Here is the partition list from the Oneplus 3. Who is interested...
Code:
C:\Users\cargo>adb shell
[email protected]:/ $ su
su
[email protected]:/ # ls -al /dev/block/platform/soc/624000.ufshc/by-name
ls -al /dev/block/platform/soc/624000.ufshc/by-name
lrwxrwxrwx root root 1970-01-20 15:04 LOGO -> /dev/block/sde17
lrwxrwxrwx root root 1970-01-20 15:04 aboot -> /dev/block/sde15
lrwxrwxrwx root root 1970-01-20 15:04 abootbak -> /dev/block/sde16
lrwxrwxrwx root root 1970-01-20 15:04 apdp -> /dev/block/sde30
lrwxrwxrwx root root 1970-01-20 15:04 bluetooth -> /dev/block/sde23
lrwxrwxrwx root root 1970-01-20 15:04 boot -> /dev/block/sde18
lrwxrwxrwx root root 1970-01-20 15:04 boot_aging -> /dev/block/sde19
lrwxrwxrwx root root 1970-01-20 15:04 cache -> /dev/block/sda3
lrwxrwxrwx root root 1970-01-20 15:04 cdt -> /dev/block/sdd2
lrwxrwxrwx root root 1970-01-20 15:04 cmnlib -> /dev/block/sde26
lrwxrwxrwx root root 1970-01-20 15:04 cmnlib64 -> /dev/block/sde28
lrwxrwxrwx root root 1970-01-20 15:04 cmnlib64bak -> /dev/block/sde29
lrwxrwxrwx root root 1970-01-20 15:04 cmnlibbak -> /dev/block/sde27
lrwxrwxrwx root root 1970-01-20 15:04 config -> /dev/block/sda14
lrwxrwxrwx root root 1970-01-20 15:04 ddr -> /dev/block/sdd3
lrwxrwxrwx root root 1970-01-20 15:04 devcfg -> /dev/block/sda6
lrwxrwxrwx root root 1970-01-20 15:04 devcfgbak -> /dev/block/sda7
lrwxrwxrwx root root 1970-01-20 15:04 devinfo -> /dev/block/sde22
lrwxrwxrwx root root 1970-01-20 15:04 dip -> /dev/block/sde13
lrwxrwxrwx root root 1970-01-20 15:04 dpo -> /dev/block/sde32
lrwxrwxrwx root root 1970-01-20 15:04 dsp -> /dev/block/sde12
lrwxrwxrwx root root 1970-01-20 15:04 frp -> /dev/block/sda8
lrwxrwxrwx root root 1970-01-20 15:04 fsc -> /dev/block/sdf3
lrwxrwxrwx root root 1970-01-20 15:04 fsg -> /dev/block/sde7
lrwxrwxrwx root root 1970-01-20 15:04 hyp -> /dev/block/sde5
lrwxrwxrwx root root 1970-01-20 15:04 hypbak -> /dev/block/sde6
lrwxrwxrwx root root 1970-01-20 15:04 keymaster -> /dev/block/sde24
lrwxrwxrwx root root 1970-01-20 15:04 keymasterbak -> /dev/block/sde25
lrwxrwxrwx root root 1970-01-20 15:04 keystore -> /dev/block/sda5
lrwxrwxrwx root root 1970-01-20 15:04 md5 -> /dev/block/sdf4
lrwxrwxrwx root root 1970-01-20 15:04 mdtp -> /dev/block/sde14
lrwxrwxrwx root root 1970-01-20 15:04 misc -> /dev/block/sda4
lrwxrwxrwx root root 1970-01-20 15:04 modem -> /dev/block/sde11
lrwxrwxrwx root root 1970-01-20 15:04 modemst1 -> /dev/block/sdf1
lrwxrwxrwx root root 1970-01-20 15:04 modemst2 -> /dev/block/sdf2
lrwxrwxrwx root root 1970-01-20 15:04 msadp -> /dev/block/sde31
lrwxrwxrwx root root 1970-01-20 15:04 oem_dycnvbk -> /dev/block/sda9
lrwxrwxrwx root root 1970-01-20 15:04 oem_stanvbk -> /dev/block/sda10
lrwxrwxrwx root root 1970-01-20 15:04 param -> /dev/block/sda11
lrwxrwxrwx root root 1970-01-20 15:04 persist -> /dev/block/sda2
lrwxrwxrwx root root 1970-01-20 15:04 pmic -> /dev/block/sde9
lrwxrwxrwx root root 1970-01-20 15:04 pmicbak -> /dev/block/sde10
lrwxrwxrwx root root 1970-01-20 15:04 recovery -> /dev/block/sde21
lrwxrwxrwx root root 1970-01-20 15:04 reserve -> /dev/block/sdd1
lrwxrwxrwx root root 1970-01-20 15:04 reserve1 -> /dev/block/sda12
lrwxrwxrwx root root 1970-01-20 15:04 reserve2 -> /dev/block/sda13
lrwxrwxrwx root root 1970-01-20 15:04 rpm -> /dev/block/sde1
lrwxrwxrwx root root 1970-01-20 15:04 rpmbak -> /dev/block/sde2
lrwxrwxrwx root root 1970-01-20 15:04 sec -> /dev/block/sde8
lrwxrwxrwx root root 1970-01-20 15:04 splash -> /dev/block/sde33
lrwxrwxrwx root root 1970-01-20 15:04 ssd -> /dev/block/sda1
lrwxrwxrwx root root 1970-01-20 15:04 sti -> /dev/block/sde34
lrwxrwxrwx root root 1970-01-20 15:04 system -> /dev/block/sde20
