Hacking into Android in 32 seconds | HID attack | Metasploit | PIN brute force PoC

Samsung S7 is connected to Pixel as HID device (keyboard) that tries to brute force lock screen PIN (PoC) and then download, install and launch Metasploit payload

How to prevent such scenario
1) Charge you smartphone using you own adapter when possible
2) Don't use trivial PIN or password lock screen protection
3) Use mobile security software that will detect Metasploit payload

[mobilehacker]

[Video is published] How to unlock PIN protected Android device using ADB or HID method

[joeJVT]

Exactly what one could expect when the pin code is 1111

[ajaygocher]

That's what you feel when you learn "HTML" for first time

[prich]

So it bruit forced a password which in reality is slow af as there is a lock out screen after too many attempts that gets long and longer everytime you fail

[dev_insights]

Pov: You haven't enabled USB debugging 😂

[bravo________]

Ya imagine brute forcing a pin when it locks you out every 5 trys

[manishholla]

For this attack, USB debugging should be enabled and normies generally don't do that.

[zexwareoldaccount]

1. This won't work if USB Debugging is disabled on target device - which is by default and normal people don't enable it either.
2. Multiple failed pin attempts block the device lock for 30 seconds, now unless your second attempt is the phone's original pin, this won't work.
3. Even if USB Debugging is enabled, the android's authorization dialog wont be shown unless the device is unlocked, in which you case, you can't access device from adb.

[femaleleader]

Working with you is an honor, working without you is an absolute horror. Working under you is a pleasure, an experience that I will truly treasure. Thanks, for getting my disabled account back

[TheMorpheusbn]

An attack like this is not possible on recent devices. After ten unsuccessful attempts the attack is once every thirty seconds. On some devices there is a risk of erasing the data.

[Nonobsolete]

Imagine planting a backdoor and have access by accessing it one time

[abrazbashar]

My friend watching me as I attempt this on his phone 👁👄👁

[Jobsmines]

Moral of the story: if you plan on getting thrown in the back of a cop car, *DONT BRING YOUR PHONE*

[ctnflameing]

Imagine putting a video in the phone and he rickrolled us 😂

[Vivianite]

This was on Android 7.1... We're on Android 12 now, coming on 13 in a few months. As fancy as this is, people with a recent phone shouldn't have anything to worry about

[artman]

One of the reasons I don't use "PIN" 😅

[erc]

can you make video how to erase TikTok from INTERNET ??? i will be happy if you do :D have a nice day

[clydealcott]

I think This is practically impossible cuz, the device(victim) will delay the time you'll make your next attempt when the device (attacker) generate a wrong code. Uless you throw a right key code in the script (1st to 6th attempt) you want be able to unlock the device.

[Dowesk]

Perfect, in one word, perfect, amazing. I congratulate you.

[SheikhAmeen]

I bet the first few pins were intentionally wrong and before getting locked for a few seconds, the correct pin was given. Would've been much real if the attacker didn't know the pin already. Anyway, nice one to trick our friends..