Getting all the data from Android phone

[Mutt]

Paths to all databases with information on phone

Attention! All information is provided for informational and educational purposes only. The author is not responsible for any possible damage caused by the materials of this article.

Hello everyone This is Mutt. Let's imagine that you have someone's phone, and you need to pull out as much valuable information as possible from there. What will you do? In this article, I will just teach you how to extract all the information from your phone: sms, calls, browser history, messages in social networks, etc.

Enjoy reading it!

So, to begin with, let's analyze all possible paths to databases with information.

Let's use the Sqlitebrowser utility.

The software is available for several OCS.

Phone Book

/data/data/com.android.providers.contacts/databases/contacts2.db

SMS,MMS messages

/data/data/com.android.providers.telephony/databases/mmssms.db

Calendar

/data/com.android.providers.calendar/databases/calendar.db

Event Log

/data/com.sec.android.provider.logsprovider/databases/logs.db

Data of the device owner

/data/system/users/0/accounts.db

Web Browser History

/data/data/com.android.browser/databases/browser2.db

History of the Chrome web browser

/data/data/com.android.chrome/app_chrome/Default/History
/data/data/com.android.chrome/app_chrome/Default/Archived History

Usernames and passwords of the Chrome web browser

/data/data/com.android.chrome/app_chrome/Default/Login Data

History of the Firefox web browser

/data/data/org.mozilla.firefox/files/mozilla

Facebook Posts

/data/data/com.facebook.katana/databases/threads_db2
/data/data/com.facebook.orca/databases/threads_db2

Facebook Alerts

/data/data/com.facebook.katana/databases/notifications_db

Wifi Connection Data

/data/misc/wifi/wpa_supplicant.conf

Skype Messages/Calls

/data/data/com.skype.raider/files/<account_name>/main.db

SIM Card Information

/data/data/com.android.providers.telephony/databases/telephony.db

Browsers
Browser databases contain: bookmarks, history, and search queries.

We add the database to the software and see tables with results, using different filters

LOCKNET

Contacts and Calls
We get information about calls and contact lists.

We load the database with contacts and select the contacts table, we get a list

Next, we load the call history(call log)

WIFI Data
We get the SSID name, PSK in plain text, connection/encryption type, and priority. The information is provided in text format for readability.

Calendar
In the calendar, we can see any holidays, reminders of our "victim". Loading the database

With the rest of the databases, we do the same, taking out information from the phone, the main thing is to process it correctly, you will definitely find something useful.