Saturday, July 4, 2009

Field Test Mode on Nokia Symbian Phone June 2009 Update

The following steps apply to Nokia Symbian phones. To be more specific, it should work with S60, FP 9.X Symbian phones. There are many hacking tools around the web and I am confuse at the beigining what steps I should do to install the Field Test Mode or Net Monitor to my phone. Some old methods are no longer work and therefore I try to write the steps here to remind myself. The following steps is tested in June 2009.


In brief, you need to have the following stuffs to install FTD:

1. A Cert and Key to sign some hacking applications.

2. A SIS signing tool.

3. HelloOX v1.0.3 This is the application to allow us access the hidden system folders.

4. FTD files or installation (.sis) file. You need to copy files or install signed FTD apps to provide the FTD function.



1. How To Get a Developer Cert and Key for free

To get a cert & key for your Symbian phone, go to the famous OPDA http://www.opda.net.cn to get a cert for free. OPDA is a Chinese forum and generously provide free cert for Symbian users. If you don’t know Chinese, visit http://mynokiamobile.org/2009/05/25/how-to-get-our-own-opda-developer-certificate/ and follow the step-by-step tutorial. It should take to around several hours to one day to get the cert and key. One thing need to point out is that the forum will ask you to provide your 11 digits phone number that started with 13, 15 or 18. Just provide any number start with 13, 15 or 18 and it doesn’t need to be your number. But try to make it random enough so that it won’t be used by other to avoid collision.

2. Signing Tool
You can use any signing tool available. I get the sigining tool from here http://www.mediafire.com/?wojtgmwdjai
SisSigner.zip - 664.2 KB

3. HelloOX v1.0.3
Use this version or later one. I have tried v1.0.1 with no success. V1.0.1 has to rely on another application called mapdrive. In V1.0.3 Mapdrive is integrated into HelloOX and hence you don’t need to trouble about it. Get it from the link here: http://www.mediafire.com/?dzmkyruvomz
HelloOX v1.03.rar - 186.9 KB

Sign the HelloOX with your cert & key. Install and Run it.

With my Nokia 5320, it took me very long time in the “Install Root Certificates…” step. Therefore be patient during the installation.

After install ROMPatcher, HelloOX will try to remove some files. In my case, it just hanging for 30mins and I just press the “cancel” button to complete the installation.
After the installation, you should find an “LeftUp” Item in your phone. Open it you should see “Modo” application. Open “Modo” you should able to see the hidden folders like “Private” and “SYS”. Now you are very close to success.



4. Install the FTD files
There are two ways to install the FTD files.

Method 1: Sign packed sis file and install it. Get the file here: http://www.badongo.com/file/15838439
12 Mar 2010 Update: badongo link is dead. File is uploaded to rapaidshare : http://rapidshare.com/files/362415236/FieldTest_9.2_new.zip

It should work for some models but not all. If the installation fails, use method 2. My N5320 doesn't work with this method.

Method 2: Copy the FTD files to specific folder by using “Modo”.

Download the FTD files from the following link: http://www.badongo.com/file/15838444
12 Mar 2010 Update: badongo link is dead. File is uploaded to rapaidshare : http://rapidshare.com/files/362415650/ftdALLSymbian.zip

Copy the respective files to corresponding folder as below:

C/Private/10003a3f/import/Apps
FtdApp_reg.rsc

C/Resource/Apps
Ftd.mbm
Ftd.mif
ftd.rsc
Ftd_aif.mif
ftdata_wk15_07.dat
ftdata_wk41_06.dat
Alarm.rsc
AlarmList.mbm
CallEnd.rsc
Custom.rsc

C/Resource/Plugins
ftd.dll55l
baseimage.dof

C/Sys/Bin
FTD.exe
FtDaInterface.dll
ftdaserver.exe
FtDbInterface.dll
ftdbserver.exe
FtdGwcTest.exe
FtEngine.dll

C:\private\101F457f\
MmRmDSPInitData.RSC

C:\system\apps\dynbase\
dynbase.dof55l

If a specific folder cannot be found, just create it yourself. After you copy all the files, you should able to see the "Field Test" icon in the Application or Application->My Own folder of your phone.

