Jump to content
Nokioteca Forum

How To Hack Any Phone (Using Navifirm+, Phonenix, Rp+)


Il.Socio
 Share

Recommended Posts

WARNING NOTICE:

By following this guide you could loose the warranty.

In the worst case, you could even brick your phone.

Follow at YOUR OWN risk!

To know before starting:

- This guide IS NOT INTENDED to let you change the Product Code.

- This guide IS NOT INTENDED to let you unbrand the phone.

- This guide IS NOT INTENDED to let you flash different fw versions.

- Its aim is ONLY to let you hack the phone keeping the same PC, brand and fw version that you have currently.

If you want to change the PC, you'll have to follow a guide to change the PC.

If you want to unbrand the phone, you'll have to follow a guide to unbrand the phone.

If you want to change fw version of the phone, you have follow a guide to change the fw version.

Is that clear enough?! :)

Needed Tools:

- A working brain :) (link not available)

- NaviFirm+

- Phoenix (2011.14.004.45945)

- RomPatcher+

- UDA Hacked for your phone and fw (you must get the UDA that has the very same name than what you see on NaviFirm+)

> Download 5230 - RM-588_21.6.005_001_000_U001.uda

> Download 5230 - RM588_40.0.003_001_001_U001.uda

> Download 5230 - RM588_40.6.003_001_000_U001.uda

> Download 5230 - RM588_50.0.001_000_000_U001.uda

> Download 5230 - RM588_50.6.001_000_000_U001.uda

> Download 5250 - RM684_30.0.002_000_000_U001.uda

> Download 5530 - RM-504_32.0.007_007_000_U001.uda - (created by Pissa)

> Download 5630 - rm431_013.009_U006.000_prd.uda

> Download 5730 - rm465_2001287.21U

> Download 5800 - RM356_50.0.005_002_U231.uda - (created by Ste-GasGas)

> Download 5800 - RM-356_52.0.007_026_000_U01.uda

> Download 6710 - rm491_031.022_U000.000_prd.uda

> Download 6720 - rm424_031.022_U001.000_prd.uda

> Download 6700 slide - rm576_071.004_UBlack007.000_prd.uda

> Download C5-00 - rm645_071.005_U000.000_prd.uda

> Download C5-03 - RM697_011_U001.uda

> Download C6-01 - RM-718_014.002_01.01_79.92_prd.uda

> Download C7-00 - RM-675_014.002_U01.01_79.92_prd.uda

> Download C7-00 - RM-691_020.037_313.01_TMO_US_79.92_uda

> Download E51 - rm244_41034001

> Download E51 - rm426_41134001

> Download E52 - RM469_052.003_U006.000_prd.uda - (created by suris)

> Download E52 - rm469_054.003_U006.000_prd.uda

> Download E6-00 - RM-609_021.014_U01.01_79.92.uda

> Download E7-00 - RM-626_014.002_U01.01_79.92_prd.uda

> Download E72 - rm530_071.004_U007.000_prd.uda

> Download E72 - rm530_071.004_U008.000_prd.uda

> Download N95 - RM159_31.0.002_039_U01_uda

> Download N96 - RM-247_30.033_100.1_prd.uda

> Download N97 - RM505_507_22.0.110_uda_1_001.uda

> Download N97 Mini - RM555_10.0.020_uda_16_001.uda

> Download N97 Mini - RM-555_30.0.004_uda_16_001.uda

> Download N8-00 - RM-596_011.012_U01.01_79.92_prd.uda

> Download N8-00 - RM-596_013.016_263_IT_CV.01_79.92_prd.uda

> Download N8-00 - RM-596_014.002_U01.01_79.92_prd.uda

> Download N8-00 - RM-596_014.002_263_IT_CV.01_79.92_prd.uda

> Download X6 - RM-559_30.0.003_001_000_U001.uda

> Download X6 - RM-559_32.0.002_001_000_U001.uda

If your phone is not available in this list, then you can create the hacked version by following the instructions containted in the spoiler below:

1) Use NaviFirm+ and download the UDA file of the firmware, making sure that you download the one related to your Product Code.

