Samsung S9 Schematic Diagram Link

By tapping these points (specified in the schematic), you can use a programmer like EasyJTAG or Medusa to dump the user data partition. Without the schematic, finding these microscopic test points on the S9’s dense PCB is impossible.