+ Reply to Thread
Results 1 to 4 of 4
  1. #1
    Garage Member RahulB will become famous soon enough
    Join Date
    Aug 2012
    Location
    India
    Posts
    52
    Thanks
    10
    Thanked 14 Times in 8 Posts

    Reset Android PIN/Pattern Lock Using Flashable ZIP (Tested on Gingerbread)



    Hi friends,
    As I was reading some random post about bypassing the Android lock protection using adb (Android Debug Bridge), I thought why not try something that doesn't require you to connect the phone to computer. The way that came into my mind was using the flashable zip.


    What is a flashable zip?
    Flashable ZIPs are the zip files that can be flashed into phones using the Recovery found in phones, which is automatically installed when you install custom kernel or root the phone. I tried googling the exact meaning, but couldn't find it. Though from my experience, these ZIPs are generally used to apply updates to the phone.

    Why flashable ZIP?
    Password of your Android phone can be cleared using adb from you computer, but for that you need a computer, and "USB Debugging" enabled on your phone. But consider a situation, you forgot your password, have no computer (or you have one) but "USB Debugging" disabled. In this case, this trick will come handy as these ZIPs don't need any special setting enabled on your phone.

    How passwords are stored in Android?
    To know how passwords are stored in Android, read Cracking PIN and Password Locks on Android

    Note:
    I've successfully tested this on my rooted Xperia Mini w/ unlocked bootloader. Your phone need to have CWM recovery installed on it. I'm not sure if this requires root permission or not as I don't have any un-rooted device. But this certainly worked on my rooted GB.

    What you need?
    Demo Android Update.zip -> mackief / update.zip--for-Android-Devices-
    Any good editor
    Little patience
    Busybox installed on your phone(installed automatically when you root, most of the time)


    Continued..
    Last edited by RahulB; 08-31-2012 at 10:47 AM.
    Anyone who stops learning is old, whether at twenty or eighty. Anyone who
    keeps learning stays young. The greatest thing in life is to keep your mind young.
    - Henry Ford

    infosecnall.blogspot.in

  2. #2
    Garage Member RahulB will become famous soon enough
    Join Date
    Aug 2012
    Location
    India
    Posts
    52
    Thanks
    10
    Thanked 14 Times in 8 Posts

    Procedure

    Disclaimer : I'm not responsible for any damage done to your phone or you. Use it at your own risk. Make sure you've NANDroid backup, just incase anything goes wrong.

    1. Extract the content of the demo update.zip into an folder, delete the files from /data folder, though don't delete any folder, just files.

    2. Open the editor of your choice (On windows I'd suggest you Notepad++ or Programmer's Notepad, I used the latter).

    3. Locate file [folder where you extracted update.zip]\META-INF\com\google\android\updater-script and open it in editor. Delete all the code.

    4. Enter the following code, this removes both the protection, PIN and Pattern Lock.

    Code:
    ui_print("Password Resetting ZIP by RahulB");
    ui_print("Mounting System");
    ui_print("Mounting Data");
    run_program("/sbin/busybox", "mount", "/system");
    run_program("/sbin/busybox", "mount", "/data");
    ui_print("Deleting Pattern/ PIN Lock Keys");
    delete("/data/system/gesture.key");
    delete("/data/system/password.key");
    ui_print("Unmounting System");
    ui_print("Unmounting Data");
    run_program("/sbin/busybox", "umount", "/system");
    run_program("/sbin/busybox", "umount", "/data");
    ui_print("Done :D");
    5. Select file - save as, and when the dialog box opens, in format select "Ensure Unix Format (LF)". Save and exit.
    Note : this is for programmer's notepad. May vary on others.

    6. Now archive all the file you extracted, along with newly edited file and name it as "update.zip". Transfer this zip to root of your card, and reboot your phone into recovery.

    7. In recovery select "Install from Zip from sdcard" and then select "apply /sdcard/update.zip".

    8. Reboot the phone. You're done.

    Zip file attached.

    Sources/ References :
    [How To] Make A Flashable Update.zip - Android Area51
    forensic blog » Blog Archive » Cracking the Pattern Lock on Android
    update.zip error (status 6)

    Hope you'll enjoy..
    Cheers.
    Attached Files Attached Files
    Last edited by RahulB; 08-31-2012 at 10:50 AM. Reason: updated disclaimer
    Anyone who stops learning is old, whether at twenty or eighty. Anyone who
    keeps learning stays young. The greatest thing in life is to keep your mind young.
    - Henry Ford

    infosecnall.blogspot.in

  3. The Following User Says Thank You to RahulB For This Useful Post:

    b0nd (08-31-2012)

  4. #3
    Garage Newcomer Copyright is on a distinguished road
    Join Date
    May 2013
    Posts
    1
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Hi,

    Your post was like a saver to me, I tried the flashable ZIP to bypass the Pin/Pattern on an SII ISC< I'm not sure if its ISC.

    However the script ran and said succesfful , but nothing happened the PIN still stood there..

    mmmm? thoughts?

    Cheers =)!

  5. #4
    Garage Member RahulB will become famous soon enough
    Join Date
    Aug 2012
    Location
    India
    Posts
    52
    Thanks
    10
    Thanked 14 Times in 8 Posts
    Hi,

    I tested this script long ago on my Xperia phone. My phone had gingerbread, recovery installed and was rooted at that time. As I've mentioned, it worked fine for me. So, there're few questions you should look answers for:

    1. Is your phone using upgraded version on Android, of which I'm pretty sure it is. If yes, then it may or may not work for you. Google around, there may be some other way.
    2. If same OS version, is your phone having CWM recovery? This method is tested only with CWM recovery.
    3. Is your phone rooted? As you can read, the script requires "busybox" binaries. You might need to look for other ways.

    Other than that, digging into google and xda-developers.com will surely turn up working solution.

    Cheers.
    Anyone who stops learning is old, whether at twenty or eighty. Anyone who
    keeps learning stays young. The greatest thing in life is to keep your mind young.
    - Henry Ford

    infosecnall.blogspot.in

LinkBacks (?)

  1. 05-09-2013, 08:05 PM
  2. 05-07-2013, 03:07 AM
  3. 05-05-2013, 07:25 PM
  4. 04-09-2013, 09:32 PM
  5. 04-03-2013, 08:57 PM
  6. 03-29-2013, 12:56 AM
  7. 03-14-2013, 10:28 PM
  8. 02-24-2013, 07:56 AM
  9. 02-19-2013, 03:36 AM
  10. 02-18-2013, 02:08 PM
  11. 02-16-2013, 05:09 PM
  12. 02-15-2013, 11:35 AM
  13. 02-14-2013, 08:09 PM
  14. 02-03-2013, 06:04 PM
  15. 02-03-2013, 05:50 PM
  16. 01-30-2013, 04:41 PM
  17. 01-14-2013, 07:27 PM
  18. 12-20-2012, 11:01 PM
  19. 11-22-2012, 12:35 AM
  20. 11-04-2012, 10:12 AM
  21. 09-04-2012, 09:56 PM
  22. 08-31-2012, 10:14 AM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts