[Payload] Optimized Android PIN Cracking Script

[mandatory]

Hello,

I took the wordlist from this talk at Defcon: https://www.defcon.org/html/defcon-21/dc-21-speakers.html#Engler where he generated a really great PIN wordlist. I took the wordlist and converted it into Rubber Ducky payload format for you guys.

Get the payload here: http://pastebin.com/eBEuprfX

Here's the PHP file hacked together to generate the Android payloads: http://pastebin.com/t0jqnbC4

(Syntax is "php generator.php inputfile.txt" and it'll output a script to use for your payloads!)

-mandatory

Edited August 13, 2013 by mandatory

[Darren Kitchen]

+1

Mad Props

[joop1961]

I tried this and noticed that some devices take a 30 seconds break after 5 attempts. Ducky is not aware of that and keeps sending codes, and these codes are not executed. So after 5 attempts there must be a wait for 30 seconds or more build in the script.

The double enter is also not needed but only after 5 attempts to klick the warning away.

The changed script can be found here:

http://pastebin.com/4x53pkya