Loading video...

Video Failed to Load

Go Home

Guessing app's PIN using Flipper Zero as #BadUSB This "App Locker" app protects access to user selected apps - in this case, Instagram - using PIN code. It is possible to guess it with unlimited attempts, because the app developers haven't implemented brute-force protection and even timeout after few...

androidmalware2's profile picture

Mobile Hacker

59,933 subscribers

220,988 views • 2 years ago •via X (Twitter)

#BadUSB
LIVE

Anya Rossi• Live Now

Private livecam show

10 Comments

Saxhornet 🎷🇮🇱🇫🇷🇺🇸🇷🇺's profile picture
Saxhornet 🎷🇮🇱🇫🇷🇺🇸🇷🇺2 years ago

No protection on the number of guessing passwords ?

Mobile Hacker's profile picture
Mobile Hacker2 years ago

Protection and timeout are not implemented.

ຸ's profile picture
ຸ2 years ago

Quién putas usa esas apps tan mal hechas, dios mío...

Mobile Hacker's profile picture
Mobile Hacker2 years ago

Based on Google Play, 100M+ users.

@misconfig_exe's profile picture
@misconfig_exe2 years ago

This really is not much of a security risk, because the device itself should be secured. If it's being handed over to someone unlocked, that person has been deemed trustworthy enough to assume that they aren't going to spend 84 minutes trying to crack your "Instagram" app locker

Coapprentice's profile picture
Coapprentice2 years ago

I don't know why developers are still going out of android developers spec to implement their own custom in-app auth. Android Keystore System by default gives you in-app authentication tiers and built-in UI, just use jetpack. For custom auth, they are writing boilerplate code.

Tribe Of Anonymous's profile picture
Tribe Of Anonymous2 years ago

We love Flipper Zero!

Musab Alharany's profile picture
Musab Alharany2 years ago

Is the device rooted? Or you enabled debugging mode ?

Mobile Hacker's profile picture
Mobile Hacker2 years ago

Device is not rooted and debugging mode is not enabled. Flipper Zero impersonates keyboard (HID device) to send set of predefined keys that will be pressed on connected smartphone.

SilentNight's profile picture
SilentNight2 years ago

please share script code unlock phone , to instal on flipper

Related Videos

Because of a bug in Android 8.0, it is possible to bypass lock-screen timeout and disable Android PIN/Password/Pattern using ADB commands In the video, I automatically tested 26 different PINs in a row without 30 seconds timeout being triggered. As a result, PIN was found and lock-screen protection removed. This bug was fixed in Android 8.1 and above OS versions. This method can be used only on devices with enabled debugging. More info:
0:29

Because of a bug in Android 8.0, it is possible to bypass lock-screen timeout and disable Android PIN/Password/Pattern using ADB commands In the video, I automatically tested 26 different PINs in a row without 30 seconds timeout being triggered. As a result, PIN was found and lock-screen protection removed. This bug was fixed in Android 8.1 and above OS versions. This method can be used only on devices with enabled debugging. More info:

Mobile Hacker

118,429 views • 2 years ago

THIS IS ONE OF MY BEST FEATURES ON THE PUNTRR APP IT HELP YOU MAKE RISKY GAMES SAFER DOWNLOAD PUNTRR AI APP TO HELP YOU WITH 80%-90% SURE PREDICTIONS USING AI DATA USE MY CODE: KOMBO to access be able to use the APP for free for 7days APPLE ANDROID
2:12

THIS IS ONE OF MY BEST FEATURES ON THE PUNTRR APP IT HELP YOU MAKE RISKY GAMES SAFER DOWNLOAD PUNTRR AI APP TO HELP YOU WITH 80%-90% SURE PREDICTIONS USING AI DATA USE MY CODE: KOMBO to access be able to use the APP for free for 7days APPLE ANDROID

KOMBO™

140,751 views • 3 months ago

built this web app that allows me to read epubs like i am scrolling though reels. found an epub of all the Paul Graham essays, downloaded it and uploaded on the app, now you can just scroll through and highlight if needed. would you use it?
0:42

built this web app that allows me to read epubs like i am scrolling though reels. found an epub of all the Paul Graham essays, downloaded it and uploaded on the app, now you can just scroll through and highlight if needed. would you use it?

