Loading video...

Video Failed to Load

Go Home

BootROM → root → lock-screen PIN. We enter BROM mode, load a patched preloader, gain root, extract the lock credential, recover the 6-digit PIN offline, and use it to unlock the phone. Full PoC ↓

CertiK's profile picture

CertiK

558,949 subscribers

29,161 views • 2 months ago •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

How far can a BootROM exploit take you on a Crypto phone? All the way to the wallet signing key. At #DEFCON34, CertiK researcher Guanxing Wen (Guanxing) demonstrated the full chain: BootROM → root → offline PIN recovery → wallet signing key. Short version ↓
1:54

How far can a BootROM exploit take you on a Crypto phone? All the way to the wallet signing key. At #DEFCON34, CertiK researcher Guanxing Wen (Guanxing) demonstrated the full chain: BootROM → root → offline PIN recovery → wallet signing key. Short version ↓

CertiK

20,872 views • 2 months ago

Root wasn’t the end. From system compromise, we pulled the wallet keystore, recovered the private key, derived the public key, and verified it against the on-chain wallet on BaseScan. Full PoC ↓
0:43

Root wasn’t the end. From system compromise, we pulled the wallet keystore, recovered the private key, derived the public key, and verified it against the on-chain wallet on BaseScan. Full PoC ↓

CertiK

17,982 views • 1 month ago

Have you seen OPay latest security upgrades: Emergency Lock and Safety PIN? @iswellthecapitalist tells us why they're worth locating and setting up today. Head to your OPay app to locate the Emergency Lock for when you need it and set up your Safety PIN today. Stay protected, always. #OPaySafetyMode #SafetyPIN #EmergencyLock #OPayBeyondBanking
1:41

Have you seen OPay latest security upgrades: Emergency Lock and Safety PIN? @iswellthecapitalist tells us why they're worth locating and setting up today. Head to your OPay app to locate the Emergency Lock for when you need it and set up your Safety PIN today. Stay protected, always. #OPaySafetyMode #SafetyPIN #EmergencyLock #OPayBeyondBanking

Nigeria Stories

46,656 views • 3 months ago

Because of a bug in Android 8.0, it is possible to bypass lock-screen timeout and disable Android PIN/Password/Pattern using ADB commands In the video, I automatically tested 26 different PINs in a row without 30 seconds timeout being triggered. As a result, PIN was found and lock-screen protection removed. This bug was fixed in Android 8.1 and above OS versions. This method can be used only on devices with enabled debugging. More info:
0:29

Because of a bug in Android 8.0, it is possible to bypass lock-screen timeout and disable Android PIN/Password/Pattern using ADB commands In the video, I automatically tested 26 different PINs in a row without 30 seconds timeout being triggered. As a result, PIN was found and lock-screen protection removed. This bug was fixed in Android 8.1 and above OS versions. This method can be used only on devices with enabled debugging. More info:

Mobile Hacker

118,663 views • 3 years ago

Wondering about the thinking behind our newly launched Safety PIN and Emergency Lock? Watch the story behind the product. Built not just for protection, but for peace of mind when it matters most. Have you set up your Safety PIN yet? Click to set up your Safety PIN here: #OPaySafetyMode #SafetyMode #OPayBeyondBanking
1:07

Wondering about the thinking behind our newly launched Safety PIN and Emergency Lock? Watch the story behind the product. Built not just for protection, but for peace of mind when it matters most. Have you set up your Safety PIN yet? Click to set up your Safety PIN here: #OPaySafetyMode #SafetyMode #OPayBeyondBanking

OPay

16,351 views • 3 months ago

Raising a collapsed nose of a Boeing 787 Dreamliner. On 8 March 2018, Boeing 787-8 BBJ N507BJ suffered a nose gear collapse at Moses Lake, Washington, while undergoing maintenance and VIP conversion work. This was a result of the NLG downlock pin being accidentally installed in the apex pin inner bore, which is adjacent to the correct hole for the downlock pin in the NLG lock link assembly. When the gear-up command was issued, the nose gear retracted and the aircraft dropped onto its nose. The aircraft sustained significant damage to the forward fuselage and engines. As a result, Boeing issued a service bulletin to mandate installing an insert into the NLG lock link apex pin inner bore. The insert prevents the NLG downlock pin from being inserted in the apex pin bore instead of the adjacent NLG downlock pin hole. NLG: Nose Landing Gear 📹: WhatYouHaventSeen(YouTube)
0:49

Raising a collapsed nose of a Boeing 787 Dreamliner. On 8 March 2018, Boeing 787-8 BBJ N507BJ suffered a nose gear collapse at Moses Lake, Washington, while undergoing maintenance and VIP conversion work. This was a result of the NLG downlock pin being accidentally installed in the apex pin inner bore, which is adjacent to the correct hole for the downlock pin in the NLG lock link assembly. When the gear-up command was issued, the nose gear retracted and the aircraft dropped onto its nose. The aircraft sustained significant damage to the forward fuselage and engines. As a result, Boeing issued a service bulletin to mandate installing an insert into the NLG lock link apex pin inner bore. The insert prevents the NLG downlock pin from being inserted in the apex pin bore instead of the adjacent NLG downlock pin hole. NLG: Nose Landing Gear 📹: WhatYouHaventSeen(YouTube)

Turbine Traveller

295,579 views • 4 months ago

A similar tool - Lockphish - is available on GitHub. It is convincing, and a user in a hurry can be easily tricked Lockphish is a tool for phishing the lock screen, designed to grab Windows credentials, Android PIN, and iPhone Passcode using a https link
0:21

A similar tool - Lockphish - is available on GitHub. It is convincing, and a user in a hurry can be easily tricked Lockphish is a tool for phishing the lock screen, designed to grab Windows credentials, Android PIN, and iPhone Passcode using a https link

Mobile Hacker

632,054 views • 2 years ago

Pin your enemies to the wall with the Season 5 Battle Pass. No, literally, you can use the Spear to pin enemies to a wall 🤯 💥 New AR 📌 Static-HV SMG 🔱 Throwable Spear 🔥 and more heat to unlock
0:20

Pin your enemies to the wall with the Season 5 Battle Pass. No, literally, you can use the Spear to pin enemies to a wall 🤯 💥 New AR 📌 Static-HV SMG 🔱 Throwable Spear 🔥 and more heat to unlock

Call of Duty

159,322 views • 2 years ago

He rented a yard, lined it with dump trailers, and never even shows up. Customer calls? He sends a pin drop, locker code, and trailer number. Pick it up. Use it. Bring it back to the same spot. Lock it. Send pics. That’s the whole business. Simple. Scalable. Brilliant. 💡
0:23

He rented a yard, lined it with dump trailers, and never even shows up. Customer calls? He sends a pin drop, locker code, and trailer number. Pick it up. Use it. Bring it back to the same spot. Lock it. Send pics. That’s the whole business. Simple. Scalable. Brilliant. 💡

Christian Bello

180,933 views • 9 months ago

Autonomous introduced Key, a battery-free NFC key that physically unlocks the distracting apps on your phone. You choose which apps to lock, then tap the Autonomous key on your phone to start a timed unlock session. Your phone can start the lock, but cannot lift it without the physical key, which makes it much harder to casually cave.
0:31

Autonomous introduced Key, a battery-free NFC key that physically unlocks the distracting apps on your phone. You choose which apps to lock, then tap the Autonomous key on your phone to start a timed unlock session. Your phone can start the lock, but cannot lift it without the physical key, which makes it much harder to casually cave.

Ritwik Pavan

80,946 views • 3 months ago

Out on the ramp with the A350 today, taking a close look at the nose landing gear safety pin setup. There are 3 holes visible on the mechanism, all different diameters. Only one is the right size and spot where the full safety/ground lock pin inserts completely to lock the gear solid. The others are for pivots and such, so the pin won't seat fully. And importantly, no covers on any of them.... That's by design, keeps everything easy to inspect, access, and work with during maintenance.. One wrong hole and things can go sideways (seen it on other types like the 787 before mods). Always double-check by eye and feel for that solid engagement.
0:54

Out on the ramp with the A350 today, taking a close look at the nose landing gear safety pin setup. There are 3 holes visible on the mechanism, all different diameters. Only one is the right size and spot where the full safety/ground lock pin inserts completely to lock the gear solid. The others are for pivots and such, so the pin won't seat fully. And importantly, no covers on any of them.... That's by design, keeps everything easy to inspect, access, and work with during maintenance.. One wrong hole and things can go sideways (seen it on other types like the 787 before mods). Always double-check by eye and feel for that solid engagement.

