Roll No.
: 44(10040) Name: Nirmal Panchal
Practical 05 - Basic ADB Commands
AIM: To execute basic ADB commands to control the Android device entirely through the
keyboard for forensic analysis.
Material requirement:
Windows PC with ADB Platform-Tools installed.
Android Device (USB Debugging enabled).
USB Data Cable.
Command Prompt (CMD).
Theory:
This practical was transitions the objective from simply using a phone to analyzing it
as an "analyst".
Using command-line controls is essential for forensics because it allows analysts to
extract information without leaving "fingerprints" on the phone's User Interface (UI).
Steps (The 5 Essential Commands):
1. Open CMD and ensure your phone is connected.
2. The Connection Check (adb devices): Type adb devices to list all currently
connected and authorized devices. This forensic step verifies that your "workstation"
recognizes the "evidence" (the phone).
3. The Entry Point (adb shell): Type adb shell to open a "Remote Terminal" inside the
phone. This puts you inside the Android Linux Kernel, allowing you to browse hidden
folders that normal file managers don't show. Type exit to get back to Windows.
4. The Sideload (adb install [filename].apk): Use this command to install an app
directly from your PC to the phone. Analysts use this to install "Vulnerable" apps (like
OVAA or DIVA) or "Agent" apps to test system security.
5. The Evidence Transfer (adb pull & adb push): This is used to "Exfiltrate" (extract)
data like photos, databases, and logs for evidence. For example, adb pull
/sdcard/DCIM/Camera/[Link] C:\Forensics copies a photo from the phone to the
PC. Conversely, adb push copies a file from the PC to the phone.
Roll No.: 44(10040) Name: Nirmal Panchal
figure 5. 1 command like adb devices, adb shell, adb install, adb pull.
figure 5. 2 adb push.
6. The Power Control (adb reboot): Type adb reboot to restart the phone. Variations
like adb reboot recovery or adb reboot bootloader are used forensically to access deep
system partitions to create a "Physical Image" (a bit-by-bit copy) of the phone's
memory.
Roll No.: 44(10040) Name: Nirmal Panchal
figure 5. 3 adb reboot, adb reboot recovery, adb reboot bootloader.
Note: In all thr above cases phone get restart as well as power off but in bootloader command
phone stuck on screen with reboot and recovery mode. If we don’t interact with phone for
two minutes its automatically get restarted.
Result and conclusion:
The 5 essential ADB commands were successfully executed. The practical demonstrated how
to establish a remote connection, access the Android Linux kernel via shell, sideload
applications, and transfer evidence files directly through the command line without altering
the device's UI.