Database Develop

[Q] How do you unlock a Wp8 device ? and how do do it (dev account or other options)

Ok, if any place, this is the place to ask.
I still have one of those dreakspark accounts with a dev account. What do I need to unlock and side load apps or 3rd party tools on my HTC 8X ?
Is there a Interop unlock process for WP8 or full unlock with Root tools is it too soon for this ? Is there any other "unlock" options floating around that teams are working on ? I really just want Advanced Config to work on my phone because I miss custom colors but, it should work, right ?
I would love to be able get started with my dev account, what do I need to do ? I do have a partition with Windows 8 x64 on it.....
Is there any thing I should be reading ?
Thanks in advance !

Install WP8 SDK, unlock with phone registration tool.

mcosmin222 said:
Install WP8 SDK, unlock with phone registration tool.
Click to expand...
Click to collapse
Yea, thanks...
Is there any type of advanced unlock or will any of the WP7.5 tools like root tools work on Windows Phone 8 ? That is what my post is really about, is there a Interop unlock or full unlock yet ?

I don't think anyone has cracked WP8 yet for interop unlock and I have been following this forum for awhile. There isn't even custom ROMs yet.
As far as the WP8 SDK, be aware you need Windows 8 on your PC. It will not install on Windows 7
I upgraded my PC to Windows 8 so I could load the SDK and use my Dev Account to unlock. But all you can do is side load apps that do not need root or interop access...but I keep hoping. At this point I have yet to side load anything because my old WP7.5 side loads all need root/IU.
At least WP8 offers enough additional configurability to keep me somewhat satisfied but I still have my old Trophy.

LiFePo4 said:
I don't think anyone has cracked WP8 yet for interop unlock and I have been following this forum for awhile. There isn't even custom ROMs yet.
As far as the WP8 SDK, be aware you need Windows 8 on your PC. It will not install on Windows 7
I upgraded my PC to Windows 8 so I could load the SDK and use my Dev Account to unlock. But all you can do is side load apps that do not need root or interop access...but I keep hoping. At this point I have yet to side load anything because my old WP7.5 side loads all need root/IU.
At least WP8 offers enough additional configurability to keep me somewhat satisfied but I still have my old Trophy.
Click to expand...
Click to collapse
Yea, I am dual booting with Windows 8, so I installed it and Dev unlocked but, the dreamspark account I have has a limit of 3 apps Wish at least there was a way around this right now...
Anyone play with any tools from HTC days? I even saw that HTC Connection Setup is available in the marketplace. Getting MAX unsigned apps would be great right now to hold me out till the tools and custom roms can come.
I just miss Advanced Config the most, I HATE limit the factory colors, I need my custom colors back....Is this too much to ask from Microsoft to create custom colors ?
BTW...I wish the SDK could be installed on Win7x64, I am not a Win8 fan right now...
I used my Trophy the other day after having the 8X for a few days, I just can't go back... I think I have to sell mine, the screen is just too small and not as pretty

I tried my Trophy again too and understand. I can't switch back. And no news on the sideload limit as that needs reg edit (but haven't thought about Connection Setup; no one is looking as far as I know).
If someone is working on cracking WP8 they are not saying much. It is pretty dead in the hacking section and WPH/Jaxbot isn't doing anything. Waiting....
P.S. If you have to use Win8 much get Stardock's Start8 and Decor8 apps ($5 each). You get a start button back and can set to boot right into the desktop. Decor8 let's you pick custom colors for your tiles and background! Just need a "Decor8" app for WP8.

Has there been ANY rumor or anything on a exploit for Windows Phone 8 ? I have been following every site I know of and I have not seen anything. It's been months and there has been nothing at all.
Are any of the major players even working on this or have they moved on to other phones ? It's normaly a little more when people are looking into it..

