WebOS Parental Controls Bypass - WebOS Software and Hacking General

If you've bought a used TV, and for whatever reason it has parental controls enabled, you might find this trick handy. (Or maybe you're a teenager who just wants to watch TV without your parents' permission!)
Tested on WebOS 5.0.10, presumably it also works for most earlier versions - please comment if you have success or failure with specific versions.
The trick:
As pointed out in this tweet, you can read almost any file in the filesystem by opening it in the web browser, with the URL prefix "view-source:file:///". If you navigate to "view-source:file:///var/luna/preferences/lock", you can view the sha256 hash of the pin code, like so:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
I created a "rainbow table" of all 4-digit pincodes: https://gist.github.com/DavidBuchanan314/a684f91e9dec516acda8ece0c9f3db32
Simply Ctrl+F and search for the first 6 digits of your sha256 hash, and you should find the corresponding pin. e.g. in my case, I search for "ca9532", and find that my pin is "8695". If its not a 4-digit pin code, your best bet is either to build your own rainbow table/cracker, or paste the hash into an online sha256 cracking service.

Related

SmsRemoteAdmin 0.99b(anti theft)

Anti theft software, free.wm5/6
SmsRemoteAdmin allow to query some phone informations via sms and help to find your lost/steal phone with powerfull AntiSteal extension.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Features of the program:
AntiSteal phone module protects against theft. (module monitors the number of SIM cards currently in use to define permitted to operate with a phone card numbers. if the number of cards will change to undefined as an acceptable application sent to the following telephone number sms `az information, switch mode hidden (which is invisible to the user) and can transmit to a specific phone number, all received sms `yi made the calls. In addition, thanks to the GPS positioning can quickly locate the stolen phone.)
download
or cab
website of the programmer
Looks interesting. Will try it
best regards
updated v1.0
1.0:
- New commands (GetIMEI, GetIMSI, GetCommands, AntiStealSart, AntiStealStop).
- Fixed AntiSteal extension.
direct download
update v1.1
new:The revised module AntiSteal
download

Android browser compatible web-page creator/generator - alpha

Hiya guys,
I have been working on a project that would allow anyone to create simple web-pages on their desktop pc's as-well as mobile device fast and easily! After much frustration I think I have what could be considered a 'working alpha' and would love for some of you to come and test what I have created. It uses a drag and drop type interface and hosts a number of features and tools to create web-pages.
The tool is 100% web-based and should work on just about any device (Im going to regret saying that). I had the idea that this might be useful for sites such as Ebay, to create templates for your auctions easily or static pages etc on the move.
Here is an image of the alpha taken from my desire hd2 -
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
You can find out more here - http://www.doowd.com/about/
Please let me know what you think!
Sorry for people who had the issue where passwords where not emailed out! Fixed my email settings so registration should work fine now.
Here are some more screenshots of the development tool on my desire hd -
Looking foward to some feedback guys!

[APP][2.3.3+]QRPasswds

A little application i wrote to deal with passwords on multiple computers currently working to.
It uses 128-bit AES with a key that is randomly generated on the first launch to store the passwords encrypted in a QR Image.
The image can be stored on the phone, printed an sticked on the computer, in any place that you can scan it to see the passwords.
You can import/export the encryption key to use it with any number of devices
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
It uses some ZXing libraries and the ZXing Barcode scanner
The code is on github
I cannot put a link yet till i get 10 posts
Google Play: https://play.google.com/store/apps/details?id=com.qrpasswds
Github: https://github.com/warlock90/QRPasswds[/url]
cheers!
Great work ! :good:
great idea! I like it.
a cool feature would be to have a way to "one-click"-copy the username and/or the password, or better like in Keepass to get them copied through the notification bar.
Haven't thought of it, definitely gonna make something like that
uploaded v1.2.3
each field is copied to clipboard if you hold click on it
working on notifications and making it a list with undo when deleted

[Daydream][4.2+] Swarm

Here's a daydream that old school hackers out there might recognize if you've ever used CDE on Unix or VMS. This is an Android port of Jeff Butterworth's xswarm. This was mostly done as a learning project and I still have a few questions resulting from it. Though for now it's done, working, and I think I've added enough options. I'll take bug reports and pull requests but don't expect too much in the way of additional features.
Anyway, here's some shots.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
--- Non-devs can skip the following questions. ---
Is there a color picker library that uses fragments and also allows hex entry? lomza/android-color-picker looks like one of the better ones, though I'd really prefer something with text input for exact values as well.
I'm also trying to come up with a way to programmatically pull in resources so I don't have to do ugly enumeration such as this (see TODO sections). The EditTextPreference dialogs do bounds checking before updating the summary field, but one thing that throws a wrench (or IllegalStateException) into things is that EditTextCheckBounds isn't attached to the Activity so you can't call getResources() within that function without jumping through a lot of hoops.
Source: https://github.com/coax75ohm/droidSwarm

[APP][4.0+] Magic Keys: password generator and manager

Hello!
Here is an application I created:
Magic keys is a new breed of password manager: It creates a random password by randomizing a set of (easy to remember) keys you choose per account. Magic keys does not store your password anywhere, by using it you do not expose yourself to any kind of password hacking by inspection of the phone local storage or by interception of the password if stored in the could.
Magic keys does not require any specific permission.
A few snapshot to illustrate how to use it:
Select the type of characters you want to have in the password (digits, upper case, lower case, symbols)
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Enter your keys, they can be as easy to remember as you want.
Once the password is generated, simply copy it to the clipboard.
Generated password are tied to the phone Android Id so that some one using the application and your keys on another phone will not get your password.
More details here:
Magic keys on the android playstore
Magic keys also run on a PC/Mac as a Chrome browser application thanks to chrome ARC welder.
Installation instruction are available here:
Magic Keys for Chrome installation procedure
Please let me know your thoughts on the app.
Cheers.

Categories

Resources