XRY 6.3 RELEASE NOTES RELEASE DATE: W/C 28 TH MAY 2012 NOW WITH 7,323 DEVICE PROFILES SUPPORTED >> New agent for extracting data from Windows Phone 7 >> Samsung Kies Support for importing and decoding .sbu backup files >> iPhone Keychain Passwords Support Logical Application Decoding >> Motorola iDEN Decoding support >> Blackberry Improved IPD decoding & BBM extraction >> New Field Versions XRW & CF-19 >> New Service Cables >> Smartphone Apps – Logical decoding functionality >> Watch List – Hit numbers now displayed on Category Folder level >> SQLite Viewer – Now possible to have multiple viewers open simultaneously >> XML & PList Viewers – You can now launch these files direct from the details window >> Opening/Reading XRY file progress bar >> Resolved issue with picture metadata for the GPX & Google Earth exporters WHAT’S NEW IN THIS RELEASE? MAIN APPLICATION IMPROVEMENTS >> XRY Logical 224 3,542 >> XRY Physical Dumping 105 1,427 >> XRY Physical Decoding 196 1,253 >> Security Code Only 140 524 >> Smartphone Apps 24 89 >> XRY Untested 42 488 >> Total 731 7,323 Forensic Method v6.3 Total Box 17111, SE-104 62 Stockholm, Sweden | Visiting address: Hornsbruksgatan 28, Stockholm Phone: +46 8 739 02 70 | Fax: +46 8 730 01 70 | [email protected] | msab.com With v6.3 you now have the ability to recover email passwords and un-encoded apps pass- words from iOS devices. The keychain data- base contains sensitive information about email and application accounts and passwords. Decryption of the keychain database on Apple devices makes it possible to see passwords for email accounts added to the device. Some apps that use the encryption of the keychain database don’t encrypt their passwords themselves, which means that we can also decrypt those passwords as well. Other applications may protect their passwords further; and we will work on the ability to decrypt them in the future. iOS KEYCHAIN PASSWORD DECODING In XRY v6.3 you now have the ability to import backup files from Samsung handsets using the Kies system. Samsung Kies is the equivalent to the iTunes Backup for iOS devices and the IPD file for Blackberry devices which we already support. With this new .sbu backupfile decoding functionality you can decode backup files created by Samsung’s sync- program Kies from the Galaxy S2 for example. So whilst you may not be able to secure the handset itself, you can still recover data from an image of the device when it was last sync’d with the owner’s computer. SAMSUNG KIES BACKUP FILE SUPPORT
8
Embed
Release daTe: w/c 28Th maY 2012 XRY 6 · XRY 6.3 Release NOTes Release daTe: w/c 28Th maY 2012 N O i T h 23 p RO p T ed >> New agent for extracting data from Windows Phone 7 >> Samsung
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
XRY 6.3Release NOTes
Release daTe: w/c 28Th maY 2012
NOw wiTh
7,323 device pROfiles suppORTed
>> New agent for extracting data from Windows Phone 7>> Samsung Kies
Support for importing and decoding .sbu backup files>> iPhone Keychain Passwords Support Logical Application Decoding>> Motorola iDEN
Decoding support >> Blackberry
Improved IPD decoding & BBM extraction>> New Field Versions
XRW & CF-19>> New Service Cables
>> Smartphone Apps – Logical decoding functionality>> Watch List – Hit numbers now displayed on
Category Folder level>> SQLite Viewer – Now possible to have multiple
viewers open simultaneously>> XML & PList Viewers – You can now launch these
files direct from the details window>> Opening/Reading XRY file progress bar>> Resolved issue with picture metadata for the
With v6.3 you now have the ability to recover email passwords and un-encoded apps pass - words from iOS devices. The keychain data- base contains sensitive information about email and application accounts and passwords.
