yashsingh1/xdaforums huggingface dataset:
[Windows Phone 7 Development and Hacking] GoodDayToDie:
Good question Layne, but there's no guarantee it would work (does the Arrive not have Internet Sharing enabled yet? That's lame!)

Please download all the XAP files (I see 10 of them in the PDF, might have missed some though), all the files associated with the XAPs (very similar names, for example), and if you want to throw in any other provxml files that couldn't hurt.

Thanks!
[Windows Phone 7 Development and Hacking] PTGamer:
working on omnia 7 with 7740 :D
[Windows Phone 7 Development and Hacking] LayneRobinson:
Try grabbing this file - http://www.4shared.com/zip/658Ez-_w/HTCArrive_XAP.html

It's 24MB of stuff I grabbed from my HTC Arrive. Not sure how much is actually useful.
[Windows Phone 7 Development and Hacking] bondarun:
Thanks To the developer..

My Device is Jailbroke on Mango..

samsung Focus 1.3 :D
[Windows Phone 7 Development and Hacking] xcen_xda:
Working like a charm on Omnia7 with 7740. :)
[Windows Phone 7 Development and Hacking] Coelho_rj:
Hello again!

Guys, i´m stucked. Windowbrake seems to be done, but cant say the phone is really jailbroken.

I got 2 diff. XAP deployers and both give me same msgs when i try to edply DiagProvXMLv0.91_IS.xap (or any other .XAP):

Uploaded with ImageShack.us

How can i "test" if jailbrake was really done?

Thanks!
[Windows Phone 7 Development and Hacking] shinkstor:
I think that the problem people are having with the phone not provisioning is their own human error.. I just retried the windowbreak unlock, and everything went well until I tried to deploy an application. Then I remembered what I needed to do even with other unlock methods

- Install Windows Developer Tools and such

- Open Zune

- Connect Phone

- Sync Phone, Make sure there is a full sync relationship

- Open xap installer as admin (I used Tom's XAP installer)

- Make sure phone is opened and on home screen

- Deploy xap

worked with no problems.
[Windows Phone 7 Development and Hacking] Coelho_rj:
Tried all steps as u said

Uploaded with ImageShack.us

:(

That´s why im asking a way to check if my phone is really unlocked, cause it seems not, even after windowbrake "runned" well.
[Windows Phone 7 Development and Hacking] mrwranglers:
does this new hack require the chevron? or, does it work without any other unlock tool ? i dont see this anywhere unless i missed it.
[Windows Phone 7 Development and Hacking] Jaxbot:
You must not have looked very hard...

No, it does not require Chevron. It's something completely different, though it achieves the same thing (plus interop unlock)
[Windows Phone 7 Development and Hacking] GoodDayToDie:
Please try the official dev tools. They include a program called XapDeploy.exe (in Start menu as "Application Deployment"). You don't have to run it as Admin, but you do need to have Zune running, connected to the phone, and the phone ready to use (not sleeping or at the lock/wallpaper screen).

If you're still getting an error off that program, then the odds are the unlock didn't work for you (you could try describing the steps you took again).
[Windows Phone 7 Development and Hacking] mrwranglers:
new unlock tool

i have read this post and may have missed it somewhere. My question is does this new unlock work without having chevron , or does it need chevron unlocked already.

---------- Post added at 04:10 PM ---------- Previous post was at 04:08 PM ----------

ok, ooops maybe i did miss it. then please ignore the last post. forgive my blindness as the post can sometime run together. thank you very much for your quick reply .
[Windows Phone 7 Development and Hacking] Coelho_rj:
i SWARE i´m not a complete dumb and probably stucked at a small detail.

i did install, uninstal and reinstall all MS devkits.

there is just NO "XapDeploy.exe" in my 3 HDs :(

i already read lots of step by step posts and had past experience on unlocks (my phone was unlocked by chevron before nodo).

is there someone patient enough to trying help me? i may give even teamviewer access, because its really hard when you dont understand exactly the order of all required steps to make it work...

for lots of people here seems so easy... but... i´m in difficult!

Thanks and sorry about my "sad history"
[Windows Phone 7 Development and Hacking] yhd4711499:
I can extract a xml file to /Application/Install/[AppGuid]/

but can't extract to /Application/Install/[AppGuid]/Install/

Is there a policy to prevent that ?
[Windows Phone 7 Development and Hacking] Jaxbot:
Mine is in:

C:\Program Files (x86)\Microsoft SDKs\Windows Phone\v7.1\Tools\XAP Deployment

Are you sure you have the Windows Phone SDK installed? Emulator and everything?

