computer can recognize it, and the Curtis website doesn't give any driver information. Yes, I did download their manuals and tech material, and they DON'T WORK. All they provide is a powerpoint thing that says to "find program x, do y, etc", without providing that program. I cannot find a driver for this p.o.s. ANYWHERE, nor any that would work for an earlier model and then also "might" work for mine.
I really want to get rid of the "getjar" crap, as well as all of the bloatware that google puts into these things!
Tearran said:
I just got this tablet. You have root accesses out of the box. There are 2 ways I have installed play store. Through root explorer and through adb push. google gapps for jellybean. here is the manual and firmware proscanvideo.com/item.asp?itemnmbr=PLT7044K . I can make a tute anyone needs.
Click to expand...
Click to collapse
I have checked device for root it is not rooted out of the box. If you have a tutorial to actually get root it would be appreciated.
Sent from my SGH-T889 using xda premium
musicafe said:
I have checked device for root it is not rooted out of the box. If you have a tutorial to actually get root it would be appreciated.
Sent from my SGH-T889 using xda premium
Click to expand...
Click to collapse
The tablet is semi rooted out of the box it only needs supersu (http://forum.xda-developers.com/showthread.php?t=1538053). You need to adb push this file.
[HOW-TO] Install & Use ADB tool (http://forum.xda-developers.com/showthread.php?t=1474956)
How to push files through ADB (http://forum.xda-developers.com/showthread.php?t=642437)
Basic adb/shell commands for noobs (http://forum.xda-developers.com/showthread.php?p=3820215)
Tearran said:
The tablet is semi rooted out of the box it only needs supersu (http://forum.xda-developers.com/showthread.php?t=1538053). You need to adb push this file.
[HOW-TO] Install & Use ADB tool (http://forum.xda-developers.com/showthread.php?t=1474956)
How to push files through ADB (http://forum.xda-developers.com/showthread.php?t=642437)
Basic adb/shell commands for noobs (http://forum.xda-developers.com/showthread.php?p=3820215)
Click to expand...
Click to collapse
I've looked everywhere including the links you provided, and adb don't find this device, oh well, bout to give up on this
side load
Goggles2114 said:
A friend of mine picked up a Proscan PLT7044k. Great cheap tablet from BigLots they wanted to gift me as a late birthday present. Sure it's cheap, but cheap can be good right? Especially if it's a backup device or something to tinker with.
Trouble is we're running into some issues. Fine. Great it's a cheap Chinese tablet. We both get that we're not expecting nexus or ipad mini or even kindle fire quality. However GetJar is, apparently, not working correctly, Amazon Marketplace (which it was linked to in the device) will not let you change settings, and My friend isn't wanting to try rooting to get google play working just yet because we're not sure if the Thread found on the matter has all the bugs worked out.
This Thread seems to be closest to what 'we' want but the model number is different (it's supposed t obe the same device save for the one we're working with included a hardware keyboard/case, but one never knows.)
Of Note when queried my friend only saw a one gig internal storage device instead of the four gig advertised and described the external media slot as a SD slot instead of a micro-sd.
So, since I am, for the moment, treating this device as different and not wanting to risk bricking before info can be gained on if it's worht keeping or taken back, trying to figure out the following:
Very minimum how does one get google play on this gizmo.
Is there anything that can be done about the touch screen lag?
Is there a CyanogenMod port that will work or other custom rom that might help with the issues of lag?
Any advice would be welcome/useful. Even 'RTFM' with links to other threads.
Edit: Be Aware my 'primary' computer is running linux (peppermint OS3, ubuntu 12.04 based distro.)
Click to expand...
Click to collapse
You can side load the Play Store, also, what version of Android is the tablet running?
IRIE4IPIER said:
I've looked everywhere including the links you provided, and adb don't find this device, oh well, bout to give up on this
Click to expand...
Click to collapse
You probably have a driver problem. I use ADB Konnect (wireless ADB) To push over wifi.
Is there any possible way to flash a custom ROM to it the factory ROM has too much crap on it memory wise?
JayMax03 said:
Is there any possible way to flash a custom ROM to it the factory ROM has too much crap on it memory wise?
Click to expand...
Click to collapse
I Titanium backup to uninstall the bloat. You also can use Root explorer or adb to rename the apk extension of the bloat to get rid of the eyesore
Sent from my Nexus 7 using Tapatalk
proscan 7" tablet.
you kngoo root, make sure your using windows...anything past vista.
i used wkindows 7 or 8 from an internet cafe and my proscan is plt7602g and it worked fine...i even reset from the android service menu (green dead dude) and it worked but make sure most of all that you have the verify apps off so you can root it. because it will still be a danger to ur tablet. there is always a bricking chance, one you instakll kingoo root and run the program plug in ur tablet press root and the app takes care of it all. and if you google kingoo app or kingoo root it will show a main website and go from there
i got my proscan PLT1077G and i haven't found a **** yet i want to change my tablet android OS but don't have a developer who can help us with this one i think proscan is not that popular
Tearran said:
The tablet is semi rooted out of the box it only needs supersu (http://forum.xda-developers.com/showthread.php?t=1538053). You need to adb push this file.
[HOW-TO] Install & Use ADB tool (http://forum.xda-developers.com/showthread.php?t=1474956)
How to push files through ADB (http://forum.xda-developers.com/showthread.php?t=642437)
Basic adb/shell commands for noobs (http://forum.xda-developers.com/showthread.php?p=3820215)
Click to expand...
Click to collapse
Going to try this on the PLT7650G
Need firmware file for plt7223g
prepaidguy9081 said:
Going to try this on the PLT7650G
Click to expand...
Click to collapse
so much for this method - I used kingo root for windows, slow but works. just go grab a beer and come back in ten.