There is the problem of this security chip that checks both the kernel and the bootloader for authentic signatures. This chip is "hard coded" and can't be avoided at startup. Therefore, it is extremely difficult to make a rooted windows phone 8 OS boot on these devices. If either the bootloader or the kernel have been tampered with, said chip will restore them (sometimes even with complete device wipe), thus any modifications are very hard to do.
I have no doubt that the chip can be overridden somehow, but there is a long way till there, requires a lot of effort and the benefits are really not that big.

mcosmin222 said:
There is the problem of this security chip that checks both the kernel and the bootloader for authentic signatures. This chip is "hard coded" and can't be avoided at startup. Therefore, it is extremely difficult to make a rooted windows phone 8 OS boot on these devices. If either the bootloader or the kernel have been tampered with, said chip will restore them (sometimes even with complete device wipe), thus any modifications are very hard to do.
I have no doubt that the chip can be overridden somehow, but there is a long way till there, requires a lot of effort and the benefits are really not that big.
Click to expand...
Click to collapse
Oh, Crap....Dam, nothing easy huh ? I really hope someone can unlock this to a point, I would like to side load more, yea but, I am more interested in Advanced Config so I could have more colors... sick of the default colors on WP8...

[Q] Is there a way to pull a XAP file off WP8?

Hello - I am doing a pen test for a customer. They are not giving me the xap files like they did last time. Is there a way to pull the xap file off the phone and on to your PC? I have a dev unlocked phone which I can sideload apps using power tools. I have done some research and it doesn't sound like this option is available, but I wanted to ask.
Thanks in advance.

First of all, the phone doesn't store the XAP files (PLEASE search before posting! This question gets asked a lot). I assume all you really care about is the app binaries and manifest file, though. (You can rebuild an installable XAP from these if needed.)
There's a complicated series of hacks for doing it on 8.1 via the ability to install apps to the SD card. If you don't have 8.1, don't have an SD card, can't install the relevant versions of specific apps, or if the app is marked to not allow installation to SD, then that method won't work for you.
The other approach, which in my experience is standard in the pentesting world (which is my field as well), is to use a hacked/jailbroken/unlocked phone. Samsung (unless it has the very newest firmware versions) and Huawei phones can be unlocked by flashing modified ROMs. The unlock lets you sideload apps with vastly more privileges, such as the ability to read and write the install directory of any app. Using that, it's pretty easy to get the files you want. Such unlocks are also possible with some Nokia phones via JTAG, and possibly some other models too, but the Samsung unlock (which I and -W_O_L_F- found) and the ability to flash customized ROMs for Huawei are the easiest approaches.
On the offhand chance you're part of NCC group, PM me and I'll send you my work email address. If you're with one of our competitors... well, I actually don't mind helping a competitor that much either; some Deja Vu folks gave me a good tip lately though, and I've got friends at SI as well.

GoodDayToDie said:
First of all, the phone doesn't store the XAP files (PLEASE search before posting! This question gets asked a lot). I assume all you really care about is the app binaries and manifest file, though. (You can rebuild an installable XAP from these if needed.)
There's a complicated series of hacks for doing it on 8.1 via the ability to install apps to the SD card. If you don't have 8.1, don't have an SD card, can't install the relevant versions of specific apps, or if the app is marked to not allow installation to SD, then that method won't work for you.
The other approach, which in my experience is standard in the pentesting world (which is my field as well), is to use a hacked/jailbroken/unlocked phone. Samsung (unless it has the very newest firmware versions) and Huawei phones can be unlocked by flashing modified ROMs. The unlock lets you sideload apps with vastly more privileges, such as the ability to read and write the install directory of any app. Using that, it's pretty easy to get the files you want. Such unlocks are also possible with some Nokia phones via JTAG, and possibly some other models too, but the Samsung unlock (which I and -W_O_L_F- found) and the ability to flash customized ROMs for Huawei are the easiest approaches.
On the offhand chance you're part of NCC group, PM me and I'll send you my work email address. If you're with one of our competitors... well, I actually don't mind helping a competitor that much either; some Deja Vu folks gave me a good tip lately though, and I've got friends at SI as well.
Click to expand...
Click to collapse
Thanks again for all your help. So my situation is this: I am doing pen testing for a client (and I'm sure we are competitors some what). The have provided me a Nokia Lumia phone running 8.0 and another Lumia running 8.1. The app is installed by their dev team (app is not avail from the store). They are reluctant to provide my the XAP file as they consider it proprietary info. I have done a dev unlock on the phone, but my primary goal is to view the isolated storage/dlls for the app to make sure they are not storing sensitive data. I am using the standard tools for viewing the isolated storage, but for these to work (best of my knowledge) they require you to sideload the application which I cannot due (not XAP file). I am proxying the traffic, but without looking at the file system there is not much I can do. As an aside, they are using MDM with jailbreak detection.