2) Open the UDA file using NokiaCooker

3) Download the RomPatcher+ .zip archive and get only the patcher.ldd / patchershadow.ldd / patcherS3.ldd files that you found inside the \LiteVersion\ folder.

4) Insert the *.ldd files inside the \sys\bin\ and save the UDA

You just created a fw Hacked, if you want to share your work with others, post it in the forum and it will be added to the list.

Guide:

1. Launch Phoenix (with administrator rights) and select Tools > Data Package Download

Note down the path that you see in the field "Download path:" (*)

In the example image it is: "c:\ProgramData\Nokia\Packages\"

Make sure that the path exists, if it doesn't then you should create it.

Then close the window.

immaginebu.jpg

2. Launch NaviFirm+ and make sure that the "Parse VPL" option has been checked and that the "Nokia Care Suite" server has been selected.

Download the files of the original fw that you currently have on your phone.

Make sure that you download the files related to your Product Code and to your fw version and save them in the path that you noted down in the previous step (*) "c:\ProgramData\Nokia\Packages\RM-xxx\"

You have to create the "RM-xxx" folder (xxx changes from phone to phone, eg: for the Nokia N8 it is RM-596)

Note down the exact name of the UDA file that you can see in NaviFirm+

NaviFirm.jpg

3. Now you should download the UDA hacked from the list at the top of this thread.

The UDA hacked must have the very same name than the one you noted down in the previous step, then save it in the path (*) "c:\ProgramData\Nokia\Packages\RM-...\"

NOTE: You don't have to rename any file!

If the UDA file that you need is not available in the list, you should create an UDA hacked by follwing the instructions contained in the spoiler.

4. Select Connections: NO CONNECTION in the upper left corner

76337157.png

5. Select the menu' File -> Open Product -> RM-xxx

60960416.png

6. Select the menu' Flashing -> Firmware Update and select your Product Code by pressing on the three-dots button "..."

Mark the option Dead Phone Usb Flashing

19495871.png

7. Press the Options button and in the new window you should remove the original MMC file (if existing) by pressing the Delete button

19258844.png

8. Press the Refurbrish button and in case that a warning message will appear, you should just ignore it and press Yes

24557203.png

9. Follow the instructions that will be shown on the screen...

47982063.png

10. After the flashing will be completed, install RomPatcherPlus_3.1_LiteVersion.sisx

Now your phone has been fully hacked.

When you need to install unsigned files, apply the InstallServer patch.

When you need to access to system folders, apply the Open4All patch.

Phoenix ReadMe:

Phoenix Service Software 2011.14.004.45945

1. CHANGE HISTORY

Version 1: 09.05.2011 Initial version for v 2011.14.3.45843

Vesrion 2: 24.5.2011. RM 701 support added, package version number updated to 2011.14.4.45945. Otherwise same as earlier 2011.14.3.45843

2. INTRODUCTION

Main component versions in the release:

* DK2 Driver Version 07.14.0.25

* Nokia Connectivity Cable USB Driver Version 7.1.40.0

* Flash Update Package 2011.16.000

* FLS-x Drivers Version 2.09.28

* FUSE Connection Manager v 2011.13

3. MAIN CHANGES & ERROR CORRECTIONS FROM PREVIOUS VERSION 2011.8.5.45529

New Products added

* RM-776, RM-775, RM-763, RM-773, RM-670, RM-765, RM-774

New features

* New version of FUSE connection Manager

* New version of Flash Update Package

* New version of Autotuning components

* New version of Product API

* New version of Connectivity Cable Driver

* Torque Information - menu implemented. Information concerning screw tightening torques can be shown if product specific data package contains pictures / information files

* Simple Multi Software Updater UI added

Error Corrections & changes

* Improvements to Smart Card Activator: User is now asked to wait during the delay when smart card data is being read

* Crash file upload server correction

* Tucson support for RM-733, RM-732 and 713 implemented. Please note that for these products only Tucson functions can be done with Phoenix, Care Suite must be used for all other activities.

Please note:

* New common data package location in use. Please see document SR1315 in KICS Information Center for further information.

