yashsingh1/xdaforums huggingface dataset:
[Windows Phone 7 Development and Hacking] Heathcliff74:
Yeah, it s#cks. I'm working on something that should be installed on NoDo and hopefully survives the upgrade to Mango, which would allow this homebrew on Mango. At this point I have no certainty at all about how far this will succeed and how much time this is going to take me. It is a whole lot of work to do this, but I have some good leads and I have good hope this is going to work. Until I got it, I will stay with NoDo.

Ciao,

Heathcliff74
[Windows Phone 7 Development and Hacking] voluptuary:
After the upgrade to Mango Root Tools is revoked and uninstalled when it is run for the first time, I don't know if this is becuase I didn't dev unlock my phone before I tried to run Root Tools or if that wouldn't have mattered at all. But what I do know is WP7 just isn't as cool without your awesome tools and now I can't re-deploy then... :mad:

So best of luck!

Oh, and I just want to put in one more vote for an HD2 version of your tools, while HTC users can use other tools to get done what yours does they are no where near as elegantly done. I might switch over to using my HD2 as my main handset if we can get a rooted mango rom and your tools all in one place.
[Windows Phone 7 Development and Hacking] Heathcliff74:
REQUEST!! Testers wanted!

If there are people with a Samsung device and they are willing to test for me in the near future, please leave me a comment or a PM. Please tell me if you can do one of these kinds of tests. I cannot risk a hard-reset everytime I need to test something, because that hold back my research and development.

In any case it is possible that your device gets messed up an needs a hard reset!! You will loose your data unless you have a proper backup! You may loose your developer unlock, unless you have a legit dev unlock, a backup which is unlocked or you can revert to Pre-NoDo and use ChevronWP7 to unlock. Of course I will try to avoid hard-resets, but if this is a problem for you, then don't reply to this request!! I will not take any responsibility for ant data loss. You will just help the WP7 homebrew community.

Test 1: You have a Samsung device and you are willing to test something with the risk of needing to hard reset.

Test 2: You have a Samsung and a copy of Mango beta 2 and you are willing to restore a backup of NoDo, install a test-app and try to upgrade to Mango, to see if my tests will work on Mango.

Please tell me which of these tests you want to do. If possible, I will keep a list of people who can test for me and I will contact you as soon as I got things that need to be tested. I have no estimations on when that will be. I would just like to have a list of people who are prepared to help out when the time is there.

Muchas gracias!

Heathcliff74
[Windows Phone 7 Development and Hacking] Heathcliff74:
The fact that WP7 Root Tools was revoked on your Mango was because you did not have the developer unlock. But it wouldn't have mattered. If you have the unlock, it wouldn't have been revoked, but instead it just would not start, because Interop Services, which is used by WP7 Root Tools, is only allowed for signed apps in Mango. Anyway, that's what I'm trying to work on now.
[Windows Phone 7 Development and Hacking] fiinix:
Sweeeet idea!

I do have a legit DEV and ill now try it. im in. (Samsung as your's)

>(REQUEST!! Testers wanted!)
[Windows Phone 7 Development and Hacking] Heathcliff74:
At this moment I don't have any test app ready yet. But I'm working on multiple angles now. Some can be done relatively easy and others are complex and need a lot of work. So when I got something I'll send it to people that are willing to help. Again, I'm not sure when I got some things ready. Will let you know.
[Windows Phone 7 Development and Hacking] themaskfly:
count me in. an omina 7. but i dont have developer account, will it matter?
[Windows Phone 7 Development and Hacking] Heathcliff74:
You don't need an account, but you do need to be dev-unlocked to install the test-apps. So you need ChevronWP7 to unlock pre-Nodo, perform 'prevent relock' tweak and upgrade to Nodo. If you need more detailed instructions for this, plz refer to the ChevronWP7 threads. If you are dev-unlocked and willing to test, plz let me know.
[Windows Phone 7 Development and Hacking] Marvin_S:
prevent relock does not matter... It will get erased on the update so you will have to be able to dev unlock when mango is installed (or am I overlooking something?) EDIT never mind you said upgrade to NoDo not Mango, sorry.

