Changing ActiveSync DeviceID after cloning Android device - Android Q&A, Help & Troubleshooting

I have made a backup of my Samsung Galaxy phone and used that backup to prepare a second device for another person. Both devices now have the same ID that is used when contacting the Exchange (Z-Push) server. You can see that ID while creating a new Exchange account (after selecting the "Exchange" account type), it's usually "androidcxxxxxxxxxx" where the x's are digits
(see codeXgoogleXcom/p/android/issues/detail?id=50371, replace the X's with dots).
Is there any possibility to change that device id afterwards in order to be able to use that device in parallel to the first one? Of course, I intend create new Exchange connections on that second device.
Thanks in advance

I have found the solution myself: There's a textfile /data/data/com.android.email/files/deviceName containing only the ActiveSync device name. After editing and rebooting the device, the new name takes effect.

smartyuser said:
I have found the solution myself: There's a textfile /data/data/com.android.email/files/deviceName containing only the ActiveSync device name. After editing and rebooting the device, the new name takes effect.
Click to expand...
Click to collapse
Hi,
did you ever restore the ID after a factory reset and regain access to a previously existing activesync account?
Thanks!

I think that the ID isn't modified by a factory reset. I assume that you are able to get access to the ActiveSync account again.

Actually a factory reset does.
Guess I'll test it soon
Thanks!

Related

Activesync

Ok, here's one to test you.
i've had to hard reset my XDA 2 times since i got it, and each time i have to create a new profile on Activesync, is there any way i can use it with the same profile and if so, how do i do it, because so far, whenever i've tried it it just says there's already a device with that name, please choose another name
Ta y'all
ActiveSync FAQ
Hi Jjones,
I cannot actually answer your question but be shure the answer is surly published there http://www.cewindows.net/faqs/activesync3.7.htm
Give it a try
Tanguy
Re: ActiveSync FAQ
Tanguy said:
I cannot actually answer your question but be shure the answer is surly published there http://www.cewindows.net/faqs/activesync3.7.htm
Click to expand...
Click to collapse
Nice article, but i think not that inforamtion that jjones wanted.
His prolem is, that after a hard reset of his device, he has to create a new connection in active sync for his device. He would prefer to use the old existing configured connection.
As much as i know, it isn't possible to do so. The other question is, why he has so often to hardreset his device....
Stefan
well first time is when i sent it in for repair, and the second time was when i dropped it and it hard reset itself
Hoops
Jjones,
I think I posted too quickly and mixed up my intention.
I have found on the web site http://www.mtekk.com.au/browse/page938.html, a section suggesting you can rename your device to the name of the previous partnership.
I have never tried it but did promossed myself I would try it next time as I'm seek of uninstall/reinstall Activesync to keep the default POCKET_PC parnership.
See the past bellow for direct instruction.
Rebuilding your Pocket PC after a hard reset.
....
Next, after restarting the device, correct the clock and time zone as before then set its Name using the Start | Settings | System | About | Device ID screen. It is permitted to reuse the same name as before, although this entails one extra step in Active Sync - before connecting the device with the same name, you must first delete the existing partnership of the same name.
If there are multiple partnerships defined, select the correct partnership first using File | Mobile Device. Next select File | Delete Partnership and answer Yes. If you wish to delete the synchronised files folder (the <device name> My Documents directory) select Yes again. I strongly recommend renaming this folder and selecting Yes here to ensure no traces of the previous partnership remain, you may always copy files from the renamed copy into the new one once created. Otherwise there always the chance of old redundant or even incorrect data getting across from the previous build.
Now, connect the freshly reset and renamed device to the PC and establish a standard partnership using the wizard, let it synchronise all your contacts, etc. as desired, reload all your software and finallygo back tothe start of this document and configure your backups!

ROM upgrade success after a big issue ...