Whoa, somebody actually got around to writing jailbreak detection for WP8? Crazy. I wish I could see that; I'm sure it's trivial to bypass (at least for interop-unlock, the difference between locked and unlocked is changing a registry value and it would be easily possible to re-lock it, launch the app while keeping the editor app open in the background, switch back to the editor, and unlock/jailbreak again) but I'm amused that anybody even bothered trying. Also, the APIs you would need to do the detection aren't even available on 8.0, officially; you're in violation of the store rules if you use them. Then again, maybe this is an internal, "Enterprise" app; those have permissions to do stuff that typical third-party apps do not. Are you sure they don't just mean they have jailbreak detection for iOS? I see something about Office365 MDM offering JB detection, but while I suppose they could have written something for WP8.x as well I feel like I probably would have heard of it?
If the app was sideloaded by the dev team, then you can see its isostore using the official tools or using Windows Phone Power Tools. If it's an enterprise app and the app was installed that way, then things get more difficult (especially if the phone they gave you doesn't have an SD slot). Not giving a pentester access to the binary they're testing is silly on a number of levels; if you succeed in breaking in then you'll get it anyhow, and an attacker will have a lot more than a week or two to poke at it so they're wasting your presumably-paid-by-the-hour time if they want you to see how good their security is without actually examining the app. I bet they used obfuscation, too... Some people just don't get it. "Security" by obscurity... isn't. Sorry, end of mini-rant. Anyhow, there's a guy on the forum who claims to have a non-JTAG unlock for Lumias, but no idea when or if it'll see the light of day.

Question about the setup wizard on sm-t713,710,100 tablets

Hello everyone, I am working with Galaxy Tab S2 tablets (SM-T713, T710, and T700) all running stock versions of 6.0.1 Marshmallow. Currently I am having to configure all 13,000 (yes 13 thousand tablets) by manually going through the initial setup wizard and then they are going right into a custom KNOX enrollment and then loaded with customer information through a MDM Server. I am looking for a solution on how i may be able to automate the initial setup screen so i can save time since every other step is hands off. I read a post somewhere about somehow creating a update file and flashing that file from the recovery boot menu but cant seem to find it. Also i have no coding experience so if flashing an update file is an option then ill need to figure out how to make one.
I know this is a shot in the dark but if anyone has any experience with this then please do let me know. I can provide any other details if needed.
Thanks!

Is it an option for the customers to do the setup and then have them self-enroll to the mdm or they have to have it enrolled in order to receive it?

stefer09 said:
Is it an option for the customers to do the setup and then have them self-enroll to the mdm or they have to have it enrolled in order to receive it?
Click to expand...
Click to collapse
Unfortunately the customer is expecting me to load their employee data for them so that way all they need to do is log in with their credentials once out in the field.

Hmmm... maybe Samsung has tools to do this, just like the cellphone providers have to flash their own apps on...
It's a long shot...
Ive done similar on ipads with a special software apple supplies to prepare a bunch of devices, usually for classrooms or corporate employees. Not sure Samsung has something similar, but they must have something.... All those cellphones and LTE tablets were tweaked the way they wanted. Even a factory reset brings it back so its even in the recovery image.
---------- Post added at 11:00 PM ---------- Previous post was at 10:54 PM ----------
I was going to say, have you checked out this? But it requires 7.0
https://www.samsungknox.com/en/solutions/knox-configure
Have you checked with your mdm provider? Maybe they have ideas or ressources for this.

