Anything related to computer forensics (new section!)
Post a reply

Android MTP Mode

March 29th, 2014, 9:41

Dear Guru`s

As an update for Android Mobile Phones which uses the MTP Protocol for File Transfer.

Case Problem:

the problem with this damn MTP is that you cannot access the mobile phone as a Drive Letter in order to SCAN the Internal/External Memory
using any third-party app.

...

Well as for NOW, and ITS TESTED on Samsung Galaxy S3, Note II
am able to read both Memories Internal/External as drive letters (after some Modifications of course)

and STABLE ACCESS - NO CRASHES....

After 2 months of research, i built my own Customized VM OS to handle such cases for Data Recoveries.

As for now,

I will test it after taking few images/video files into Internal Phone Memory
and Factory-Reset the phone, and see if am able to retrieve those Deleted files or not? which will take some time to test to cover all options.

Just to let you know that its possible to MOUNT, and IMAGE DUMP the internal Memory.

Thank you

will update you soon with the latest....

:horse: :horse: :smokers:

Many Thnx for those who helped me on Bugs/Crashes:

- Dominic
- Matt
- Andrew

(Linux Developers Team - M-Force)

Re: Android MTP Mode

April 7th, 2014, 18:31

yes, int memory do not mount as ext memory and for a regular datarecovery software or your own scantool to work you need to image the int memory and because MTP mode you dont have access to it and therefore can not be scanned.

i also know how to do dump the int memory, lots of steps, but works.

Great work anyway m8.

/eazycut

Re: Android MTP Mode

April 8th, 2014, 5:32

What is android MTP mode do anyone teach me what is it and the function of it because I'm quite aware of it.

Re: Android MTP Mode

April 8th, 2014, 6:21

http://droider.eu/2013/11/09/what-is-mtp/

Re: Android MTP Mode

April 8th, 2014, 13:49

eazycut wrote:yes, int memory do not mount as ext memory and for a regular datarecovery software or your own scantool to work you need to image the int memory and because MTP mode you dont have access to it and therefore can not be scanned.

i also know how to do dump the int memory, lots of steps, but works.

Great work anyway m8.

/eazycut



Well, we managed to short those long steps into 2 or 3 only
it works, but still not stable 100%

Still on it

:wink:

Re: Android MTP Mode

April 8th, 2014, 19:47

There has already been work to access filesytems for read/write on MTP mode usb devices. I cant remember the project I played with.. and playing with phones is kind of a "get a small win on a certain technology after months of work, then some project comes out that does everything you worked on - much better and easier... then a new technology comes out, rinse repeat" scenario.

Great for the interesting fun work, but not so much for the bank account.. unless you charge ridiculous amounts because people have no other option.

Bu we do need people to work on it and I hope you can continue to get your project refined and can make you some money. I know how much fun it is to work on projects like this and envy you for having the means and time to do it!

Are you going to share any of the details?


cheers

Re: Android MTP Mode

May 6th, 2015, 6:04

Hi,

Sounds very intriguing...Any updates on this?

I'd like to know if there's a way to get past the MTP on an Android mobile and create a sector-by-sector image of the phone's internal hard drive?

Thanks!

Re: Android MTP Mode

May 6th, 2015, 6:13

einstein9 wrote:Dear Guru`s

As an update for Android Mobile Phones which uses the MTP Protocol for File Transfer.

Case Problem:

the problem with this damn MTP is that you cannot access the mobile phone as a Drive Letter in order to SCAN the Internal/External Memory
using any third-party app.

...

Well as for NOW, and ITS TESTED on Samsung Galaxy S3, Note II
am able to read both Memories Internal/External as drive letters (after some Modifications of course)

and STABLE ACCESS - NO CRASHES....

After 2 months of research, i built my own Customized VM OS to handle such cases for Data Recoveries.

As for now,

I will test it after taking few images/video files into Internal Phone Memory
and Factory-Reset the phone, and see if am able to retrieve those Deleted files or not? which will take some time to test to cover all options.

Just to let you know that its possible to MOUNT, and IMAGE DUMP the internal Memory.

Thank you

will update you soon with the latest....

:horse: :horse: :smokers:

Many Thnx for those who helped me on Bugs/Crashes:

- Dominic
- Matt
- Andrew

(Linux Developers Team - M-Force)


:good: nice work, looking forward for updates.

Re: Android MTP Mode

May 6th, 2015, 7:32

Its been a year, no updates. Not sure how relevant it would be now though
Post a reply