hashcat Forum › Support › hashcat v
Huawei Safebox

Threaded Mode
Huawei Safebox
dekao Offline
Junior Member
**
Posts: 4
Threads: 2
Joined: Feb 2021
#1
02-17-2021, 08:12 AM (This post was last modified: 02-17-2021, 12:46 PM by dekao.)
Hello guys, does anyone know what hash type are used in the Huawei Safebox function on Android Huawei devices?
Is it the 4711 (Huawei sha1(md5($pass).$salt)) can anyione tell?
The datebase msb.db holds the hash safe.

Best
Find
Reply
buka Offline
Member
***
Posts: 60
Threads: 0
Joined: Dec 2022
#2
09-20-2024, 04:57 PM (This post was last modified: 09-20-2024, 04:58 PM by buka.)
(02-17-2021, 08:12 AM)dekao Wrote: Hello guys, does anyone know what hash type are used in the Huawei Safebox function on Android Huawei devices?
Is it the 4711 (Huawei sha1(md5($pass).$salt)) can anyione tell?
The datebase msb.db holds the hash safe.

Best


They rolled up their own encryption scheme for this. I recently recovered two passwords from two "Safes" from an old Huawei Honor 6X after much reverse engineering.
Find
Reply
Bielecki Offline
Junior Member
**
Posts: 1
Threads: 0
Joined: Jul 2025
#3
07-28-2025, 06:52 PM
(09-20-2024, 04:57 PM)buka Wrote: I recently recovered two passwords from two "Safes" from an old Huawei Honor 6X after much reverse engineering.

Hi, would you mind sharing your experience? 

I have a backup of the safe with a lost password from a Huawei P10 Lite. I still have the device, but it has been already factory reset - still recognises the safe though. I've pulled the apk, decompiled it and found some clues about db structure and encryption methods, but as I'm more of a sysadmin than a programmer, I've got pretty stuck while applying that knowledge to hashcat.

Thanks in advance
Find
Reply