I might want to test, but ill have to check if I can make a Mango backup which I can restore (this will make reverting more easily)
[Windows Phone 7 Development and Hacking] contable:
Heathcliff74, if I can help testing please let me know. I have HD7 and Omnia 7 Nodo unlocked.
[Windows Phone 7 Development and Hacking] Heathcliff74:
Yep. The point is that you need to be dev-unlocked to install my test-apps. These apps will be created for testing a specific purpose and will probably only show a result code, which tells me what parts succeeded and what parts failed (hopefully not). I want two types of tests. The first is more generally about root access, which can be tested on any version of WP7. And tests that are related to Mango. In the latter case it is not strictly necessary to have an account. If you are unlocked, you can install the test app. Normal homebrew apps that use com interop will stop working after the upgrade to Mango. I have a couple of things that I'm working on that may result in surviving the upgrade. If I could create an app, that can be run after the upgrade, I might be able to patch the system to allow other homebrew apps too. I'm working on all kinds of policy related stuff that could help accomplishing this. Needs more work though. Will let you know when I got something ready to test.

Ciao,

Heathcliff74
[Windows Phone 7 Development and Hacking] Heathcliff74:
Thanks so far to everyone who dropped comments and PM's to help me! I got a list of people already. More people are welcome to join!
[Windows Phone 7 Development and Hacking] themaskfly:
I have a clean chevron post-nodo backup:D

just one question, i sniffed the mango update link as below, where could I place this file to skip the downloading process of zune to accelerat the upgrading in case of testing?

http://download.windowsupdate.com/m..._c76b51adb7bce5ddda619f729932f8187a67bef9.cab
[Windows Phone 7 Development and Hacking] GIPAQ:
I have downloaded the Mango update beta .cab file from this link above and inside the .cab file you will find many .pku which you can rename to .cab files.

I see a lot of interesting stuff inside those .cab files but I do not have the programming knowledge to take a look and see if I can figure out which cab file is used to relock Mango.

I hope some of the gurus here take a look; maybe we can figure out the upgrade process and intervene so we can unlock Mango and future updates. I have being trying to figure out where to put the file (first .cab file, Mango update file) to trigger Zune to read it and initiate the update manually without luck.

I hope someone have better ideas.

GIPAQ
[Windows Phone 7 Development and Hacking] Heathcliff74:
I don't know. I'm not sure Zune has a cache folder for this. Your best bet would be to let Proces Monitor run while you start an update. Then look in the log where the files are temporary stored. Next time you can try to put your files there and see if Zune picks them up and skips downloading.

Changing the contents of those cabs will be very dificult, because they are signed and any modification will invalidate those signatures, which will result in the update package not being accepted. If you take an in depth look at the whole update process, it might be possible to find exploits. It is absolutely interesting enough for research. But it takes A LOT of time to analyze it all. It's not on the top of my list now.

Ciao,

Heathcliff74

Edit: we could try to generate a certificate and use WP7 Root Tools to add it to the CA store. Then use the private key of our own cert to resign the modified cab. Could work!
[Windows Phone 7 Development and Hacking] themaskfly:
Awesome, after all the tricks i tried and failed, u r my last hope. :D
[Windows Phone 7 Development and Hacking] kuerbis2:
Hi Heathcliff74,

which user account does your application use if I copy/paste files from IsolatedStorage to \Windows?

Reason I ask: Played a bit with really simple, customized provxml files copied from IsolatedStorage to \windows and non of them worked. Then I tried to download the provxml files I copied with your tool with the homebrew webserver. Webserver could not read those files but it can read the default provxml files. Therefore it looks like your tool creates files with a much higher user-account than it is required.

Any idea on that?

Thanks,

-tobias
[Windows Phone 7 Development and Hacking] drkfngthdragnlrd:
Anyone know if the rgu's are compiled or something in WP7? Is there a tool to read them. I just downloaded this file 7 extracted everything & was going to look through the registry, but visual studio just displays some hex code...
[Windows Phone 7 Development and Hacking] kuerbis2:
rgu = plaintext.

What you see in the update cab are diff files, that's why they are shown in hex.

You need the files from 7004 apply the 7401 diff and then apply the mango diff to get the real file.

-k
[Windows Phone 7 Development and Hacking] Heathcliff74:
Hmmm. I'm not sure. My exploit doesn't have access to the security-flags of the files. So I don't know the owner of the file, etc. But I'm quite sure the problem is not in the security flags. I think it's in the policies. Because the same file can be accessed by the webserver, when it is copied (using WP7 Root Tools) to the isolated storage of the webserver. So, the security-access-flags of the files do not seem to be the problem.

