Galaxy S5 - SM-G900...
 
Notifications
Clear all

Galaxy S5 - SM-G900A

4 Posts
3 Users
0 Likes
395 Views
(@the_grinch)
Posts: 136
Estimable Member
Topic starter
 

Any ideas on how I can bypass the lock password on this device? We were able to obtain a physical acquisition of the device, but believe a third party app might have been used to store what we are looking for. Android version 5.0 is on the device and it appears there is no method for loading an alternative ROM (such as TWRP).

I've grabbed the sha and salt, which I have been running through hashcat, but at this point with a single GPU I am looking at 81 days for an 8 character password (it could be longer). The user was logging in via fingerprint, but the phone is now requesting a password.

Any assistance would be appreciated.

 
Posted : 13/04/2017 9:50 am
SamBrown
(@sambrown)
Posts: 97
Trusted Member
 

Why can't you use Odin to flash TWRP? Is Reactivation Lock enabled?

 
Posted : 13/04/2017 10:44 am
OxygenForensics
(@oxygenforensics)
Posts: 143
Estimable Member
 

This particular device model is supported by our physical method via custom forensic recovery. This method allows to bypass screen lock and create a full physical dump. Maybe the third-party app you are interested in will be among the apps that Oxygen Forensic Detective supports. So you will be able to parse user data from this app.

 
Posted : 13/04/2017 1:06 pm
(@the_grinch)
Posts: 136
Estimable Member
Topic starter
 

Happy to report I obtained the password! With the physical extraction we already had I was able to get the device_policies.xml (I was looking in the wrong place initially) and determine the password length and makeup. After that, our physical had extracted a password used for another account and they matched up.

Thanks for the assistance!

 
Posted : 13/04/2017 8:15 pm
Share: