Generate passwords to break into my Android tablet

[sputnik-1]

Hi all,

I've lost the password to one of my Android tablets, and have looked at all the options I can find online without success.

I could sit with the tablet and start typing 0000 then 0001 then 0002 .. 9999 but that doesn't sound too much fun to me.

My Android tablet has an OTG USB connector which I can connect a regular USB keyboard to.

As Rubber Ducky emulates a USB keyboard, is it possible to program it to input the password 0000 as a USB keyboard would, wait for 30 seconds or so, then input 0001 , wait again then input 0002 etc, until it hits on the right password to let me in?

Does Rubber Ducky support something like a FOR LOOP to enable me to program it to do this?

If not I can write a simple script using a FOR LOOP to generate the Rubber Ducky source code that would input each password in a sequential fashion.

Would this be feasible to do and would it get me into my tablet again?

[Bob123]

Well first thing would be to connect a keyboard and see if you could use it to type the password.  Then write down what key strokes you used.  Then write the rubber ducky payload to mimic what you did on the physical keyboard.  I don't know that I've ever seen a for loop on the ducky before so you may have to go through the sequence by hand.  Or at least automate the coding process.

[Cribbit]

Hi @sputnik-1,

There is no loop for the ducky there is for the bash bunny. but there is a payload already created for this.

you should watch episode 1217.1 and .2

 

[sputnik-1]

Thanks for those replies @Bob123 and @Cribbit 

I know I can use a USB keyboard to enter my gmail password and WiFi password when logged into the Android.

I will double check that I can use a regular USB keyboard to enter the 4 digit login password.

I'll definitely take a look at the videos and post back how I get on with this.

It might take a while for me to post the outcome as I need to get a DigiSpark:

https://aminbohio.com/creating-a-cheap-rubber-ducky-aka-bad-usb-with-attiny85/

Thanks again for your help ☺️

 

 

 

 

[sputnik-1]

Well I purchased 3 x ATTiny85's from Amazon UK here:

https://www.amazon.co.uk/Azdelivery-Kickstarter-Development-Compatible-Entwiklung/dp/B01N7SGC1I/

Followed this tutorial here:

Wrote a test script in the Arduino IDE to print the test password 1234 then press ENTER key:

#include "DigiKeyboard.h"

void setup() {
  // don't need to set anything up to use DigiKeyboard
}

void loop() {
  // this is generally not necessary but with some older systems it seems to
  // prevent missing the first character after a delay:
  // DigiKeyboard.sendKeyStroke(0);
  
  // Type out the test password one digit at a time (assumes US-style keyboard)
  DigiKeyboard.print("1");
  
  // It's better to use DigiKeyboard.delay() over the regular Arduino delay()
  // if doing keyboard stuff because it keeps talking to the computer to make
  // sure the computer knows the keyboard is alive and connected
  // wait 2 seconds before entering next number
  DigiKeyboard.delay(2000);

  DigiKeyboard.print("2");
  DigiKeyboard.delay(2000);

  DigiKeyboard.print("3");
  DigiKeyboard.delay(2000);

  DigiKeyboard.print("4");
  DigiKeyboard.delay(2000);

  // Press ENTER key to submit password
  DigiKeyboard.println();

  DigiKeyboard.delay(2000);
  
}

The above seems to work OK and keeps repeating entering the password 1234 and pressing ENTER key.

Now I know that works I need to try to write a loop to enter the passwords from 0000 to 9999.

AFAIK there's only about 6k of memory available for the program code.

Thanks again for all your help, and I'll update this post as I make more progress!