Loading video...

Video Failed to Load

Go Home

BootROM → root → lock-screen PIN. We enter BROM mode, load a patched preloader, gain root, extract the lock credential, recover the 6-digit PIN offline, and use it to unlock the phone. Full PoC ↓

CertiK's profile picture

CertiK

558,563 subscribers

28,495 views • 9 days ago •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

How far can a BootROM exploit take you on a Crypto phone? All the way to the wallet signing key. At #DEFCON34, CertiK researcher Guanxing Wen (Guanxing) demonstrated the full chain: BootROM → root → offline PIN recovery → wallet signing key. Short version ↓
1:54

How far can a BootROM exploit take you on a Crypto phone? All the way to the wallet signing key. At #DEFCON34, CertiK researcher Guanxing Wen (Guanxing) demonstrated the full chain: BootROM → root → offline PIN recovery → wallet signing key. Short version ↓

CertiK

20,577 views • 11 days ago

Have you seen OPay latest security upgrades: Emergency Lock and Safety PIN? @iswellthecapitalist tells us why they're worth locating and setting up today. Head to your OPay app to locate the Emergency Lock for when you need it and set up your Safety PIN today. Stay protected, always. #OPaySafetyMode #SafetyPIN #EmergencyLock #OPayBeyondBanking
1:41

Have you seen OPay latest security upgrades: Emergency Lock and Safety PIN? @iswellthecapitalist tells us why they're worth locating and setting up today. Head to your OPay app to locate the Emergency Lock for when you need it and set up your Safety PIN today. Stay protected, always. #OPaySafetyMode #SafetyPIN #EmergencyLock #OPayBeyondBanking

Nigeria Stories

46,472 views • 1 month ago

Because of a bug in Android 8.0, it is possible to bypass lock-screen timeout and disable Android PIN/Password/Pattern using ADB commands In the video, I automatically tested 26 different PINs in a row without 30 seconds timeout being triggered. As a result, PIN was found and lock-screen protection removed. This bug was fixed in Android 8.1 and above OS versions. This method can be used only on devices with enabled debugging. More info:
0:29

Because of a bug in Android 8.0, it is possible to bypass lock-screen timeout and disable Android PIN/Password/Pattern using ADB commands In the video, I automatically tested 26 different PINs in a row without 30 seconds timeout being triggered. As a result, PIN was found and lock-screen protection removed. This bug was fixed in Android 8.1 and above OS versions. This method can be used only on devices with enabled debugging. More info:

Mobile Hacker

118,663 views • 2 years ago

Wondering about the thinking behind our newly launched Safety PIN and Emergency Lock? Watch the story behind the product. Built not just for protection, but for peace of mind when it matters most. Have you set up your Safety PIN yet? Click to set up your Safety PIN here: #OPaySafetyMode #SafetyMode #OPayBeyondBanking
1:07

Wondering about the thinking behind our newly launched Safety PIN and Emergency Lock? Watch the story behind the product. Built not just for protection, but for peace of mind when it matters most. Have you set up your Safety PIN yet? Click to set up your Safety PIN here: #OPaySafetyMode #SafetyMode #OPayBeyondBanking

OPay

16,239 views • 2 months ago

Raising a collapsed nose of a Boeing 787 Dreamliner. On 8 March 2018, Boeing 787-8 BBJ N507BJ suffered a nose gear collapse at Moses Lake, Washington, while undergoing maintenance and VIP conversion work. This was a result of the NLG downlock pin being accidentally installed in the apex pin inner bore, which is adjacent to the correct hole for the downlock pin in the NLG lock link assembly. When the gear-up command was issued, the nose gear retracted and the aircraft dropped onto its nose. The aircraft sustained significant damage to the forward fuselage and engines. As a result, Boeing issued a service bulletin to mandate installing an insert into the NLG lock link apex pin inner bore. The insert prevents the NLG downlock pin from being inserted in the apex pin bore instead of the adjacent NLG downlock pin hole. NLG: Nose Landing Gear 📹: WhatYouHaventSeen(YouTube)
0:49

Raising a collapsed nose of a Boeing 787 Dreamliner. On 8 March 2018, Boeing 787-8 BBJ N507BJ suffered a nose gear collapse at Moses Lake, Washington, while undergoing maintenance and VIP conversion work. This was a result of the NLG downlock pin being accidentally installed in the apex pin inner bore, which is adjacent to the correct hole for the downlock pin in the NLG lock link assembly. When the gear-up command was issued, the nose gear retracted and the aircraft dropped onto its nose. The aircraft sustained significant damage to the forward fuselage and engines. As a result, Boeing issued a service bulletin to mandate installing an insert into the NLG lock link apex pin inner bore. The insert prevents the NLG downlock pin from being inserted in the apex pin bore instead of the adjacent NLG downlock pin hole. NLG: Nose Landing Gear 📹: WhatYouHaventSeen(YouTube)

