ScoobyNet.com - Subaru Enthusiast Forum

ScoobyNet.com - Subaru Enthusiast Forum (https://www.scoobynet.com/)
-   Computer & Technology Related (https://www.scoobynet.com/computer-and-technology-related-34/)
-   -   Anyone interested in data recovery from damaged mobiles? (https://www.scoobynet.com/computer-and-technology-related-34/544825-anyone-interested-in-data-recovery-from-damaged-mobiles.html)

BuRR 18 September 2006 10:54 PM

Anyone interested in data recovery from damaged mobiles?
 
Just interested. I've developed a method for doing this on Nokia handsets, maybe other makes to follow.

DemonDave 18 September 2006 11:29 PM

sounds interesting - been reading up on the recovery of old text messages from sims - is this similar ?

David_Wallis 18 September 2006 11:33 PM

No, but I could do with a favour, which you owe ;)

David

BuRR 19 September 2006 11:24 AM

What type of phone, David?

this technique can recover data from old phones with no SIM/battery - even those that won't turn on!

DemonDave 19 September 2006 01:33 PM

it was a challenge set to recover a deleted txt message from a sim on a nokia 6230i - managed to do it, but then again it was not well "removed".

came across a couple of interesting bits of software

http://tulp2g.sourceforge.net/ - could not get it working but looked interesting

but borrowed a sim reader and this http://vidstrom.net/stools/undeletesms/ txt recovered no problem.

My main interest is now how many company phones are we giving away with potential dangerous information on (including blackberries)

Dave.

BuRR 19 September 2006 02:31 PM

TULP is software developed by the Dutch Forensic Institute - I have contact with the author.

My method analyses handset data (not SIM). It's commonly known that the SIM card has a finite number of locations where it can store SMS and (like windows filesystems) when they are deleted they are *not always* erased fully - just the "active" flag removed. These slots do become available for new messages to drop into, however, so as long as no new messages have arrived then you have a very high probability of retrieving the data assuming the handset writes the SMS data to the SIM and not its own internal memory.

Phonebase2, SIMCon, MOBILedit!, XRY, USIM Detective are all similar SIM/USIM software apps that can do this job.

As for handset data, and "dead" handsets at that, there's next to nothing that can retrieve (and decrypt) this data. Not yet, anyway ;)

hutton_d 19 September 2006 03:27 PM


Originally Posted by BuRR
As for handset data, and "dead" handsets at that, there's next to nothing that can retrieve (and decrypt) this data. Not yet, anyway ;)

When I upgrade I sell the old one on Ebay. All my contacts are in the phone (sync with Outlook so no need to retrieve stuff from my phone) and I do a 'factory reset' before it goes. Do you think you can get stuff back from a phone like this?

Asking 'cos I was wondering if the buyer could retrieve anything?

Cheers

Dave

BuRR 19 September 2006 04:58 PM

The only way to get rid of a handset's data is to burn it. (or shred it) - the factory reset is fine for the most of the time, but there is still data held in the NAND memory.

For the majority of people, however, a factory reset will prevent them gaining access to the data - however there are procedures that can access data that was previously considered to be deleted.

As an example, I recently recovered 2000 SMS messages from the NAND memory of a Samsung SGH-D500, and also 50+ deleted images from a Sony Ericsson T610

STi wanna Subaru 19 September 2006 06:59 PM

A lass I know sold a phone on ebay and forgot to delete the video of her giving her then bf a blow job.......

She got excellent feedback! :D

Poleyr 14 June 2007 05:38 PM

I would like to recover delete sms message from the NAND memory of a Sony Ericsson T630. I didn't get result with Tulp2g.
Is there any way to do it ?

kingofturds 14 June 2007 08:27 PM

Thread from the DEAD:D

BuRR 14 June 2007 11:29 PM

woah.

You need a UFS box, or SETool, and carve the data looking for the PDU that contains the SMS.... (OR find someone who has one)

You need to appreciate that the SMS alphabet is effectively a 128 character (7-bit) alphabet, arranged rather weirdly in 8-bit chunks - thus allowing 160 characters to be sent in 140 bytes.

sorry.... didn't realise you'd all dropped off to sleep mid-post :D :D

BuRR 14 June 2007 11:33 PM

..just a quick one from above. In sony Ericsson phones, the SMS may not be in the NAND, rather in the GDFS area of memory which is set aside for user data (call logs, address book, sms etc) - its suck it and see on a per-handset basis I'm afraid.

One way of searching through the file you may have, is with a good hex editor (winhex for example) and search for your phone number (sender/recipient) in a reverse-nibbled format - search the hex byte values rather than the ascii content.

an example - +447976134768 will be stored 91 44 97 67 31 74 86

badcompany 15 June 2007 12:02 AM


Originally Posted by kingofturds (Post 7021696)
Thread from the DEAD:D

true but intresting none the less :)

dattatathele 10 May 2009 11:24 AM


Originally Posted by BuRR (Post 6172827)
Just interested. I've developed a method for doing this on Nokia handsets, maybe other makes to follow.

Is it possible really? i want to recover My Nokia 6230i
Can i get help from you all my dear friends..? I will be very Thank full of you all.....

DemonDave 10 May 2009 11:38 AM


Originally Posted by kingofturds (Post 7021696)
Thread from the DEAD:D

x 2 :cool:

dattatathele 10 May 2009 11:56 AM


Originally Posted by DemonDave (Post 8693902)
x 2 :cool:

What it mean Dave?
may i know how to do this recovery?
Thanks in advance...

DemonDave 10 May 2009 12:15 PM

Just means this thread is nearly 3 yrs old !

Burr is your man

dattatathele 10 May 2009 12:30 PM


Originally Posted by DemonDave (Post 6174156)
it was a challenge set to recover a deleted txt message from a sim on a nokia 6230i - managed to do it, but then again it was not well "removed".

came across a couple of interesting bits of software

TULP2G project website - could not get it working but looked interesting

but borrowed a sim reader and this vidstrom.net - security tools txt recovered no problem.

My main interest is now how many company phones are we giving away with potential dangerous information on (including blackberries)

Dave.

But you have recovered data from Nokia 6230i then just let me know that procedure buddy i will be very Thankfull of you... i have already installed TULP2G and .net frame what to do next?

dattatathele 10 May 2009 02:36 PM

Hay buddy please help me out yar.....


All times are GMT +1. The time now is 12:46 PM.


© 2024 MH Sub I, LLC dba Internet Brands