Made a program to steal Android devices Pin Codes
Hey there!<p>I&#x27;m just new here, because I joined this community to share this in. I hope you don&#x27;t mind. However, I&#x27;m pretty glad to say I built my first Pentesting&#x2F;Hacking tool (Link here: https:&#x2F;&#x2F;github.com&#x2F;bastien8060&#x2F;MDPin).<p>Of course it is open-source, and it relies on social engineering to work. Although it is not an exploit, it exploits some browser&#x27;s trust in fullscreen mode (Eg. In-App browsers like instagram&#x2F;reddit&#x27;s browser which open links has the feature to enter fullscreen but do not give any warning to the user, when using it).<p>This program lets you start a server with a backend and a frontend which mimics as close as possible Android&#x27;s login screen. It detects the phone&#x27;s brand and loads the brand&#x27;s default wallpaper. Ios does not work on purpose and will be greeted with a blank screen. The user will be shown a screen off animation then will be shown a lockscreen. They would slide up and enter their pin. An unlock animation will be shown and the phone will seem to be on google.com. The backend will collect the pin code.<p>Of course this is to be used only for educational purposes. The goal here is to show how people are affected&#x2F;uneducated about social engineering attacks still today. (People can&#x27;t always be trusted. Google does not ask for card details by email from a foreign email address. Social engineering over phone calls or even posted letters are also a thing etc...)<p>Thank you very much for reading this.