* All Nokia Service Software Applications will use following location for product specific data:

- Windows XP: C:\Documents and Settings\All Users\Application Data\Nokia\Packages

- Windows 7: C:\Program Data\Nokia\Packages

* During installation, Data Packages should be installed in these directories, if they install to any other location by default. target folder for local data packages can be changed in the installation wizard manually

* This version contains the latest Tucson components. Therefore it is not necessary to use Tucson Add-On Installation Packages

* Before you start Phoenix or Care Suite installation to Windows 7 the User Account Control (UAC) should be turned off from Windows Control Panel settings.

* For more information concerning new options in "Firmware Update" - menu and their use, Please see documents SR1313 and SR1659 in KICS Information Center.

* Tucson operations combined with "flash" - option are now handled in the same way as "refurbishment", which requires Mass Memory Content File to be available.

* Do not use Flash option simultaneously with product code change for USB Only phones, flash phone separately with Firmware Update

* It is recommended to use FPS-21 flash prommer with TCPIP connection when refurbishing USB Only - phones (RM-596 etc) due to mandatory optional MMC file size.

* Connection media to FLS-5 must be configured to be "USB_FBUS", after FLS-4 support has been removed FBUS does not work anymore with FLS-5

4. KNOWN ERRORS & LIMITATIONS

* Software downgrade with Tucson system is only possible for BB 5.0 products supporting the Data Package 2 concept.

* Flashing with setup FLS-5, SS-46 and product specific adapter is not supported anymore. FLS-5 can be used with other product specific cables and adapters, but not with SS-46 Interface Adapter.

* If you install old DCT-4 data packages, Flash Update Package File installation path may be wrong. This is caused by very old DCT-4 data packages which contain Flash Update Package and overwrite current information during installation. If you experience problems when updating FPS-x prommers, please check that Phoenix “Prommer maintenance” is looking for the files from the correct location which is “C:\Program Files\Common Files\Nokia\Tss\Flash”. If not, Phoenix will show error “Update via ini – file failed”. In this case, select “Update” from that Phoenix “Prommer maintenance” – UI, browse to correct directory and select “fpsxupd.ini” for all other prommers except the FPS-8.

* Refurbishment flashing and product code change for RX-51 product requires SX-4 card to be available.

* FPS-21 flashing for RX-51 works only with TCPIP connection. FPS-21 prommer with new HW version 11 has been released to correct this. Sales pack code is 0089J83 , old HW version is not delivered anymore

* Please refer to product specific documents and instructions concerning the limitations of the RX-51 product

* RX-51 flashing does not work when CU-4 is used

* RX-51 Product Code changes work only without FLASH option, please flash phone separately

* When version 2010_12_8_42304 or newer with FUSE connection manager is installed on top of older Phoenix versions, there may be an additional delay of several minutes when you start Phoenix for the first time. Please wait patiently; Phoenix will start after configuration is finished.

* When using Data Package download functions with online connection, download times may occasionally be long. This is not caused by Phoenix (or Care Suite). The download speed from online servers is occasionally is known to be slow, depending on how data is buffered on caching servers.

* After you close Phoenix, it may not restart. To rectify this:

- Use Windows Task Manager to manually shut down phoenix.exe and FuseService.exe processes, or optionally restart your PC

* It is not possible to program Mass Media Content file to some devices over direct USB cable connection, due to the large size of the file. For these models a feature called “Media Check” has been implemented. When this type of product is connected to service software / PC via direct USB cable the refurbishment option will be disabled. Please use a flash prommer.

* To be able to use the help files in Windows 7 you need to install Windows Help program (WinHlp32.exe) for Windows 7. Ways to locate WinHlp32.exe:

- Start Phoenix with online connection to Internet, select "Help" and "Phoenix help". Click the "Microsoft Help and Support" website link. Download WinHlp32 and install it.- Go to http://www.microsoft.com. Type "WinHlp32" to "Search Microsoft.com" - field. Locate Windows Help program (WinHlp32.exe) for Windows 7 and install it

* When using flash prommers, only one connection type to one prommer is allowed. Please use either NFPD USB or NFPD TCPIP connection to one prommer, not both connections to same prommer

5. INSTALLATION

* If you have Phoenix External 2007.4.6.170 or older you must uninstall it before installing this release.

* Download Phoenix_Service_Software_2011_14_3_45843.exe application file to your computer (e.g. C:\TEMP).

* Close all other programs.

* Disconnect all flash prommers and phones which may be connected to PC via USB connection (reconnect them only after Phoenix installation has been completed)

* Run Phoenix_Service_Software_2011_14_3_45843.exe and follow instructions on the screen to install Phoenix Service Software

* Connect a dongle (PK-1, PKD-1, FLS-4S, FLS-5) when message appears on the screen

* If you are prompted to update any existing driver or file versions, select “yes”.

* Depending on the operating system, the PC may require rebooting.

* Allow Windows to register the Phoenix components.

* Open Phoenix, use FUSE Connection Manager to configure connections depending on the tools you use

* If you use CU-4, please pair the connection with service adapter by selecting “pair with service adapter” - option

* Update your prommer with the latest software included in this installation package.

* Install and use the latest available product specific data packages or flash bundles

6. Supported operating systems and user rights

* Windows XP Service Pack 1 or higher

* When installing Phoenix into Win XP you must have local admin rights.

* When using in Win XP, user must have power user rights.

* Windows 7 32 Bit version

I do not provide any kind of individual support, so please, avoid to contact me in pm.

works-on-my-machine.jpg

I hope it will work for you too :)

Modificato da Il.Socio
  • Mi Piace 7
Link to comment
Condividi su altri siti

I've submitted the .sis file to the SymbianSigned website to get it signed without any IMEI restrictions. :)

If you take a look at the certificate details, you'll notice that the .sisx package has been signed by Symbian and it has been issued to "FuzzyByte"

I'm a freelance Symbian developer since 2003 and "FuzzyByte" is my own company.

Modificato da Il.Socio
  • Mi Piace 1
Link to comment
Condividi su altri siti

hey

my product code doesnt show up with the "..." button...

"neither dp1.0 nor dp2.0 was found for the product, or the product cannot be identified"

Problem is, i cant follow the guide because when i click "..." it doesn't happen what should happen, according to the tutorial.

help please?

thanks

Modificato da Rusnak-COBRA
Link to comment
Condividi su altri siti

So, im in STEP 6 of this guide and then, when i click "...", this happens:

http://imageshack.us/photo/my-images/841/unledllx.jpg/

thanks for helping!

btw, im trying to hack a C5-03. I have a cert but only the new type of them, given by this forum. So im out of ideas. I cant use the only supported version (for this devcert) of helloOX2 because its not compatible with my phone, so i dont know what to do anymore. Its sad because i only bought this phone so i could hack it and install fancy apps :)

Modificato da psnow
Link to comment
Condividi su altri siti

II.Socio, Hi!

Can I clarify the issue of hacking my nokia 5800 express music V.52.0.007, RM-356, can I hack it through these steps you suggest:

Needed Tools: BEFORE THAT I HAVE TO SAY I ONLY HAVE DEV.CERT AND DEV.KEY PROVIDED TO ME ON 23/07/2011 FROM THIS SITE. I JUST NEED TO MAKE SURE THAT I WILL BE ABLE TO INSTALL ALL NEEDED SOFTWARE TO MY NOKIA TO COMPLETE THE HACK? WILL DEV.CERT AND DEV.KEY WORK FOR ME? WILL WORK ON WIN 7 CREATE NO PROBLEMS?

- A working brain :) (link not available)

- NaviFirm+

- Phoenix (2011.14.004.45945)

- RomPatcher+

- UDA Hacked (I need to confirm if those hacked UDA present on the list you provided would work on my firmware?) Can you help please?

- Where can I find Installserver? The one that is suitable to complete the hack? MANY THANKS FOR YOUR HELP? I BELIEVE WHEN I DONE THE HACK I CAN UNSTALL ANY SOFTWARE? BESIDES UNSIGNED, CAN I INSTALL THOSE SIGNED TO OTHER IMEI'S? THANKS A LOT!!!

Link to comment
Condividi su altri siti

Please sign in to comment

You will be able to leave a comment after signing in



Accedi Ora
 Share

×
×
  • Crea Nuovo...

Informazione Importante

Questo sito utilizza i cookie per analisi, contenuti personalizzati e pubblicità. Continuando la navigazione, accetti l'utilizzo dei cookie da parte nostra | Privacy Policy