Turbine Traveller

295,434 views • 2 months ago

A similar tool - Lockphish - is available on GitHub. It is convincing, and a user in a hurry can be easily tricked Lockphish is a tool for phishing the lock screen, designed to grab Windows credentials, Android PIN, and iPhone Passcode using a https link
0:21

A similar tool - Lockphish - is available on GitHub. It is convincing, and a user in a hurry can be easily tricked Lockphish is a tool for phishing the lock screen, designed to grab Windows credentials, Android PIN, and iPhone Passcode using a https link

Mobile Hacker

631,072 views • 2 years ago

Pin your enemies to the wall with the Season 5 Battle Pass. No, literally, you can use the Spear to pin enemies to a wall 🤯 💥 New AR 📌 Static-HV SMG 🔱 Throwable Spear 🔥 and more heat to unlock
0:20

Pin your enemies to the wall with the Season 5 Battle Pass. No, literally, you can use the Spear to pin enemies to a wall 🤯 💥 New AR 📌 Static-HV SMG 🔱 Throwable Spear 🔥 and more heat to unlock

Call of Duty

159,176 views • 2 years ago

Autonomous introduced Key, a battery-free NFC key that physically unlocks the distracting apps on your phone. You choose which apps to lock, then tap the Autonomous key on your phone to start a timed unlock session. Your phone can start the lock, but cannot lift it without the physical key, which makes it much harder to casually cave.
0:31

Autonomous introduced Key, a battery-free NFC key that physically unlocks the distracting apps on your phone. You choose which apps to lock, then tap the Autonomous key on your phone to start a timed unlock session. Your phone can start the lock, but cannot lift it without the physical key, which makes it much harder to casually cave.

Ritwik Pavan

80,946 views • 1 month ago

Out on the ramp with the A350 today, taking a close look at the nose landing gear safety pin setup. There are 3 holes visible on the mechanism, all different diameters. Only one is the right size and spot where the full safety/ground lock pin inserts completely to lock the gear solid. The others are for pivots and such, so the pin won't seat fully. And importantly, no covers on any of them.... That's by design, keeps everything easy to inspect, access, and work with during maintenance.. One wrong hole and things can go sideways (seen it on other types like the 787 before mods). Always double-check by eye and feel for that solid engagement.
0:54

Out on the ramp with the A350 today, taking a close look at the nose landing gear safety pin setup. There are 3 holes visible on the mechanism, all different diameters. Only one is the right size and spot where the full safety/ground lock pin inserts completely to lock the gear solid. The others are for pivots and such, so the pin won't seat fully. And importantly, no covers on any of them.... That's by design, keeps everything easy to inspect, access, and work with during maintenance.. One wrong hole and things can go sideways (seen it on other types like the 787 before mods). Always double-check by eye and feel for that solid engagement.

Fahad Naim

268,615 views • 2 months ago

Guessing app's PIN using Flipper Zero as #BadUSB This "App Locker" app protects access to user selected apps - in this case, Instagram - using PIN code. It is possible to guess it with unlimited attempts, because the app developers haven't implemented brute-force protection and even timeout after few incorrect entered passwords. The app only allows to set 4 digit PIN. This allows us to try 10,000 PINs with unlimited attempts. After every try is 0.5 second delay. Because of that, it would take us 84 minutes to rotate through all the PIN combinations. ✅If you decide to use such an app lock protector, make sure not to use easy to guess and common passwords. If you are a developer, I advise you to implement a brute-force protection that includes timeout. #FlipperZero #Android #bruteforce
0:29

Guessing app's PIN using Flipper Zero as #BadUSB This "App Locker" app protects access to user selected apps - in this case, Instagram - using PIN code. It is possible to guess it with unlimited attempts, because the app developers haven't implemented brute-force protection and even timeout after few incorrect entered passwords. The app only allows to set 4 digit PIN. This allows us to try 10,000 PINs with unlimited attempts. After every try is 0.5 second delay. Because of that, it would take us 84 minutes to rotate through all the PIN combinations. ✅If you decide to use such an app lock protector, make sure not to use easy to guess and common passwords. If you are a developer, I advise you to implement a brute-force protection that includes timeout. #FlipperZero #Android #bruteforce