Hi folks,
Although I am generally not timid about modding certain products (such as my computers and TiVo), I do like to first take my time before diving in until I'm sure I've read most of the relevant threads and have gathered up the complete suite of software tools in one place. The resources on this site and the work of folks such as DCD and nueChem are amazing and outstanding and I want to say thanks for that.
As of yesterday, I felt read to take the plunge installing the bootloader, 3.27 radio ROM and DCD 2.3.2 kitchen build on my XV6800. However, I didn't just go with the stock kitchen. I added a couple of additional OEM packages from Alex.Kaiser.v4.OEM.Packages (the nue LED and audioparam packages and Resco File Explorer 2007 in particular).
The updating went great and I was able to OTA reprogram my phone without needing to call Verizon. However, I noticed that something wasn't right.
First, my phone had no connection data onboard so the phone didn't know to dial #777 for a data link and my attempts to enter this manually didn't give me any success.
Second, my PC wouldn't see the device unless I deselected the "advanced network features" (or similar, I forget the exact wording) checkbox.
Third, I couldn't install CAB files. They'd terminate immediately with an "installation was unsuccessful" message.
Finally, once I was able to establish a connection to the PC, I could add and remove files from the device *only* from the PC. Attempts to delete files from the device itself were met with a file permissions error.
After playing around for a while trying every tweak I could think of, I tried using Resco Explorer and, after a few minutes, got a registration code error/warning message. This made me wonder if this package was the problem: preventing certain types of file access due to it being in a limited-functionality mode from lack of a proper reg code.
So, I rebuilt the ROM without it and now all is well! I'm loving the new dialer and comm manager as well as the active GPS (I've tested it only with Google Maps and GPSToday so far and it gets to within half a block). Not sure how well EV-DO Rev A is working yet. I tethered the phone and ran an online speed check, obtaining 1.2Mbps download but only 60kbps upload. It's possible this is related to my local coverage (Nyack, NY), so I'll try this again from a known-good Rev A area.
Anyway, just wanted to relay my experience in case it proved useful to anyone.
One other thing: I used PIM Backup to backup my data beforehand since my sycing is generally done on my work machine and I was doing the ROM updating from home. Upon restore, it wouldn't restore my email messages because it didn't find the corresponding account. So, it's important to note that this account info isn't backup up and that you first need to create the account before doing the restore step (making sure to name the account the same as before so that it matches up).
David