rachit

86,429 views • 1 year ago

To everyone asking about how I made the video using AI, this is the simple explanation: If you're good with wordings no need using ChatGPT If not then use it. Go to your Grok app, put the image you want to use, now tell it to imagine the prompt you want, note that it's just a
0:21

To everyone asking about how I made the video using AI, this is the simple explanation: If you're good with wordings no need using ChatGPT If not then use it. Go to your Grok app, put the image you want to use, now tell it to imagine the prompt you want, note that it's just a

Eniola

149,652 views • 7 months ago

I’ve created a way to use your iPhone to travel through time and apps on your Mac. It features a liquid glass timeline that lets you jump between recently opened apps on your Mac and updates in real-time. You can even pin apps to the front of the timeline to create the perfect app launcher combination for your current workflow.
0:31

I’ve created a way to use your iPhone to travel through time and apps on your Mac. It features a liquid glass timeline that lets you jump between recently opened apps on your Mac and updates in real-time. You can even pin apps to the front of the timeline to create the perfect app launcher combination for your current workflow.

Phil Traut ᯅ

127,662 views • 1 month ago

Claude Code with Sonnet 4.5 is actually incredible I gave it a prompt for a super complex app, and it one shot the entire thing In this video I walk you through how to use Claude Code to build a prompt library app you can start using immediately (no coding experience required):
19:42

Claude Code with Sonnet 4.5 is actually incredible I gave it a prompt for a super complex app, and it one shot the entire thing In this video I walk you through how to use Claude Code to build a prompt library app you can start using immediately (no coding experience required):

Alex Finn

40,955 views • 8 months ago

Today i'm Open Sourcing "Rilable" The iOS app that builds Web apps and iOS Apps. I built it with Fable 5 in 10 prompts. (~ $210 in tokens on API pricing) All apps are built with Claude Models, and every app spins up a sandbox (Exactly like Lovable) using Daytona. Database is Convex. The app allows you to build apps that have AI features for this it uses Vercel AI gateway, and iOS apps are using Chorus.com iOS skill (All links below)
0:35

Today i'm Open Sourcing "Rilable" The iOS app that builds Web apps and iOS Apps. I built it with Fable 5 in 10 prompts. (~ $210 in tokens on API pricing) All apps are built with Claude Models, and every app spins up a sandbox (Exactly like Lovable) using Daytona. Database is Convex. The app allows you to build apps that have AI features for this it uses Vercel AI gateway, and iOS apps are using Chorus.com iOS skill (All links below)

Riley Brown

70,036 views • 14 days ago

As of today, you can use the Sentry MCP in @Vercel v0 to help you efficiently debug issues within your app 💡 Here's @CodyDeArkland to walk you through how easy it is to set up Try it out at and let us know what you think!
3:26

As of today, you can use the Sentry MCP in @Vercel v0 to help you efficiently debug issues within your app 💡 Here's @CodyDeArkland to walk you through how easy it is to set up Try it out at and let us know what you think!

Sentry

11,176 views • 6 months ago

you don’t need to pay to design your app screenshots anymore. you can generate ready-to-use screenshots in minutes with this upload your app images, add info about your app, select a style, and generate high-quality screenshots in minutes. easily edit them after as well to tweak small details try it for free link below
0:47

you don’t need to pay to design your app screenshots anymore. you can generate ready-to-use screenshots in minutes with this upload your app images, add info about your app, select a style, and generate high-quality screenshots in minutes. easily edit them after as well to tweak small details try it for free link below

Dhruval

141,080 views • 2 months ago

Hacking the #EU #AgeVerification app in under 2 minutes. During setup, the app asks you to create a PIN. After entry, the app *encrypts* it and saves it in the shared_prefs directory. 1. It shouldn't be encrypted at all - that's a really poor design. 2. It's not cryptographically tied to the vault which contains the identity data. So, an attacker can simply remove the PinEnc/PinIV values from the shared_prefs file and restart the app. After choosing a different PIN, the app presents credentials created under the old profile and let's the attacker present them as valid. Other issues: 1. Rate limiting is an incrementing number in the same config file. Just reset it to 0 and keep trying. 2. "UseBiometricAuth" is a boolean, also in the same file. Set it to false and it just skips that step. Seriously Ursula von der Leyen - this product will be the catalyst for an enormous breach at some point. It's just a matter of time.
2:13

