1

I'm currently engrossed in penetration testing my Samsung SPH-M330. And to be fair, I have found a couple entry points (WHY ARE YOU PEOPLE USING STRCPY()!?)

Anyway, I'm now taking a look at "/brew/card1/DB/Ace.dat" as it defines the installed J2ME programs and I've figured out a way to modify it.

Problem is, I don't know what this "AceDB" format is. Interesting how the beginning of the file is: "AceDB Created By Insun Kang,"..."SangJung Woo". Not something you expect in a binary blob! Intriguingly, the phone is the one generating that text. Delete "Ace.dat" and restart the phone, all the listed games/apps disappear, but that string is still present in the "now empty" file.

Anyone familiar with this? Here's a link to the samples I've uploaded: https://drive.google.com/drive/folders/12QpbYtsb6BlMgAw2A3nHM_bGzfi6tJzZ

5
  • 1
    The only SangJung Woo on LinkedIn is an employee of Samsung and lists responsibilities including "Database Core development such as Catalog system and Heap manager" for the period from 2007–2010, during which the SPH-M330 came out. An Insun Kang was also at Samsung until 2007. Odds on it's a proprietary Samsung file format.
    – Tommy
    Commented Sep 19, 2023 at 14:31
  • Good digging thanks! Looks like I have my work cut out then. Commented Sep 20, 2023 at 18:24
  • Or maybe you can dump the firmware and look at where the string is generated
    – raspiduino
    Commented Sep 22, 2023 at 10:42
  • I would, but unfortunately that isn't really an option as both ram and nand dumping via the debug port is disabled on the phone. Commented Sep 22, 2023 at 19:40
  • It's probably the format described in this paper which is unfortunately not available for free unless your university or such has access to it. You can buy it though. - Someone here described in 2011 they were able to find code to access such a DB online and were able to compile it but they didn't link the source so even though it may exist in the Wayback Machine, I don't know where without URL...
    – CherryDT
    Commented Sep 25, 2023 at 19:20

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.