Fahad Naim

268,615 views • 4 months ago

Guessing app's PIN using Flipper Zero as #BadUSB This "App Locker" app protects access to user selected apps - in this case, Instagram - using PIN code. It is possible to guess it with unlimited attempts, because the app developers haven't implemented brute-force protection and even timeout after few incorrect entered passwords. The app only allows to set 4 digit PIN. This allows us to try 10,000 PINs with unlimited attempts. After every try is 0.5 second delay. Because of that, it would take us 84 minutes to rotate through all the PIN combinations. ✅If you decide to use such an app lock protector, make sure not to use easy to guess and common passwords. If you are a developer, I advise you to implement a brute-force protection that includes timeout. #FlipperZero #Android #bruteforce
0:29

Guessing app's PIN using Flipper Zero as #BadUSB This "App Locker" app protects access to user selected apps - in this case, Instagram - using PIN code. It is possible to guess it with unlimited attempts, because the app developers haven't implemented brute-force protection and even timeout after few incorrect entered passwords. The app only allows to set 4 digit PIN. This allows us to try 10,000 PINs with unlimited attempts. After every try is 0.5 second delay. Because of that, it would take us 84 minutes to rotate through all the PIN combinations. ✅If you decide to use such an app lock protector, make sure not to use easy to guess and common passwords. If you are a developer, I advise you to implement a brute-force protection that includes timeout. #FlipperZero #Android #bruteforce

Mobile Hacker

223,755 views • 3 years ago

Banks and card providers will be given the power, from today, to set a maximum - or unlimited - single payment amount without the need to enter a four-digit PIN. On #BBCBreakfast Peter Ruddick explained the changes to 'tap and go' for card payments
1:58

Banks and card providers will be given the power, from today, to set a maximum - or unlimited - single payment amount without the need to enter a four-digit PIN. On #BBCBreakfast Peter Ruddick explained the changes to 'tap and go' for card payments

BBC Breakfast

25,514 views • 6 months ago

Wayne Allyn Root: If the Democrats gain power, don’t think there won’t be a chance that we’ll wind up dead. We can’t give them power. We have to stop the steal. There’s only one way to secure the election and get it done before the midterms: my idea—a national security emergency for elections. Sir Wayne Allyn Root - TV & Radio Host
3:22

Wayne Allyn Root: If the Democrats gain power, don’t think there won’t be a chance that we’ll wind up dead. We can’t give them power. We have to stop the steal. There’s only one way to secure the election and get it done before the midterms: my idea—a national security emergency for elections. Sir Wayne Allyn Root - TV & Radio Host

Bannon’s WarRoom

15,832 views • 27 days ago

GROK KIDS MODE MADE LEARNING FEEL ILLEGALLY FUN School vibes just got replaced with curiosity and giggle-powered science brain boosts! Kids Fun Lab Setup: * Download the Grok app on iOS or Android - let the fun begin * Open Settings and tap Kids Mode for future geniuses * Set a 4-digit PIN to lock the IQ fun for your kiddos * Good Rudi goes live - the fun officially begins Grok is turning homework boredom into a next-level IQ adventure! Source: Grok
0:37

GROK KIDS MODE MADE LEARNING FEEL ILLEGALLY FUN School vibes just got replaced with curiosity and giggle-powered science brain boosts! Kids Fun Lab Setup: * Download the Grok app on iOS or Android - let the fun begin * Open Settings and tap Kids Mode for future geniuses * Set a 4-digit PIN to lock the IQ fun for your kiddos * Good Rudi goes live - the fun officially begins Grok is turning homework boredom into a next-level IQ adventure! Source: Grok

Mario Nawfal

144,955 views • 10 months ago

Blockstream Jade can hold a duress PIN, a second PIN separate from your real one. Enter it under pressure and Jade erases the wallet, so what's handed over is an empty device. There is no undo. Back up your recovery phrase first, and choose carefully when to use it.
0:42

Blockstream Jade can hold a duress PIN, a second PIN separate from your real one. Enter it under pressure and Jade erases the wallet, so what's handed over is an empty device. There is no undo. Back up your recovery phrase first, and choose carefully when to use it.

Blockstream Jade

29,256 views • 1 month ago

PoC for a critical vulnerability in Apple macOS Screen Sharing (CVE-2026-65400). If Screen Sharing is enabled, any network attacker can exploit the bug to log in as any account, without knowing the password. We reverse engineered Apple’s unusual macOS 26.6.1 patch to understand the root cause and exploitation path. Please upgrade your macOS boxes to 26.6.1. Full technical writeup drops tomorrow.
0:31

PoC for a critical vulnerability in Apple macOS Screen Sharing (CVE-2026-65400). If Screen Sharing is enabled, any network attacker can exploit the bug to log in as any account, without knowing the password. We reverse engineered Apple’s unusual macOS 26.6.1 patch to understand the root cause and exploitation path. Please upgrade your macOS boxes to 26.6.1. Full technical writeup drops tomorrow.

Calif

456,893 views • 2 months ago

The year is 2001. Tiger Woods has 240 to the pin. Grabs a 3 iron and sticks it within 6 feet 🐐
0:33

The year is 2001. Tiger Woods has 240 to the pin. Grabs a 3 iron and sticks it within 6 feet 🐐

Shooter McGavin

528,198 views • 1 year ago