yashsingh1/xdaforums huggingface dataset:
[Windows Phone 8 Development and Hacking] smoheet:
plz

Hey guys let me tell you that iv been using this Lumia 520 since last 1 month and now m tired of it... U can't side load unsigned .xaps... U can't change the looks of ur phone... M damn sad... So plz make a DWORD MODIFIER soon and come up with ways to install 3rd party apps to be installed on our devices!!! Iv heard Microsoft is launching windows 9 in January 2014... N our devices MUST upgrade to w9 if not our devices will automatically shut down forever... Plz make things work soon!!! Its a genuine request
[Windows Phone 8 Development and Hacking] GoodDayToDie:
You can sideload unsigned XAPs, though you'll have to pay for a developer account if you want more than two or three of them. Since you apparently didn't even bother to research that far (or to research the fact that we don't have the permissions to actually modify the registry; writing the app is trivial but it just gets "ERROR_ACCESS_DENIED" every time) I'm going to leave you with the following reminder:

XDA is not a site where you come to say "plz make my phone kewl!" It's a developer site. It's for people who want to contribute their work, not for people who want to demand that other people help them.
[Windows Phone 8 Development and Hacking] Budniu:
Have you seen this ? http://www.mediafire.com/download/vbftyse6a9gxvcl/RegistroWP8.xap

Source: http://forum.windowsblogitalia.com/viewtopic.php?f=23&t=440
[Windows Phone 8 Development and Hacking] snickler:
Thanks [MENTION=3529492]GoodDayToDie[/MENTION], you saved me the trouble of replying. [MENTION=5022575]smoheet[/MENTION], this community and this post in particular are NOT for promoting illegal application deployment. We don't care if you want to install apps from some third party side that saves them on their server. Unfortunate for you, you wouldn't be able to side load those apps to your device ANYWAY because they are encrypted.

If only you would have read through the entire thread before posting such a thing...
[Windows Phone 8 Development and Hacking] snickler:
This uses one of the libraries that I've been testing with. Yes, it has DWORD support, but it still canNOT write to those keys. Honestly, it's better to just use [MENTION=3529492]GoodDayToDie[/MENTION]'s NativeRegistry class.

Edit: Also, I'm pretty sure (non funzionante) means Non-functional :P.
[Windows Phone 8 Development and Hacking] snickler:
Hmm, maybe I should just release the DWORD supported version just for the heck of it since we can't write to the keys anyway. It's already completed.
[Windows Phone 8 Development and Hacking] dragonide:
It does, indeed.
[Windows Phone 8 Development and Hacking] snickler:
Alright,

I uploaded the newest xap and source. I rebranded it as WP8 Registry Tools now since I've realized these libraries are independent of Nokia-specific drivers. I also left some old references to things I decided to play around with. If you wish to see the methods of these libraries, just drag the .winmds from the source into a .NET Decompiler such as IL Spy or dotPeek.
[Windows Phone 8 Development and Hacking] Ben_j:
Just curious, did anyone try to find a key to disable auto-orientation of the screen ? The one from Windows 8 (SOFTWARE\Microsoft\Windows\CurrentVersion\AutoRotation\Enable) doesn't seem to be there on Windows Phone. I tried replacing "Windows" by "WindowsPhone" without success either
[Windows Phone 8 Development and Hacking] Gh0s7_Dj:
Hi there,

I'm sorry to "hijack" your thread but I've just come up with an idea (and I can't try it by myself as my stupid registration tool has started to throw the "IpOverUsbSvc" error).

In this link there's the explanation on how the unlock process works

developerservices.windows phone.com/Services/WindowsPhoneRegistration.svc/help/operations/RegisterDevice (link broken as I can't post links)

Now, there's a cool thing in the response that the server sends to the registration tool

My guess is that this number is the one which will go into the MaxUnsignedApp value.

So we can just try with Fiddler (or Burp Proxy) to edit that value before passing it to the registration tool.

I'd try it by myself if my registration tool worked. Now I've got a locked phone and no chance to unlock it again :(

If this doesn't work, I think that we may still have some hopes by understanding how the registration tool communicates with the phone (again, I can't do it now as the tool is not working for me).

Basically, the pc talks to the phone using ip over usb and this means that maybe, using a transparent proxy like Burp Proxy and having it listen on some ports, we can intercept what the pc is sending to the phone.

