Guessing app's password using smartwatches

Опубликовано: 09 Октябрь 2024
на канале: Android Infosec

325,789

11k

This app protects user sensitive data with user created password, but doesn't include timeout or lockout protection after a few incorrect entered passwords. Because of that, it is possible to brutforce the password using a dictionary attack. In the video, I tested 20 most common passwords used by people in 2022 in a few seconds. Testing thousands of them would take way longer. However, in case you forget your password, then there might be no other solution than this.
👉 Make sure to use complex passwords to protect your accounts and secrets. If you are a developer, I advise you to implement a brute-force protection that includes timeout or lockout after a particular number of incorrectly entered passwords.