0% found this document useful (0 votes)
4 views3 pages

A5

The document outlines a practical exercise on executing basic ADB commands for forensic analysis of an Android device. It details the necessary materials, theoretical background, and essential commands such as checking device connection, accessing the shell, installing applications, and transferring evidence. The practical successfully demonstrates the ability to control the device entirely through the command line without leaving traces on the user interface.

Uploaded by

Magna saha
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
4 views3 pages

A5

The document outlines a practical exercise on executing basic ADB commands for forensic analysis of an Android device. It details the necessary materials, theoretical background, and essential commands such as checking device connection, accessing the shell, installing applications, and transferring evidence. The practical successfully demonstrates the ability to control the device entirely through the command line without leaving traces on the user interface.

Uploaded by

Magna saha
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd

Roll No.

: 44(10040) Name: Nirmal Panchal

Practical 05 - Basic ADB Commands

AIM: To execute basic ADB commands to control the Android device entirely through the
keyboard for forensic analysis.

Material requirement:

 Windows PC with ADB Platform-Tools installed.

 Android Device (USB Debugging enabled).

 USB Data Cable.

 Command Prompt (CMD).

Theory:

 This practical was transitions the objective from simply using a phone to analyzing it
as an "analyst".

 Using command-line controls is essential for forensics because it allows analysts to


extract information without leaving "fingerprints" on the phone's User Interface (UI).

Steps (The 5 Essential Commands):

1. Open CMD and ensure your phone is connected.

2. The Connection Check (adb devices): Type adb devices to list all currently
connected and authorized devices. This forensic step verifies that your "workstation"
recognizes the "evidence" (the phone).

3. The Entry Point (adb shell): Type adb shell to open a "Remote Terminal" inside the
phone. This puts you inside the Android Linux Kernel, allowing you to browse hidden
folders that normal file managers don't show. Type exit to get back to Windows.

4. The Sideload (adb install [filename].apk): Use this command to install an app
directly from your PC to the phone. Analysts use this to install "Vulnerable" apps (like
OVAA or DIVA) or "Agent" apps to test system security.

5. The Evidence Transfer (adb pull & adb push): This is used to "Exfiltrate" (extract)
data like photos, databases, and logs for evidence. For example, adb pull
/sdcard/DCIM/Camera/[Link] C:\Forensics copies a photo from the phone to the
PC. Conversely, adb push copies a file from the PC to the phone.
Roll No.: 44(10040) Name: Nirmal Panchal

figure 5. 1 command like adb devices, adb shell, adb install, adb pull.

figure 5. 2 adb push.

6. The Power Control (adb reboot): Type adb reboot to restart the phone. Variations
like adb reboot recovery or adb reboot bootloader are used forensically to access deep
system partitions to create a "Physical Image" (a bit-by-bit copy) of the phone's
memory.
Roll No.: 44(10040) Name: Nirmal Panchal

figure 5. 3 adb reboot, adb reboot recovery, adb reboot bootloader.

Note: In all thr above cases phone get restart as well as power off but in bootloader command
phone stuck on screen with reboot and recovery mode. If we don’t interact with phone for
two minutes its automatically get restarted.

Result and conclusion:

The 5 essential ADB commands were successfully executed. The practical demonstrated how
to establish a remote connection, access the Android Linux kernel via shell, sideload
applications, and transfer evidence files directly through the command line without altering
the device's UI.

You might also like