Bypassing Frp With Internal Google Emails
HTTP@GOOGLE.COM;
The Email Restoration FRP BYPASS(TH):
Recently i was faced with a Android device that was FRP locked,
Running thru the standard tests i tried everything known to date with varying success,
The one i wanted to come here to talk on was the super awesome email that bypasses the FRP in the most peculiar way.
When Presented with the Prompt to supply the email address last known to the device we input: http@google.com with a random password,
this will then show on the screen a prompt saying that the account was recently deleted and that you can "restore" it if you log in, we definitely don't have the password to that account but thats ok we are going to slip out the side door here,
Pressing the link to restore the device pops a captcha onto the screen,
this is it here we slip out by allowing the captcha to fail a few times or if you are quick enough you can click the help hyperlink before the captcha fully loads,
this drops you into a google help page, which conveniently allows you to click on the google symbol in the top corner bringing you out to a standard google search page.
Attempts to log in to a google account thru this was somewhat amusing as you could create a new account and log into it allowing use of various functions but whenever the container requested a movement into another gated portion of the device functions it would drop you back at the phone restoration loop.
Jumping back via the exact path was possible and the account that was created was still present but as this container doesn't retain memory in terms of the sessions when restarted it is no longer logged in, attempts to try to add the device to the account in order to push the old account out was unsuccessful, some success was had when this was used to load a user defined page via the search engine and then abuse the intent function to pop open device settings or the separate chrome browser.
Although on this particular device the FRP lock was unable to be bypassed, This was not an exhaustive search or FRP bypass but does give another vector for researchers to utilize to some degree.
Most notable is the http@google.com email, the fact that it is recently deleted is a cool little tidbit, restoring this account would be a trophy though i wouldn't advise trying,
Anyway Thanks For Stopping By,
Comments
Post a Comment