hashcat Forum
huawei p9 lite destroyed but i get emmc image :) - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: huawei p9 lite destroyed but i get emmc image :) (/thread-7093.html)



huawei p9 lite destroyed but i get emmc image :) - bartek1983 - 12-08-2017

Hi
I drowned my phone, it was in services but it was found that it was not possible to repair it. But i read emmc, unfortunately, data partition is encrypted by the systemSad So I start to searching and find You. I read fotter from emmc image "aes-esiv..."
Can You help me and told me where is encryptedkey and salt(i'm not sure) ? And how to get my data ?? Please help me... it is possible ?


encrypted key starts from 3a3dfc068  end  3a3dfc087 ?
salt start 3a3dfc098 end 3a3dfc0a7 ?

Please help me ..
best regards


RE: huawei p9 lite destroyed but i get emmc image :) - royce - 12-08-2017

I am not familiar with how encryption is done on these phones, but here's an example for a different phone.

https://hashcat.net/forum/thread-2202.html


RE: huawei p9 lite destroyed but i get emmc image :) - bartek1983 - 12-08-2017

I think this is for pin extraction.
I need decrypt FDE (Full disk encryption) patittion data.


RE: huawei p9 lite destroyed but i get emmc image :) - bartek1983 - 12-09-2017

ok these addresses what I post are correct
encrypted key 256bit salt 128bit
what command should i put in hashcat ?


RE: huawei p9 lite destroyed but i get emmc image :) - bartek1983 - 12-09-2017

uncle google also find santoku for me but I get error...
Can I decge encryptedkey in hashcat ?


RE: huawei p9 lite destroyed but i get emmc image :) - bartek1983 - 12-09-2017

7EAD2DB6BCB3178FCBE7E8260C8ACE82F2DF69AC343B3CB45D79663DB464E69D:67096C48D0B85B33707F161B961C6598


RE: huawei p9 lite destroyed but i get emmc image :) - bartek1983 - 12-09-2017

how to decrypt key ? I have hascatgui what parameters should I use
regards


RE: huawei p9 lite destroyed but i get emmc image :) - bartek1983 - 12-09-2017

charset ?a
mask ?1?1?1?1?1?1?1?1
it is enough ?