[Don't steal my phone] Another thief protection software

Hi,
I've found many software that supposed to help in case your phone get lost or stolen.
Some were expensive, some were free, but none fitted perfectly to what I was really expecting. So I've made my own.
The closest in terms of functionnalities (and price) is Remote Tracker, but it requires .NET 3.5 which is not installed on my WM6.5 phone, and honestly, it's a very fat dependency.
The idea is that you install this software (no CAB, simply copy the 2 files on your phone), and run it once to set up the configuration. Then forget it.
In the case the phone is stolen, the software will send you a SMS with the thief's phone number, it's GPS position, the CellID in case the GPS pos is not available.
You'll then be able to act on your phone remotely by sending it some SMS (described in documentation).
The features that makes this software unique are:
It's possible to destroy all your personal data remotely (call log history, contact, emails, SMS, calendar, owner info, storage card) -> help social engineering to get back your phone.
It's possible to make the phone send you back the call history and the sim contacts.
Slut mode (see the documentation for details).
WOULDYOUSHUTUP mode (where the phone is very very nasty).
All other tracking software features...
This software is open C++ source (GPLv3), small (75ko with no dependencies), and free.
You'll find it at http://dsmp.sf.net (documentation on that page)
Or the direct link is attached.
Beta tester welcome (I've tested all functions already, but, you know what software development is....)
Some remarks for those who don't read threads:
whereRU: requires you to have at least a .wav file in your windows ring folder. I thought all phone had at least one .wav based ring. In 64kb, I haven't included a MP3/AAC/MP4 player.
owner: This is what I said in my first posts. Microsoft didn't feel it was interesting to document how to retrieve owner info. So, almost all manufacturer have made there own proprietary stuff. I've a HTC phone, so I've checked the code work for HTC. If you have more information about where your phone store its owner information in registry, I can add your phone support.
contact: On the main config dialog, in the combo box where you can enter the phone number to contact, you'll have a phone number list. It's the same list as returned in the "contact" command. So if you don't have such list in the config dialog, then this means that either you don't have any contact on your SIM card, or it's not working (in that case PM me).
Please read the website http://dsmp.sf.net
To install the software:
1. Extract the zip file (either on your phone, or on the PC, and then copy the 2 files from archive to your phone)
2. Run the extracted exe on your phone. If you have signed warning say yes.
3. Set up your configuration (DON'T check "Don't show this screen anymore")
4. If you have a GPS in your device, go outside to make sure the GPS is working with the configuration you've made
5. Enter a (not yours) phone number in the SMS par edit/combobox
6. Enter a password in the edit box on the bottom
7. Click done => Say yes.
8. Start the software again, enter the previous password in the field on the botton to unlock the dialog, then click on "Configuration done, install now"
9. If you have signature warning for the DLL say yes.
10. It should display "Installation done". You can then send yourself a SMS with the right format to check if it's working.
11. If it's working, delete the SMS you've just sent from your outbox, and trash, and then start the software again and check "Don't show this screen anymore". You'll have to click "Configuration done" again, but this times, you shouldn't have any warning.
12. If it's not working, well post on the forum.
Changelog:
- Added "allow" command so it's possible to use multiple allowed SIM card. Setup the software as described above, and then change your card. You'll get a SMS with the new number (if not, your configuration isn't good). Then reply with the command "dsmp # allow # password" with no space between #. This SIM card is then allowed. You can have up to 4 allowed SIM card.
- Fixed an installation bug on non-french phone. Sorry, I've been lazy, and it should be fixed.
- Added support for "Dsmp" in addition of "dsmp" as trigger code
- More owner info retrieved for HTC phones
Please go to sf.net page ( http://dsmp.sf.net ) if you want to get the debug version or source code.
sounds impressive ! i might give it a try!
good work !
CDMA diamond running a 6.1 rom. got to step 8 and each time I enter in my password and close my keyboard the screen where the keyboard was (touchpal is my SIP) shows the screen behind what it should show. hope that makes sense. how do I uninstall this software?
also, I dont see anywhere where it says what WOULDYOUSHUTUP mode is.
