eMMC Dump
Definition
Embedded Multi-Media Card flash chip extraction. The chip is desoldered (chip-off) or read in-circuit with an ISP adapter; the raw NAND or eMMC dump is then parsed for firmware, configuration and user data.
- Chip type
- eMMC flash memory
- Extraction methods
- Chip-off desoldering, in-circuit ISP
- Output
- Raw NAND/eMMC dump
- Recovers
- Firmware, configuration, user data
Common questions
When is chip-off preferred over in-circuit reading?+
When the device is damaged, locked, or its ISP test points are inaccessible. Desoldering the chip lets the examiner read it directly on a compatible programmer instead of through the device's own circuitry.
What risk does chip-off extraction carry?+
The desoldering heat can damage the chip and make the data unrecoverable, so it is generally a last-resort, irreversible technique used only when non-destructive methods have failed.
Related terms
- Binwalk
- An open-source firmware analysis tool that scans a binary blob for known file signatures (squashfs, JFFS2, gzip, LZMA, certificates) and extracts the...
- CoAP
- Constrained Application Protocol (RFC 7252). A RESTful protocol over UDP on port 5683 (or 5684 with DTLS), designed for constrained devices that...
- DPDP Act 2023
- Digital Personal Data Protection Act 2023. India's general data protection statute, in force in phases from 2024. Applies to IoT-collected personal data...
- JTAG
- Joint Test Action Group standard (IEEE 1149.1) for chip-level debugging. The test access port left on a phone's PCB lets a forensic...
- MQTT
- Message Queuing Telemetry Transport. A publish/subscribe protocol on TCP port 1883 (plain) or 8883 (TLS) with a central broker. Designed for low-bandwidth...
- UART
- Universal Asynchronous Receiver/Transmitter. A two-wire serial interface (TX, RX, GND, optional VCC) exposed on most IoT device boards as debug pads or...