There shouldn't be... I believe I've extracted there before.
[Windows Phone 7 Development and Hacking] GoodDayToDie:
If you're trying to overwrite a file, and that file is in use (app is running), it will be locked.

If you're trying to install an app, that just won't work. The file will extract but that doesn't mean the app will install.
[Windows Phone 7 Development and Hacking] Coelho_rj:
So... how could i install it?
[Windows Phone 7 Development and Hacking] Jaxbot:
You have to use the actual deployment tool.
[Windows Phone 7 Development and Hacking] GoodDayToDie:
Hypothetically, you could invoke the app installation process from within the phone directly. However, the only way that we know how to do this on stock ROMs is using provxml to install Marketplace-signed apps. It *should* be possible to install unsigned apps when we can run provisioning with maximum permissions, but nobody has made it work yet.

There are custom ROMs (for HTC, since the bootloader can be unlocked) that support installing XAPs directly. You could also try either invoking the installation process (tweak some stuff in HKEY_CLASSES_ROOT, maybe?) or have an opp call into the XAP installation / AppMgr libraries directly. I suspect in either case there would be permissions problems, though.
[Windows Phone 7 Development and Hacking] shinkstor:
Hey Jaxbot, I did some testing and, for whatever reason, heathcliffe's unlock.xml works 100% of the time, and the windowbreak.xml only works like 50% of the time... You should include both in the .zip you have on the website. If anyone failed with the windowbreak one, download the zip file on your computer, go to the /../../../provxml/ directory in it, place heathcliffe's unlock.xml in there, then email the zip to the email address on your phone. Open the zip on your phone and proceed as you would with windowbreak, but choose "unlock" instead of windowbreak.
[Windows Phone 7 Development and Hacking] Jaxbot:
That doesn't make sense, considering as both our XMLs do exactly the same thing; mine just has some extra bits in it that fix Visual Studio settings and stuff.
[Windows Phone 7 Development and Hacking] Leapo:
Heh, glad it's not just me...

I know it doesn't make sense, but something is going wrong, and everything I've checked points to the problem being within the Windowbreak xml file.

I'm seeing the same thing as shinkstor. Putting heathcliff's xml file on the phone (using your method) works every time, and performs the registry edits that are called for in the xml file. The windowbreak xml file doesn't seem to be making ANY modifications to the registry when it's read by the GPRS tool.
[Windows Phone 7 Development and Hacking] Jaxbot:
Diag version?
[Windows Phone 7 Development and Hacking] Leapo:
It says "Diagnosis (ver.0103)"

Like I said, heathcliff's xml file performs an interop unlock every time, so the Diagnosis app is doing its job here. Whatever extra stuff is in your xml file is throwing it for a loop, I guess.
[Windows Phone 7 Development and Hacking] Jaxbot:
Really odd, because it works 100% for me. Wonder if it has to do with my ADC implementation, then.
[Windows Phone 7 Development and Hacking] voluptuary:
What if you split the xml into 2 files? Something like:

Step One.xml

<wap-provisioningdoc>
<characteristic type="Registry">
<characteristic type="HKLM\Comm\Security\LVMod">
<parm name="DeveloperUnlockState" value="1" datatype="integer" />
</characteristic>
<characteristic type="HKLM\Software\Microsoft\DeviceReg">
<parm name="PortalUrlProd" value="" datatype="string" />
<parm name="PortalUrlInt" value="" datatype="string" />
</characteristic>
<characteristic type="HKLM\Software\Microsoft\DeviceReg\Install">
<parm name="MaxUnsignedApp" value="2147483647" datatype="integer" />
</characteristic>
</characteristic>
</wap-provisioningdoc>

Step Two.xml

<wap-provisioningdoc>
<characteristic type="Registry">
<characteristic type="HKLM\System\AutoDataConfig">
<parm name="RunADC" value="1" datatype="integer" />
</characteristic>
<characteristic type="HKLM\System\AutoDataConfig">
<parm name="ConfigurationStatus" value="0" datatype="integer" />
</characteristic>
<characteristic type="HKLM\System\AutoDataConfig">
<parm name="Attempt" value="0" datatype="integer" />
</characteristic>
<characteristic type="HKLM\System\AutoDataConfig">
<parm name="MaxAttemptsAllowed" value="3" datatype="integer" />
</characteristic>
</characteristic>
</wap-provisioningdoc>

This way you can diagnose what part is not working.
[Windows Phone 7 Development and Hacking] SimzzDev:
I have one question... Will this work if your Samsung WP7 doesn't have a SIM card?