Decryption of the keychain database on Apple devices makes it possible to see passwords for email accounts added to the device. Some apps that use the encryption of the keychain database don’t encrypt their passwords themselves, which means that we can also decrypt those passwords as well. Other applications may protect their passwords further; and we will work on the ability to decrypt them in the future.
iOS KEYCHAIN PASSWORD DECODING
In XRY v6.3 you now have the ability to import backup files from Samsung handsets using the Kies system. Samsung Kies is the equivalent to the iTunes Backup for iOS devices and the IPD file for Blackberry devices which we already support.
With this new .sbu backupfile decoding functionality you can decode backup files created by Samsung’s sync-
program Kies from the Galaxy S2 for example.
So whilst you may not be able to
secure the handset itself,
you can still recover data
from an image of the device when it
was last sync’d with the owner’s computer.
SAMSUNG KIES BACKUP FILE SUPPORt
Xry VErSioN 6.3 | RELE A SE NOtES
appLe ios physicaL suppoRt Have you applied for a special update?
you need to update your license key. physical support for apple devices like security Lock Bypass and Dumping and Decryption won’t work without you add-ing a special update to your codemeter license key.
this new separate element is re-quired to be installed on your key before the system will work. www.msab.com/support/export-controls-for-xry-v6.2
DiD you knoW?
anDRoiD DuMping Without the neeD foR Rooting We now support for several Qualcomm based Lg android devices. one of the benefits of these phones is that they can be dumped and decoded directly without the need for automatic rooting. allowing you to get around the swipe/gesture Lock patterns: LG VS660 Vortex, LG LS670 Optimus S, LG US670 Optimus U, LG VM670 Optimus V, LG MS690 Optimus M, LG VS-700 Enlighten, LG AS-740 Axis, LG US740 Apex, LG VS740 Ally, LG US760 Genesis.
Introducing XRW andCF-19 – both devices meet the tough Field Version specifications of MIL-STD – 810G and IP65 compliance. These two units are our next generation of Field Versions: The XRW computer is an ultra-rugged mobile 10-inch wide screen Notebook running Microsoft Windows 7 Ultimate operating system and features an Intel Atom 2.0 GHz proces-
sor with 64GB Solid State hard drive and 2GB of DDR2 RAM. Portability combined with a full keyboard – this tough and light weight unit is the perfect all-round solution for users on a budget.
The CF-19 is the ultimate Field Version solution; a fully rug-ged convertible Toughbook featuring a revolutionary LCD screen that transforms from a high-performance notebook to a fully port-able tablet PC. With an Intel® Core™ i5 processor delivering high performance with a 320GB HDD and 4GB RAM. This top end device has a high-power battery allowing for a running time of up to 9 hours and a magnesium alloy case.
We know that a lot of experienced phone ex-aminers already have their own sets of service cables which they use alongside XRy. We have been able to extend XRy support by document-ing the ability to recover more data through the use of these service cables.
equally we regularly receive enquiries from new customers who are confused about the use of such cables and their availability; in order to assist them with device extraction.
historically we pointed customers in the direc-tion of third party suppliers. With the release of v6.3 however, we have decided to offer these cables direct in order to improve our customer support. We have put together a select list of recommended service cables needed in order to extend support on mobile devices.
this service cable pack is available to pur-chase through our web shop via the customer portal.
seRvice caBLes
We’ve separated the process of data file extraction and the pars-ing of the data on Smartphones and CDMA mobile devices. The
decoding process now takes place after the initial extraction of the file
system. Thus it is now possible to re-decode these new XRY files and
apply decoding again as our support ability improves in the future.