Hacking the #EU #AgeVerification app in under 2 minutes. During setup, the app asks you to create a PIN. After entry, the app *encrypts* it and saves it in the shared_prefs directory. 1. It shouldn't be encrypted at all - that's a really poor design. 2. It's not cryptographically tied to the vault which contains the identity data. So, an attacker can simply remove the PinEnc/PinIV values from the shared_prefs file and restart the app. After choosing a different PIN, the app presents credentials created under the old profile and let's the attacker present them as valid. Other issues: 1. Rate limiting is an incrementing number in the same config file. Just reset it to 0 and keep trying. 2. "UseBiometricAuth" is a boolean, also in the same file. Set it to false and it just skips that step. Seriously Ursula von der Leyen - this product will be the catalyst for an enormous breach at some point. It's just a matter of time.

Paul Moore - Security Consultant 

3,392,910 views • 2 months ago

Omg, this is such a hack for vibecoding mobile apps This is an image with a video on the top. The video is a character with no backround. I'm using: > Masko AI to generate the video > vibecode.dev to build the app In masko all you need to do is provide an image, and it will give you a video without a background. And then all you need to do is give it to vibecode.dev which is the best mobile app builder.
0:25

Omg, this is such a hack for vibecoding mobile apps This is an image with a video on the top. The video is a character with no backround. I'm using: > Masko AI to generate the video > vibecode.dev to build the app In masko all you need to do is provide an image, and it will give you a video without a background. And then all you need to do is give it to vibecode.dev which is the best mobile app builder.

Emily Lambert

29,840 views • 4 months ago

Want to build an iOS app, & send it to the App Store? With zero coding... This is by far the easiest way to do that. this video: 1. Shows how to take your idea and send to app store 2. Goes over most features of the Vibecode app (The only mobile app that builds mobile apps) 00:00 Intro 00:37 Getting Started with the Mobile App 00:56 AI Models (GPT-5 and Claude 4 Sonnet) 02:10 Build vs Plan Mode 03:13 Testing 04:16 Editing your app 05:58 Giving your app asset images to use in the app 08:25 Using image references for styling 10:30 Vibecode App Web App 13:47 Sending your app to the App Store for Review
15:33

Want to build an iOS app, & send it to the App Store? With zero coding... This is by far the easiest way to do that. this video: 1. Shows how to take your idea and send to app store 2. Goes over most features of the Vibecode app (The only mobile app that builds mobile apps) 00:00 Intro 00:37 Getting Started with the Mobile App 00:56 AI Models (GPT-5 and Claude 4 Sonnet) 02:10 Build vs Plan Mode 03:13 Testing 04:16 Editing your app 05:58 Giving your app asset images to use in the app 08:25 Using image references for styling 10:30 Vibecode App Web App 13:47 Sending your app to the App Store for Review

vibecode

21,278 views • 10 months ago

Chinese police have been going door-to-door to force everyone to install the government spyware, the 'anti-fraud' app. The app immediately sends an alert to police, if it detects you try to install the banned foreign apps such as Twitter, VPNs or receive a foreign call etc.
2:04

Chinese police have been going door-to-door to force everyone to install the government spyware, the 'anti-fraud' app. The app immediately sends an alert to police, if it detects you try to install the banned foreign apps such as Twitter, VPNs or receive a foreign call etc.

Songpinganq

22,920 views • 1 year ago

Last week was Windows, this week goes out to the mobile devs! Now, you can build, test, iterate on iOS apps much faster inside Codex. You can now: - Give precise feedback on your app's UI to Codex using annotation mode - Ask Codex to test every element and orientation of your app using the browser. Try it by installing the Build iOS Apps plugin. s/o to Evan Bacon 🥓 for serve-sim that allows us to make this possible & Rounak Jain who cooked to get this one out!
0:41

Last week was Windows, this week goes out to the mobile devs! Now, you can build, test, iterate on iOS apps much faster inside Codex. You can now: - Give precise feedback on your app's UI to Codex using annotation mode - Ask Codex to test every element and orientation of your app using the browser. Try it by installing the Build iOS Apps plugin. s/o to Evan Bacon 🥓 for serve-sim that allows us to make this possible & Rounak Jain who cooked to get this one out!

