Loading video...

Video Failed to Load

Go Home

Guessing app's PIN using Flipper Zero as #BadUSB This "App Locker" app protects access to user selected apps - in this case, Instagram - using PIN code. It is possible to guess it with unlimited attempts, because the app developers haven't implemented brute-force protection and even timeout after few...

223,755 views • 3 years ago •via X (Twitter)

10 Comments

Saxhornet 🎷🇮🇱🇫🇷🇺🇸🇷🇺's profile picture
Saxhornet 🎷🇮🇱🇫🇷🇺🇸🇷🇺3 years ago

No protection on the number of guessing passwords ?

Mobile Hacker's profile picture
Mobile Hacker3 years ago

Protection and timeout are not implemented.

ຸ's profile picture
ຸ3 years ago

Quién putas usa esas apps tan mal hechas, dios mío...

Mobile Hacker's profile picture
Mobile Hacker3 years ago

Based on Google Play, 100M+ users.

@misconfig_exe's profile picture
@misconfig_exe3 years ago

This really is not much of a security risk, because the device itself should be secured. If it's being handed over to someone unlocked, that person has been deemed trustworthy enough to assume that they aren't going to spend 84 minutes trying to crack your "Instagram" app locker

Coapprentice's profile picture
Coapprentice3 years ago

I don't know why developers are still going out of android developers spec to implement their own custom in-app auth. Android Keystore System by default gives you in-app authentication tiers and built-in UI, just use jetpack. For custom auth, they are writing boilerplate code.

Tribe Of Anonymous's profile picture
Tribe Of Anonymous3 years ago

We love Flipper Zero!

Musab Alharany's profile picture
Musab Alharany3 years ago

Is the device rooted? Or you enabled debugging mode ?

Mobile Hacker's profile picture
Mobile Hacker3 years ago

Device is not rooted and debugging mode is not enabled. Flipper Zero impersonates keyboard (HID device) to send set of predefined keys that will be pressed on connected smartphone.

SilentNight's profile picture
SilentNight3 years ago

please share script code unlock phone , to instal on flipper

Related Videos

A testy exchange after BBC correspondent Steve Rosenberg doorsteps Sergey Lavrov at the Valdai Discussion Club outside Moscow. Here’s a transcript: BBC: “Russia and the West are trading accusations, the West is increasingly accusing Russia of waging a hybrid war against [other] European countries [and] you recently accused the West of using brute force. So first, on this idea of hybrid warfare, do you accept that Russia is waging a covert hybrid war against [other] European countries? And if so, why?” Lavrov: “You mean when we shoot down drones and missiles that Britain and continental Europe give Ukraine, which they then use to attack us? Is that what you mean by “hybrid warfare”?’ BBC: “Not at all.” Lavrov: Well, if you accept that your weapons are being used to attack us, and we shoot those weapons down, call it whatever you want, but as far as I’m concerned, there’s no question that [Western] Europe is waging a war against us. We’ve been saying that for a long time.” BBC: “And on brute force, you accuse the West of using brute force?” Lavrov: “I don’t actually remember using the phrase “brute force.”” BBC: “You said the West resorts to brute force.” Lavrov: “Well, what was what happened in Venezuela, soft power? Or brute force? What happened to the Nord Stream pipelines, was that soft power or brute force? When Iran’s leadership was bombed and killed along with their families, including children, wasn’t that brute force?’ BBC: “But doesn’t Russia use brute force every day in Ukraine?’ Lavrov: “If by that you mean destroying infrastructure that the Nazi regime, with Western support, uses to wage war against the Russian Federation, then yes, we use brute force to eliminate that direct threat to us.”

Brian McDonald

60,418 views • 29 days ago