WOULDYOUSHUTUP is what happen when you send a sms with "whereRU". The phone rings at max volume for 60s with no possible way to stop it, even if it was in silent mode.
Useful when you've lost your phone nearby, (it won't stop until you've found it, or 60s later), or, as intended, to become a nuisance to any thief in the middle of the night.
To uninstall the software you must click on "Zap" button, but you need your password for that. BTW if you haven't done step 8, you don't need to uninstall, as the installation proceed only when you click "Configuration done" button.
If the software doesn't accept the password you've set at step 6, then it's likely that it was entered wrong at first? I'll PM you about this, if you don't mind.
installed it, and tested a whereRU with another phone, doesn't work. :\
I've answered with specific details by PM. I trying to understand why installation didn't work for you. I'll update the post with the informations you'll give me.
sounds really nice.
I just see some problems. These problems apply to any anti-theft program :
If you have a pin-lock for the device (not sim card lock, the built-in windows lock), the thief will not be able to change anything (owner, ...). He can only change the sim and try to boot, what will of course fail. As this fails (without unlocking phone-lock, no dialing), he will not be able to establish a connection to his mobile network and you will not get his number (?!)
As hard-reset is always possible (every thief can google ) w/o the program being cooked into rom, this software is senseless if you can't cook roms. I can't
If I understood it correctly, you would need to edit the 2 files to your needs (with numbers aso) at first instance and afterwards cook them into rom. This has to be done by each end-user each time he flashes a new rom and cant be done by rom-chef because he doesnt know your data.
Isn't it possible to make that wireless? E.g. you specify an email there and the programm will at first boot after hardreset (after cooking into rom) establish a connection to a server (or mail to specified mail) to download the details (cell number, pw, ...) you entered in the server? ^^
You only can enter one own cell number. Bad if you sometimes switch the sim's.
Would be better to implement that from remotetracker:
SIM Cards: you can set up to four known SIM cards. If you, or anyone, change the SIM card to an unknown card, your emergency number and e-mails will receive a message alerting you about the change and with the new number
Click to expand...
Click to collapse
* If you use this kind of software, you'll want to make your thief believe he succeed owning your phone. If you PIN-lock your device, then the thief will have to hard reset the phone to use it, defeating the whole process.
* In my previous phone (Universal), there was a Extended ROM made by the operator that survived hard reset. I've used that ROM by that time.
Now, you're perfectly right, with a single ROM, the hard reset kills the software. Your idea of using a external server is genius. I guess I'll add this, using your device ID (which doesn't change whatever the ROM) (or IMEI), to retrieve the config for your phone. The config will be saved on a server, and the config can be sent back by SMS (so even if the thief doesn't have network contract, it'll work).
* You switch SIM ? Is 2 SIM okay ?
I wanted the software to be extremely simple to setup, so it detected the IMSI by itself.
Now, if you need to store 2 IMSI, it'll need another edit box to let you enter the IMSI numbers.
I can add a new command "allow" that, when you've inserted your second SIM, will allow the new IMSI upon receiving.
Let me think about this.
Yep, but I won't -of course- disable excellent built-in security mechanisms to make it *perhaps* easier to get the phone back just in case someone steals my phone.
The phone-lock is ideal to keep away random access to private and corporate data from other persons (friends, aso).
Despite the lack of some functions I installed the program yesterday and it doesn't work as thought:
The program loads after each reset again with the config screen
The program is active in task manager (dsmp.exe)
The sent commands aren't executed. If I send the commands (e.g. rst or whereRU) to the phone, the display turns on but nothing happens.
(perhaps the first 2 problems are caused because I did not hide the program yet with "Do not show this anymore" Not sure about that )
You could just say at setup: Now turn off the phone and enter your other sim and start the setup again to detect the second sim
hi popol256,
is there a chance for a very thin application, that after installed on a phone (e.g LEO) makes JUST the following:
- receiving a predefined SMS lock's the phone and encrypts the msd card.
To unlock the phone and decrypt the msd card, just a so called "master password" or whatever needs to be input.
That's all
thank you,
/s1
Locking the phone is possible (but again, if you lock the phone, then the thief will hard reset it).
Encrypting the microSD card is not, I think.
So far, I think you need to either encrypt it at first use (all WM6 phone have this as a base feature). When you have data on it and want to encrypt, it's almost impossible as you'll need the same free space on your device as your card size to store the encrypted version.
(Or if only encrypting content, you'll need to reserve half your card size for the "possibly" encrypted archive).
I guess the best method for you if to use the storage card encryption feature of WM + pin lock.
bliblablub said:
Yep, but I won't -of course- disable excellent built-in security mechanisms to make it *perhaps* easier to get the phone back just in case someone steals my phone.
The phone-lock is ideal to keep away random access to private and corporate data from other persons (friends, aso).
Click to expand...
Click to collapse
You are right. The only way to have both would be to cook your own ROM with the software inside.
bliblablub said:
Despite the lack of some functions I installed the program yesterday and it doesn't work as thought:
The program loads after each reset again with the config screen
The program is active in task manager (dsmp.exe)
The sent commands aren't executed. If I send the commands (e.g. rst or whereRU) to the phone, the display turns on but nothing happens.
(perhaps the first 2 problems are caused because I did not hide the program yet with "Do not show this anymore" Not sure about that )
Click to expand...
Click to collapse
Yes the 2 first issues are because the config says to show the dialog.
The third issue means that the software isn't installed well.
I've only tested it on my phone, and I might have done something wrong.
There is a debugversion here
Extract this version to your card, then run the exe in it, and click "Zap". Then wait for few minutes, and reset your phone (this is to make internal mail application to release its lock on the interceptor DLL).
Run the software again, and set the config, click "done" or "ok", and send yourself a SMS (don't need to install this version, it runs from the card).
You should get 2 message box, the first one contains the path to the software (end in .exe), and the message you've sent, and the second only contains the command you've sent. If this work, well, I'll have to double check the release version.
bliblablub said:
You could just say at setup: Now turn off the phone and enter your other sim and start the setup again to detect the second sim
Click to expand...
Click to collapse
Yes, it's the basic idea (in fact, as soon as you insert your second SIM, you'll receive a SMS, but you'll then send an "allow" command to add this IMSI in the allowed IMSI list). I'm adding this.
Hehe, got the following error running the debugversion:
CmdLine (OK)
(empty)
Click to expand...
Click to collapse
Can't load DLL (OK)
\Carte de stockage\DSMPI.dll
Click to expand...
Click to collapse
Error (OK)
Can't register the message interceptor DLL
Please make sure the DSMPI.dll is in windows folder
Click to expand...
Click to collapse
Ok, my fault then, I've used French name for the path. Let me few hours to compile a new version with the regular name, I'll post back here.
Ok, I've added the "allow" command for multiple sim card. The idea is simple, configure your software as said in the first page, then change your sim.
You'll received a SMS to the number you've set up. Then send a "allow" command with your password, and the new SIM is allowed you'll never receive a SMS again.
bliblablub,
Please run the version you have on your storage card, and click "Zap" button to uninstall it.
Then delete the 4xxxxxxxxx_dfed_p (xxxxx is a hexadecimal number) from your storage card (file format changed).
Then download the updated DSMP.zip version from the main (or the official) page again.
There was a bug with the file path that should be fixed now with the release version.
Thank you for your patience.
popol256 said:
bliblablub,
Please run the version you have on your storage card, and click "Zap" button to uninstall it.
Then delete the 4xxxxxxxxx_dfed_p (xxxxx is a hexadecimal number) from your storage card (file format changed).
Then download the updated DSMP.zip version from the main (or the official) page again.
There was a bug with the file path that should be fixed now with the release version.
Thank you for your patience.
Click to expand...
Click to collapse
I can't uninstall it because it was not installed I guess (debug - storage). See errors on post before
Somehow I managed to uninstall the internal version. Needed several attempts.
Now installed again on phone and again nothing happens with whereRU and any other command except lcd turning on
Does it work fine?
Any opinion?
Nice, nice, nice. Sounds like the app I was always looking for. I will download and try. Thanks
It seems to work fine on my X1.
But gps is not recognized on port 4 baud 4800...

