M 114: Stored Password (15 pts + 30 extra)

What You Need for This Project

Summary

The 7th Sense Psychics Android app stores login credentials on the phone.

Installing the 7th Sense Psychics Android App

Open Google Play and search for 7th Sense Psychics.

Install the app, as shown below. Be careful, there are other apps with the same name. Match the logo shape and color.

Archived App

In case they ever fix the app, here's the old version from 9-22-25.

Download these files:

Then execute this command to install the app. 
adb install-multiple -r ./base.apk ./split_config.en.apk ./split_config.xxhdpi.apk ./split_config.arm64_v8a.apk

Creating an Account

Launch the app. Create a new account using any email and this password:
P@ssw0rd

Scanning the Phone's Storage

Open a Terminal and navigate to the folder where adb is.

Then execute these commands:

adb shell su cd /data/data grep ssw0 -Ir . | grep prefs

M 114.1: String Name (15 pts)

Find the text covered by a green box in the image above. That's the flag.

Psychics Live (15 pts extra)

Install the app, as shown below.

Archived App

In case they ever fix the app, here's the old version from 9-24-25.
Create an account.

Find the stored password, as shown below.

M 114.2: String Name (15 pts)

Find the text covered by a green box in the image above. That's the flag.

Psychic Sutra (15 pts extra)

Install the app, as shown below.

Archived App

In case they ever fix the app, here's the old version from 9-24-25.

Download these files:

Then execute this command to install the app. 
adb install-multiple -r ./base.apk ./split_config.en.apk ./split_config.xxhdpi.apk ./split_config.arm64_v8a.apk
Create an account.

Find the stored password, as shown below.

M 114.3: String Name (15 pts)

Find the text covered by a green box in the image above. That's the flag.

Responsible Disclosure

I notified the company on 9-24-25.
Posted privately 9-22-25 by Sam Bowne
Updated with Psychics Live app on 9-24-25
Flag 3 image fixed 10-16-25