Database Develop

i dev unlocked my ATIV S and have ?s

ok so I dev unlocked my ativ s and was able to side load some apps that needed full unlock to work I guess but surprisingly Tube 8 worked! are there any wp8 xaps out there I can sideload or what wp 7.x xaps are out there that I can sideload at the moment?

noelito said:
ok so I dev unlocked my ativ s and was able to side load some apps that needed full unlock to work I guess but surprisingly Tube 8 worked! are there any wp8 xaps out there I can sideload or what wp 7.x xaps are out there that I can sideload at the moment?
Click to expand...
Click to collapse
Normaly you can sideload any app you build using your own wp8 sdk tools as long as the app doesn't require interop services or other higher capabilities. Sideloading store apps won'tbe possible as they are encrypted.
Which capabilities does Tube 8 uses? I don't think that you were able to install an app using the cap interopservices.

I also have waze for wp7 installed, tube 8 is an adult video service viewer if you get my drift....
Sent from my SGH-T899M using XDA Windows Phone 7 App

Waze
ID_CAP_GAMERSERVICES
ID_CAP_IDENTITY_DEVICE
ID_CAP_IDENTITY_USER
ID_CAP_LOCATION
ID_CAP_MEDIALIB
ID_CAP_NETWORKING
ID_CAP_SENSORS
ID_CAP_WEBBROWSERCOMPONENT
Tube 8
ID_CAP_GAMERSERVICES
ID_CAP_IDENTITY_DEVICE
ID_CAP_IDENTITY_USER
ID_CAP_LOCATION
ID_CAP_MEDIALIB
ID_CAP_MICROPHONE
ID_CAP_NETWORKING
ID_CAP_PHONEDIALER
ID_CAP_PUSH_NOTIFICATION
ID_CAP_SENSORS
ID_CAP_WEBBROWSERCOMPONENT

noelito said:
I also have waze for wp7 installed, tube 8 is an adult video service viewer if you get my drift....
Sent from my SGH-T899M using XDA Windows Phone 7 App
Click to expand...
Click to collapse
titi66200 said:
Waze
ID_CAP_GAMERSERVICES
ID_CAP_IDENTITY_DEVICE
ID_CAP_IDENTITY_USER
ID_CAP_LOCATION
ID_CAP_MEDIALIB
ID_CAP_NETWORKING
ID_CAP_SENSORS
ID_CAP_WEBBROWSERCOMPONENT
Tube 8
ID_CAP_GAMERSERVICES
ID_CAP_IDENTITY_DEVICE
ID_CAP_IDENTITY_USER
ID_CAP_LOCATION
ID_CAP_MEDIALIB
ID_CAP_MICROPHONE
ID_CAP_NETWORKING
ID_CAP_PHONEDIALER
ID_CAP_PUSH_NOTIFICATION
ID_CAP_SENSORS
ID_CAP_WEBBROWSERCOMPONENT
Click to expand...
Click to collapse
@noelito I got your drift. But these two apps don't need any special capabilities to run. They can be run on each dev unlocked device. No full unlock required!

Ok so regarding marketplace apps, how can we de encrypt them so we can sideload? I have the I'll fated Microsoft YouTube xap and read somewhere to remove the wmappheadr XML something and tried that with another app and could not sideload any tips? I would like to be able to factory reset my phone and side load the app
Sent from my SGH-T899M using XDA Windows Phone 7 App

noelito said:
Ok so regarding marketplace apps, how can we de encrypt them so we can sideload? I have the I'll fated Microsoft YouTube xap and read somewhere to remove the wmappheadr XML something and tried that with another app and could not sideload any tips? I would like to be able to factory reset my phone and side load the app
Sent from my SGH-T899M using XDA Windows Phone 7 App
Click to expand...
Click to collapse
As of now, there isn't any way to decrypt XAPs. Since we are on the subject of XAP decryption, this gives way to the subject of piracy which isn't accepted .

Oh my that's not something I want to do
Sent from my SGH-T899M using XDA Windows Phone 7 App

XAP decryption *Is* also useful for reverse engineering the OEM app updates... if one of them introduces a vuln, we want to take advantage of it.