Lenovo Smart Clock details

Hi, I bought a Lenovo Smart Clock with the google assistant,
Here are some details from the box:
Wifi Hemp Grey 1G+8G
Lenovo Smart Clock
Model: Lenovo CD-24501F
Lenovo CD-24501F 1G+8GGRW-CA
CPU MediaTek * MT81675
Display 3.97 inch 480*800 WVGA IPS
Memory LP DDR3 1GB
WLAN 802.11 A/B/G/N/AC+BT5.0
OS Android things w/ Google Assistant
Battery No Battery
Click to expand...
Click to collapse
After setting it up and trying it for a few days I looked around online and I don't see much specifically about this device and if it can be modified or accessed in unconventional ways. can we root it? I would love to be able to cast to it youtube etc. HDMI out anyone? Has anyone else tinkered with it yet? The '1G+8G' marking on the box seems to suggest it has a 1GB of flash presuming to be for the android things OS and another 8GB of flash for apps or media or caches?
Here is details from the Google Home App:
System Firmware Version: OIMF.191015.004
Cast Firmware Verstion: 1.42.180336
Google Assistant Smart Clock application version: 6.27.8+prod.1.1.0.5961405
Language: English (Canada)
Country Code: CA
IP Address: 192.168.1.100
Click to expand...
Click to collapse
Info from the foot on the bottom (SN obfuscated):
Lenovo Smart Clock Model: Lenovo CD-24501F
Manufactured for Lenovo PC HK Limited Factory ID: LCHZ
FCC ID: O57CD24501F IC: 10407A-CD24501F Made in China
CAN ICES-3 (B)/NMB-3(B) S/N: ########-## Mfg: 2019-10-30
Click to expand...
Click to collapse
Here is NMAP of its ip address:
8008/tcp open http
8009/tcp open ajp13
8443/tcp open https-alt
9000/tcp open cslistener
10001/tcp open scp-config
Click to expand...
Click to collapse
The price was pretty low, $50CAD at best buy, I cant wait to see what people can do to hack it. Other smart displays seem to have USB/ADB/Fastboot connections, I havnt found one on this device yet.

I too would like to see some custom stuff on this cool little clock.

Yessss! It would be nice!

Open smartclock
Hi,
Does anyone know how to open this smartclock thanks.
Regards
Bob

We haven't hacked any google assistant devices yet that I know off, in fact, I dont think we even hacked android things yet. I am sure there is somebody that is trying to hack android things. Btw, youtube can be watched on the clock, by going to something like the weather page > taping weather.com > going to the menu > download app, clicking on the download on the app store logo, going to the menu, support, go to apple support youtube channel, taping the YouTube icon. It's only in 480p, I tried it, I would rather watch on my phone or tablet, also the video will stop and the clock will go back to home if you wait to long without touching the screen or wake up the google assistant. Other than that. Playback is smooth.
---------- Post added at 04:24 AM ---------- Previous post was at 04:20 AM ----------
snipes420 said:
Hi, I bought a Lenovo Smart Clock with the google assistant,
Here are some details from the box:
After setting it up and trying it for a few days I looked around online and I don't see much specifically about this device and if it can be modified or accessed in unconventional ways. can we root it? I would love to be able to cast to it youtube etc. HDMI out anyone? Has anyone else tinkered with it yet? The '1G+8G' marking on the box seems to suggest it has a 1GB of flash presuming to be for the android things OS and another 8GB of flash for apps or media or caches?
Here is details from the Google Home App:
Info from the foot on the bottom (SN obfuscated):
Here is NMAP of its ip address:
The price was pretty low, $50CAD at best buy, I cant wait to see what people can do to hack it. Other smart displays seem to have USB/ADB/Fastboot connections, I havnt found one on this device yet.
Click to expand...
Click to collapse
I plugged in an android device to the clock, and it came up with some message, I dont remember what itsaid, it was either for adb debugging or transferring files over usb. I think it was transfering files over usb. The usb port does allow data transfer. Plugging in a USB mouse will make a mouse show up and can move for example.

It probably isn't much but you can go to ip.of.smart.clock:8008/setup/eureka_info in a web browser to view the basic info of the device

Home Assistant
It could be great to have some custom home assistant displayed on smart clock screen instead of clock

Apparently it's possible to plug in a keyboard and/or mouse to it via the USB port on the back (a cursor will appear).

