[Chainlike]

Is there rate limiting or a maximum number of attempts when inputting a guess on the device? if not, 6 digits shouldn't take very long to brute force if you can automate it.

also did a little digging - http://www.digital-safety.us/coderetrieval/ - claims it only works for devices which have been purchased. probably true, but could be useful anyway. from the sites's javascript:

Code:

           // construct url            var url = "https://atapi.disacentral.net/code/";            //url = "http://localhost:25302/code/"            //url = "https://disaapi-staging.azurewebsites.net/code/"            //mn=mn4&sn=sn413-0            if (serialRadio.checked == true) url = url + "search?mn=RCT6773W22B&sn=" + snInput.value;            else if (upcRadio.checked == true) url = url + "get/" + codeInput.value;            else url = url + "get/" + fullInput.value;

so you can go to https://atapi.disacentral.net/code/get/D..._GOES_HERE to verify disas for legit purchased devices. All the disa codes you've shared look like 1001290___ - maybe they're sequentially generated? it would be pretty trivial to scrape their API for more data. Maybe with more data, you can find a relationship between DiSa code and activation code. Or you could just count how many shitty tablets have been legally purchased . note: they will probably notice you doing this, and probably won't like it

you could also see if there are other useful apis hidden away at https://atapi.disacentral.net/ idk.