GoodDayToDie said:
XAP decryption *Is* also useful for reverse engineering the OEM app updates... if one of them introduces a vuln, we want to take advantage of it.
Click to expand...
Click to collapse
Oh I agree. I just wanted to make sure the conversation didn't float towards the way of piracy before the mod decided to shut it down.

As for deencrpyting XAP files - currently we don't know of a way to do it. Sideloading of WP7 XAPs for a long time worked after removing those headers but several months after WP7.5 (which introduced support for it) they switched over to truly encrypted XAPs and so far no one has been able to deencrypt those.
As for Interop-Services - this likely won't cause issues any more in WP8 because Native Code is now officially supported. They won't work though as other means are employed to not allow them to access functionality that is not supposed to be accessed. Most of those Apps worked through accessing certain vendor drivers/services which are likely to have changed in WP8.

@StevieBallz: ID_CAP_INTEROPSERVICES and native code have nothing particular to do with one another. Native code is a way to get out of the "API sandbox" that restricts what operations an app can request that the system do (for example, there's no official API for registry access). ID_CAP_INTEROPSERVICES is a way out of the permissions sandbox that restricts what the OS will actually allow the app to do. On WP7, there were low-privilege native-code apps that didn't use interop (DllImport project, for example) and there were high-privilege interop apps that didn't require the author to write any native code (just re-using what was already on the phone, my MultiTask Toggle app for example).
Frequently, the two were combined (WP7 Root Tools is the primary example, but every pre-Root-Tools registry editor app also qualifies). High permissions isn't very useful without native code, because the official APIs don't let you request many things which you would need high permissions to do. Native code isn't very useful without high permissions, because most of the things that you can do with low permissions can be done without native code at all. However, the two really have nothing to do with one another.
Now, on WP8, we have all the native code we could want (well, actually it takes some hacking to get out of the API sandbox again; the official third-party native code API is much more limited than the full Win32 API) but we run in an even more restrictive app sandbox. On WP7, low-privilege apps could at least read most of the registry; I doubt that's true anymore. On the other hand, ID_CAP_INTEROPSERVICES is alive and well; all the fancy, high-privilege OEM apps (like the network configuration ones, or the system diagnostic ones, or Samsung's call blocker, etc.) still use ID_CAP_INTEROPSERVICES. Looking around the Diagnosis app on the Samsung ATIV S, I've already found high-privilege provxml and file system access. Unfortunately, interop-lock is (of course) also alive and well; attempting to sideload an app that uses ID_CAP_INTEROPSERVICES still results in error 0x81030120, same as it did after Mango.

I just sideloaded the old teter hd game that was on the HTC touch hd from back in the day
Sent from my SGH-T899M using XDA Windows Phone 7 App

[Q] New at WP8, questions not stored in FAQ

Hello,
I'm just starting my dev journey with WP8 with my new T-Mobile Lumia 520.
First what I need to do is to debrand my lumia - for faster updates. T-Mobile is not offering yet the next release of fw which allows to disable images in IE, and as dev I need to be up-to-date as fast as possible. I need to download the FW, but I don't know which one - localized for sure, but what GDR is? What Amber means? I can't decide which one do I need to download and flash. (http://forum.xda-developers.com/showthread.php?t=2515453 This instruction doesn't show the moment of decision).
Next question is about unlocking. I'm downloading music from Soundcloud via Cloudoh and I want to access them from my PC, same as files located inside of other apps - do I need to unlock the device to do that? For example - how to upload a pdf from PC to winpho pdf reader?
Windows Store allows me to download installable files at PC and install them via SD Card. Some apps aren't supposed to work with my device. Is there any solution how to install them at my risk?
And the last question, but not least - I have my dev account but its time limited and app-count-limited. Is there any way how to check if my Lumia is dev-unlocked, how long this unlock lasts and what is my current app-limit? Just for my information - I like to have the ways to check everything.
Please, help me