Thanks!
[Windows Phone 7 Development and Hacking] m00h:
It did on Omnia 7.
[Windows Phone 7 Development and Hacking] Tredell:
Not sure if you want feedback in this thread, but I tried this on my Focus S, and the only thing I noticed was that I lost my cellular data connection. Nothing I did would bring it back. My phone was previously Chevron unlocked and I had installed the File deployer "System Tweaks" interop unlock.

Could that be the reason why it didnt work?
[Windows Phone 7 Development and Hacking] drupad2drupad:
Did you re-select your operator in the connection settings? (I can't use this on my phone, but I've read that getting your cellular data back is possible just by saving your original network provider back).
[Windows Phone 7 Development and Hacking] Tredell:
In the Wireless Manager applicaiton I do not have a choice to select my carrier settings. I only have Auto configuration and the default AT&T. I was not able to figure out how to change the APN to force it to redownload the Telus network configuration.
[Windows Phone 7 Development and Hacking] lovenokia:
this is like the only free, easy jailbreak left now cause chevron is being discontinued. All eyes are on you jaxbot for a jailbreak.
[Windows Phone 7 Development and Hacking] ChrisKringel:
you could still use the dreamspark-unlock, as I did with my lumia 800. However a jailbreak like the windowbreak would allow more sideloaded apps and maybe a interop unlock...
[Windows Phone 7 Development and Hacking] voluptuary:
So if your phone was already dev and interop unlocked why would you do this? Anyways did you try to re-apply 'System Tweaks'?
[Windows Phone 7 Development and Hacking] Tredell:
I read in the Samsung Focus S forum that Windows Break fixed an MMS issue that I'm having. So I thought I'd give it a try.

Re-applying the "System Tweaks" restored my cellular data.

-Tredell
[Windows Phone 7 Development and Hacking] voluptuary:
@Jaxbot: I think maybe your ADC script might be bad, if mine works to fix yours perhaps you have a typo or something, could be a cause of all of the errors people seem to be having.
[Windows Phone 7 Development and Hacking] Jaxbot:
It's not broken, ADC just fails occasionally. Rerunning windowbreak can fix this sometimes, as ADC will be rerun.

But if you have an ADC script you'd like me to compare it to, I'd be happy to do so.
[Windows Phone 7 Development and Hacking] voluptuary:
From a few posts back
[Windows Phone 7 Development and Hacking] Jaxbot:
Ah yeah, saw that. Sorry, been a busy last few days.

I'm pretty sure the problem is just ADC failing on boot, which is a fairly random but not too uncommon situation. Obviously the interop unlock part is working, so I suppose rerunning the Windowbreak file would be the same as including an ADC file, but I'll look into this, thanks.
[Windows Phone 7 Development and Hacking] nitin88g:
Can you point me a link to download Healthcliffs XAP

Thanks :)
[Windows Phone 7 Development and Hacking] nitin88g:
I can confirm it's not working on Samsung Omnia W (Latest model from Samsung). :(

There's already one more thread running in xda. but today I can confirm it that it no longer working n this latest phone. When i click on "Tap Above" it's saying Zip file error. however it loads windowsbreak.xml, it's doesn't show up in GPRS menu
[Windows Phone 7 Development and Hacking] Jaxbot:
Zip file error? Say what now?
[Windows Phone 7 Development and Hacking] nitin88g:
"We are having trouble opening this file, The file might be damaged or the file type might not be supported".
[Windows Phone 7 Development and Hacking] Jaxbot:
And this consistently happens (i.e. not just a corrupted download?)
[Windows Phone 7 Development and Hacking] majkeljj:
I have stupid idea, most of all have a zune restore point for Mango (before 7740), maybe is it possible to modify registry in this backup (ex. changing maxunsignegapps=300) and then restore my 7740 to modifed restore point 7720?
[Windows Phone 7 Development and Hacking] nitin88g:
yes. it tried deleting history and restart etc... Still same problem
[Windows Phone 7 Development and Hacking] Jaxbot:
Hmm... wonder if something changed. I have a way to test it, though:

Navigate to http://windowsphonehacker.com/windowbreak/imgtest.zip on the phone (short link: http://bit.ly/u10huv )

Do the same as you would with the windowbreak, but try opening logo.png. Tell me if it displays in the picture viewer.

