Kev rho tawm cov ntaub ntawv los ntawm cov khoom siv hauv Android yog qhov nyuaj dua txhua hnub - qee zaum txawm tias tshaj los ntawm iPhone. Igor Mikhailov, tus kws tshaj lij ntawm Group-IB Computer Forensics Laboratory, qhia koj yuav ua li cas yog tias koj tsis tuaj yeem rho tawm cov ntaub ntawv los ntawm koj lub xov tooj Android siv cov txheej txheem txheem.
Ob peb xyoos dhau los, kuv cov npoj yaig thiab kuv tau sib tham txog cov xwm txheej hauv kev txhim kho cov txheej txheem kev ruaj ntseg hauv Android thiab tuaj txog qhov xaus tias lub sijhawm yuav los txog thaum lawv qhov kev tshawb nrhiav kev tshawb fawb yuav nyuaj dua li rau iOS no. Thiab niaj hnub no peb tuaj yeem hais nrog kev ntseeg siab tias lub sijhawm no tau los.
Tsis ntev los no kuv tau tshuaj xyuas Huawei Honor 20 Pro. Koj xav li cas peb tau tswj kom rho tawm los ntawm nws cov ntaub ntawv thaub qab tau los ntawm kev siv ADB? Tsis muaj dab tsi! Cov cuab yeej muaj tag nrho cov ntaub ntawv: hu xov tooj, phau ntawv xov tooj, SMS, instant messaging, email, multimedia ntaub ntawv, thiab lwm yam. Thiab koj tsis tuaj yeem tau txais ib qho ntawm qhov no tawm. Txaus ntshai heev!
Yuav ua li cas rau qhov xwm txheej zoo li no? Ib qho kev daws teeb meem zoo yog siv cov khoom siv hluav taws xob thaub qab (Mi PC Suite rau Xiaomi smartphones, Samsung Smart Hloov rau Samsung, HiSuite rau Huawei).
Hauv tsab xov xwm no peb yuav saib txog kev tsim thiab rho tawm cov ntaub ntawv los ntawm Huawei smartphones siv HiSuite cov nqi hluav taws xob thiab lawv cov kev soj ntsuam tom qab siv Belkasoft Evidence Center.
Hom ntaub ntawv twg suav nrog hauv HiSuite thaub qab?
Cov ntaub ntawv hauv qab no suav nrog hauv HiSuite thaub qab:
- cov ntaub ntawv hais txog nyiaj thiab passwords (los yog tokens)
- hu
- kev sib tw
- SMS thiab MMS lus
- multimedia ntaub ntawv
- Database
- cov ntaub ntawv
- cov ntaub ntawv
- daim ntawv thov cov ntaub ntawv (cov ntaub ntawv nrog extensions.odex, .so, .apk)
- cov ntaub ntawv los ntawm cov ntawv thov (xws li Facebook, Google Drive, Google Duab, Google Mail, Google Maps, Instagram, WhatsApp, YouTube, thiab lwm yam)
Cia peb saib kom ntxaws ntxiv ntawm yuav ua li cas cov thaub qab no tsim thiab yuav tshuaj xyuas nws li cas siv Belkasoft Evidence Center.
Thaub qab lub Huawei smartphone siv HiSuite utility
Txhawm rau tsim cov ntawv luam theej tawm nrog cov khoom siv ntiag tug, koj yuav tsum rub tawm nws los ntawm lub vev xaib thiab nruab.
HiSuite download nplooj ntawm Huawei lub vev xaib:
Txhawm rau txuas lub cuab yeej nrog lub khoos phis tawj, HDB (Huawei Debug Choj) yog siv. Muaj cov lus qhia ntxaws ntxaws ntawm Huawei lub vev xaib lossis hauv HiSuite program nws tus kheej yuav ua li cas qhib HDB hom ntawm koj lub xov tooj ntawm tes. Tom qab ua kom HDB hom, tso lub HiSuite daim ntawv thov ntawm koj lub xov tooj ntawm tes thiab nkag mus rau cov cai tso tawm hauv daim ntawv thov no rau hauv HiSuite program qhov rais khiav hauv koj lub computer.
Code nkag qhov rais hauv desktop version ntawm HiSuite:
Thaum lub sijhawm thaub qab, koj yuav raug nug kom nkag mus rau tus password, uas yuav raug siv los tiv thaiv cov ntaub ntawv rho tawm ntawm lub cim xeeb ntaus ntawv. Daim ntawv luam theej tawm uas tau tsim yuav nyob ntawm txoj kev C:/Users/%User profile%/Documents/HiSuite/backup/.