Ciao,

Heathcliff74
[Windows Phone 7 Development and Hacking] drkfngthdragnlrd:
EDIT: Nevermind, didn't work...
[Windows Phone 7 Development and Hacking] hx4700 Killer:
Quick question because I am not seeing the answer here but.... is this supposed to work in dev unlocked mango? I tap on it, the screen goes blank a second then right back to home.
[Windows Phone 7 Development and Hacking] Heathcliff74:
Nope, unfortunately not. WP7 Root Tools use native code, which is kinda banned in Mango. I'm working on some new hacks, which may make this possible. No guarantees though. And it may also take some time to make it. Very compicated code. Will keep you posted.

Ciao,

Heathcliff74
[Windows Phone 7 Development and Hacking] hx4700 Killer:
Ok, as I suspected but thought I would ask.

Thanks!
[Windows Phone 7 Development and Hacking] drkfngthdragnlrd:
Don't know if this will be of any use, but found this in the Mango 7661 Emulator Dump. Maybe it'll be usefull for InteropServices.
[Windows Phone 7 Development and Hacking] Heathcliff74:
Thanks for helping. This stuff is interesting. But it's not useful at the moment. These policies describe what additional privileges an app gets when it has ID_CAP_INTEROPSERVICES. It does not describe when the capability is allowed or not.

Ciao,

Heathcliff74
[Windows Phone 7 Development and Hacking] kuerbis2:
Perhaps interesting to note: It looks like you won't need ID_CAP_INTEROPSERVICES to use native code (at least in all cases).

Look at the navigon 3 example. It uses its own native arm compiled kernel with combridge.registerDll and does work without ID_CAP_INTEROPSERVICES specified in the manifest even while sideloaded.

On the other side: I tried to use DiagnosisApp.exe as a signed wrapper but failed in the System.IO.FileInfo constructur which, as documented, only allows access from platform trusted assemblies (there's even a flag in the Assembly type, never noticed that one before). BUT the navigon dlls are also not platform trusted and they can access native code. Interesting behaviour ;)

-tobias
[Windows Phone 7 Development and Hacking] drkfngthdragnlrd:
Hum?......

Also found these cert file, don't know if they're of any use. See Attached ZIP.
[Windows Phone 7 Development and Hacking] drkfngthdragnlrd:
Anyone try signing the dll's in the XAP's with this to see if they'll work in Mango? I just looked at his cert & it's the same "TEST ONLY" that most of the DLL's in Navigon Select are signed with & it works in Mango. Note, the app will still need to be installed before Mango most likely.
[Windows Phone 7 Development and Hacking] sensboston:
Just tried on already installed Mango (sorry, doesn't have time to rollback). I've signed "WP7RootTools 0.5 alpha.xap" (3 dll's: Coding4Fun.Phone.Controls.dll, WP7Native.dll & WP7RootTools.dll). Deploy is OK (no errors at all) but app quits just after start.
[Windows Phone 7 Development and Hacking] kuerbis2:
Guys, I tried the following update procedure today on my Samsung Omnia 7 (3rd time I updated this phone to mango): http://xdaforums.com/showthread.php?t=1152422.

Result: I can deploy & run native apps. The old Flashlight app is working without any problem. My own small, little interop registry tool does work without a problem.

Looks like

<characteristic type="HKLM\Comm\Security\LVMod">

<parm name="DeveloperUnlockState" value="1" datatype="integer" />

</characteristic>

re-enabled INTEROP. As soon as Zune is connected the phone forgets how to run my INTEROP apps. After running a provxml script with the above content they work again ;).

Thanks,

-tobias

P.S.: root tools work but get closed as soon as the start screen shows. I can deploy it without any problem even with ID_CAP_INTEROPSERVICES in the WMAppManifest but it looks like an unhandled exception occures right after the start.
[Windows Phone 7 Development and Hacking] GoodDayToDie:
Interesting... the same technique (sideload a provXML file, then run it via an "approved" native app) works on HTC too. I'll have to roll back and try this.
[Windows Phone 7 Development and Hacking] mnsouli:
HI, i found this searching in forum. maybe it helps

QUOTE:

"This RegistryEditor works under Mango:

http://xdaforums.com/showpost.php?p=10619966&postcount=16

I have change my hubcolor and have enable WLAN N.

