Attacking Samsung Secure Boot
A bootloader bug in Samsung Galaxy smartphones allows an attacker with physical access to execute arbitrary code. Protections like OS lock screen and reactivation lock can be defeated. Several attacks are possible, including memory dump. Countermeasures exist for unpatched devices.
This is applicable to the Samsung Galaxy S5 AT&T version. Probably to more, but that's the one it was tested on. A patch has been released through updates.
For more details, see this document: https://www.sstic.org/media/SSTIC2017...
Orriginally from https://static.sstic.org/videos2017/S... - I'm adding English and French subtitles.
The "Forensics" tool used is called Heimdall, and it's an open-source project on GitHub. It can be found here: https://github.com/Benjamin-Dobell/He...