Huawei Honor 20 Pro smartphone thaub qab:
Txheeb xyuas HiSuite thaub qab siv Belkasoft Evidence Center
Txhawm rau txheeb xyuas qhov tshwm sim thaub qab siv tsim kev lag luam tshiab. Ces xaiv raws li cov ntaub ntawv qhov chaw Duab txawb. Π ΠΎΡΠΊΡΡΠ²ΡΠ΅ΠΌΡΡ ΠΌΠ΅Π½Ρ ΡΠΊΠ°ΠΆΠΈΡΠ΅ ΠΏΡΡΡ Π΄ΠΎ ΠΊΠ°ΡΠ°Π»ΠΎΠ³Π°, Π³Π΄Π΅ ΡΠ°Π·ΠΌΠ΅ΡΠ°Π΅ΡΡΡ ΡΠ΅Π·Π΅ΡΠ²Π½Π°Ρ ΠΊΠΎΠΏΠΈΡ ΡΠΌΠ°ΡΡΡΠΎΠ½Π°, ΠΈ Π²ΡΠ±Π΅ΡΠΈΡΠ΅ ΡΠ°ΠΉΠ» info.xml ib.
Qhia meej txog txoj hauv kev rau thaub qab:
Nyob rau hauv lub qhov rais tom ntej no, qhov kev pab cuam yuav kom koj xaiv hom artifacts uas koj yuav tsum nrhiav. Tom qab pib lub scan, mus rau lub tab Task Manager thiab nias lub pob Configure ua haujlwm, vim hais tias qhov kev pab cuam xav kom tus password rau decrypt lub encrypted thaub qab.
khawm Configure ua haujlwm:
Tom qab decrypting lub thaub qab, Belkasoft Evidence Center yuav hais kom koj rov hais dua cov hom khoom cuav uas yuav tsum tau muab rho tawm. Tom qab kev txheeb xyuas tiav lawm, cov ntaub ntawv hais txog cov khoom qub uas tau muab rho tawm tuaj yeem pom hauv tabs Case Explorer ΠΈ Txheej txheem cej luam .
Huawei Honour 20 Pro thaub qab tsom xam cov txiaj ntsig:
Kev tshuaj xyuas ntawm HiSuite thaub qab siv Mobile Forensic Expert program
Lwm qhov kev pabcuam forensic uas tuaj yeem siv los rho tawm cov ntaub ntawv los ntawm HiSuite thaub qab yog .
Txhawm rau ua cov ntaub ntawv khaws cia hauv HiSuite thaub qab, nyem rau ntawm qhov kev xaiv Importing thaub qab nyob rau hauv lub qhov rais program loj.
Fragment ntawm lub qhov rais loj ntawm "Mobile Forensic Expert" program:
Los yog hauv seem Ntshuam xaiv hom ntaub ntawv rau import Huawei thaub qab:
Hauv qhov rai uas qhib, qhia txoj hauv kev rau cov ntaub ntawv info.xml ib. Thaum koj pib cov txheej txheem rho tawm, lub qhov rai yuav tshwm sim uas koj yuav raug nug kom nkag mus rau tus password paub los txiav txim siab HiSuite thaub qab, lossis siv cov cuab yeej Passware los sim twv tus password no yog tias nws tsis paub:
Qhov tshwm sim ntawm kev tsom xam ntawm daim ntawv theej thaub qab yuav yog "Mobile Forensic Expert" qhov rai program, uas qhia cov hom khoom siv rho tawm: hu, hu, hu, lus, cov ntaub ntawv, kev tshwm sim pub, cov ntaub ntawv thov. Them mloog mus rau tus nqi ntawm cov ntaub ntawv muab rho tawm los ntawm ntau daim ntawv thov los ntawm qhov kev pab cuam forensic. Nws tsuas yog loj!
Cov npe ntawm cov ntaub ntawv rho tawm los ntawm HiSuite thaub qab hauv Mobile Forensic Expert program:
Π Π°ΡΡΠΈΡΡΠΎΠ²ΠΊΠ° ΡΠ΅Π·Π΅ΡΠ²Π½ΡΡ
ΠΊΠΎΠΏΠΈΠΉ HiSuite
Yuav ua li cas yog tias koj tsis muaj cov kev pab cuam zoo? Hauv qhov no, Python tsab ntawv tsim thiab tswj hwm los ntawm Francesco Picasso, tus neeg ua haujlwm ntawm Reality Net System Solutions, yuav pab koj. Koj tuaj yeem nrhiav tau tsab ntawv no ntawm , thiab nws cov lus piav qhia ntxaws ntxiv nyob hauv "Huawei thaub qab decryptor."
Lub decrypted HiSuite thaub qab tuaj yeem raug xa tawm thiab tshuaj xyuas siv cov khoom siv hluav taws xob classic (xws li. ) los yog manually.
tshawb pom
Yog li, siv HiSuite thaub qab siv hluav taws xob, koj tuaj yeem rho tawm qhov kev txiav txim siab ntau cov ntaub ntawv los ntawm Huawei smartphones dua li thaum rho tawm cov ntaub ntawv los ntawm tib lub cuab yeej siv ADB qhov hluav taws xob. Txawm hais tias muaj ntau qhov kev siv hluav taws xob rau kev ua haujlwm nrog cov xov tooj ntawm tes, Belkasoft Evidence Center thiab Mobile Forensic Expert yog ib qho ntawm ob peb txoj haujlwm forensic uas txhawb nqa kev rho tawm thiab tshuaj xyuas ntawm HiSuite thaub qab.
Cov chaw
Tau qhov twg los: www.hab.com