GDR = General Distribution Release (a brief web search would have told you this). Microsoft-ese for a post-initial-release update (think of service packs for other MS software). The current version is GDR3, also called Update 3. "Amber" is Nokia's codename for the firmware version that they ship along with GDR2. "Black" is Nokia's firmware name for GDR3. Note that OEM firmware (such as Amber or Black) are different from Microsoft OS updates (such as GDR2 or Update 3), although they are typically delivered together. If you're already on at least GDR2, you can get Update 3 directly from Microsoft without waiting for T-Mobile or Nokia; search the Store for "Preview for Developers".
You cannot access files stored inside an app from anywhere else, either a PC or another app, unless the app explicitly makes them available by including a method to export them. Most apps don't implement this. The only exceptions to this rule are for images (which can be stored in the Pictures Library of the phone, much like the built-in camera app or screenshot functions) and OEM apps, which can have extra permissions (Capabilities, such as ID_CAP_PUBLIC_FOLDER_FULL) that aren't allowed for third-party developers. However, for development apps (that is, ones which were sideloaded to your phone from an unsigned XAP file), you can access their Isolated Storage from your PC using the aptly-named Isolated Storage Explorer Tool (or any other program that implements the required APIs, such as Windows Phone Power Tools).
To upload a PDF to the phone, you can do any number of things. Over USB, copy it to the Documents folder on the phone using any MTP software (Windows Explorer works). Over Bluetooth, just send the file directly. Over email, just attach the PDF. Over the Internet, you can use SkyDrive, or any other "cloud" app, or if it's on a web server you can get it from the phone's browser...
I'm not aware of any work-around for the minimum-memory restriction on some apps. I believe it mostly only applies to large games? In any case, you have one of the lowest-end WP8 devices on the market; there are limits which come with that.
The official way to tell if your phone is dev-unlocked is to use the Windows Phone Developer Registration tool, the same one you use to do the dev-unlock in the first place. A paid developer account always gives a limit of 10 apps (the free one is 2 apps). There's no official way to tell how many apps you have remaining, but it's simple enough to tell if you have any space left; just try sideloading any app that isn't already installed!

GoodDayToDie said:
GDR = General Distribution Release (a brief web search would have told you this).
Click to expand...
Click to collapse
Yeah, I did some sort of search on forums and Google and I haven't found anything.
GoodDayToDie said:
You cannot access files stored inside an app from anywhere else, either a PC or another app
Click to expand...
Click to collapse
After unlock it is still unaccessible? I had to jailbreak my iPad because without jb it is not easy to operate. I thought about something like this for Lumia. I think it is only the need of time for others to omit this problem
Disney offered lastly a promotion for its games. I was interested with some of them, but only one was accessible for my device. xap file needed only 70 mb of space. I think there was a problem with performance, but if I want see a laggy game I should have the ability to install it despite everything.

There's no jailbreak available for Lumia phones yet. Something like that should, indeed, allow accessing the storage of the apps (and everything else) but we don't have one...
The size of the XAP has very little to do with the runtime requirements of the app (RAM and CPU). I have written apps of only a few kilobytes that required over 10 gigs of RAM to run (not a phone app, obviously). To avoid people with low-end phones getting annoying with the platform and thinking it's the fault of either Microsoft or the app developer when an app crashes from running out of RAM, they've prohibited installing high-RAM apps on low-RAM devices.

You mean T-Mobile's Lumia 521 right? There's no other ROM you can flash to it that might have the update.

[Q] Decompile XAP file from the MarketPlace

Hi,
I downloed XAP file from the market place (There is an option called "Download & Install Manually" in the app page in the store).
I want to open XAP file and see the source code (with Reflector, JustDecompile or somthing), but I can't because XAP files from the market are DRM signed I guess.
Do you know any way to accomplish that?
I have Lumia 920 developer's unlock, and also the Visual Studio 2013 emulators.
Thanks.

sholomiel22 said:
Hi,
I downloed XAP file from the market place (There is an option called "Download & Install Manually" in the app page in the store).
I want to open XAP file and see the source code (with Reflector, JustDecompile or somthing), but I can't because XAP files from the market are DRM signed I guess.
Do you know any way to accomplish that?
I have Lumia 920 developer's unlock, and also the Visual Studio 2013 emulators.
Thanks.
Click to expand...
Click to collapse
A workaround of DRM protection was put online here there is very little time.
But the topic has been deleted. So, not any means currently.

anaheiim said:
A workaround of DRM protection was put online here there is very little time.
But the topic has been deleted. So, not any means currently.
Click to expand...
Click to collapse
It were nothing about decrypting DRM-protected XAPs from marketplace, just a way to make non-encrypted XAP from the already installed app. Also the app you`re making xap from must user CAPs not higher that regular 3rd party developers can use, instead you can not install an app again because no free/software interop or better unlock is achived for Nokia phones.
AFAIK even unlocked with all known ways Samsung Ativ S can`t decrypt those marketplace XAP's, so the answer is no, it`s not yet possible.

It is possible, after a fashion, but not directly. This whole topic is sketchy as heck. If you tell me why you want to do this, I may help you - I've decompiled apps before; we'd never have gotten interop-unlock on ATIV phones without it - but I'm not just going to post the method on a thread like this one.

GoodDayToDie said:
It is possible, after a fashion, but not directly. This whole topic is sketchy as heck. If you tell me why you want to do this, I may help you - I've decompiled apps before; we'd never have gotten interop-unlock on ATIV phones without it - but I'm not just going to post the method on a thread like this one.
Click to expand...
Click to collapse
Hi, first of all, thanks all for the answers.
The reason that I need to decompile an app from the store is because it's my app that I'm trying to decrypt.
I lost the source code of my app that is already in the store, and I'm looking for a way for restoring it.
If you can help me, it will be great !
it also very intersting me as a developer the way to accomplish that, I had tried all my best...
Thanks.

The name of this application?

titi66200 said:
The name of this application?
Click to expand...
Click to collapse
Surely OP will deliver.

GoodDayToDie said:
It is possible, after a fashion, but not directly. This whole topic is sketchy as heck. If you tell me why you want to do this, I may help you - I've decompiled apps before; we'd never have gotten interop-unlock on ATIV phones without it - but I'm not just going to post the method on a thread like this one.
Click to expand...
Click to collapse
I need to decompile some apps since they are legacy xap which Ms cancelled after Nokia acquisition.
These would not install on win 10 mobile since it can't install xap and we can't deploy store xap.

GoodDayToDie said:
It is possible, after a fashion, but not directly. This whole topic is sketchy as heck. If you tell me why you want to do this, I may help you - I've decompiled apps before; we'd never have gotten interop-unlock on ATIV phones without it - but I'm not just going to post the method on a thread like this one.
Click to expand...
Click to collapse
i also want to decompile some apps like(tapatalk , nokia refocus and lots of other nokia apps)
can you help me

[Q] Is there a way to pull a XAP file off WP8?

Hello - I am doing a pen test for a customer. They are not giving me the xap files like they did last time. Is there a way to pull the xap file off the phone and on to your PC? I have a dev unlocked phone which I can sideload apps using power tools. I have done some research and it doesn't sound like this option is available, but I wanted to ask.
Thanks in advance.

First of all, the phone doesn't store the XAP files (PLEASE search before posting! This question gets asked a lot). I assume all you really care about is the app binaries and manifest file, though. (You can rebuild an installable XAP from these if needed.)
There's a complicated series of hacks for doing it on 8.1 via the ability to install apps to the SD card. If you don't have 8.1, don't have an SD card, can't install the relevant versions of specific apps, or if the app is marked to not allow installation to SD, then that method won't work for you.
The other approach, which in my experience is standard in the pentesting world (which is my field as well), is to use a hacked/jailbroken/unlocked phone. Samsung (unless it has the very newest firmware versions) and Huawei phones can be unlocked by flashing modified ROMs. The unlock lets you sideload apps with vastly more privileges, such as the ability to read and write the install directory of any app. Using that, it's pretty easy to get the files you want. Such unlocks are also possible with some Nokia phones via JTAG, and possibly some other models too, but the Samsung unlock (which I and -W_O_L_F- found) and the ability to flash customized ROMs for Huawei are the easiest approaches.
On the offhand chance you're part of NCC group, PM me and I'll send you my work email address. If you're with one of our competitors... well, I actually don't mind helping a competitor that much either; some Deja Vu folks gave me a good tip lately though, and I've got friends at SI as well.