This has been looked into for quite some time... it's not a bad idea in theory, except that these files are signed, and thus we cannot modify them without the phone rejecting it.
[Windows Phone 7 Development and Hacking] majkeljj:
:( few years ago on WM5 there was problem with signed apps, WM5 didn't allow install them, then someone found in Hex Editor string which was responsible for this. after replacing string in hex editor in nbh file and after installing this rom we were able to install unsigned apps, maybe somehow we can do this on WP7 backup or official nbh file?
[Windows Phone 7 Development and Hacking] Leapo:
Not for all of us :confused:
[Windows Phone 7 Development and Hacking] GoodDayToDie:
Please do a little searching, if you're really interested in the idea of modifying the backups. Short version: It's not possible. You're not the first person to suggest it either. They are encrypted, so even if it were possible to modify them and restore the modified version, you wouldn't know what bits you were changing.
[Windows Phone 7 Development and Hacking] nitin88g:
When i click on "Tap above" it's saying same error message.

However If I click on logo.png, it's showing in picture viewer
[Windows Phone 7 Development and Hacking] Jaxbot:
Um, yes, you're not supposed to click Tap Above, the error appears when clicking it because it doesn't understand what the MIME type of that file is.

If the logo.png works, everything is fine.
[Windows Phone 7 Development and Hacking] nitin88g:
you meant to say, that windowbreak works?? :rolleyes:
[Windows Phone 7 Development and Hacking] FurY2007:
Works like a charm, thank you very much!
[Windows Phone 7 Development and Hacking] Tengaku:
Hey there...

Jaxbot... Can you please send my by PM a summary about how it's going for the Lumia 800 jailbreak plz?!

I'm not good with code, but got my paws on a lot of things...

I'm like a fool, but I can get good idea sometimes... :)

Thanks
[Windows Phone 7 Development and Hacking] Jaxbot:
The status is pretty public at this point; everyone is still looking for a way around the provxml restrictions on the Nokia side of things. I've tried a couple things but to no avail. Is there something you know that we don't? ;)
[Windows Phone 7 Development and Hacking] Tengaku:
Well...

I read about a whitelist somewhere in this thread...

Then I was thinking back the time I was hacking WiFi networks...

Sometimes, there had a MAC filter, that was preventing me to connect...

So, in order to connect, I had to change my MAC...

Then I thought... Just a crazy idea I guess...

But could you make it so the Lumia 800 would think it's something in the whitelist...

That way, the Lumia 800 would allow you to jailbreak the phone...

I guess you thought about something like that already... But I give it a try... x)
[Windows Phone 7 Development and Hacking] spikeymouse:
you can do that by changing the registry but for that you need interop so back to square one :)
[Windows Phone 7 Development and Hacking] Thunder_:
Just curious, why no one is trying the iOS style of jail break? Which means finding exploit like crash to break into the OS?

Does it means MS's system is designed to be more secure?
[Windows Phone 7 Development and Hacking] GoodDayToDie:
Apple's security record in recent years is abysmal. Believe it or not, Microsoft's is much better. When your PDF reader makes Adobe's look like a tree-house vs. Fort Knox, you've done something horrifically wrong. Apple is busy learning things that Microsoft has known for much of a decade when it comes to security.

Also, there are serious dangers to iOS-style jailbreaks. For one thing, what one person can use, so can another. So far, all the unlocks for WP7 require the user doing something, even if it's just installing one app and running another. Something that's just visit-a-webpage-and-you're-pwned is a much more dangerous beast.

Additionally, there are dangers when updating. Updates to iOS have a tendency to break jailbroken devices, sometimes to the point of bricking them. Short of custom ROMs or update CABs, all the WP7 hacks are easily removable with a simple hard reset.

Finally, I don't think you appreciate how extraordinarily difficult it is to find such a vulnerability, and then to build a working exploit for it. The vast majority of malware these days are Trojans and the like, because the weakest link in computer security is usually the user. Even when real vulnerabilities are found, exploiting them is a very specialized skill unless you just want to crash the program.

Sure, I could set up some fuzz testing (though getting a debugger on the native code would be quite a bit of work itself) or go pull apart the disassembly (reading ARM code isn't that hard compared to some other architectures, but that hardly makes it easy or fast). Maybe I'd get lucky some time this decade. Alternatively, I could go look for important files I can add or replace, or trace the execution of certain operations manually, and have a much better chance of success.
[Windows Phone 7 Development and Hacking] lip:
Hi,

I'm wondering if I have used this tool(which I have), will it stop my focus form upgrading to the new version MS is sending out now?

Thanks.
[Windows Phone 7 Development and Hacking] GoodDayToDie:
No. This doesn't modify anything related to version information or branding.

