AndroidPatternCracker
It is a tool which cracks the android pattern.
Usage: android_pattern_cracker.py [-h] --mode {crack,generate}
[--length {4,5,6,7,8,9}] [--file FILE]
[--hash HASH] [--write WRITE] [--verbose]
Android Pattern Cracker is program which cracks android pattern.
optional arguments:
-h, --help show this help message and exit
--mode {crack,generate}
Select mode (mode = crack/generate)
--length {4,5,6,7,8,9}
Length of the pattern
--file FILE Name of the pattern file.
--hash HASH SHA1 hash of the pattern.
--write WRITE In crack mode, outputs the pin to the file. In
generate mode, ouput the sqlite database.
How does the android pattern works?
The android pattern is a sequence of length 3 (4 since Android 2.3.3) to 8 digits. The 3x3 matrix is given below
-------------
| 0 | 1 | 2 |
-------------
| 3 | 4 | 5 |
-------------
| 6 | 7 | 8 |
-------------
The pattern is not stored directly as the sequence of digits but instead as the SHA1 hash of the pattern. For example: if the pattern is 0 -> 4 -> 8 -> 5 -> 2. The SHA1 hash will be SHA1("\x00\x04\x08\x05\02") = 70d61edf47d85aaf53e089eafc74de0094754cc6
Where can I find the hash?
The SHA1 hash of the pattern is stored in /data/system/gesture.key Y You can fetch the file using adb tool found in the Android SDK. Follow the following steps to fetch the gesture.key file.
- Enable developer mode and debugging
- Connect your phone to your computer.
- Use adb tool found in the platform-tools in Android SDK. Note: You must have root access to your phone.
pc@user:~/android-sdk-linux/platform-tools$ ./adb pull /data/system/gesture.key .
/data/system/gesture.key: 1 file pulled. 0.0 MB/s (20 bytes in 0.083s)
pc@user:~/android-sdk-linux/platform-tools$ hd gesture.key
00000000 23 a6 e7 c8 35 cd 75 c3 f1 7e cc 4d 1c d7 d8 40 |#...5.u..~.M...@|
00000010 b7 40 95 25 |.@.%|
00000014
How to use the tool?
pc@user:~/AndroidPatternCracker$ ./android_pattern_cracker.py --mode crack --file Pattern_Files/gesture_0.key
[+] Opening pattern file (Pattern_Files/gesture_0.key) to read.
[+] Pattern = 70d61edf47d85aaf53e089eafc74de0094754cc6
[+] Closed pattern file (Pattern_Files/gesture_0.key)
[+] Searching patterns of size = 3
[+] Finished searching patterns of size = 3
[+] Searching patterns of size = 4
[+] Finished searching patterns of size = 4
[+] Searching patterns of size = 5
[!] Sucessfully cracked !!! The pattern is 04852
[!] Pattern and Hex of the pattern are written to file successfully.