UPDATED: DeviceID fetcher (now showing multiple IDs)

This a small application I wrote to automatically retrieve the DeviceID on your PC without having to open the registry editor. It can also create the DeviceID.txt file with the id value stored. It's written in Java so it requires JRE to be installed (most of you already have this)
http://rapidshare.com/files/403680176/DeviceID.jar.html
Make sure you have Sony Ericsson Update Service installed otherwise the device id will not be created in the registry
UPDATE: App updated to show all Device Ids stored in the registry
still dont work for me
windows 7 x64
It's been downloaded too many times (10) for a Free Rapid Share account, it is no longer downloadable, you'll have to upload elsewhere
Balur said:
It's been downloaded too many times (10) for a Free Rapid Share account, it is no longer downloadable, you'll have to upload elsewhere
Click to expand...
Click to collapse
new link posted
Hi !
As you can see I have more Strings in the registry ?
Whats your methot of determining which is the right one as they all show different DeviceID Strings ?
THX
pietropizzi said:
Hi !
As you can see I have more Strings in the registry ?
Whats your methot of determining which is the right one as they all show different DeviceID Strings ?
THX
Click to expand...
Click to collapse
I always get the first one, there is no way afaik to determine which one is getting used at any point. I can maybe change it so that it displays everything and lets u select the one you want to use
Well the point's not what I want to use, it more what's the right one at time of flashing. Is it save to delete those keys so the right one is rebuilt inn case of reconnecting the device ?
it's really not easy to find which one is being used at any point. i don't know if it's safe to delete them from the registry, although i would suspect that it is. just make sure you use the same usb port whenever you flash. that way you avoid overcomplications with this issue
THX for the info. I'd try to find out the right one.
In my case it was the second key found, not the first!
So this tool does not work for everyone.

Recovering Android Passwords

Hi all!
My GF is getting a new phone and we are having real trouble remembering her Google mail password!
We have tried all the recovery options on-line, but Google are pretty useless at recovering passwords and its driving me insane!
Now, on her old phone, it all still works, and Im just wondering if there is anyway at all as to recover or dig out the password from in the phone somewhere!
Any help would be appreciated as this is driving me insane haha
Cheers
Keith
I found this with google from another forum, password could be stored in
/data/data/com.google.android.gm/database/gmail.db
and related files to google account in
Code:
/data/system/accounts.db
/data/system/sync/accounts.xml
/data/data/com.google.android.gm/databases/gmail.db
/data/data/com.google.android.providers.calendar/databases/calendar.db
/data/data/com.google.android.providers.gmail/databases/mailstore.#######@gmail.com.db
/data/data/com.google.android.providers.talk/databases/talk.db
/data/data/com.google.android.providers.subscribedfeeds/databases/subscribedfeeds.db
Haven't tried myself cause I have no account of any type, so I dont know if passwords are plain text or hashed...
If this fails, I can share you my method anyway:
Connect both your PC and phone to the same home wifi network.
Install a POP3 server on your PC (ok this could be a pain in the @ss, I give you a hint on a easy one: Argo Mail server)
Activate and run it, then take your PCs IP (let's say it's 192.168.0.2)
Edit your Gmail account from the phone, and change the server from gmail's to 192.168.0.2, edit the ports and set it to use POP and plain authentication without encryption (default port should be 110).
Check your mail from the phone ! You just hijacked your credentials from the gmails secure server to your home mail server, that will of course give you an error because there is no account for that address. But you are then able to intercept the password because it's sent as plain text !! And should work for any email address, as long as you are able to edit the server address in the mailbox settings.
Just don't use it to bash into ur GFs email
not a clue how to get into /data/data/com.google.android.gm/database/gmail.db! haha
But i just tried you 2nd method, and i have the e-mail server setup no problem, but there isnt any options to change the Gmail address/port on the phone :s ARGH!
Keefo said:
not a clue how to get into /data/data/com.google.android.gm/database/gmail.db! haha
But i just tried you 2nd method, and i have the e-mail server setup no problem, but there isnt any options to change the Gmail address/port on the phone :s ARGH!
Click to expand...
Click to collapse
You can use adb shell to get that file, but I always use my dear QuickSSHd and get it with WinSCP on my pc. If I get any permission error, I open my Root Explorer and mount the root with r/w permission ! With that you can access any file in your phone/memory card.
As for the second, this is supposed to work only if you can change the address of the server and auth method ... if you are using an app with hardcoded server and port (and you could even hijack it that connection to your server) it will still be encrypted and you might not get the password...
Wow! Didn't realize recovering a password would be such a pain in the ass! My issue is I have been using LastPass and last night it decided to lose my Gmail info. Now I can only get to it from my DInc. I had LastPass generate a 20 digit secure password and it is too long to remember it all.
Google, being the dicks they are expect you to jump through hoops to try to get it back and will "get back to you" in 3-5 days. if you haven't tried They want the last password you remember, when you opened the account and on and on....
Reading this second method here, I am unsure exactly what to do. I am a noob at this linux based stuff and not terribly familiar with adb. I barely muddled through all it took to root my DInc and install a custom ROM.
A little more help? Maybe?
EDIT: Got QuickSSHd and WinSCP working together, but I have no idea where to look for the file to change the POP IP address to try to recover this password.
Never mind .....
Hello! I have a little bit different problem.... I have changed the password in Facebook last month and is stored in my Samsung Galaxy 5... How i can recover the password? My android app has stored the password so i can login only from this... i can't restore the password from my pc because i don't have anymore access to this email account.... is there any solution?
cloudtrax said:
Hello! I have a little bit different problem.... I have changed the password in Facebook last month and is stored in my Samsung Galaxy 5... How i can recover the password? My android app has stored the password so i can login only from this... i can't restore the password from my pc because i don't have anymore access to this email account.... is there any solution?
Click to expand...
Click to collapse
If you had added any mobile number of yours then it could help you enough or if any alternative email address.Either you got no choise to get it back.
Help me to decrypt please
in accounts.db file and accounts table I have:
1/Csd9isUuYtNpka5reHGjLshQ1nztm5YliiJlaQMjp70 2p78x01x1iRttFP70uH-tWhz as password field for com.google type
and
YUhOdmIyaHpiMjl0 as password field for com.htc.android.mail type
So can anybody help me to decrypt it?
Success!
ell3 said:
If this fails, I can share you my method anyway:
Connect both your PC and phone to the same home wifi network.
Install a POP3 server on your PC (ok this could be a pain in the @ss, I give you a hint on a easy one: Argo Mail server)
Activate and run it, then take your PCs IP (let's say it's 192.168.0.2)
Edit your Gmail account from the phone, and change the server from gmail's to 192.168.0.2, edit the ports and set it to use POP and plain authentication without encryption (default port should be 110).
Check your mail from the phone ! You just hijacked your credentials from the gmails secure server to your home mail server, that will of course give you an error because there is no account for that address. But you are then able to intercept the password because it's sent as plain text !! And should work for any email address, as long as you are able to edit the server address in the mailbox settings.
Just don't use it to bash into ur GFs email
Click to expand...
Click to collapse
Thanks ell3!! It's a really witty solution that i would never have come up with and I just used it to recover my mail password from kitkat's mail app. I used Wireshark to sniff the traffic during the authentication attempt and it worked really fine.
end_092 said:
Thanks ell3!! It's a really witty solution that i would never have come up with and I just used it to recover my mail password from kitkat's mail app. I used Wireshark to sniff the traffic during the authentication attempt and it worked really fine.
Click to expand...
Click to collapse
The method is good but you do not need to complicate yourself. Do not install mail server install wireshark and with a r73 or any wifi that can capture promiscuous you can sniff your username and password
---------- Post added at 02:47 AM ---------- Previous post was at 02:42 AM ----------
ell3 said:
You can use adb shell to get that file, but I always use my dear QuickSSHd and get it with WinSCP on my pc. If I get any permission error, I open my Root Explorer and mount the root with r/w permission ! With that you can access any file in your phone/memory card.
As for the second, this is supposed to work only if you can change the address of the server and auth method ... if you are using an app with hardcoded server and port (and you could even hijack it that connection to your server) it will still be encrypted and you might not get the password...
Click to expand...
Click to collapse
Maybe wireshark and live Kali linux ...do the job
Recover passwords of stock browser
I found an app, which can recover and edit stored browser Passwords. You can give it a try: play.google.com/store/apps/details?id=tkstudio.browserpasswordrecovery
mrhamed said:
in accounts.db file and accounts table I have:
1/Csd9isUuYtNpka5reHGjLshQ1nztm5YliiJlaQMjp70 2p78x01x1iRttFP70uH-tWhz as password field for com.google type
and
YUhOdmIyaHpiMjl0 as password field for com.htc.android.mail type
So can anybody help me to decrypt it?
Click to expand...
Click to collapse
For recovery of password from HTC Email app you unbase64 the password field, then you unbase64 the result and then you switch pair of characters like this "0123..." -> "1032..."
Following this procedure your password should be "shooshoom".
Can you please confirm this is correct?
Yes it works but I can't understand exactly how?!
I decode the "YUhOdmIyaHpiMjl0" via base64decode.net and result is: "aHNvb2hzb29t"
What is your mean about "switch pair of characters" exactly?
mrhamed said:
Yes it works but I can't understand exactly how?!
I decode the "YUhOdmIyaHpiMjl0" via base64decode.net and result is: "aHNvb2hzb29t"
What is your mean about "switch pair of characters" exactly?
Click to expand...
Click to collapse
At first you have "YUhOdmIyaHpiMjl0"
you decode base64, you get "aHNvb2hzb29t"
then you decode base64 the result, you get "hsoohsoom"
now you switch pairs of characters (first with second, third with fourth...) and you finally get "shooshoom"
CuberX said:
For recovery of password from HTC Email app you unbase64 the password field, then you unbase64 the result and then you switch pair of characters like this "0123..." -> "1032..."
Following this procedure your password should be "shooshoom".
Can you please confirm this is correct?
Click to expand...
Click to collapse
Hi!!! I have the same problem! I forget my password on mail app but is a imap account ... how i find this file? I have HTC m9 plus with android 6.0
Tks!
eduaf1 said:
Hi!!! I have the same problem! I forget my password on mail app but is a imap account ... how i find this file? I have HTC m9 plus with android 6.0
Tks!
Click to expand...
Click to collapse
if your device is rooted then navigate to "data/data/com.htc.android.mail/databases" and copy the file "mail.db". Then open given file in some program that can open sqlite database for example SQLiteStudio. Then locate the table with name "accounts" in which are the _password and _outpassword values obfuscated in a way that was described above. If your device is not rooted, then you can extract the file through ADB backup.
nice one bro
ell3 said:
I found this with google from another forum, password could be stored in
/data/data/com.google.android.gm/database/gmail.db
and related files to google account in
Code:
/data/system/accounts.db
/data/system/sync/accounts.xml
/data/data/com.google.android.gm/databases/gmail.db
/data/data/com.google.android.providers.calendar/databases/calendar.db
/data/data/com.google.android.providers.gmail/databases/mailstore.#######@gmail.com.db
/data/data/com.google.android.providers.talk/databases/talk.db
/data/data/com.google.android.providers.subscribedfeeds/databases/subscribedfeeds.db
Haven't tried myself cause I have no account of any type, so I dont know if passwords are plain text or hashed...
If this fails, I can share you my method anyway:
Connect both your PC and phone to the same home wifi network.
Install a POP3 server on your PC (ok this could be a pain in the @ss, I give you a hint on a easy one: Argo Mail server)
Activate and run it, then take your PCs IP (let's say it's 192.168.0.2)
Edit your Gmail account from the phone, and change the server from gmail's to 192.168.0.2, edit the ports and set it to use POP and plain authentication without encryption (default port should be 110).
Check your mail from the phone ! You just hijacked your credentials from the gmails secure server to your home mail server, that will of course give you an error because there is no account for that address. But you are then able to intercept the password because it's sent as plain text !! And should work for any email address, as long as you are able to edit the server address in the mailbox settings.
Just don't use it to bash into ur GFs email
Click to expand...
Click to collapse
mate in defalt email in glacsy s5 i just used imap insted of pop but gave me no security options and boom wiershark i was going to try ssl srtip or some **** u saved me the head ake thanks bro
Hello I bump this old thread I got similar Problems. I wonder if there is an app that can do this job?
Tks!!!!
CuberX said:
if your device is rooted then navigate to "data/data/com.htc.android.mail/databases" and copy the file "mail.db". Then open given file in some program that can open sqlite database for example SQLiteStudio. Then locate the table with name "accounts" in which are the _password and _outpassword values obfuscated in a way that was described above. If your device is not rooted, then you can extract the file through ADB backup.
Click to expand...
Click to collapse
Thats works!!!!! Thanks so much!!!!!
Can anyone help me, I lost my yahoo mail password, i cant recovery because is a old account and the number that they have on file is from another country , im been looking for help everyone, i have the email on my android phone but i dont receive mail for some reason, i try to reade the database of the samsung.mail but all i see is the email that im trying to recovery and at the password field i see a code encryted i think . 4fLOS0UXlNkBh1Uc8kDW6g== ..
how do i decrypt that no idea someone help i really need this email back

Categories

Resources