03/04/2015
How to Exploit Droid Stealth Pin and Dialer Code ! (Fresh) First in the world :D
Description about application: This application provides a platform for secure hidden storage of user data on an Android phone. The application is hidden on the phone, only
to be found with the correct PIN access code, and data managed by the application is encrypted and hidden from other applications on the phone. However even if you
don't want that data readily available for everyone that gets hands on your phone there are many cases where you still want to share that data. Which is why it
incorporates several sharing features, both for people who have the app and those who don't. Yet it very much remains tricky thing to balance between the security and
sharing aspects of this project.
Furthermore, the application can be shared directly between two Android phones via a WiFi hotspot, BlueTooth, and Android Beam (when available). The goal is to
implement the tools to make offline sharing and distribution an easy thing. Both of the app and the data stored inside the app.
Vulnerability: Application saves the pin and dialer code in "/data/data/com.stealth.android/shared_prefs/" as NON-Encrypted XML files.Anyone can access these files
using Android Terminal or using ADB Shell.
Non Encrypted Files:
1. pin.xml - "You can see your pin inside this file"
2. dialer.xml - "You can see your dialer code in this file"
How To: Three options available to get your lost PIN or Dialer Pin !
1. Using Android Terminal Application (Root)
2. Using Android Debug Bridge (ADB) Shell (Root)
3. Simply Copy the files from application Directory (Root)
Method 1: Root Required !
1. Open Android Terminal Application in your Android Phone !
2. Type "SU" without quote and enter
3. Type "cat /data/data/com.stealth.android/shared_prefs/pin.xml" without quote
4. Last command will display the PIN.XML file in your Terminal Window ! You can see the Pin Inside REAL_PIN variable !
5. Done too Much Simple !
- Use the 4th command to get the dialer pin. by just changing the file name pin.xml to dialer.xml :)
Method 2: Root Required !
1. Connect your android phone using usb cable to your PC/Laptop and INSTALL ADB Drivers
2. Now open adb.exe using Command Prompt and Type "Adb shell" once shell open it looks like this : shell@android:/ $
3. Now type SU and enter now "shell@android:/ $" become "root@android:/ #" ! Good Ready to Go ! :D
4. Type "cat /data/data/com.stealth.android/shared_prefs/pin.xml" without quote
4. Last command will display the PIN.XML file in your ADB Shell Windows You can see the Pin Inside REAL_PIN variable !
5. Done too Much Simple !
- Use the 4th command to get the dialer pin. by just changing the file name pin.xml to dialer.xml :)
Method 3: Root Required !
1. Install Root Explorer or any other file manager to access the root directory.
2. Open those files from "/data/data/com.stealth.android/shared_prefs/" Pin.xml and Dialer.xml to your pin :)
3. Done !!
DroidStealth Developer Claim that DroidStealth is Secure App. :D I DONT THINK SO !