James Sun

17,777 views • 20 days ago

Today, we’re releasing a feature that allows Claude to control your computer: Mouse, keyboard, and screen, giving it the ability to use any app. I believe this is especially useful if used with Dispatch, which allows you to remotely control Claude on your computer while you’re away.
1:13

Today, we’re releasing a feature that allows Claude to control your computer: Mouse, keyboard, and screen, giving it the ability to use any app. I believe this is especially useful if used with Dispatch, which allows you to remotely control Claude on your computer while you’re away.

Felix Rieseberg

4,784,547 views • 3 months ago

ELON: YOU WILL BE ABLE TO LIVE YOUR LIFE ON THE X APP “We want it to be such that if you want to, you could live your life on the X app. And as you make it more and more useful, we will obviously give people compelling reasons to use the app every day, and my expectation is well over a billion daily active users.” Source Elon Musk
0:48

ELON: YOU WILL BE ABLE TO LIVE YOUR LIFE ON THE X APP “We want it to be such that if you want to, you could live your life on the X app. And as you make it more and more useful, we will obviously give people compelling reasons to use the app every day, and my expectation is well over a billion daily active users.” Source Elon Musk

Mario Nawfal

60,735 views • 4 months ago

Olivia Chow wants you to download an app for “safety.” The next time someone is attacking you on the TTC make sure to use the app! This way a bunch of crisis workers can arrive after their coffee break and deal with the situation using the trusted “health care” approach. 👍
0:27

Olivia Chow wants you to download an app for “safety.” The next time someone is attacking you on the TTC make sure to use the app! This way a bunch of crisis workers can arrive after their coffee break and deal with the situation using the trusted “health care” approach. 👍

IntegrityTO

21,589 views • 7 months ago

YOU GET A PIN! YOU GET A PIN! Armed with CBC Sports pins I set out on an Arctic Winter Games mission. To trade and collect as many pins as possible. Here’s how it turned out.
1:33

YOU GET A PIN! YOU GET A PIN! Armed with CBC Sports pins I set out on an Arctic Winter Games mission. To trade and collect as many pins as possible. Here’s how it turned out.

Devin Heroux

29,943 views • 3 years ago

Sheriff Mark Lamb Exposes The US Department Of Homeland Security Is Responsible For Creating The App To Import Illegal Migrants The Cartel Is Using It To Make A Fortune Trafficking Illegals “Who created that app?” “The DHS, Department of Homeland Security. Department of Homeland Security. And they love it, by the way.” “CBP One App” “An app where now people can claim asylum from their home country, and we will actually fly down there and pick them up and bring them here. This administration having flown, like, what, 300,000 Haitians into our country directly. Even if you fix the border issue, they're still gonna be flying people in from other countries because they filed they went through the CVP1 app. The cartels have completely learned how to abuse and use the CBP One app to benefit them. They extort people and say, hey. Look. We'll help you get through the CBP One app, tell you what you do, there's how much you have to pay us.”
0:56

Sheriff Mark Lamb Exposes The US Department Of Homeland Security Is Responsible For Creating The App To Import Illegal Migrants The Cartel Is Using It To Make A Fortune Trafficking Illegals “Who created that app?” “The DHS, Department of Homeland Security. Department of Homeland Security. And they love it, by the way.” “CBP One App” “An app where now people can claim asylum from their home country, and we will actually fly down there and pick them up and bring them here. This administration having flown, like, what, 300,000 Haitians into our country directly. Even if you fix the border issue, they're still gonna be flying people in from other countries because they filed they went through the CVP1 app. The cartels have completely learned how to abuse and use the CBP One app to benefit them. They extort people and say, hey. Look. We'll help you get through the CBP One app, tell you what you do, there's how much you have to pay us.”

Wall Street Apes

382,108 views • 2 years ago