I can read and write in HKLM.
[Windows Phone 7 Development and Hacking] MrNetrix:
That app uses interop on a signed COM DLL.
[Windows Phone 7 Development and Hacking] briggs007:
Bravo!!!! Just installed. I can't wait to tryout tweaking the registry. Looking forward to more sleepless nights.

Thank you Heathcliff74.
[Windows Phone 7 Development and Hacking] Ttblondey:
it doesn't work with my htc hd7 unlock chevron
[Windows Phone 7 Development and Hacking] beakin:
It says in the beginning post that it only works on Samsung devices currently.
[Windows Phone 7 Development and Hacking] Heathcliff74:
Never mind her.. It's probably in the name ;)
[Windows Phone 7 Development and Hacking] MrNetrix:
Are you going to provide the source code for this app so other people can learn how all of that cool stuff is accomplished?
[Windows Phone 7 Development and Hacking] fiinix:
I can answer that question: Nope, sry to say.

XDA / Heathcliff74 does this to protect code (secret) to those who want to fix the security holes (so this and many other does not work anymore).

Ofc, source code if always fun to have; but letting the code to someone that wants to prevent this (Micro$oft), is not the thing we want to happen.
[Windows Phone 7 Development and Hacking] Heathcliff74:
Fiinix is right. I have shared my code, but my policy is that I help people out, who are helping me out.

Ciao,

Heathcliff74
[Windows Phone 7 Development and Hacking] MrNetrix:
It seems like Microsoft has already fully broken this app with the Mango beta. Whatever "secret" code it contains seems irrelevant, as Mango only allows OEM DLLs to be used anyway and there is no reason to believe that Microsoft will suddenly change that.

Having the source code is not just "fun" to have; It allows people to make even more cool apps that people can benefit from. I am not going to argue about the benefits of open source software though because I am not trying to be pushy at all. If he wants to keep his code secret, that is his choice. It does make more sense for Windows Phone considering the unusual amount of security that Microsoft has added to it, regardless of the "feel free to tinker" encouragement.
[Windows Phone 7 Development and Hacking] Heathcliff74:
As I said in my previous post, I'm not "not sharing". I'm just very reticent with it. My code uses a whole series of exploits to get these results. The downside of this is that Microsoft only needs to break one of these exploits to render it unusable. And that's what they did. And they broke the most basic exploit I used: the ability to use native/interop code. They did not break any of my other, more important exploits. So I only need to bypass this one, important new restriction to make it work again. And who says I can't?

I'm working on something very cool now. It is not really an exploit. It's more like a new abstraction layer, which, if I succeed, will open up a whole new series of possible exploits. So I have to finish this and then test it. I wrote a whole bunch of native/interop code for this. And when (if) it works, I have a couple of possibilities to break open Mango. The downside of this approach is that it needs to be installed on NoDo. I could change things to WP7, which will allow me to do stuff after the upgrade to Mango, because I suspect that most (or all) of these changes will survive the upgrade to Mango.

So I'm not sharing the code with everyone. Surely not just before such a big upgrade (Mango), because I don't want Microsoft to fix the exploits I use now in that upgrade. The more I keep things for myself (and a few others) now, the bigger the chance that I can crack Mango open when it RTMs.

Just bear with me,

Heathcliff74
[Windows Phone 7 Development and Hacking] MrNetrix:
Thanks for clarifying. I was not trying to imply that you are being selfish, rather that if Microsoft already broke your methods that it should not be a problem to share anyway. It is cool that you have extra tricks that might still work with Mango. It would be great if you could make an API to use these exploits that you have so that others can use them while keeping the exploit methods hidden from Microsoft.

Keep up the good work.
[Windows Phone 7 Development and Hacking] kuerbis2:
FYI: Just tried to deploy the WP7-Root-Tools via mango beta marketplace (and get a signed dll <g>) ;)

Result:

-t
[Windows Phone 7 Development and Hacking] sensboston:
I'm not surprised. But what did you expect from MS tool? Message box "We successfully signed and deployed your ultimate hack tool"? :D
[Windows Phone 7 Development and Hacking] dotcompt:
oh boy, just had a good laugh
[Windows Phone 7 Development and Hacking] jkjambo:
thanks man for this tools :)

i have one question , can i add some fonts now in wp7?

i copy-pasted ttf file in windows and windows/fonts folder , but without success
[Windows Phone 7 Development and Hacking] Heathcliff74:
Glad you like it. I have not done any research in the area of fonts, but a quick look tells me that you should probably add an entry in the registry in this key: Local Machine\Software\Microsoft\FontLink\SystemLink. There are entries for every font. Take a close look at the formatting of the text and then add your own value according to this format. I have not tried it. Hope that works for you.