GoodDayToDie said:
First of all, the phone doesn't store the XAP files (PLEASE search before posting! This question gets asked a lot). I assume all you really care about is the app binaries and manifest file, though. (You can rebuild an installable XAP from these if needed.)
There's a complicated series of hacks for doing it on 8.1 via the ability to install apps to the SD card. If you don't have 8.1, don't have an SD card, can't install the relevant versions of specific apps, or if the app is marked to not allow installation to SD, then that method won't work for you.
The other approach, which in my experience is standard in the pentesting world (which is my field as well), is to use a hacked/jailbroken/unlocked phone. Samsung (unless it has the very newest firmware versions) and Huawei phones can be unlocked by flashing modified ROMs. The unlock lets you sideload apps with vastly more privileges, such as the ability to read and write the install directory of any app. Using that, it's pretty easy to get the files you want. Such unlocks are also possible with some Nokia phones via JTAG, and possibly some other models too, but the Samsung unlock (which I and -W_O_L_F- found) and the ability to flash customized ROMs for Huawei are the easiest approaches.
On the offhand chance you're part of NCC group, PM me and I'll send you my work email address. If you're with one of our competitors... well, I actually don't mind helping a competitor that much either; some Deja Vu folks gave me a good tip lately though, and I've got friends at SI as well.
Click to expand...
Click to collapse
Thanks again for all your help. So my situation is this: I am doing pen testing for a client (and I'm sure we are competitors some what). The have provided me a Nokia Lumia phone running 8.0 and another Lumia running 8.1. The app is installed by their dev team (app is not avail from the store). They are reluctant to provide my the XAP file as they consider it proprietary info. I have done a dev unlock on the phone, but my primary goal is to view the isolated storage/dlls for the app to make sure they are not storing sensitive data. I am using the standard tools for viewing the isolated storage, but for these to work (best of my knowledge) they require you to sideload the application which I cannot due (not XAP file). I am proxying the traffic, but without looking at the file system there is not much I can do. As an aside, they are using MDM with jailbreak detection.

Whoa, somebody actually got around to writing jailbreak detection for WP8? Crazy. I wish I could see that; I'm sure it's trivial to bypass (at least for interop-unlock, the difference between locked and unlocked is changing a registry value and it would be easily possible to re-lock it, launch the app while keeping the editor app open in the background, switch back to the editor, and unlock/jailbreak again) but I'm amused that anybody even bothered trying. Also, the APIs you would need to do the detection aren't even available on 8.0, officially; you're in violation of the store rules if you use them. Then again, maybe this is an internal, "Enterprise" app; those have permissions to do stuff that typical third-party apps do not. Are you sure they don't just mean they have jailbreak detection for iOS? I see something about Office365 MDM offering JB detection, but while I suppose they could have written something for WP8.x as well I feel like I probably would have heard of it?
If the app was sideloaded by the dev team, then you can see its isostore using the official tools or using Windows Phone Power Tools. If it's an enterprise app and the app was installed that way, then things get more difficult (especially if the phone they gave you doesn't have an SD slot). Not giving a pentester access to the binary they're testing is silly on a number of levels; if you succeed in breaking in then you'll get it anyhow, and an attacker will have a lot more than a week or two to poke at it so they're wasting your presumably-paid-by-the-hour time if they want you to see how good their security is without actually examining the app. I bet they used obfuscation, too... Some people just don't get it. "Security" by obscurity... isn't. Sorry, end of mini-rant. Anyhow, there's a guy on the forum who claims to have a non-JTAG unlock for Lumias, but no idea when or if it'll see the light of day.

can we have an alternate store for windows phones this 2020?

I know the Store has shut down since last 2 months and most of the Microsoft services for Windows Phone are already dead or cut off. We all know that we can no longer download and install apps in the Store and now we depend on cracked and/or deployable XAP files and APPX/Bundle files on the Internet. But can we share our "surviving" installed marketplace apps thru one app? Like maybe making an ALTERNATE store for WP...
Well, Microsoft would (maybe) not care if we do this since Windows Phone is dead so why not give it a try? Sharing our installed apps (by extracting it from their Installation Folder and zipping it/recompile it) to others would help a lot, especially for users who don't have time to bother buying a new non-Windows smartphone.
Also can someone make or share a "Tap the tile to lock phone screen" app? I desperately need one because my power button is broken.

I would share my installed software if I would know how to retrieve them.
Microsoft Lumia 640 LTE @ WindowsPhone 8.1

djinni111 said:
I would share my installed software if I would know how to retrieve them.
Microsoft Lumia 640 LTE @ WindowsPhone 8.1
Click to expand...
Click to collapse
You can (for XAP files) using this method from this YT video: https://www.youtube.com/watch?v=buWOsHd6jdg
The method works for SD card apps.
For Internal, boot phone into Mass Storage Mode (you need to root your phone using WPI). Then, in your PC, go to MainOS > Data > PROGRAMS. Copy either everything or a specific app (via GUID), and do as what the video also show how.
For APPX or APPXBundle apps, go to WINDOWSAPPS folder whilst in PROGRAMS (internal) or WPSystem\Apps (SD) directory. Then, copy the app files.
For APPX, those without any similar names of the app.
For APPXBundle, those with similar names of the app plus the cpu architectures "arm", and "neutral" (there may be two more of those "neutral" ones, but join them also).
Then create (on your PC) a self-signed certificate, pack each package (for APPXBundle, pack them app but put into a seperate folder so that they wont join in the others), sign them one by one, (for APPXBundle, pack them into a bundle, and sign them (again? idk)), and your done.
To check if they're deployable, i recommend deploying them one by one on an emulator or on a separate device. If you deploy one but fails, the tendency of the app with the same app GUID installed on your phone being uninstalled is high.

I know many people still using Wp 8.1 and still need install App for Wp, but Store closed. Waiting for help ! Can some great devoloper do that ? Sorry my bad English !

CreativeGamer03 said:
I know the Store has shut down since last 2 months and most of the Microsoft services for Windows Phone are already dead or cut off. We all know that we can no longer download and install apps in the Store and now we depend on cracked and/or deployable XAP files and APPX/Bundle files on the Internet. But can we share our "surviving" installed marketplace apps thru one app? Like maybe making an ALTERNATE store for WP...
Well, Microsoft would (maybe) not care if we do this since Windows Phone is dead so why not give it a try? Sharing our installed apps (by extracting it from their Installation Folder and zipping it/recompile it) to others would help a lot, especially for users who don't have time to bother buying a new non-Windows smartphone.
Also can someone make or share a "Tap the tile to lock phone screen" app? I desperately need one because my power button is broken.
Click to expand...
Click to collapse
use android :good:

Did anyone try to look how far we can get in replicating the original App Store's backend? Might hit a road block sooner or later with signing etc., but I was surprised to see at least the initial communication is HTTP only:
Code:
GET /v9/catalog/storePages?typeId=DynamicHub.Main&os=8.10.15148.0&cc=DE&lang=de-DE&hw=520190980&dm=RM-984_1001&oemId=NOKIA&moId=&cf=99-1&Flight=&SEG0=%3B&SEG1=&SEG2=&SEG3=&SEG4=&SEG5=&optedOut=true HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: gzip
User-Agent: ZDM/4.0; Windows Mobile 8.1
X-WP-Client-Config-Version: 81001
X-WP-Device-ID: ******
MUID: *******
X-WP-StorePage-Cookie: *******
Host: cdn.marketplaceedgeservice.windowsphone.com
That request then times out after a while since it goes via akamai and probably tries to hit backend servers that no longer exist (504 Gateway Time-out).
Unfortunately I never captured the traffic while the store was still working, so the question is how to figure out what to reply to this.