1

I'm currently engrossed in penetration testing my Samsung SPH-M330. And to be fair, I have found a couple entry points (WHY ARE YOU PEOPLE USING STRCPY()!?)

Anyway, I'm now taking a look at "/brew/card1/DB/Ace.dat" as it defines the installed J2ME programs and I've figured out a way to modify it.

Problem is, I don't know what this "AceDB" format is. Interesting how the beginning of the file is: "AceDB Created By Insun Kang,"..."SangJung Woo". Not something you expect in a binary blob! Intriguingly, the phone is the one generating that text. Delete "Ace.dat" and restart the phone, all the listed games/apps disappear, but that string is still present in the "now empty" file.

Anyone familiar with this? Here's a link to the samples I've uploaded: https://drive.google.com/drive/folders/12QpbYtsb6BlMgAw2A3nHM_bGzfi6tJzZ

Improve this question
5
  • 1
    The only SangJung Woo on LinkedIn is an employee of Samsung and lists responsibilities including "Database Core development such as Catalog system and Heap manager" for the period from 2007–2010, during which the SPH-M330 came out. An Insun Kang was also at Samsung until 2007. Odds on it's a proprietary Samsung file format.
    – Tommy
    Sep 19 at 14:31
  • Good digging thanks! Looks like I have my work cut out then.
    – qwerty keyboard
    Sep 20 at 18:24
  • Or maybe you can dump the firmware and look at where the string is generated
    – raspiduino
    Sep 22 at 10:42
  • I would, but unfortunately that isn't really an option as both ram and nand dumping via the debug port is disabled on the phone.
    – qwerty keyboard
    Sep 22 at 19:40
  • It's probably the format described in this paper which is unfortunately not available for free unless your university or such has access to it. You can buy it though. - Someone here described in 2011 they were able to find code to access such a DB online and were able to compile it but they didn't link the source so even though it may exist in the Wayback Machine, I don't know where without URL...
    – CherryDT
    Sep 25 at 19:20

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Browse other questions tagged or ask your own question.