Mobile Hacker

223,755 views • 2 years ago

Banks and card providers will be given the power, from today, to set a maximum - or unlimited - single payment amount without the need to enter a four-digit PIN. On #BBCBreakfast Peter Ruddick explained the changes to 'tap and go' for card payments
1:58

Banks and card providers will be given the power, from today, to set a maximum - or unlimited - single payment amount without the need to enter a four-digit PIN. On #BBCBreakfast Peter Ruddick explained the changes to 'tap and go' for card payments

BBC Breakfast

25,514 views • 5 months ago

Blockstream Jade can hold a duress PIN, a second PIN separate from your real one. Enter it under pressure and Jade erases the wallet, so what's handed over is an empty device. There is no undo. Back up your recovery phrase first, and choose carefully when to use it.
0:42

Blockstream Jade can hold a duress PIN, a second PIN separate from your real one. Enter it under pressure and Jade erases the wallet, so what's handed over is an empty device. There is no undo. Back up your recovery phrase first, and choose carefully when to use it.

Blockstream Jade

28,540 views • 5 days ago

GROK KIDS MODE MADE LEARNING FEEL ILLEGALLY FUN School vibes just got replaced with curiosity and giggle-powered science brain boosts! Kids Fun Lab Setup: * Download the Grok app on iOS or Android - let the fun begin * Open Settings and tap Kids Mode for future geniuses * Set a 4-digit PIN to lock the IQ fun for your kiddos * Good Rudi goes live - the fun officially begins Grok is turning homework boredom into a next-level IQ adventure! Source: Grok
0:37

GROK KIDS MODE MADE LEARNING FEEL ILLEGALLY FUN School vibes just got replaced with curiosity and giggle-powered science brain boosts! Kids Fun Lab Setup: * Download the Grok app on iOS or Android - let the fun begin * Open Settings and tap Kids Mode for future geniuses * Set a 4-digit PIN to lock the IQ fun for your kiddos * Good Rudi goes live - the fun officially begins Grok is turning homework boredom into a next-level IQ adventure! Source: Grok

Mario Nawfal

144,955 views • 8 months ago

PoC for a critical vulnerability in Apple macOS Screen Sharing (CVE-2026-65400). If Screen Sharing is enabled, any network attacker can exploit the bug to log in as any account, without knowing the password. We reverse engineered Apple’s unusual macOS 26.6.1 patch to understand the root cause and exploitation path. Please upgrade your macOS boxes to 26.6.1. Full technical writeup drops tomorrow.
0:31

PoC for a critical vulnerability in Apple macOS Screen Sharing (CVE-2026-65400). If Screen Sharing is enabled, any network attacker can exploit the bug to log in as any account, without knowing the password. We reverse engineered Apple’s unusual macOS 26.6.1 patch to understand the root cause and exploitation path. Please upgrade your macOS boxes to 26.6.1. Full technical writeup drops tomorrow.

Calif

447,981 views • 13 days ago

The year is 2001. Tiger Woods has 240 to the pin. Grabs a 3 iron and sticks it within 6 feet 🐐
0:33

The year is 2001. Tiger Woods has 240 to the pin. Grabs a 3 iron and sticks it within 6 feet 🐐

Shooter McGavin

528,198 views • 1 year ago

MicroSD 2FA on the COLDCARD adds a physical second factor. Pair it to a specific microSD card and it won’t unlock without it, even with the correct PIN. No card or wrong card = seed wiped. We’re giving away an Mk5. To enter: Like, repost, and comment why you want to win one.
0:57

MicroSD 2FA on the COLDCARD adds a physical second factor. Pair it to a specific microSD card and it won’t unlock without it, even with the correct PIN. No card or wrong card = seed wiped. We’re giving away an Mk5. To enter: Like, repost, and comment why you want to win one.

COLDCARD

20,225 views • 3 months ago

Back then, Daniel Puder has Kurt Angle's arm in a Kimura Lock and is ready to snap it... But Charles Robinson spots the chance to count a pin on the Tough Enough contestant to save Angle's embarrassment If not for the ref, Puder would probably have broken Angle's arm 💀
2:13

Back then, Daniel Puder has Kurt Angle's arm in a Kimura Lock and is ready to snap it... But Charles Robinson spots the chance to count a pin on the Tough Enough contestant to save Angle's embarrassment If not for the ref, Puder would probably have broken Angle's arm 💀

tribal chief ☝🏻🩸

367,962 views • 1 year ago