But if your phone is FP9.1 (My 5320), the icon will not be shown and you need to override the Ftd.mbm, Ftd.mif, Ftd_aif.mif with FP9.1 version.

5. Done! Enjoy your test mode.

6. Confirmed model:
N85, 5800, 5320, 6120 Classic. The critical step is to be able to access the hidden folders.



9 Mar 2010 Update:
The download links are dead in badongo server as mentioned by one reader. I shall upload the files again when I back to home (around 13-14 Mar 2010).

12 Mar 2010 Update:
Files are uploaded again.

Monday, March 2, 2009

Nokia 5800 hacked

Source from

http://www.ipmart-forum.com/showthread.php?t=329485

Many users replied that have sucessfully hack the phone. It implies that netmonitor function is possible to acitivate.

Will update later once I got the information.

Sunday, August 17, 2008

Nokia DCT-4 Netmonitor/Field Test Mode

To activate Netmonitor in DCT-4 Nokia phone, you need to have the following tools first:

1. DCT-4 phone of course
2. Firmware of the phone
3. Hex editor
4. Flasher tool like JAF Flasher


The overall process is easy:
1. Download the correct firmware of your phone. If you cannot find it from internet, try to visit GSM Forum. The forum has many helpful guys. If you have puchased Flasher like JAF by Odeon, you can login to support area and download necessary firmware. Official website of JAF
http://www.odeon.cn

2. Install the firmware. Use hex editor to modify the MCU file as follow:
Replace the value in 23-24 of claudia with 3D 88. Search for "D3 40" first to identify claudia sequence.
Below is a sample:

D340 XXXX XXXX XXXX XXXX XXXX XXXX XXXX
XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX
XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX
XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX
XXXX
Change it to this

D340 XXXX XXXX XXXX XXXX XXXX XXXX XXXX
XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX
XXXX XXXX 3D88 XXXX XXXX XXXX XXXX XXXX
XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX
XXXX


3. After modification, falsh the modified MCU and enjoy the activated FTD.

Using this method, I have activated netmonitor in 6230, 6230i, 3120, 1100.

4. Press Menu and scroll to "Net monitor" and press select. The screen should show you 0000. Enter 0101 and press OK, it should give your the first page of netmonitor. Press "*" and hold for a while will toogle between help page and data page.

5. Playing with the DCT-4 FTD should have no harmful effect at all. Some said that the field test mode will affect your phone performance. It is not true at all. Even through without field test display, the mobile is measuring the network information in background for cell reselection and handover process.

6. However, one should take great care when playing with "BTS TEST" page. It will permanent store the carrier you entered into memory and the phone will just search the carrier to log on. If the phone displays "OFF" in this page, it means the phone works in normal state. If it shows a number (e.g. 755), it means the phone log to the carrier and ignore neighbouring cells information. Handover and cell reselection are disabled. To disable the "BTS TEST" function, press menu and select net monitor, eneter 0112 to go to "BTS TEST" page, enter 9999 and press OK. Restart the phone and it should back to normal.


Page 01-12 BTS-Test. Be caution.

Have fun with the engineering mode!


Related topics:
Symbian 9.1/9.2 NetMonitor (FTD) for hacked phone
iPhone field test mode
Sony Ericsson Techmode
HTC Field Test Mode/Engineering Mode
Blackberry Engineering Mode
Nokia DCT-4 phone model and type mapping

Friday, August 8, 2008

Symbian Hack: HelloCarbide, ROMPatcher and installserver all-in-one pack



Hack Symbian with HelloCarbide and ROMPatcher
Of all the methods to toggle the broken Symbian restrictions on your phone on and off, ROMPatcher is the most versatile: it allows you to apply all sorts of customisations by dropping a simple file into the right folder, instead of having to edit system files by hand.