lrwxrwxrwx root root 1970-01-20 15:04 tz -> /dev/block/sde3
lrwxrwxrwx root root 1970-01-20 15:04 tzbak -> /dev/block/sde4
lrwxrwxrwx root root 1970-01-20 15:04 userdata -> /dev/block/sda15
lrwxrwxrwx root root 1970-01-20 15:04 xbl -> /dev/block/sdb1
lrwxrwxrwx root root 1970-01-20 15:04 xblbak -> /dev/block/sdc1
[email protected]:/ #
or without partition names
Code:
[email protected]:/ # cat /proc/partitions
cat /proc/partitions
major minor #blocks name
7 0 98304 loop0
8 16 4096 sdb
8 17 4052 sdb1
8 0 56582144 sda
8 1 8 sda1
8 2 32768 sda2
8 3 262144 sda3
8 4 1024 sda4
8 5 512 sda5
8 6 128 sda6
8 7 128 sda7
8 8 512 sda8
8 9 10240 sda9
8 10 10240 sda10
8 11 1024 sda11
8 12 8096 sda12
8 13 16192 sda13
8 14 512 sda14
8 15 56238572 sda15
8 48 131072 sdd
8 49 32 sdd1
8 50 4 sdd2
8 51 1024 sdd3
8 64 4194304 sde
8 65 512 sde1
8 66 512 sde2
8 67 2048 sde3
8 68 2048 sde4
8 69 512 sde5
8 70 512 sde6
8 71 2048 sde7
8 72 16 sde8
8 73 512 sde9
8 74 512 sde10
8 75 97280 sde11
8 76 16384 sde12
8 77 1024 sde13
8 78 32768 sde14
8 79 8192 sde15
259 0 8192 sde16
259 1 16384 sde17
259 2 65536 sde18
259 3 65536 sde19
259 4 3080192 sde20
259 5 65536 sde21
259 6 4 sde22
259 7 1024 sde23
259 8 512 sde24
259 9 512 sde25
259 10 256 sde26
259 11 256 sde27
259 12 256 sde28
259 13 256 sde29
259 14 256 sde30
259 15 256 sde31
259 16 4 sde32
259 17 33424 sde33
259 18 2048 sde34
8 32 4096 sdc
8 33 4052 sdc1
8 80 1572864 sdf
8 81 2048 sdf1
8 82 2048 sdf2
8 83 4 sdf3
8 84 512 sdf4
254 0 56238556 dm-0
[email protected]:/ #
cargobr151 said:
I'm trying to find partition name of my OnePlus 3T device to copy its raw disk file in PC. I've been trying since several days. I always stuck on finding partition name of my device.
i have tried diskinfo and many codes that I found randomly on xda but cannot retrieve Oneplus 3T partition name. any help?
Click to expand...
Click to collapse
Related
Here is the partition layout on the US Unlocked HTC 10 PMEWL
Code:
ls -al /dev/block/platform/soc/7464900.sdhci/by-name
lrwxrwxrwx root root 1970-01-30 18:16 aboot -> /dev/block/mmcblk0p10
lrwxrwxrwx root root 1970-01-30 18:16 adsp -> /dev/block/mmcblk0p31
lrwxrwxrwx root root 1970-01-30 18:16 apdp -> /dev/block/mmcblk0p18
lrwxrwxrwx root root 1970-01-30 18:16 apppreload -> /dev/block/mmcblk0p65
lrwxrwxrwx root root 1970-01-30 18:16 board_info -> /dev/block/mmcblk0p1
lrwxrwxrwx root root 1970-01-30 18:16 boot -> /dev/block/mmcblk0p59
lrwxrwxrwx root root 1970-01-30 18:16 cache -> /dev/block/mmcblk0p61
lrwxrwxrwx root root 1970-01-30 18:16 carrier -> /dev/block/mmcblk0p53
lrwxrwxrwx root root 1970-01-30 18:16 cdt -> /dev/block/mmcblk0p23
lrwxrwxrwx root root 1970-01-30 18:16 cmnlib32 -> /dev/block/mmcblk0p16
lrwxrwxrwx root root 1970-01-30 18:16 cmnlib64 -> /dev/block/mmcblk0p17
lrwxrwxrwx root root 1970-01-30 18:16 cota -> /dev/block/mmcblk0p66
lrwxrwxrwx root root 1970-01-30 18:16 cradio -> /dev/block/mmcblk0p64
lrwxrwxrwx root root 1970-01-30 18:16 ddr -> /dev/block/mmcblk0p22
lrwxrwxrwx root root 1970-01-30 18:16 devcfg -> /dev/block/mmcblk0p14
lrwxrwxrwx root root 1970-01-30 18:16 devinfo -> /dev/block/mmcblk0p13
lrwxrwxrwx root root 1970-01-30 18:16 devlog -> /dev/block/mmcblk0p42
lrwxrwxrwx root root 1970-01-30 18:16 dip -> /dev/block/mmcblk0p35
lrwxrwxrwx root root 1970-01-30 18:16 dpo -> /dev/block/mmcblk0p20
lrwxrwxrwx root root 1970-01-30 18:16 dsp -> /dev/block/mmcblk0p57
lrwxrwxrwx root root 1970-01-30 18:16 extra -> /dev/block/mmcblk0p44
lrwxrwxrwx root root 1970-01-30 18:16 fataldevlog -> /dev/block/mmcblk0p41
lrwxrwxrwx root root 1970-01-30 18:16 fp -> /dev/block/mmcblk0p32
lrwxrwxrwx root root 1970-01-30 18:16 frp -> /dev/block/mmcblk0p50