Good luck,

Heathcliff74
[Windows Phone 7 Development and Hacking] jkjambo:
thanks for reply, i'll check it
[Windows Phone 7 Development and Hacking] AndroidCR:
Have you tried this tool on latest Mango version 7720.68??? It doesn't seem to work... :-(
[Windows Phone 7 Development and Hacking] sensboston:
Thank you, sir, and good luck! Will wait for good news...
[Windows Phone 7 Development and Hacking] rudelm:
That's absolutely incredible :) If you need help with HTC devices I would be glad to help you! And of course I'm waiting for your SDK.
[Windows Phone 7 Development and Hacking] Heathcliff74:
Did a bit of research on HTC and LG. I don't have an HTC or LG to experiment with. So I just have to go with the apps for these devices. So far, it looks like I can use the HTC drivers for the purposes I need. Although the parts that I've looked at so far look like they've been written by amateurs. LG also have an unusual way of configuring their devices. I think it can be done, but with their way of device-configuration it will be hard to figure out without having a hands-on device to test with. So I will make HTC support for the next version. LG support will not be done yet. Maybe later.

Ciao,

Heathcliff74
[Windows Phone 7 Development and Hacking] Heathcliff74:
Ok. That's cool. I will be making a little test-app in a couple of days, to see if my code will run. If you could try it and let me know if the test will pass or fail, that would help. Will let you know when I got the test-app ready.

Thanks,

Heathcliff74
[Windows Phone 7 Development and Hacking] Heathcliff74:
I have added a little poll to this thread. I'm working on the new version of WP7 Root Tools for Samsung and HTC now and also an SDK to go with that. I'm interested to know what feature I should work on after that. Choices are:

1. Support for Mango

2. Multi-selecting files for file-transactions

3. Sync and remote control with PC

I have to make clear that the first option ("Support for Mango") is something I have yet to investigate. I have a couple of angles to go on, but I'm not sure those will work. But I have good faith that I can do it. Downside is that I can probably only do it when we have NoDo installed and then upgrade to Mango. Making native code possible without having NoDo installed first will be even more difficult. But there's always a way...

Thanks for voting,

Heathcliff74
[Windows Phone 7 Development and Hacking] snickler:
I know a lot of us who use the tweaks and workarounds discovered by people such as you don't really think to say thanks... I just want to say that I appreciate all the hard work all of you do. I can honestly say that I've started really liking this platform because of the knowledge that you and the rest of the tweakers have found. Keep up the good work and know that you all have support! On that note, if there's any way I can help out with testing or anything, I wouldn't mind giving a hand.
[Windows Phone 7 Development and Hacking] rudelm:
No problem, just PM me when you are ready. Got the HTC DLLs running in my demo app for registry and file access to a certain level. Of course it would be way cooler to have these rights without device specific files and ID_CAP_INTEROPSERVICES :)
[Windows Phone 7 Development and Hacking] Heathcliff74:
Just to be clear, you will still need ID_CAP_INTEROPSERVICES with my SDK. But I got some ideas on how to trick Mango into loading unsigned native dll's. I will work on that later on.

Ciao,

Heathcliff74
[Windows Phone 7 Development and Hacking] Heathcliff74:
Please test on HTC!!

Hi all,

I got a test app for HTC devices. Anyone who has an unlocked HTC with NoDo, please test this app. It won't do anything to your system. It will just run a few tests. It will take a few seconds. If you have results in your screen, please post them here (as detailed as possible!). Also, please report the exact model and version of your device.

Test results will help me build support for HTC devices in the next version of WP7 Root Tools.

Thanks a lot!

Heathcliff74

Edit: Attachment removed. For testing HTC, please refer to this thread. Thanks!
[Windows Phone 7 Development and Hacking] rudelm:
yes, just found it in your test app. Problem is still to install some app with native DLLs on Mango without installing them in Nodo first. Thats what was discussed in several other threads before: one would need to trick the pacmaninstaller into ignoring the capability or to add it later on.