Attend XDA's Second Annual Developer Conference, XDA:DevCon 2014!
5,740,412 Members 45,240 Now Online
XDA Developers Android and Mobile Development Forum

[WINDOWS && LINUX][UPDATED] pinget - Google Play Store PIN extractor

Tip us?
 
cyr0s
Old
(Last edited by cyr0s; 10th November 2012 at 09:51 PM.) Reason: Released Windows port
#1  
cyr0s's Avatar
Member - OP
Thanks Meter 91
Posts: 83
Join Date: Apr 2012

 
DONATE TO ME
Prompt [WINDOWS && LINUX][UPDATED] pinget - Google Play Store PIN extractor

pinget - Google Play Store Pin Vulnerability script

by @Complex360 (cyr0s on XDA-Developers)







Code:
Select Code
#include 
/*
 * Your warranty is now void.
 *
 * I am not responsible for bricked devices, dead SD cards,
 * thermonuclear war, or you getting fired because the alarm app failed. Please
 * do some research if you have any concerns about features included in this ROM
 * before flashing it! YOU are choosing to make these modifications, and if
 * you point the finger at me for messing up your device, I will laugh at you.
 */
Description:
I hope you'll use this in the scenario that you lose your pin, but alas, like any tool similar to this, 99% will be people using it for malicious acts - I can't control that.

Uses the vulnerability detailed in this thread

Changelog:
Code:
Select Code
V1.1 - Windows version released
V1.0 - Initial release
Feeling generous?


Thanks:
Code:
Select Code
zanderman112 - Initial PIN bypass found
trter10 - Found local file with pin used by this script

Phone: HTC One X
Backup Phone: LG Optimus P350
Tablet: Nexus 10
The Following 2 Users Say Thank You to cyr0s For This Useful Post: [ Click to Expand ]
 
zanderman112
Old
#2  
zanderman112's Avatar
Recognized Themer
Thanks Meter 1839
Posts: 7,913
Join Date: Oct 2010
Location: SouthEast USA

 
DONATE TO ME
To be 100% sure, the intended use for this is to be able to recover your pin in case you forget it?

Posted by Mr. Z's Galaxy S3.

^^^^^^^^^^^^^^^^^^^^^^^^^^Click banner for my Twitter^^^^^^^^^^^^^^^^^^^^^^^^^^^^
<---- I now have a PayPal donate link right over there <----
If you don't wan't to straight up donate via PayPal, these Amazon.com virtual giftcards are always appreciated

My Devices:
 
Sprint Galaxy S3 on Stock Deodexed MB1+Multi-View mod
OUYA 1st Gen on Stock Rooted JZ054L-Ouya
HP Touchpad on patched up webOS 3.0.5 & CyanogenMod 10.1
Samsung Epic 4G on CyanogenMod 10.1 Nightlies
 
cyr0s
Old
#3  
cyr0s's Avatar
Member - OP
Thanks Meter 91
Posts: 83
Join Date: Apr 2012

 
DONATE TO ME
Quote:
Originally Posted by zanderman112 View Post
To be 100% sure, the intended use for this is to be able to recover your pin in case you forget it?

Posted by Mr. Z's Galaxy S3.
Yes, that's right. What is included in the OP is the blunt truth that I have no control over what people use it for. I just think that the easier it is to exploit, the quicker Google fix it.
Phone: HTC One X
Backup Phone: LG Optimus P350
Tablet: Nexus 10
The Following User Says Thank You to cyr0s For This Useful Post: [ Click to Expand ]
 
wwjoshdew
Old
#4  
wwjoshdew's Avatar
Recognized Contributor
Thanks Meter 1386
Posts: 1,365
Join Date: Dec 2008
Location: KCMO
Crazy stuff...

Sent from my SPH-L710 using Tapatalk 2
http://www.youtube.com/user/wwjoshdew

Below are links to some of the devices I've done videos on,
Behold... The Sprint HTC One: http://goo.gl/3Q6nP
Transformer Prime TF201: http://goo.gl/GtxzA
Galaxy Note II L900: http://goo.gl/06zdk
Galaxy S III L710: http://goo.gl/0X5KW
Galaxy Nexus: http://goo.gl/rxUgv
EVO 4G LTE: http://goo.gl/VaoeU
EVO 3D: http://goo.gl/rmdoA
The Following User Says Thank You to wwjoshdew For This Useful Post: [ Click to Expand ]
 
zanderman112
Old
#5  
zanderman112's Avatar
Recognized Themer
Thanks Meter 1839
Posts: 7,913
Join Date: Oct 2010
Location: SouthEast USA

 
DONATE TO ME
I see. Good thinking there.

Posted by Mr. Z's HP Touchpad.

^^^^^^^^^^^^^^^^^^^^^^^^^^Click banner for my Twitter^^^^^^^^^^^^^^^^^^^^^^^^^^^^
<---- I now have a PayPal donate link right over there <----
If you don't wan't to straight up donate via PayPal, these Amazon.com virtual giftcards are always appreciated

My Devices:
 
Sprint Galaxy S3 on Stock Deodexed MB1+Multi-View mod
OUYA 1st Gen on Stock Rooted JZ054L-Ouya
HP Touchpad on patched up webOS 3.0.5 & CyanogenMod 10.1
Samsung Epic 4G on CyanogenMod 10.1 Nightlies
The Following User Says Thank You to zanderman112 For This Useful Post: [ Click to Expand ]
 
dudumaroja
Old
#6  
Member
Thanks Meter 14
Posts: 41
Join Date: Jan 2011
If you clear the play store.steampowered.com cache and data, o the pin is gone, no need to use a script to recover it

If you thinking in legit usage, forget the playstore pin and set a good password on your Phone
 
zanderman112
Old
#7  
zanderman112's Avatar
Recognized Themer
Thanks Meter 1839
Posts: 7,913
Join Date: Oct 2010
Location: SouthEast USA

 
DONATE TO ME
Quote:
Originally Posted by dudumaroja View Post
If you clear the play store.steampowered.com cache and data, o the pin is gone, no need to use a script to recover it

If you thinking in legit usage, forget the playstore pin and set a good password on your Phone
The point of this is to prove that the current security of the Play Store pin is too vulnerable.

^^^^^^^^^^^^^^^^^^^^^^^^^^Click banner for my Twitter^^^^^^^^^^^^^^^^^^^^^^^^^^^^
<---- I now have a PayPal donate link right over there <----
If you don't wan't to straight up donate via PayPal, these Amazon.com virtual giftcards are always appreciated

My Devices:
 
Sprint Galaxy S3 on Stock Deodexed MB1+Multi-View mod
OUYA 1st Gen on Stock Rooted JZ054L-Ouya
HP Touchpad on patched up webOS 3.0.5 & CyanogenMod 10.1
Samsung Epic 4G on CyanogenMod 10.1 Nightlies
 
CoolApps
Old
#8  
CoolApps's Avatar
Senior Member
Thanks Meter 600
Posts: 3,304
Join Date: May 2011

 
DONATE TO ME
Quote:
Originally Posted by zanderman112 View Post
The point of this is to prove that the current security of the Play Store pin is too vulnerable.
Seems legit...

Sent from my Sony Tablet S using xda premium
 
ANewandBetterMe
Old
#9  
Junior Member
Thanks Meter 0
Posts: 18
Join Date: Jul 2012
Can you make it work on vault by nq mobile inc

Sent from my SCH-R530U using Xparent Cyan Tapatalk 2
zylor Old
#10  
Guest
Thanks Meter
Posts: n/a
Anyone have a mirror for this?

Tags
google play vulnerability android pin
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes