๐ฅ The Most Advanced Android Screen Lock BruteForce Tool with Mobile Timer Auto-Detection ๐ฅ
- โจ Features
- ๐ฆ Requirements
- โก Installation
- ๐ Usage
- โ๏ธ Configuration
- ๐ง How Timer Auto-Detect Works
- ๐ธ Screenshots
โ ๏ธ Disclaimer- โ Support / Donate
- ๐จโ๐ป Author
| Feature | Description |
|---|---|
| ๐ฏ Mobile Timer Auto-Detect | Reads lockout timer from screen (e.g. "Try again in 30 seconds", "30 เคธเฅเคเคเคก") and waits EXACTLY that long with live countdown |
| โจ๏ธ Digit-by-Digit Precision | Each digit entered separately with microsecond gaps โ 100% skip/mix bug fixed |
| ๐ System Lockscreen Attack | Wordlist or PIN brute force (4/5/6/8 digit) |
| ๐ฑ App Lockscreen Attack | Brute force in-app locks (Option 8) |
| ๐ฎ Screen Test & App Test | Calibrate keypad positions visually before attacking |
| ๐ Live Progress Display | Real-time current password, speed (tries/sec), attempt count |
| ๐ก๏ธ Device Auto-Pause | Detects USB disconnect, pauses attack automatically |
| ๐พ Auto-Save Results | Found password saved to file with timestamp |
| ๐ Multi-Language Timer Detection | English + Hindi ("seconds", "secs", "เคธเฅเคเคเคก") |
| โก Lightning Fast | Optimized ADB command batching for maximum speed |
- Python 3.7+ โ Download
- ADB (Android Debug Bridge) โ Must be accessible via one of:
adbin system PATHC:\platform-tools\adb.exeC:\Users\admin\Downloads\platform-tools-latest-windows\platform-tools\adb.exe~/.android/sdk/platform-tools/adb.exe%LOCALAPPDATA%\Android\Sdk\platform-tools\adb.exe
- Android Device (phone/tablet)
- USB Cable (data cable, not charge-only)
- Windows / Linux / macOS host machine
- Enable Developer Options: Settings โ About Phone โ Tap "Build Number" 7 times
- Enable USB Debugging: Settings โ Developer Options โ USB Debugging ON
- Connect via USB โ Phone shows "Allow USB Debugging?" โ Tap ALLOW โ
- Verify: Run
adb devicesโ should showdevice(notunauthorized)
git clone https://github.com/technicalsuraj2/rootlock.git
cd rootlock
python rootlock.pygit clone https://github.com/technicalsuraj2/rootlock.git
cd rootlock
pip install -e .
# Now run from anywhere:
rootlockcurl -O https://raw.githubusercontent.com/technicalsuraj2/rootlock/main/rootlock.py
python rootlock.pypython rootlock.py| Step | Action | Menu Option |
|---|---|---|
| 1 | Connect phone, USB Debugging ON | โ |
| 2 | Calibrate System Keypad | Option 6 โ Follow on-screen taps |
| 3 | Calibrate App Keypad (if needed) | Option 7 โ Follow on-screen taps |
| 4 | Start Attack | Option 1, 2-5, or 8 |
| Option | Mode | Description |
|---|---|---|
| 1 | Wordlist Attack | Your custom password file (one per line) |
| 2 | 4-Digit PIN | 0000 โ 9999 (10,000 combos) |
| 3 | 5-Digit PIN | 00000 โ 99999 (100,000 combos) |
| 4 | 6-Digit PIN | 000000 โ 999999 (1,000,000 combos) |
| 5 | 8-Digit PIN | 00000000 โ 99999999 (100M combos) |
| 6 | Screen Test | Calibrate system lockscreen keypad |
| 7 | App Screen Test | Calibrate in-app lockscreen keypad |
| 8 | App Pass BruteForce | Wordlist attack on app lock |
| 9 | GitHub | Open author's GitHub |
| 0 | Exit | Quit tool |
1234
0000
123456
password
1111
admin
12345
000000
One password per line. Tool tries exact order, line by line.
Edit top of rootlock.py to tune:
# โก ATTACK SPEED (lower = faster, too low = errors)
ATTACK_DELAY = 0.02 # Delay between password attempts
DIGIT_GAP = 0.04 # Gap between each digit (CRITICAL for reliability)
CLEAR_SETTLE = 0.08 # Wait after clearing field
ENTER_SETTLE = 0.15 # Wait after pressing ENTER
# ๐ TIMER DETECTION
TIMER_CHECK_EVERY = 2 # Check screen for timer every N attempts (1 = every attempt)
# ๐ KEYPAD POSITIONS (screen % โ adjust if taps miss)
KP_ROWS = [0.62, 0.70, 0.78, 0.86] # System lockscreen rows (Y%)
KP_COLS = [0.25, 0.50, 0.75] # System lockscreen cols (X%)
APP_KP_ROWS = [0.62, 0.70, 0.78, 0.86] # App lockscreen rows
APP_KP_COLS = [0.25, 0.50, 0.75] # App lockscreen colsKP_LAYOUT = {
"1": (0,0), "2": (1,0), "3": (2,0),
"4": (0,1), "5": (1,1), "6": (2,1),
"7": (0,2), "8": (1,2), "9": (2,2),
"0": (1,3),
}โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ 1. Every TIMER_CHECK_EVERY attempts โ
โ 2. Dump screen UI via: uiautomator dump โ
โ 3. Parse XML for timer patterns: โ
โ โข "Try again in 30 seconds" โ
โ โข "30 เคธเฅเคเคเคก เคชเฅเคฐเคคเฅเคเฅเคทเคพ เคเคฐเฅเค" โ
โ โข "Wait 30 sec" โ
โ โข "29 s" โ
โ 4. If found โ PAUSE exactly that many seconds โ
โ 5. Live countdown on screen: "WAITING: 30 sec" โ
โ 6. Timer ends โ Auto-resume next password โ
โ 7. Fallback: No timer after 5 fails โ Wait 30 sec default โ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
Why it's better: Other tools use fixed 30s wait. ROOTLOCK reads the actual timer on your screen โ if phone says "Try again in 12 seconds", it waits 12s, not 30s. Massive time savings!
Replace placeholder images with actual screenshots
โ๏ธ FOR EDUCATIONAL AND AUTHORIZED TESTING ONLY
This tool is designed for:
- Security researchers testing their own devices
- Authorized penetration testing with written permission
- Learning about Android lockscreen vulnerabilities
- Recovery of your own forgotten PIN/password
DO NOT USE ON DEVICES YOU DON'T OWN OR HAVE EXPLICIT PERMISSION TO TEST. Unauthorized access to devices is illegal under most jurisdictions.
The author (Suraj Patel) is not responsible for any misuse or damage caused by this tool.
If ROOTLOCK saved you time or helped your research, consider buying me a coffee โ
Every donation fuels late-night coding sessions ๐
TBnsqWuvdhm7HDyhozF1ZspnX58GGaM6no
๐ Thank you for your support! Every satoshi counts ๐
Suraj Patel ๐ฎ๐ณ
Security Researcher โข Android Enthusiast โข Open Source Contributor
Made with โค๏ธ and lots of โ by Suraj Patel
If this tool helped you, please โญ the repo โ it means the world!