Unfortunately, Nokia's latest firmware updates prevented the installation of AppTRK on your phone, and this used to be necessary to transfer ROMPatcher from your computer to your phone.

But not anymore. A day or two ago our arsenal of Symbian hacking tools was extended by the HelloCarbide hack, which lets you open up Symbian just by running a .sisx file on your phone. No phone-to-computer connection through AppTRK required anymore.

We already had a simple method to install unsigned .sis packages, and now ROMPatcher itself is available as a .sisx file which works on just about any Symbian S60 v3 phone that has been set free with HelloCarbide.

Instructions:

1) Extract the zip, copy the three files from the zip to your phone's memory card
2) Open a file browser like X-Plore and KEEP IT RUNNING
3) Run Run HelloCarbide, go to options, then choose menu1. HelloCarbide will crash after it's done its job. Don't worry about that.
4) Switch to X-Plore and copy installserver.exe into the c:\sys\bin\ folder of your phone.
5) Restart your phone.
6) Install ROMPatcher.sisx and enjoy all the freedom that ROMPatcher gives you.

Changes:
- New version of ROMPatcher that supports more phones
- New version of ROMPatcher with autostart option

Download
http://www.badongo.com/file/10770997

Wednesday, August 6, 2008

Symbian 9.1/9.2 NetMonitor (FTD) for hacked phone



As the title already told, you need to have hacked phone in order to activate the netmonitor for field test display in Symbina 9.1/9.2 phone. Hacked phone allows you to see the hidden system folder inside the phone. You can then copy the necessary files into corresponding folders as listed below.

Hack symbian phone
Why we need to hack? It's because Nokia hide system folder/files and do not allow us to install unsigned applications. To use netmonitor/ftd program, we need to hack the phone first. Therefore, if you feel unsafe or do not want to hack the phone, you can find other netmonitor infos in this blog.

When Nokia made new firmware to kill the old AppTRK method to hack Symbian phones, the hackers responded with HelloCarbide. ROMPatcher is a program to toggle the Symbian locks on your phone on and off, and comes with a bunch of plugins to customise menus, silence the camera shutter sound, and more. Installserver lets you install unsigned programs on your phone so you don't have to deal with the slow, clumsy Symbian Signed bureaucracy.

Just use google to search for the tools and you can easily hack your symbian phone painlessly.

Download netmonitor program
Download ftdALLSymbianV3.zip from the following link:
ftdALLSymbianV3.zip (Updated on 16 Sept 2011)

The tool is tested on:
N73/N95/N80/6120c/6290/5700/E65/E51/E90

Put:
C/Private/10003a3f/import/Apps
FtdApp_reg.rsc

C/Resource/Apps
Ftd.mbm
Ftd.mif
ftd.rsc
Ftd_aif.mif
ftdata_wk15_07.dat
ftdata_wk41_06.dat
Alarm.rsc
AlarmList.mbm
CallEnd.rsc
Custom.rsc

C/Resource/Plugins
ftd.dll55l
baseimage.dof

C/Sys/Bin
FTD.exe
FtDaInterface.dll
ftdaserver.exe
FtDbInterface.dll
ftdbserver.exe
FtdGwcTest.exe
FtEngine.dll

C:\private\101F457f\
MmRmDSPInitData.RSC

C:\system\apps\dynbase\
dynbase.dof55l

P.S
For icon in symbian9.1 (n73/n80/e65 ecc ecc) use the 3 files in attachment (ftd symbian9,1 icon)

Nokia DCT-4 phone model and type mapping

The following list provides information of Nokia DCT-4 phone model to type mapping.

Usually, Nokia phone comes with a model number and type code. The information should be printed
at the back of the phone. You should able to see the information if the battery is removed.