Just got one of these myself today. Best Buy had em for 40 bucks. Quite the awesome little thing. I'm really surprised I can't find much for it.
I'll see if maybe I can buy a second one to purposely "break" (just in case), and see if I can get anything working on it. The little screen is good quality and has great sound. Would be cool for a mini emulation station of some kind
Update: Realized mine doesn't have the usb-c port under the rubber feet like other's have stated here its supposed to. Really don't wanna tear into the carpeting around it. I have the exact same model as first post
Plugging in a usb keyboard works for typing
update 2: navigated my way to youtube and tried downloading an apk from a direct link, downloads don't work period
update 3: can not get device recognized by a pc via plugging in USB port on the back to a USB-C port on my laptop, also tried USB-A to USB-A, no results
Update 4 lol: Unlocked the bootloader, had to have device manager search online for the driver, but it found it and installed it just fine. to unlock the bootloader, simply type
Code:
fastboot flashing unlock

KaptinBoxxi said:
Update 4 lol: Unlocked the bootloader, had to have device manager search online for the driver, but it found it and installed it just fine. to unlock the bootloader, simply type
Code:
fastboot flashing unlock
Click to expand...
Click to collapse
Hello KaptinBoxxi,
How did you manage to unlock the bootloader, did you use ADB on computer via USB? or directly via a pluged in keyboard?
I'm a bit new to all of those types of hack but I'm very interested in getting into that since this device is small, cheap, good quality and could be a perfect smart display if there was any abilities to extend the frontend to better use cases.
Thanks

gussir said:
Hello KaptinBoxxi,
How did you manage to unlock the bootloader, did you use ADB on computer via USB? or directly via a pluged in keyboard?
I'm a bit new to all of those types of hack but I'm very interested in getting into that since this device is small, cheap, good quality and could be a perfect smart display if there was any abilities to extend the frontend to better use cases.
Thanks
Click to expand...
Click to collapse
Fastboot via computer. Although, if this is the first device you're picking up, I'd recommend it not be. No one's really done much with cracking/hacking Android Things (the version of Android that runs on this) as it isn't a full version of android. Its heavily stripped down. Grab an old phone that has a ton of support for modding/hacking but isn't exactly the easiest and do that. I'd recommend a Sprint variant of the HTC One M7 if you want a real challenge. I had to find my own custom method to S-OFF the device, unlock the bootloader, then ROM it and root it as no tutorials worked that were currently up and I wasn't willing to pay to unlock it. If that sounds a little too high end for now, get something like an unlock Galaxy S4 or Verizon Galaxy S5 and hope its a Toshiba model so you can unlock the bootloader

KaptinBoxxi said:
Fastboot via computer. Although, if this is the first device you're picking up, I'd recommend it not be. No one's really done much with cracking/hacking Android Things (the version of Android that runs on this) as it isn't a full version of android. Its heavily stripped down. Grab an old phone that has a ton of support for modding/hacking but isn't exactly the easiest and do that. I'd recommend a Sprint variant of the HTC One M7 if you want a real challenge. I had to find my own custom method to S-OFF the device, unlock the bootloader, then ROM it and root it as no tutorials worked that were currently up and I wasn't willing to pay to unlock it. If that sounds a little too high end for now, get something like an unlock Galaxy S4 or Verizon Galaxy S5 and hope its a Toshiba model so you can unlock the bootloader
Click to expand...
Click to collapse
Thanks a lot for your feedback, I'll start on with something easier and will definitively follow along with this thread to see how the hacking of this device is evolving. have a good day

KaptinBoxxi said:
Just got one of these myself today. Best Buy had em for 40 bucks. Quite the awesome little thing. I'm really surprised I can't find much for it.
I'll see if maybe I can buy a second one to purposely "break" (just in case), and see if I can get anything working on it. The little screen is good quality and has great sound. Would be cool for a mini emulation station of some kind
Update: Realized mine doesn't have the usb-c port under the rubber feet like other's have stated here its supposed to. Really don't wanna tear into the carpeting around it. I have the exact same model as first post
Plugging in a usb keyboard works for typing
update 2: navigated my way to youtube and tried downloading an apk from a direct link, downloads don't work period
update 3: can not get device recognized by a pc via plugging in USB port on the back to a USB-C port on my laptop, also tried USB-A to USB-A, no results
Update 4 lol: Unlocked the bootloader, had to have device manager search online for the driver, but it found it and installed it just fine. to unlock the bootloader, simply type
Code:
fastboot flashing unlock
Click to expand...
Click to collapse
Were you able to use adb?
I found a deal on this device and am debating if I should buy it. The thing is, I wanna run Spotify on it without voice commands. ;D

-gloim- said:
Were you able to use adb?
I found a deal on this device and am debating if I should buy it. The thing is, I wanna run Spotify on it without voice commands. ;D
Click to expand...
Click to collapse
You can use a Python Library called Pychromecast to remotely play media on it.