G925F Expose storage as mountable USB

Hello Droids
I have a strainge special problem Im working on for several weeks. I bougth the 64GB version of the S6 Edge after a few days with the plan to cut just 40GB as a bootable USB storage using DriveDroid or something similar.
Now Im not able to get my device G925FXXU2COH2 with Android 5.1.1 rooted (or am not willing to for loosing KNOX waranty) so I thought about several possibilities to not just get the device rooted in general but simply give the App (DriveDroid or something else) enougth rights to modify the USB channel.
Is it possible in any way to give the App that rights?
Would it help just to move it into System directory in any way?
Could i just go into recovery mode and pl,ace it there while in ADB shell?
Would it especialy possible to place it anyway into the recovery partition and then tell the phone to make a factory reset?
Could that for example be done using the service menu build into the Samsung Galaxy?
Im a developer with more or less good knowledge of working an Android and while developing I often need to stay at someone elses PC (company, presentation at customer and so on) so I thought if it would be nice to cary a bootable version of Ubuntu at my phone as my working environment. Thats all, no more no less
I would be very happy if someone could solve this for me
Best Regards

How to avoid pattern or password in all android phones????

Hello guys this is my first post in this forum
I need to ask you about the best way to avoid the pattern or the password in all android phones and tablets (also Chinese tablet) without losing any thing and without format, thank you.
Depending on the rom it migbt not be possible. Can you be more specific on the device as well as whether it has root or not and its variant
I need to open a workshop for repairing phones and I need help about programs and tools that help me
Depending on the device it can't be done. You would need root access to make it work and on some devices you can't mod anything.
If you are opening a shop and dont understand things like this then I would advise you not to. You can go very wrong with alot of things like this and end up in deep trouble.
Sohaib1812 said:
Hello guys this is my first post in this forum
I need to ask you about the best way to avoid the pattern or the password in all android phones and tablets (also Chinese tablet) without losing any thing and without format, thank you.
Click to expand...
Click to collapse
if u have a recovery,
u easily can flash unlock me tool.
it will reset data/system/gesture.key
and solve ur problem.
Or get aroma recovery file manager
navigate to that partition and kill it
Or
u can try on adb command too.
(That completely depends on ur system.
U have to find out where gesture.key is)

Need help manually rerooting my phone using ADB to push files

Okay so I was told to come here because my phone doesn't have its' own forum yet (Not at all surprising..), so I'm just going to quote my post back on the other thread that told me to come here instead.
Mc Fow1er said:
Okay so I've had this phone for little over 10 months now and within that time I've managed to achieve root (unreliable but it works at the very least) in that time as well as learned a fair amount about Linux and android alike (Not a whole lot but I know some stuff) though I've now come to the point of I actually want to give my phone a proper root instead of this faulty solution I have currently. I (barely) managed to get my phone rooted using Kingoroot and I've played plenty with my phones' innards in that time, removed system apps, added my own selection to the system but some apps in my phone that use root don't work even with root permission granted which is why I'm wanting to replace Kingoroot with ChainFires' SuperSU binaries, could anybody help me with simple instructions for someone who doesn't actually know very much regarding how root and SU bins work inside of android? My phone's using 4.4.2 kitkat.
Just a few disclaimers first to get misconceptions out the way:
1. I do not have a custom recovery nor is one available for my phone (Samsung galaxy young 2 (SM-S130H) for those who want to know)
2. I'm currently unable to use the internet on my phone as I lack Wi-Fi to do so (router is dead) so I'm manually installing app packages through ADB, so if something needs an internet connection on my phone it's not going to work for me, for now..PC still has net access.
3. I have access to ADB shells' SU but not ADB root so I hope you don't need that from me.
4. This phone does not have a fastboot mode. (That I can find anyway..) Only a download mode from what I've found.
Can anybody help me out with telling me what I'll need to be doing in regards to getting this done?
Click to expand...
Click to collapse
So, can anyone here knowledge on the matter can assist me with this instead of me having to figure it out on my own?

Categories

Resources