lrwxrwxrwx root root 1970-01-30 18:16 fsc -> /dev/block/mmcblk0p45
lrwxrwxrwx root root 1970-01-30 18:16 fsg -> /dev/block/mmcblk0p29
lrwxrwxrwx root root 1970-01-30 18:16 hosd -> /dev/block/mmcblk0p11
lrwxrwxrwx root root 1970-01-30 18:16 hyp -> /dev/block/mmcblk0p9
lrwxrwxrwx root root 1970-01-30 18:16 keymaster -> /dev/block/mmcblk0p55
lrwxrwxrwx root root 1970-01-30 18:16 keystore -> /dev/block/mmcblk0p54
lrwxrwxrwx root root 1970-01-30 18:16 lksecapp -> /dev/block/mmcblk0p15
lrwxrwxrwx root root 1970-01-30 18:16 local -> /dev/block/mmcblk0p43
lrwxrwxrwx root root 1970-01-30 18:16 mdtp -> /dev/block/mmcblk0p34
lrwxrwxrwx root root 1970-01-30 18:16 mfg -> /dev/block/mmcblk0p2
lrwxrwxrwx root root 1970-01-30 18:16 misc -> /dev/block/mmcblk0p38
lrwxrwxrwx root root 1970-01-30 18:16 modemst1 -> /dev/block/mmcblk0p39
lrwxrwxrwx root root 1970-01-30 18:16 modemst2 -> /dev/block/mmcblk0p40
lrwxrwxrwx root root 1970-01-30 18:16 mota -> /dev/block/mmcblk0p56
lrwxrwxrwx root root 1970-01-30 18:16 msadp -> /dev/block/mmcblk0p19
lrwxrwxrwx root root 1970-01-30 18:16 persist -> /dev/block/mmcblk0p48
lrwxrwxrwx root root 1970-01-30 18:16 pg1fs -> /dev/block/mmcblk0p3
lrwxrwxrwx root root 1970-01-30 18:16 pg2fs -> /dev/block/mmcblk0p4
lrwxrwxrwx root root 1970-01-30 18:16 pmic -> /dev/block/mmcblk0p8
lrwxrwxrwx root root 1970-01-30 18:16 radio -> /dev/block/mmcblk0p30
lrwxrwxrwx root root 1970-01-30 18:16 ramdump -> /dev/block/mmcblk0p51
lrwxrwxrwx root root 1970-01-30 18:16 recovery -> /dev/block/mmcblk0p60
lrwxrwxrwx root root 1970-01-30 18:16 reserve1 -> /dev/block/mmcblk0p37
lrwxrwxrwx root root 1970-01-30 18:16 reserve2 -> /dev/block/mmcblk0p58
lrwxrwxrwx root root 1970-01-30 18:16 rfg_0 -> /dev/block/mmcblk0p24
lrwxrwxrwx root root 1970-01-30 18:16 rfg_1 -> /dev/block/mmcblk0p25
lrwxrwxrwx root root 1970-01-30 18:16 rfg_2 -> /dev/block/mmcblk0p26
lrwxrwxrwx root root 1970-01-30 18:16 rfg_3 -> /dev/block/mmcblk0p27
lrwxrwxrwx root root 1970-01-30 18:16 rfg_4 -> /dev/block/mmcblk0p28
lrwxrwxrwx root root 1970-01-30 18:16 rfg_8 -> /dev/block/mmcblk0p46
lrwxrwxrwx root root 1970-01-30 18:16 rpm -> /dev/block/mmcblk0p7
lrwxrwxrwx root root 1970-01-30 18:16 sec -> /dev/block/mmcblk0p49
lrwxrwxrwx root root 1970-01-30 18:16 skylink -> /dev/block/mmcblk0p52
lrwxrwxrwx root root 1970-01-30 18:16 slpi -> /dev/block/mmcblk0p33
lrwxrwxrwx root root 1970-01-30 18:16 sp1 -> /dev/block/mmcblk0p21
lrwxrwxrwx root root 1970-01-30 18:16 ssd -> /dev/block/mmcblk0p47
lrwxrwxrwx root root 1970-01-30 18:16 system -> /dev/block/mmcblk0p62
lrwxrwxrwx root root 1970-01-30 18:16 tool_diag -> /dev/block/mmcblk0p12
lrwxrwxrwx root root 1970-01-30 18:16 tz -> /dev/block/mmcblk0p6
lrwxrwxrwx root root 1970-01-30 18:16 userdata -> /dev/block/mmcblk0p63
lrwxrwxrwx root root 1970-01-30 18:16 venus -> /dev/block/mmcblk0p36
lrwxrwxrwx root root 1970-01-30 18:16 xbl -> /dev/block/mmcblk0p5
[email protected]_pmewl:/ #
@Ferga2790 seems to have found the answer! You can flash the Canadian H873 kdz and unlock it. Files are located here: https://forum.xda-developers.com/showpost.php?p=76312669&postcount=10. Good luck! :cyclops: :highfive:
Download mode: power off, hold vol +, plug USB cable into phone
Recovery mode: power off, hold vol - and power, plug USB cable into phone
When you select "reboot to bootloader" in the recovery main menu, it just boots up the phone as normal. ADB nor Fastboot work in either of these modes.
All partitions (after running py lglaf.py --unlock -c "!EXEC ls -la /dev/block/bootdevice/by-name ")
/dev/block/bootdevice/by-name:
total 0
drwxr-xr-x 2 root root 1380 2017-04-28 18:02 .
drwxr-xr-x 4 root root 1560 2017-04-28 18:02 ..
