Recovery Android Password/Pin oclHashcat/Hashcat on Mac OS X. ( No Root/Data Loss/SD Card )

Author: NobusHK
575 View
15m 37s Lenght
1 Rating

Recovery Android Password/Pin oclHashcat/Hashcat on Mac OS X. ( No Root/Data Loss/SD Card ) ( Required Software : Xcode , Brew , oclHashcat/Hashcat and Android SDK ) 1. Create user data backup from Recovery Menu A. Reboot your device in recovery mode B. Go down to menu "backup user data" and make backup ( do not reboot your device after backup was created ). 2. Pull userdata backup with adb. adb root if you get this error : error: device '(null)' not found plug-out the USB cable from your device and plug-in back then type : adb devices adb pull /tmp/recovery.log cat recovery.log | grep backup adb pull /sdcard/userdata backup ( replace with your backup file ) 3. Convert and extract userdata backup dd if=userdata_*.backup bs=512 skip=1 of=backup.tar.gz file backup.tar.gz mkdir ~/backup tar xvf backup.tar.gz -C ~/backup 4. Copy Target Files Target files ============================================ /system/password.key /system/locksettings.db /system/locksettings.db-wal /system/device_policies.xml cp ~/backup/system/password.key ~/Desktop cp ~/backup/system/locksettings.db ~/Desktop cp ~/backup/system/locksettings.db-wal ~/Desktop cp ~/backup/system/device_policies.xml ~/Desktop now you can delete: rm -rf ~/backup/ userdata_* recovery.log backup.tar.gz 5. Extract md5-hash and salt-key and convert salt-key to hex hash. cat ~/Desktop/password.key | tr '[:upper:]' '[:lower:]' | tail -c 32 -md5-hash: 5ef8c45651a597c891a7d0fb12a9c590 cat ~/Desktop/locksettings.db or cat ~/Desktop/locksettings.db-wal if first it's empty. - salt-key: 4bfb7f24c8c124e6 Now search for: locksettingsd_salt printf “%016x” ( salt-key ) Final hash it's : md5($pass:$salt) 6. Check what kind of password it's used and prepare oclHashcat/Hashcat atack cat ~/Desktop/device_policies.xml ?l = abcdefghijklmnopqrstuvwxyz ?u = ABCDEFGHIJKLMNOPQRSTUVWXYZ ?d = 0123456789 ?s = space!"#$%&'()*+,-./:;=?@[\]^_`{|}~ ?a = ?l?u?d?s ?b = 0x00 - 0xff oclHashcat -a 3 -n 80 -u 1024 -m 10 md5-hash:salt-key -i --increment-min=Length --increment-max=Length -1 Mask Attack ?1*Length find /usr/local -name "oclHashcat.pot" cat /usr/local/bin/oclHashcat.pot

Comments

  1. Hi NobusHK, I have locked by Android. I cannot afford data loss. Can you help?
  2. If you don't know how to install oclhashcat on mac, you can use hashcat cpu version on mac