mentech: How To Crack/Unlock Any Android Phone Gesture Pattern Lock

Welcome back guys now in this tutorial am going to show you how to crack the guesture pattern lock of any android device without lose your files or your accounts, But this is for rooted device only.

This tutorial doesn't seem very effective in attacking some victim but it is good for those who want to try it on some android device after getting a metasploit meterpreter session.

How Gesture Pattern Lock Works??
Well first of all we need to understand that how gesture pattern works. Patterns are nothing but the path traced by the fingers on the nine circles with
the number starting from 1 to 9 from top-left corner to the right bottom corner as shown in the figure below.

If we select a pattern 1478, the pattern would look like the following figure.

Gesture pattern is encrypted as a SHA-1 hash without a salt in gesture.key file at /data/system/ gesture.key .

Tools Required:
1- ADB shell
2- ROOTED android device
3- Gesture Pattern SHA-1 dictionary and script to compare those hashes

1- First of all, enable usb debugging in your mobile's settings and connect your cell phone with your pc so that we may copy the gesture.key file for decryption purpose.

2- Download ADB shell from ADB official site and extract it on your drive. Open cmd, go to adb folder and execute the following command.

3- Now download the Gesture Pattern SHA-1 dictionary and python script from the above given links and extract those on your drive. Then execute the following command.

From the above image you can see the decrypted Gesture Pattern which is 14569.

NOTE: This attack hardly takes 1-2 seconds as total number of possible patterns are only 9,85,825