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 aboot -> /dev/block/sde6
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 abootbak -> /dev/block/sde7
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 apdp -> /dev/block/sde26
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 boot -> /dev/block/sde1
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 cache -> /dev/block/sda16
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 carrier -> /dev/block/sda13
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 cdt -> /dev/block/sdd3
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 cmnlib -> /dev/block/sde22
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 cmnlib64 -> /dev/block/sde24
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 cmnlib64bak -> /dev/block/sde25
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 cmnlibbak -> /dev/block/sde23
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 ddr -> /dev/block/sdd1
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 devcfg -> /dev/block/sde16
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 devcfgbak -> /dev/block/sde17
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 devinfo -> /dev/block/sdb6
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 dip -> /dev/block/sdb5
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 dpo -> /dev/block/sde28
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 drm -> /dev/block/sda4
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 eksst -> /dev/block/sda9
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 encrypt -> /dev/block/sda8
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 factory -> /dev/block/sda7
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 fota -> /dev/block/sdb3
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 fsc -> /dev/block/sdf3
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 fsg -> /dev/block/sdb4
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 grow -> /dev/block/sda18
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 grow2 -> /dev/block/sdb7
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 grow3 -> /dev/block/sdc3
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 grow4 -> /dev/block/sdd4
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 grow5 -> /dev/block/sde29
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 grow6 -> /dev/block/sdf4
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 grow7 -> /dev/block/sdg2
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 hyp -> /dev/block/sde12
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 hypbak -> /dev/block/sde13
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 keymaster -> /dev/block/sde20
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 keymasterbak -> /dev/block/sde21
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 keystore -> /dev/block/sda12
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 laf -> /dev/block/sda1
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 lafbak -> /dev/block/sda2
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 misc -> /dev/block/sda6
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 modem -> /dev/block/sde18
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 modemst1 -> /dev/block/sdf1
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 modemst2 -> /dev/block/sdf2
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 mpt -> /dev/block/sda3
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 msadp -> /dev/block/sde27
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 persist -> /dev/block/sda14
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 persistent -> /dev/block/sdg1
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 pmic -> /dev/block/sde14
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 pmicbak -> /dev/block/sde15
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 raw_resources -> /dev/block/sde8
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 raw_resourcesbak -> /dev/block/sde9
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 rct -> /dev/block/sda10
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 recovery -> /dev/block/sde2
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 recoverybak -> /dev/block/sde3
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 reserve -> /dev/block/sdd2
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 rpm -> /dev/block/sde10
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 rpmbak -> /dev/block/sde11
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 sec -> /dev/block/sde19
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 sns -> /dev/block/sda5
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 ssd -> /dev/block/sda11
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 system -> /dev/block/sda15
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 tz -> /dev/block/sde4
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 tzbak -> /dev/block/sde5
lrwxrwxrwx 1 root root 16 2017-04-28 18:02 userdata -> /dev/block/sda17
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 xbl -> /dev/block/sdb1
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 xbl2 -> /dev/block/sdc1
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 xbl2bak -> /dev/block/sdc2
lrwxrwxrwx 1 root root 15 2017-04-28 18:02 xblbak -> /dev/block/sdb2
User @l33tlinuxh4x0r has gotten Download Mode to somewhat work with a modified lglaf, as seen in this post.
Thanks to @Flippy125 for explaining how to access Download Mode in this thread.
Reserved
I have gotten download mode to work somewhat using lglaf.py from this post located here
I am using windows 10 pro
Python 3.6
and the above file.
I have managed to get ls and lsmod commands working.
lsof and lsusb also work.
examples are:
Code:
python lglaf.py --unlock -c "!EXEC ls / "
python lglaf.py --unlock -c "!EXEC ls /system/bin/ "
note that there are 2 spaces between !EXEC and ls and one space after the command ending in /. Capitalization is also important.
I will work on more but I really don't want to mess up my phone.
EDIT: I forgot one of the most important things. How to get your phone to reboot back to normal. Run the following command.
Code:
python lglaf.py --unlock -c "!CTRL RSET"
Figured it out on Windows.
Mr nerd said:
Figured it out on Windows.
Click to expand...
Click to collapse
No updates afaik. I don't have a second device that I am willing to brick to test anything else, but as far as I can tell we are locked down so tight that we will probably never see root on this device unless the rooting methods change 100% and don't require filesystem access and even if that were the case root would be useless as the main reason for root is writing to the filesystem.
EDIT: IF lg allows us to root or unlocks this phone we could have root but I don't see that happening either. Also if we had a tot file for this phone we could have root access but it would be dangerous and if you change anything with it you would get a secure boot error. All we can hope for is that lg releases an engineering build or makes some other major mistake or something else leaks.
l33tlinuxh4x0r said:
No updates afaik. I don't have a second device that I am willing to brick to test anything else, but as far as I can tell we are locked down so tight that we will probably never see root on this device unless the rooting methods change 100% and don't require filesystem access and even if that were the case root would be useless as the main reason for root is writing to the filesystem.
EDIT: IF lg allows us to root or unlocks this phone we could have root but I don't see that happening either. Also if we had a tot file for this phone we could have root access but it would be dangerous and if you change anything with it you would get a secure boot error. All we can hope for is that lg releases an engineering build or makes some other major mistake or something else leaks.
Click to expand...
Click to collapse
Ahh ok ok so do you know how we could start looking for Vulns? I never understood how to debug a phone
Mr nerd said:
Ahh ok ok so do you know how we could start looking for Vulns? I never understood how to debug a phone
Click to expand...
Click to collapse
There is a site that lists all of the known vulnerabilities for linux and android but I forgot what it is. Google probably knows though. However even with a vulnerability root will probably throw an secure boot error. We need a venerability for the bootloader.
Ahh i see what you mean. Well do you know how to debug or fuzz a bootloader?
http://hexdetective.blogspot.com/2017/02/exploiting-android-s-boot-getting.html
Sent from my LG-LS993 using Tapatalk
Hi!
Possible downgrade ZVA to ZV9 or ZV6?
On old model LS996 method to write partitions: https://forum.xda-developers.com/g-flex2/development/lg-g-flex-2-ls996-zv6-sprint-5-1-1-t3169212
I dont' know what to do whith python I cant get to work I enter the codes that are in the instructions and all I get is error after error. telling me that the path is wrong but i got to that path and the file is there .
I was wondering how to create a flashable restore for the stock boot and recovery image I was exploring the partitions and this is where I got stuck(I'm aware that there are A and B partitions, but have no idea what they are(are they split across two partitions or is b a backup of a and vice versa?):
taimen:/dev/block/platform/soc/1da4000.ufshc/by-name $ ls -al .
total 0
drwxr-xr-x 2 root root 1280 1970-01-14 05:56 .
drwxr-xr-x 4 root root 1460 1970-01-14 05:56 ..
