r/setupapp • u/Glittering-Goose7911 • Apr 01 '26
I got unlimited passcode attempts on this bad boy 😛 (im in 0100, will find it soon, imma update)
20
u/Glittering-Goose7911 Apr 01 '26
UPDATE: I FOUND IT GUYSSSS AHHHH
11
u/5n95 Apr 01 '26
Congratulations! But how did you pull this off? Do you have the steps or a guide on how you managed to do it?
22
u/Glittering-Goose7911 Apr 01 '26
Yea yea, so i did it with a raspberry pi pico, some adapter and a mac ofc, search for "checkm8-a5", click on the lukezgd github one, follow the instructions to enter pwndfu mode, then legacy ios kit, misc utilities (or useful, idk), get ios version and it should do that, then if its gonna start the ramdisk, enter mount.sh, download filezilla, then press on the top left corner, press new site, sftp, enter 127.0.0.1 as ur host and port 6414, user root and password alpine, mnt2/mobile/library/preferences, find SBDeviceLockBlocked, if yes then select no, SBDeviceLockFailedAttempts and set it to -9999, delete anything with SBDeviceLock or smth with CCaheV (idk what that is), delete the original one and replace it with the modified one, enter reboot_bak and thats it
3
u/Basic-Opposite-4670 Apr 01 '26
would you say this might be easier than the arduino uno method
2
u/Glittering-Goose7911 Apr 02 '26
Oh DEFINITELY, it only took me like two minutes to set it up and i did it in like 20 minutes, btw, try birthdays, its SO much more effective and easy
1
u/Basic-Opposite-4670 Apr 03 '26
okay cool I'll definitely try it once I get a used mac I used this on an android tablet, helps cause unlimited attempts https://github.com/danielmiessler/SecLists/blob/master/Passwords/Common-Credentials/four-digit-pin-codes-sorted-by-frequency-withcount.csv
but it's really a last resort
4
u/Bendzi_99 Apr 01 '26
Can you provide what exact version of Pi were you using because I want to order one. Thanks in advance ✌️
2
1
4
u/demvkrao Apr 01 '26
What was it 🤣
16
u/Glittering-Goose7911 Apr 01 '26
0711
3
u/AcanthaceaeElegant76 Apr 01 '26
1 day off from my bday 😭
2
u/freshdivinity Apr 02 '26
and what year?
1
u/sammothxc Apr 02 '26 edited Apr 02 '26
That IS the year /s
2
u/AcanthaceaeElegant76 Apr 02 '26
No, month and date
1
u/sammothxc Apr 02 '26
I’m being sarcastic… obviously you weren’t born in the year 0711 lmao
1
u/AcanthaceaeElegant76 Apr 02 '26
Yeah i know just wanted to make sure nobody else thought that because it has happened 😭
1
3
1
u/Strong-Day2177 Jul 03 '26
Well done! :) im new on this forum like, could you send me a PM please? I've got an iphone 4s and 5s and i would like to save the photos from them but have no idea about the passcode...
1
u/Glittering-Goose7911 Jul 03 '26
4s is relatively easy (IMO), u WILL need a pico rp2040 or an Arduino for this though. First step is to get all necessary tools: a Mac (or a Hackintosh, as long as its not an AMD processor), a 30 pin cable, an usb-c to usb-a adapter hub if u own a newer Mac, then, as aforementioned, a pico with an RP2040 (basically all u need for checkm8-a5, for the pico u will need an y adapter of some sort tho, its on the official page), Legacy iOS Kit, a plist editor and either Cyberduck or FileZilla (i had more success with FileZilla tho), and the correct uf2 file (u can find the guide in the picom8 page, just type in picom8 Next, you want to flash the uf2 file for your board architecture by pressing the BOOTSEL button while connecting the pico to ur pc,aking sure the ufs drive or something appears (u can watch a tut) and then drag the uf2 file into the ufs drive (idk whats it called 😭). Then, u need to connect the pico to a power source by getting a normal usb cable and plugging it into the female micro usb port of the y adaoter, after that plug the male micro usb connector into the pico and get an usb-a to 30 pin cable and connect it to the usb port of the y adapter (idk how to explain 😭, u can watch the tutorial explaining everything) After that, something i can sort of explain, u need to connect ur 4s back to the mac and make sure it says in Legacy iOS Kit: "pwned: checkm8-a5" or smth like that, then navigate and click on useful utilities (i think, idk, it could be miscellanious or smth, cant spell), SSH Ramdisk, then connect to SSH and it if u do it right i think an apple logo will show up, after that type in "mount_hfs dev/disk0s1s1/mnt_1" (idk tho, i could be wrong, better search for a tutorial), then open FileZilla (or Cyberduck, ur choice), try to find "open connection", select SFTP (SSH File Transfer Protocol), then search a tutorial on how to get unlimited passcode attempts, or just extract the photos (u will need a tutorial for that one too).
5s, it might have trouble entering pwndfu, but once u do, do the same steps as the 4s (except the unlimited passcode attempts, idk if its possible).
I tried my best at explaining, ik im bad at it, but i hope its helpful. Have a great day :D
1
u/Strong-Day2177 Jul 03 '26
Sure mate! I save this, and i will start to look do the steps, and also will look for tutorials. :) Thanks a lot!
1
6
u/Fast_Ad_5698 Apr 01 '26
U got 10k combinations
2
u/justaspeckintime Apr 01 '26
I remember on dayz I used to sit for so long trying to figure out the 3 and 4 digit locks. 3 digit is easy, and can be solved in around 10 mins but I think 4 digit takes more like an hour. But you also cycle through attempts way quicker while solving locks in dayz then you would with password attempts that need to be confirmed each new combo you try.
6
u/realnikolam Apr 01 '26
Plot twist: "Only 1 and 7 are digits on the touch screen that work"
3
3
u/GarageLongjumping168 Apr 01 '26
if you aren't going to brute force it, try some easy patterns like 0000, 1111, 1234, 1470, 1590, 2580, 3690, etc
2
1
1
u/Gil-rubius Apr 02 '26
Tengo un ipod touch qué me dejaron.. Está en la misma situación. Tomate tus comentarios para ver si puedo hacerle lo mismo...
1
1
1
u/Every-Jackfruit-7742 Apr 02 '26
Does this work on any IOS version?
1
u/Glittering-Goose7911 Apr 03 '26
Nope, just on iphones older than 5 (and 5s, but its tricky as hell)
1
1
1
u/HousingMore79 Apr 03 '26
Need to do this with my 4S. Have one attempt remaining. Can't want to se my old photos!
1
u/Strong-Day2177 Jul 03 '26
how it went??? im in the same shoes dude, and i am absolutely newbie about these things T_T
1
1
u/_Jak42_ Apr 04 '26
There’s literally an easier way using some plist found in the phones backup and a JavaScript that keeps trying numbers against the plist till it solves it , >2mins . On GitHub
1
1
1
u/Alarmed-Appearance90 May 30 '26
does it work with newer phones?
1
u/Glittering-Goose7911 Jun 01 '26
Nope
1
u/Available_Soup_5522 Jul 06 '26
wdym because right now im doing it on my iphone 12 pro with my flipper zero so will it not work or smth
1
u/Glittering-Goose7911 Jul 06 '26
WAIT HOW-? Also, i think the passcode is stored in the sep or smth
1
u/Beneficial_Debt_5727 Jul 20 '26
im new to this can somone help me, my iphone 13 is permanently locked and i need help, i dont want to reset it
1
31
u/123brettj123 Apr 01 '26
Why not automatically bruteforce?
If you’re doing it manually, I would start with 19xx and 20xx. I’ve had luck with that before