It's possible for an update to revoke the unlock status. However, unlocking the phone will not interfere with updates. Some other hacks will, but not the unlocks themselves.
[Windows Phone 7 Development and Hacking] Jaxbot:
Exactly. And though I kind of wish we could find a buffer overflow of sorts, it would be much more complicated, especially considering that we're limited to managed code on a native layer.

Though, there is this magical crashing string that people call an "SMS bug" (not a very good name), I wonder if it just crashes the XAML layer, or if it does anything useful memory wise...

+1

Also, I tested the latest update on my Focus. All safe, no relocks, no patches.
[Windows Phone 7 Development and Hacking] ultrashot:
With full unlock "getting a debugger on the native code" is a rather routine task if we speak about VS2008 debugger. IDA's debugger is harder because (looks like) it was hardcodded to depend on ActiveSync running on device.
[Windows Phone 7 Development and Hacking] nitin88g:
@jaxbot, is there any way to increase "Call Log" by more number of days or by more number of entries.

It;s very less (the default limit)
[Windows Phone 7 Development and Hacking] n0psl3d:
There has actually been a client side remote code execution vulnerability exploited on WP7 (pre-mango). I saw it demo'd in real life at a security conference (DeepSec) - http://www.youtube.com/watch?v=1oRrADSFqmE. This seems to use this IE7 vuln ported to ARM (http://dev.metasploit.com/redmine/p...its/windows/browser/ms11_003_ie_css_import.rb).

There seems to be more information here on the steps the author took to exploit the platform (http://labs.mwrinfosecurity.com/files/Publications/mwri_wp7-bluehat-technical_2011-11-08.pdf).

The main issues are the sandbox, exploit mitigations and lack of native debugging... The debugging in that PDF document was performed using tiny crash dump's. With the full unlock, KITL would speed up the process a huge amount and its likely kernel bugs are the easiest way out of the sandbox if your exploiting an LPC process. Getting native code execution in the LPC chamber will be much easier (bigger attack surface) than getting TCB access from there.

WP7 does seem harder than IOS, I agree for sure..
[Windows Phone 7 Development and Hacking] voluptuary:
Not to downplay the efforts put forth by everyone here so far but WP7 has on it's side what Apple has had for years with thier desktop OS's. Security through obscurity. There simply aren't the same amount of people poking and proding WP7 as there are iOS or Android. Take that and the fact that MS has had many more hard years (i.e. mega marketshare) experience locking thier systems down, it makes for very slow development on the hacking front.
[Windows Phone 7 Development and Hacking] Jaxbot:
+1 to that. If we had as many devs as, say, Android, we'd probably stand a much better chance here.
[Windows Phone 7 Development and Hacking] shinkstor:
Hey jaxbot, I was messing around with the zip files and stuff, and it turns out when you go to the actual zip file in internet explorer for the first time, the zip file gets downloaded to /Windows/Profiles/guest/Temporary Internet Files/Content.IE5/*Random Letters*/windowbreak_sammy[1].zip

Same thing goes for web pages viewed on a windows phone, so I was thinking that maybe we can make a webpage that will download "www.website.com/archive.zip", then we set the phone to airplane mode, then we go back to the same webpage that is already saved in the history, then we visit "archive[1].zip" (as if the phone was the website's file directory) and extract exploited files to /../../../../../ (back to /windows/). Since we would already be somewhere in the windows folder, do you suppose it would work? I wanted to test it out, but I don't know how to make a zip file with "/../../../file.ext".
[Windows Phone 7 Development and Hacking] Jaxbot:
Hmm, I'm not sure on that one. The zip file is loaded by zip viewer and extracted into the volatile folder in application data, so I'm not convinced this would work. It would require the file name itself to have dots in it, which isn't really possible.

If you want to try, though, download 7-Zip and create a directory called ../../etc. Works like a charm.
[Windows Phone 7 Development and Hacking] shinkstor:
Oh. Well thanks I'm gonna go try it :)

Didnt work, phone doesn't allow local files to associate like that.

Edit: While you cannot extract to \windows\, you can extract to the profiles subfolder...
[Windows Phone 7 Development and Hacking] Mentycz:
Hello. I have got Omnia 7 and Mango 7740.16. I am from Czech republic, and its possible to get Czech language into Mango without unlocking phone. But, here is a bug with the camera settings. I must put some xml into phone to fix this problem.

I have done all, what is in video, and the phone should be unlocked, but it isnt, I think. Everything what I did was correct, everything same like in the video. In programs, I have since jailbreak Diagnosis Set.

I need to install WM7 root tools, but I cant. When I want to instal xap into Omnia, I recieve error.

So I wanna ask, what I am doing bad...