The information is useful if you want to download firmware to update you phone because the firmware name is ususally start with phone type and do not have phone mode. e.g. RH-18_dp_v_24_30_MCUSW6_64.exe is firmware of Nokia 1100.

1100 RH-18
1100a RH-38
1100b RH-36
1101 RH-75
1110 RH-70
1110b RH-69
1112 1110i RH-93
1112b RH-92
1112i RH-94
1200 RH-99
1200b RH-100
1208 RM-105
1208b RH-106
1220 NKC-1
1255 RH-79
1260 1261 NKW-1
12i RX-2
1600 RH-64
1600b RH-65
1650 RM-305
1680c RM-394
2125i RH-71
2220 RH40-42
2260 RH-39-41
2270
2280 RH-17
2285
2300 RM-4
2300a RM-5
2310 RM-189
2600 RH-59
2600C RM-340
2600b RH-60
2600c RM-340
2610 RH-86
2610b RH-87
2626 RM-291
2630 RM-298
2650 2652 RH-53
2651 RH-54
2660 RM-292
2760 RM-258
30 TME-3
31 TME-4
3100 3120 RH-19
3100b RH-50
3105 RH-48
3108 RH-6
3128
3155i RM-41
3200 RH-30
3200b RH-31
3220 RH-37
3220b RH-49
3230 RM-51
3300 NEM-1
3300b NEM-2
3320 NPC-1
3360 NPW-1
3361 NPW-1pa
3510 NHM-8
3510i 3530 RH-9
3520 RH-21
3530 3510i RH-9
3560 RH-14
3585 NPD-4
3585i NPD-4new
3586i D100
3590 NPM-8
3595 NPM-10
3600 NHM-10
3620 NHM-10
3650 NHL-8
3660 NHL-8
5100 NPM-6
5100a NPM-6x
5140 NPL-5
5140b NPL-4
5140i RM-104
6020 RM-30
6020b RM-31
6021 RM-94
6030 RM-74
6030b RM-225
6030b RM-75
6060 RH-73
6060v RH-97
6061 RH-74
6061 RH-98
6070 6080 5070 RM-166
6070 6080 RM-166
610 TFE-4
6100 NPL-2
6101 6102 RM-76
6101b 6102b RM-77
6103 RM-161
6103b 6102i RM-162
6108 RH-4
6111 RM-82
616 RV-1
6170 RM-47
6170b RM-48
6200 NPL-3
6220 RH-20
6225 RH-27
6230 RH-12
6230b RH-28
6230i RM-72
6260 RM-25
6267 RM-210
6310 NPE-4
6310i NPL-1
6340 NPM-2
6340i RH-13
6360 NPW-2
6385 A100
6510 NPM-9
6560 RH-25
6585 RH-34
6586
6590 NSM-9
6600 NHL-10
6610 NHL-4U
6610i RM-37
6620 NHL-12
6650 NHM-1
6651 NMM-1
6670 RH-67
6670b RH-68
6708 RM-139
6800 NHL-6
6800a NSB-9
6810 RM-2
6820 NHL-9
6820b RH-26
6822a RM-69
6822b RM-68
7200 RH-23
7210 NHL-4
7250 NHL-4J
7250i NHL-4JX
7260 RM-17
7270 RM-8
7280 RM-14
7360 RM-127
7380 RM-111
7600 NMM-3
7610 RH-51
7610b RH-52
7650 NHL-2NA
7710 RM-12
810 TFE-4R
8310 6500 NHM-7
8390 NSB-8
8800 Arte RM-233
8800 RM-13
8800d RM-165
8801 RM-33
8910 NHM-4
8910i NHM-4NX
D211 DTE1
N-Gage NEM4
N-Gage QD RH-29
N-Gage QDa RH-47 (US)
N770 SU-18
N800 RX-34

  © Blogger template 'Ultimatum' by Ourblogtemplates.com 2008

Back to TOP