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 abl_a -> /dev/block/sde6
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 abl_b -> /dev/block/sde20
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 aes_a -> /dev/block/sda10
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 aes_b -> /dev/block/sda11
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 align_parti -> /dev/block/sda12
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 apdp -> /dev/block/sde29
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 boot_a -> /dev/block/sde8
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 boot_b -> /dev/block/sde22
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 cdt -> /dev/block/sdd1
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 cmnlib64_a -> /dev/block/sde10
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 cmnlib64_b -> /dev/block/sde24
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 cmnlib_a -> /dev/block/sde9
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 cmnlib_b -> /dev/block/sde23
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 ddr -> /dev/block/sdd2
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 devcfg_a -> /dev/block/sde11
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 devcfg_b -> /dev/block/sde25
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 devinfo -> /dev/block/sde34
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 dip -> /dev/block/sde35
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 dpo -> /dev/block/sde36
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 dtbo_a -> /dev/block/sde13
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 dtbo_b -> /dev/block/sde27
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 frp -> /dev/block/sdg1
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 fsc -> /dev/block/sdf3
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 fsg -> /dev/block/sde32
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 ftm -> /dev/block/sda6
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 hyp_a -> /dev/block/sde3
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 hyp_b -> /dev/block/sde17
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 keymaster_a -> /dev/block/sde7
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 keymaster_b -> /dev/block/sde21
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 laf_a -> /dev/block/sda1
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 laf_b -> /dev/block/sda2
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 limits -> /dev/block/sde37
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 logfs -> /dev/block/sde39
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 metadata -> /dev/block/sde41
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 misc -> /dev/block/sda5
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 modem_a -> /dev/block/sde5
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 modem_b -> /dev/block/sde19
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 modemst1 -> /dev/block/sdf1
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 modemst2 -> /dev/block/sdf2
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 msadp -> /dev/block/sde30
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 persist -> /dev/block/sda4
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 pmic_a -> /dev/block/sde4
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 pmic_b -> /dev/block/sde18
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 pstore -> /dev/block/sda9
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 rpm_a -> /dev/block/sde1
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 rpm_b -> /dev/block/sde15
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 sec -> /dev/block/sde33
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 ssd -> /dev/block/sda3
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 sti -> /dev/block/sde40
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 storsec -> /dev/block/sde31
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 system_a -> /dev/block/sda7
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 system_b -> /dev/block/sda8
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 toolsfv -> /dev/block/sde38
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 tz_a -> /dev/block/sde2
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 tz_b -> /dev/block/sde16
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 userdata -> /dev/block/sda13
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 vbmeta_a -> /dev/block/sde12
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 vbmeta_b -> /dev/block/sde26
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 vendor_a -> /dev/block/sde14
lrwxrwxrwx 1 root root 16 1970-01-14 05:56 vendor_b -> /dev/block/sde28
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 xbl_a -> /dev/block/sdb1
lrwxrwxrwx 1 root root 15 1970-01-14 05:56 xbl_b -> /dev/block/sdc1
Click to expand...
Click to collapse
There is no recovery partition on this phone. The recovery image is contained within the boot image, which is why the TWRP site has flashable installers that you can download that patch the boot images so that they contain TWRP instead of stock. A and B partitions exist for Google's automatic seamless update feature. Your phone only boots off of either A or B at any given time. If your phone is using A and a software update becomes available, the update will download and install to B, and your phone will boot the B partition on the next reboot instead of A. When a future update is released, the same process will happen with A.
So if you want to backup boot and recovery, all you need to backup is boot of the partition that your phone is currently using (TWRP can tell you which one it is using).
HTC U12+ is an A-B slot phone. There is no recovery partition, but it has boot_a and boot_b partitions, so it CAN boot to recovery mode.
Here is the partitions table from Chinese HTC U12+
Code:
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 abl_a -> /dev/block/sde9
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 abl_b -> /dev/block/sde30
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 aop_a -> /dev/block/sde1
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 aop_b -> /dev/block/sde22
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 apdp -> /dev/block/sde46
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 avb_rec -> /dev/block/sde56
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 bluetooth_a -> /dev/block/sde6
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 bluetooth_b -> /dev/block/sde27
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 board_info -> /dev/block/sdf1
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 boot_a -> /dev/block/sde13
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 boot_b -> /dev/block/sde34
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 carrier -> /dev/block/sda16
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 cdt -> /dev/block/sdd2
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 cmnlib64_a -> /dev/block/sde16
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 cmnlib64_b -> /dev/block/sde37
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 cmnlib_a -> /dev/block/sde15
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 cmnlib_b -> /dev/block/sde36
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 control -> /dev/block/sda13
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 cota -> /dev/block/sda17
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 ddr -> /dev/block/sdd3
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 devcfg_a -> /dev/block/sde17
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 devcfg_b -> /dev/block/sde38
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 devinfo -> /dev/block/sde44
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 devlog -> /dev/block/sda10
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 dip -> /dev/block/sde45
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 dpo -> /dev/block/sde48
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 dsp_a -> /dev/block/sde10
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 dsp_b -> /dev/block/sde31
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 dtbo_a -> /dev/block/sde21
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 dtbo_b -> /dev/block/sde42
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 extra -> /dev/block/sda12
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 fataldevlog -> /dev/block/sda11
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 frp -> /dev/block/sda14
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 fsc -> /dev/block/sdf4
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 fsg -> /dev/block/sdf3
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 hosd_a -> /dev/block/sde14
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 hosd_b -> /dev/block/sde35
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 hvbmeta -> /dev/block/sda4
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 hyp_a -> /dev/block/sde3
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 hyp_b -> /dev/block/sde24
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 keymaster_a -> /dev/block/sde11
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 keymaster_b -> /dev/block/sde32
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 limits -> /dev/block/sde50
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 local -> /dev/block/sda15
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 lockbooter_a -> /dev/block/sde12
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 lockbooter_b -> /dev/block/sde33
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 logdump -> /dev/block/sde54
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 logfs -> /dev/block/sde52
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 mdtp_a -> /dev/block/sde8
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 mdtp_b -> /dev/block/sde29
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 mdtpsecapp_a -> /dev/block/sde7
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 mdtpsecapp_b -> /dev/block/sde28
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 mfg -> /dev/block/sdf2
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 misc -> /dev/block/sda6
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 modemst1 -> /dev/block/sdf5
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 modemst2 -> /dev/block/sdf6
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 msadp -> /dev/block/sde47
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 oem_misc -> /dev/block/sda7
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 padding0 -> /dev/block/sda1
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 padding3 -> /dev/block/sdd1
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 persist -> /dev/block/sda3
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 pg1fs -> /dev/block/sda5
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 pmic_a -> /dev/block/sde4
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 pmic_b -> /dev/block/sde25
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 qupfw_a -> /dev/block/sde18
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 qupfw_b -> /dev/block/sde39
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 radio_a -> /dev/block/sde5
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 radio_b -> /dev/block/sde26
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 ramdump -> /dev/block/sda8
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 reserve0 -> /dev/block/sda21
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 reserve4 -> /dev/block/sde57
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 reserve5 -> /dev/block/sdf7
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 sec -> /dev/block/sde43
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 sp1 -> /dev/block/sde49
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 ssd -> /dev/block/sda2
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 sti -> /dev/block/sde53
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 storsec -> /dev/block/sde55
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 system_a -> /dev/block/sda18
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 system_b -> /dev/block/sda19
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 tool_diag -> /dev/block/sda9
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 toolsfv -> /dev/block/sde51
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 tz_a -> /dev/block/sde2
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 tz_b -> /dev/block/sde23
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 userdata -> /dev/block/sda20
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 vbmeta_a -> /dev/block/sde20
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 vbmeta_b -> /dev/block/sde41
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 vendor_a -> /dev/block/sde19
lrwxrwxrwx 1 root root 16 1970-01-30 10:42 vendor_b -> /dev/block/sde40
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 xbl_a -> /dev/block/sdb1
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 xbl_b -> /dev/block/sdc1
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 xbl_config_a -> /dev/block/sdb2
lrwxrwxrwx 1 root root 15 1970-01-30 10:42 xbl_config_b -> /dev/block/sdc2
Its pretty much the same for the 64G Unlocked model sold in the US.
Code:
abl_a -> /dev/block/sde9
abl_b -> /dev/block/sde30
aop_a -> /dev/block/sde1
aop_b -> /dev/block/sde22
apdp -> /dev/block/sde46
avb_rec -> /dev/block/sde6
bluetooth_b -> /dev/block/sde27
board_info -> /dev/block/sdf1
boot_a -> /dev/block/sde13
boot_b -> /dev/block/sde34
carrier -> /dev/block/sdd2
cmnlib64_a -> /dev/block/sde16
cmnlib64_b -> /dev/block/sde37
cmnlib_a -> /dev/block/sde15
cmnlib_b -> /dev/block/sde36
control -> /dev/block/sda17
ddr -> /dev/block/sdd3
devcfg_a -> /dev/block/sde17
devcfg_b -> /dev/block/sde38
devinfo -> /dev/block/sda10
dip -> /dev/block/sde45
dpo -> /dev/block/sde48
dsp_a -> /dev/block/sde10
dsp_b -> /dev/block/sde31
dtbo_a -> /dev/block/sde21
dtbo_b -> /dev/block/sde42
extra -> /dev/block/sda12
fataldevlog -> /dev/block/sda11
frp -> /dev/block/sda14
fsc -> /dev/block/sdf4
fsg -> /dev/block/sdf3
hosd_a -> /dev/block/sde14
hosd_b -> /dev/block/sde35
hvbmeta -> /dev/block/sda4
hyp_a -> /dev/block/sde3
hyp_b -> /dev/block/sde24
keymaster_a -> /dev/block/sde11
keymaster_b -> /dev/block/sde32
limits -> /dev/block/sde50
local -> /dev/block/sda15
lockbooter_a -> /dev/block/sde12
lockbooter_b -> /dev/block/sde33
logdump -> /dev/block/sde52
mdtp_a -> /dev/block/sde8
mdtp_b -> /dev/block/sde29
mdtpsecapp_a -> /dev/block/sde7
mdtpsecapp_b -> /dev/block/sde28
mfg -> /dev/block/sdf2
misc -> /dev/block/sda6
modemst1 -> /dev/block/sde47
oem_misc -> /dev/block/sda3
pg1fs -> /dev/block/sda5
pmic_a -> /dev/block/sde4
pmic_b -> /dev/block/sde25
qupfw_a -> /dev/block/sde5
radio_b -> /dev/block/sda8
reserve0 -> /dev/block/sda21
reserve4 -> /dev/block/sde57
reserve5 -> /dev/block/sde43
sp1 -> /dev/block/sde49
ssd -> /dev/block/sda2
sti -> /dev/block/sde53
storsec -> /dev/block/sda18
system_b -> /dev/block/sda19
tool_diag -> /dev/block/sda9
toolsfv -> /dev/block/sde2
tz_b -> /dev/block/sde23
userdata -> /dev/block/sda20
vbmeta_a -> /dev/block/sde20
vbmeta_b -> /dev/block/sde41
vendor_a -> /dev/block/sde19
vendor_b -> /dev/block/sde40
xbl_a -> /dev/block/sdb1
xbl_b -> /dev/block/sdc1
xbl_config_a -> /dev/block/sdb2
xbl_config_b -> /dev/block/sdc2
Hi, guys. I need "modemst1.img" and "modemst2.img" files for my phone(htc_imedugl: 2Q5510000). Can somebody share them. Thank you.
modemst1.img (modemst1 -> /dev/block/sdf5)
modemst2.img (modemst2 -> /dev/block/sdf6)
HTC U11 uses the same partition type too, i checked yesterday
Once device is rooted, since there is no extSD, FULL backup options are limited. I'm sure people know about this but just wanted
to share what I recently learned. Via Busybox/Toybox , netcat, and dd one can dump the partition data using dd over a netcat TCP stream on a local USB network. With one terminal pooping it out, you have another terminal capturing it and dumping it to a image file.
Example:
On rooted phone connected to PC
Reboot into TWRP or Lineage Recovery (tested on Lineage Recovery they use Toybox. I think TWRP uses busybox but I could be wrong)
Code:
adb devices
<make sure adb sees device>
<Enter ADB Shell phone # prompt should be present>
Code:
adb shell
Code:
dd if=/dev/block/sda19 | gzip | toybox nc -l -p 8888
(may work better w/o gzip/bzip2 but will create massive userdata file whereever you store it.)
or
Code:
dd if=/dev/block/sda19 | toybox nc -l -p 8888
<you have been warned!>
*this command will run and read sda19 (userdata), piping the output through gzip to compress (or directly to netcat if omit compression if used alternative command above) then to the toybox/busybox command executing netcat over tcp port 8888.
|'s (pipes) are used when the output needs to input into another COMMAND/PROGRAM.
> (redirects) are used when the output needs to write to a FILE. |'s for programs, >'s for files.
On the 2nd terminal on computer
Code:
adb forward tcp:8888 tcp:8888
Code:
netcat 127.0.0.1 8888 > userdata.bin.gz
OR if you elected w/o compression use
Code:
netcat 127.0.0.1 8888 > userdata.bin
instead (or any filename u want really).
<this command uses netcat to capture the stream of data sent over port 8888 from the 1st terminal and dump it to the compressed/uncompressed image file.>
This will take a long long time. There are dd options to speed up the process but I'm lazy and maybe will include later. Compression option will speed it up but not sure I trust it as I get unexpected end of file on the archive when I test it. Havnt tried it uncompressed yet.
* Or just use:
Partitions Backup & Restore by Wanam, from Google Play at
Partitions Backup & Restore - Apps on Google Play
Backup your important partitions to avoid any data or IMEI corruption
play.google.com
URLs:
Imaging Android with ADB, Root, Netcat and DD
Today we are going to acquire an android smartphone (Samsung Note II) using Android Debug Bridge (ADB), netcat and dd. The system I am using is Ubuntu linux. On the “forensic workstation” you will need ADB and netcat installed. I’m using the excellent instructions from here.
dfir.science
How do I stop an adb port forward?
One can forward a port with adb forward tcp:8080 tcp:8080. But do I need to kill the adb server to stop this forwarding? I'm looking for a way to stop forwarding of a port in adb, after it was set...
stackoverflow.com
Data Acquisition Using Android Debug Bridge (ADB) | Access Now Digital Security Helpline Public Documentation
The Helpline has come into possession of an Android device that could be infected or can be used as digital evidence.
communitydocs.accessnow.org
Extracting data physically with dd | Packt Hub
In this article by Rohit Tamma and Donnie Tindall, authors of the book Learning Android Forensics, we will cover physical data extraction using
hub.packtpub.com
Partition Reference
=================
# ls -la /dev/block/bootdevice/by-name
total 0
drwxr-xr-x 2 root root 1500 1971-03-20 19:20 .
drwxr-xr-x 3 root root 1640 1971-03-20 19:20 ..
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 ALIGN_TO_128K_1 -> /dev/block/sdd1
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 ALIGN_TO_128K_2 -> /dev/block/sdf1
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 abl_a -> /dev/block/sde4
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 abl_b -> /dev/block/sde20
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 aop_a -> /dev/block/sde1
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 aop_b -> /dev/block/sde17
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 apdp_a -> /dev/block/sde14
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 apdp_b -> /dev/block/sde30
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 boot_a -> /dev/block/sda6
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 boot_b -> /dev/block/sda7
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 cdt -> /dev/block/sdd2
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 cmnlib64_a -> /dev/block/sde7
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 cmnlib64_b -> /dev/block/sde23
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 cmnlib_a -> /dev/block/sde6
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 cmnlib_b -> /dev/block/sde22
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 ddr -> /dev/block/sdd3
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 devcfg_a -> /dev/block/sde8
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 devcfg_b -> /dev/block/sde24
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 devinfo -> /dev/block/sde33
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 dtbo_a -> /dev/block/sda10
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 dtbo_b -> /dev/block/sda11
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 featenabler_a -> /dev/block/sde16
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 featenabler_b -> /dev/block/sde32
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 frp -> /dev/block/sda5
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 fsc -> /dev/block/sdf5
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 fsg -> /dev/block/sdf4
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 hyp_a -> /dev/block/sde3
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 hyp_b -> /dev/block/sde19
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 imagefv_a -> /dev/block/sde13
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 imagefv_b -> /dev/block/sde29
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 keymaster_a -> /dev/block/sde5
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 keymaster_b -> /dev/block/sde21
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 keystore -> /dev/block/sda4
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 klog -> /dev/block/sda14
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 limits -> /dev/block/sde36
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 limits-cdsp -> /dev/block/sde37
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 logfs -> /dev/block/sde39
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 metadata -> /dev/block/sda15
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 misc -> /dev/block/sda3
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 modem_a -> /dev/block/sda12
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 modem_b -> /dev/block/sda13
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 modemst1 -> /dev/block/sdf2
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 modemst2 -> /dev/block/sdf3
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 multiimgoem_a -> /dev/block/sde15
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 multiimgoem_b -> /dev/block/sde31
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 persist -> /dev/block/sda2
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 qupfw_a -> /dev/block/sde9
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 qupfw_b -> /dev/block/sde25
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 reserve_1 -> /dev/block/sde11
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 reserve_2 -> /dev/block/sde27
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 secdata -> /dev/block/sde42
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 splash -> /dev/block/sde35
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 spunvm -> /dev/block/sde34
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 ssd -> /dev/block/sda1
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 storsec -> /dev/block/sde40
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 super -> /dev/block/sda18
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 toolsfv -> /dev/block/sde38
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 tz_a -> /dev/block/sde2
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 tz_b -> /dev/block/sde18
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 uefisecapp_a -> /dev/block/sde12
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 uefisecapp_b -> /dev/block/sde28
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 uefivarstore -> /dev/block/sde41
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 userdata -> /dev/block/sda19
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 vbmeta_a -> /dev/block/sde10
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 vbmeta_b -> /dev/block/sde26
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 vbmeta_system_a -> /dev/block/sda16
lrwxrwxrwx 1 root root 16 1971-03-20 19:20 vbmeta_system_b -> /dev/block/sda17
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 vendor_boot_a -> /dev/block/sda8
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 vendor_boot_b -> /dev/block/sda9
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 xbl_a -> /dev/block/sdb1
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 xbl_b -> /dev/block/sdc1
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 xbl_config_a -> /dev/block/sdb2
lrwxrwxrwx 1 root root 15 1971-03-20 19:20 xbl_config_b -> /dev/block/sdc2
:/ #
Logical Order
ssd -> /dev/block/sda1
persist -> /dev/block/sda2
misc -> /dev/block/sda3
keystore -> /dev/block/sda4
frp -> /dev/block/sda5
boot_a -> /dev/block/sda6
boot_b -> /dev/block/sda7
vendor_boot_a -> /dev/block/sda8
vendor_boot_b -> /dev/block/sda9
dtbo_a -> /dev/block/sda10
dtbo_b -> /dev/block/sda11
modem_a -> /dev/block/sda12
modem_b -> /dev/block/sda13
klog -> /dev/block/sda14
metadata -> /dev/block/sda15
vbmeta_system_a -> /dev/block/sda16
vbmeta_system_b -> /dev/block/sda17
super -> /dev/block/sda18
userdata -> /dev/block/sda19
xbl_a -> /dev/block/sdb1
xbl_config_a -> /dev/block/sdb2
xbl_b -> /dev/block/sdc1
xbl_config_b -> /dev/block/sdc2
ALIGN_TO_128K_1 -> /dev/block/sdd1
cdt -> /dev/block/sdd2
ddr -> /dev/block/sdd3
aop_a -> /dev/block/sde1
tz_a -> /dev/block/sde2
hyp_a -> /dev/block/sde3
abl_a -> /dev/block/sde4
keymaster_a -> /dev/block/sde5
cmnlib_a -> /dev/block/sde6
cmnlib64_a -> /dev/block/sde7
devcfg_a -> /dev/block/sde8
qupfw_a -> /dev/block/sde9
vbmeta_a -> /dev/block/sde10
reserve_1 -> /dev/block/sde11
uefisecapp_a -> /dev/block/sde12
imagefv_a -> /dev/block/sde13
apdp_a -> /dev/block/sde14
multiimgoem_a -> /dev/block/sde15
featenabler_a -> /dev/block/sde16
aop_b -> /dev/block/sde17
tz_b -> /dev/block/sde18
hyp_b -> /dev/block/sde19
abl_b -> /dev/block/sde20
keymaster_b -> /dev/block/sde21
cmnlib_b -> /dev/block/sde22
cmnlib64_b -> /dev/block/sde23
devcfg_b -> /dev/block/sde24
qupfw_b -> /dev/block/sde25
vbmeta_b -> /dev/block/sde26
reserve_2 -> /dev/block/sde27
uefisecapp_b -> /dev/block/sde28
imagefv_b -> /dev/block/sde29
apdp_b -> /dev/block/sde30
multiimgoem_b -> /dev/block/sde31
featenabler_b -> /dev/block/sde32
devinfo -> /dev/block/sde33
spunvm -> /dev/block/sde34
splash -> /dev/block/sde35
limits -> /dev/block/sde36
limits-cdsp -> /dev/block/sde37
toolsfv -> /dev/block/sde38
logfs -> /dev/block/sde39
storsec -> /dev/block/sde40
uefivarstore -> /dev/block/sde41
secdata -> /dev/block/sde42
ALIGN_TO_128K_2 -> /dev/block/sdf1
modemst1 -> /dev/block/sdf2
modemst2 -> /dev/block/sdf3
fsg -> /dev/block/sdf4
fsc -> /dev/block/sdf5
cat /proc/partitions
1 0 8192 ram0
1 1 8192 ram1
1 2 8192 ram2
1 3 8192 ram3
1 4 8192 ram4
1 5 8192 ram5
1 6 8192 ram6
1 7 8192 ram7
1 8 8192 ram8
1 9 8192 ram9
1 10 8192 ram10
1 11 8192 ram11
1 12 8192 ram12
1 13 8192 ram13
1 14 8192 ram14
1 15 8192 ram15
7 0 524288 loop0
254 0 2097152 zram0
8 0 124846080 sda
8 1 8 sda1
8 2 32768 sda2
8 3 1024 sda3
8 4 512 sda4
8 5 512 sda5
8 6 98304 sda6
8 7 98304 sda7
8 8 98304 sda8
8 9 98304 sda9
8 10 16384 sda10
8 11 16384 sda11
8 12 199680 sda12
8 13 199680 sda13
8 14 8192 sda14
8 15 16384 sda15
259 0 64 sda16
259 1 64 sda17
259 2 9527296 sda18
259 3 114409452 sda19
8 32 8192 sdc
8 33 3584 sdc1
8 34 128 sdc2
8 80 16384 sdf
8 81 104 sdf1
8 82 2560 sdf2
8 83 2560 sdf3
8 84 2560 sdf4
8 85 128 sdf5
8 64 65536 sde
8 65 512 sde1
8 66 4096 sde2
8 67 512 sde3
8 68 2048 sde4
8 69 512 sde5
8 70 512 sde6
8 71 512 sde7
8 72 128 sde8
8 73 80 sde9
8 74 64 sde10
8 75 8192 sde11
8 76 2048 sde12
8 77 2048 sde13
8 78 64 sde14
8 79 32 sde15
259 4 128 sde16
259 5 512 sde17
259 6 4096 sde18
259 7 512 sde19
259 8 2048 sde20
259 9 512 sde21
259 10 512 sde22
259 11 512 sde23
259 12 128 sde24
259 13 80 sde25
259 14 64 sde26
259 15 8192 sde27
259 16 2048 sde28
259 17 2048 sde29
259 18 64 sde30
259 19 32 sde31
259 20 128 sde32
259 21 4 sde33
259 22 8192 sde34
259 23 32 sde35
259 24 4 sde36
259 25 4 sde37
259 26 1024 sde38
259 27 8192 sde39
259 28 128 sde40
259 29 512 sde41
259 30 28 sde42
8 16 8192 sdb
8 17 3584 sdb1
8 18 128 sdb2
8 48 8192 sdd
8 49 104 sdd1
8 50 128 sdd2
8 51 1024 sdd3
253 0 2719324 dm-0
253 1 726468 dm-1
253 2 995784 dm-2
253 3 286384 dm-3
253 4 114409452 dm-4