TheRookie_ said:
You can use a Python Library called Pychromecast to remotely play media on it.
Click to expand...
Click to collapse
Thank you for the recommendation. I actually meant that I want to control the music from the screen, though. : )
Installing Spotify should probably be possible if adb is working. But, I would still need to figure out some way to launch Spotify without opening the app over adb every time.

I have posted development related resources over in this thread
https://forum.xda-developers.com/co...me/lenovo-smart-clock-bootloader-avb-t4130295

Can anyone tell me how install hindi support for the Google assistant?

[Request] Windows 10 Your Phone "Phone Screen" Feature

Hi all,
As you all know there is an Windows 10 app/feature called "Your Phone" its amazingly helpful to reach your phone features from your Windows 10 PC.
Some of Samsung phones has "Your Screen" feature also, it is really amazing, you can see and use your phone via your keyboard/mouse and also drag and drop files to your phone is very useful. I think its Cast feature with input controls. I think it could be available for all phones with a magisk module, if there is some developer interesting this, it would be amazing if there will be a module for available it on all Android devices.
https://youtu.be/kMNHSzlzqKE?t=30
Thanks.

EzerchE said:
Hi all,
As you all know there is an Windows 10 app/feature called "Your Phone" its amazingly helpful to reach your phone features from your Windows 10 PC.
Some of Samsung phones has "Your Screen" feature also, it is really amazing, you can see and use your phone via your keyboard/mouse and also drag and drop files to your phone is very useful. I think its Cast feature with input controls. I think it could be available for all phones with a magisk module, if there is some developer interesting this, it would be amazing if there will be a module for available it on all Android devices.
https://youtu.be/kMNHSzlzqKE?t=30
Thanks.
Click to expand...
Click to collapse
On non samsung devices you'll just need to install the app on your android phone. That'll do. View attachment 5041655
Sent from my SM-G985F using Tapatalk

vash_h said:
On non samsung devices you'll just need to install the app on your android phone. That'll do. View attachment 5041655
Sent from my SM-G985F using Tapatalk
Click to expand...
Click to collapse
Of course you need this app to connect, but non-samsung phones doesnt have "Phone Screen" feature.

EzerchE said:
Of course you need this app to connect, but non-samsung phones doesnt have "Phone Screen" feature.
Click to expand...
Click to collapse
So, here is my workaround for the your phone feature.
I use KDE Connect, for transfering files between devices and at the same time it shows notifications as well. The software is very light (1.9MB of RAM) in the background compared to your phone. The other one, which i personally dont use, but has the phone screen/screen mirroring feature it's an open source software called Scrcpy. Hope this information helps.

Use the dell/alienware mobile connect app. It has the same functionality and can be installed on non dell pcs via a workaround with powershell. Works great. I had mirroring from day one almost. instructions are listed here, the top comment not the OP. Let me know if you can't find the driver etc
https://www.reddit.com/r/Alienware/comments/7q0wt0/fix_alienware_mobile_connect_installation_for/
---------- Post added at 01:56 PM ---------- Previous post was at 01:51 PM ----------
EzerchE said:
Hi all,
As you all know there is an Windows 10 app/feature called "Your Phone" its amazingly helpful to reach your phone features from your Windows 10 PC.
Some of Samsung phones has "Your Screen" feature also, it is really amazing, you can see and use your phone via your keyboard/mouse and also drag and drop files to your phone is very useful. I think its Cast feature with input controls. I think it could be available for all phones with a magisk module, if there is some developer interesting this, it would be amazing if there will be a module for available it on all Android devices.
https://youtu.be/kMNHSzlzqKE?t=30
Thanks.
Click to expand...
Click to collapse
Use the dell/alienware mobile connect app. It has the same functionality and can be installed on non dell pcs via a workaround with powershell. Works great. I had mirroring from day one almost. instructions are listed here, the top comment not the OP. Let me know if you can't find the driver etc
https://www.reddit.com/r/Alienware/c...tallation_for/

To begin, what make the 'app' feature exclusive? Is missing features in the stock rom? then what features? Since I have a xiaomi I think I will wait the xiaomi version, but is sad how there's no alternative and no one created one to rooted devices, since the community is very big.