Hi, welcome back to another episode on How to Hack.
So today we'll be exploring the use of unlocking an Android device without password.
So what we can do is we can actually get a physical Android device that you have or you could actually
use a virtualization technology like Android studio to boot up the Android virtual device.
So in this case, in today's practical and tutorial, we will actually explore an Android studio that
you can see over here.
So over here, we go to Android studio running.
So Android Studio is a platform for you to develop your app files or applications that can run on Android
devices.
And one great thing is that you can go on to tools under a manager and here we get all your virtual
devices that you can actually run your app files on.
And, of course, we can click on to create virtual device.
And in this case, we can select, say, Pixel three Excel.
So you can have to pick off your different kind of hardware.
So you got TV, you got phone, you go waras and so on.
So for Ossorio select pixel three Excel click next on that.
And here we can select a system image so we have a tree system images.
So we got a lollipop marshmallow in.
Q So we are going to use Android ten point zero Google APIs and we'll click next on that.
And here of course you can name your name, so we will name it as Pixel three Excel API twenty nine
click finish and we can see a new virtual device inside your Android device manager.
So click onto the Green Arrow sign and this would actually launch the Aveda into emulator.
So click go on debt.
And so once you click on add, this will start up the Android emulator and at the same time I want to
open up command prob.
So once you got Android studio running, you would also at the same time actually have your EDB running.
So in this case, for example, if I enter EDB, this would actually shoulder help for ADB.
So of course what is EDB?
EDB is an Android debark breach and this is running on version one point zero point three two.
So it allows you to connect on the back end to your Android devices.
So in this case, on the left side, I got the Android device.
On the right side, I have my Android debark breech.
So if you are not sure what is Android Broadbridge?
We have done a tutorial on that before, so do check it out on a few videos of.
So going back into the Android device, we can actually scroll down and we can actually look at his
settings.
And of course, in this case, if I click onto the power button, we can actually see that this would
actually close off the display screen.
And when we click on it again, this would open it up.
So no password has been set.
So all we got to do is actually go into the settings and into settings.
We can actually see that we have a option to actually change and secure the password.
So this is actually under the setting of security.
So you click on a security and of course, here we got the screen lock, so now it sees none.
So there are no screen lock.
We can lock it with any of this combination.
So we'll use password and when we click on password, we can enter, say, one, two, three, four.
Click next on that.
One, two, three, four.
Confirm that.
So this will lock up the Android device and we can actually select don't show notifications at all.
So click done.
So once you're done with it and when you click the power button, this would actually lock up the screen,
including turning off the display.
So if I click on a power button again and I try to open it up and now I'm prompted for a password.
So the scenario goes like this, a situation goes like this, perhaps you do not have a password or
you forgot your password and you want to reset the password inside the device.
So in this case, the best way out for us is actually to be able to use the Android debark breach to
help us gain access back and to the Android device and be able to change it up the settings inside the
mobile device, helping us ultimately gain access into the device again.
So the first thing I want to do is actually enter devices, and this would actually show us all the
devices they're connected on to the breach.
So in this case, we got emulator dash five five five four.
So what we will do next is actually to go into the system.
So all you gotta do is enter EDB Shell and this would bring us into the device.
So all I got to do is enter who am I?
And it seems that we are shell.
It stays that we are shell.
We're working with the Android devices, a shell.
So of course we can enter ASU.
So as you would give a super user power and privileges.
So hit enter on that and now enter.
Who am I.
It says that we have root.
So we are the super user.
We have a lot of privileges and permissions.
We can control the Android device very quickly.
So the next thing we really want to do is to go into data and then we'll go into system.
And once we're in system, we can enter URLs.
So the most important part for this tutorial is actually to look at this particular file clock settings,
dot DB.
So they actually store all this configuration and information insight, lock settings, dot DB.
So the only way for us to open his up is to.
You enter a school like tree and hit enter on debt, so, of course we can enter open, followed by
the full name and of course lock settings DB hit enter on deck.
So now we are assessing and manipulating and changing the data inside lock settings.
So Eskil Library is a way for us to actually structure data inside a mobile device.
And it is very useful because it is very similar to how you would actually store data inside your Microsoft
school, your MySQL and so on, all those database management systems.
So in this case, we're using it for Android device.
So that's great.
So the commands, the syntax is the queries are all very similar to how you would actually look and
use the Microsoft school or school statements.
So the next thing we want to do is to enter help.
So if you're not familiar with Eskdale like Tree Enter help and will show you the commands that you
can use, final table information, updatable and so on.
So very useful way of controlling the database details.
So what we will do is right now we can enter tables to see all the tables inside the database.
So here we've got to table so adroit metadata and log settings.
So we are more concerned today about WLOX settings.
So in future tutorials will look at how we could actually control Eskil like we look at how we can manage
the data and details and an information insight as a light.
So, of course, in today's tutorial, we'll look at clock settings.
So the next thing we can do is select or from lock settings, followed by semicolon to pull all the
data from lock setting.
So go ahead and hit enter on debt.
And of course, now you see the commands.
The queries are very similar to your SQL statements.
So in this case, we can see the lock screen disable is true and we can see lock screen, password type
alternate.
And of course we can also see lock screen, password type.
So all these are some of the key points that will be changing and updating in order for us to be able
to remove the lock screen inside the Android device.
So, of course, the next thing we want to do is enter update followed by lock settings.
And once we got that, we can enter set value and we'll set it to one.
So this would actually set the particular column on a particular roll off the lock screen, disable
and wear name, equal lock screen door disable.
And of course we can put a semicolon at the end to end the quarry.
Got a statement.
So he enter on that and it would update the lock settings value for a lock screen disable.
So of course on a top you can see that our previous query shows that it was a one.
And of course now we have updated to chool.
There is a lock screen is disable.
Then the next thing we want to do is to update the lock settings, set value equal zero
and we set it to zero.
And next thing I want to do is wear name equal lock screen dot.
Password underscore type, and we can put a hyphen as well as a semicolon or a single court in a single
court and a semicolon hit, enter on that.
So don't update a table again.
And in last one that we want to do is to actually update lock settings, set value equal zero where
name equal.
And of course, in this case, we're going to set this lock screen dot password followed by underscore
type, underscore, alternate, and we put a single, quote, semicolon on that and hit enter.
So this would update all of those roles that we see inside the table when we pull a query on it.
So if you go in and select or from lock settings again and you hit, enter, indebt debt, so this would
again see the changes in update to lock screen, disable, lock screen, password type, alternate,
as well as the use of the lock screen password type.
So all this has been disabled right now.
So all we gotta do is enter or exit.
But then of course after that we could actually exit from the system and we can exit again from the
system.
So of course over here all we got to do is actually reset the computer or reset a phone.
And once we we started phone, it would actually restart.
We've all lock screen and immediately we could gain access into the system very quickly.
So once it restarts, all of this has been disabled and immediately we gain access into the mobile device.
So right now we are restarting the Android device so you can take a while.
So once it restarts, we can actually gain direct access into the Android device.
OK, so right here we see that pixel is starting and all you got to do is actually pull down and you
see that we actually can go under settings and under settings, we can actually go back into the security.
So in security, we can click on it and we can see that the screen lock is now not.
There means we have actually removed a screen lock capability inside the Android device and we'll be
able to perform all sorts of actions into the Android device very quickly.
So once again, I hope you learned something valuable in today's tutorial.
And if I have any questions, feel free to leave a comment below and I'll try my best to answer any
of those questions.
And we'll like, share and subscribe to the channel so that you can be kept abreast of the latest cyber
security.
Tarryl.
Thank you so much once again for watching.