In this release we have introduced limited support for extraction of some Windows Phone 7 handsets; the solu-tion is complex but will benefit users considerably when dealing with this Smartphone operating system. Support can extend to extraction of Contacts, Calendar, SMS and File. Check the device manual for full details.
sMaRtphone apps suppoRtJust a quick re-cap on recent development work we have been doing for you for apps support:
Xry v6.1 v6.2 v6.3>> BlackBerry 5 5 8
>> android 14 21 37
>> apple 35 39 44
Apps support is just as difficult as device support and the soft-ware versions of apps change regularly, so not only do we have to try to support new apps, we also have to go back and check new versions of existing apps to make sure they continue to work!
samsungGt-C3010sGt-C3011Gt-C3750 MetroGt-E1180Gt-E1232b DuosGt-E3213k HeroGt-i8350 Omnia WGt-N7000 Galaxy NoteGt-S5263 Star II touchGt-S5610k PrimoGt-S5690L Galaxy Xcover
Gt-S5780 Wave 578 NFCSCH-i515 Galaxy NexusSCH-R310 BylineSCH-W899 AnycallSCH-W999 AnycallSGH-A516SGH-C225SGH-C450SGH-D888 Duos AnycallSGH-E860VSGH-F700SGH-i677 Focus FlashSGH-i777 Galaxy S IISGH-i937 Focus SSGH-t139SHW-M190 Galaxy S HoppinSHW-M250L Galaxy S IISPH-A640 (Bell)SPH-M810 Instinct S30YP-G70 Galaxy S WiFi 5.0 8GB
sKgM-222
softBank001DL
sonyGPS-CS1GPS-CS3NV-U70t
sony ericssonMix Walkman (Wt13a)*Mix Walkman (Wt13i)Mix Walkman (Wt19i)txt (CK13a)*txt (CK13i)txt Pro (CK15a)Xperia Active (St17a)Xperia Active (St17i)Xperia mini (St15a)*Xperia mini pro (SK17a)*Xperia Neo (Mt15a)*Xperia Pro (MK16a)Xperia X8 (E15a)*Z780i
spiceM-6800 Flo
sylvaniaSGPD432
TakaraGP7-o
TargaPNA-E3520t
TcLi880*Q3*
T-MobileAffinity*
TransonicPNA-6000t
Transystem inctripMate 850
TrimbleJuno SC*
uTstarcomCDM-7076CDM-8630AL AlltelCDM-8960CE
V7NAV730
wayteQX5*
wiKoMinimi
windows PhoneWindows Phone Generic 1 Windows Phone Generic 2
ZTeN295*tania
the new iPad 3 is now supported logically in XRY v6.3.
the Galaxy Note is also added to our support list with this release.
*Untested devices
SGH-Z560SHW-M190 Galaxy S HoppinYP-G70 Galaxy S WiFi 5.0 8GB
sKgM-222
sonyGPS-CS1GPS-CS3
sony ericssonMix Walkman (Wt13i)Mix Walkman (Wt19i)t250atxt (CK13i)txt Pro (CK15a)txt Pro (CK15i)W150i YendoW8i Walkman (E16i)Xperia Active (St17a)Xperia Active (St17i)
SGH-F480v touchwizSGH-F490SGH-F490vSGH-L170SGH-L760SGH-t469 Gravity 2SGH-t639SGH-t746 ImpactSGH-U900 SoulSGH-Z560SHW-M190 Galaxy S HoppinSPH-M810 Instinct S30YP-G70 Galaxy S WiFi 5.0 8GB
sKgM-222
sonyGPS-CS1GPS-CS3
sony ericssonMix Walkman (Wt13i)Mix Walkman (Wt19i)txt (CK13i)txt Pro (CK15a)txt Pro (CK15i)W150i YendoW8i Walkman (E16i)Xperia Active (St17a)Xperia Active (St17i)
sylvaniaSGPD432
TargaPNA-E3520t
Transystem inctripMate 850
V7NAV730
Xry VErSioN 6.3 | RELE A SE NOtES
Don’t forget to register your license. By registering your license you ensure that you receive new information about XRY software updates and new cables free of charge: www.msab.com/licreg
audiovoxCDM-8930
casioC211 GzOne type SC511 GzOne type VC711 GzOne Boulder
KyoceraE2000 tempoK322K323KX160bKX444Laylo M1400Lingo M1000Neo E1100S1350 PrestoS2300 torino – LoftSE44SE47