This could allow us to build a simple program which repeats all those steps without the need of use the official tool and without having to register for a developer account.

I'm sorry if I wrote something wrong, I'm new to WP hacking and I just wanted to share some of my thoughts

EDIT:

Just to make things clear, here are the ports that I'm talking about:
[Windows Phone 8 Development and Hacking] compu829:
already tried it...doesn't work...the app that requests this info rejects the decrypted and modified https:// traffic due to cert pinning.
[Windows Phone 8 Development and Hacking] Gh0s7_Dj:
Got it.

What about the second idea? Does it make sense?
[Windows Phone 8 Development and Hacking] GoodDayToDie:
I don't think you quite understand certificate pinning... the phone will reject any "device registration" communication that doesn't have Microsoft's public key, and without the corresponding private key, we can't even read the traffic, much less reproduce it. And no, a simple blind re-play attack won't work; SSL is far too smart for that.
[Windows Phone 8 Development and Hacking] windows phone 8:
What i have to do and what I need to work in noob
[Windows Phone 8 Development and Hacking] tonbonz:
Just for fun I just threw all the resources from the Samsung Diagnostics app at snicklers WP8 Registry Tools source code.Yeah, yeah I know....NO INTEROP SERVICES so no it doesn't write to the registry but I got it on my Lumia 928 :p

First off this really doesn't do anything because it's missing the capabilities from the Samsung WP8 Diagnostics app that allow it to function correctly. Secondly I used snickler's source code( I couldn't write code to save my a**) so if he wants to have a look, clean it up, or whatever I'll share it with him but it really serves no purpose for anyone else.I'm surprised it functions as is but I guess even a noob gets lucky sometimes.:D There is something I am wondering though.

[MENTION=2854207]snickler[/MENTION] Since accessing the WP8Diag.dll seems to unlock/open the hidden menu would it be possible if,once the .xap I created is installed, to access or load the .dll through an app that has higher privileges using cpuguy's Native Toast Launcher? And if so would it even matter as far as elevating privileges of the Registry Editor? I've tried using City Lens but I don't know if I'm not entering the correct values or if it's just not possible. Or maybe City lens and my verion of your app are missing a common source?
[Windows Phone 8 Development and Hacking] Ludacris:
I am not sure if anyone has actually thought about this idea but reker's "link" to twitter in the Marketplace when using his Proxy actually made me think about a somewhat different Approach.

Couldn't one start a man in the middle attack using a Proxy and exchanging a downloaded XAP with an XAP that requires interop_unlock capability to write to the registry and then write that tag? If I got the discussion right in the last few years, Apps from the Marketplace can require the interop cap if they passed trough the certification of MSFT.

If i knew how the Proxy was made i would try that myself but i have absolutely no idea how he made it.
[Windows Phone 8 Development and Hacking] GoodDayToDie:
The restriction on interop CAPs isn't listed for "apps from the Store"; it's a matter of "apps which have Microsoft signatures". Swapping in one using a proxy - even completely ignoring the multiple issues you would have getting that far - wouldn't help. The swapped-in app wouldn't have the signatures, so it wouldn't work.
[Windows Phone 8 Development and Hacking] brunoshady:
I'm sorry the 'noobish' but how can I install the XAP on my Lumia 820?

I've sent over email but couldn't install.
[Windows Phone 8 Development and Hacking] ngame:
use search first

you have to install wp8 sdk then use it's own application deployer or Windows phone power tools to deploy app

you can't install apps over IE even you have no AET file . Only you can use pc to deploy or sideload apps
[Windows Phone 8 Development and Hacking] brunoshady:
hmmm.. I see....

And it's possible now to change the registry? Or just for reading?

I'm asking this because I want to set 3 medium tiles columns on my 820 (like 1520 and ATIV S).
[Windows Phone 8 Development and Hacking] -W_O_L_F-:
Of course it's read only.
[Windows Phone 8 Development and Hacking] thals1992:
Hmm.... I just reinstalled this on my new 521, it doesn't want to output anything when I have it read the MaxUnsignedApp value. I remember seeing somewhere inside extras+info with portions of it using RPC and I'm wondering if anyone has tried this and found anything recently.
[Windows Phone 8 Development and Hacking] ngame:
I found it in Extras + Info too but didn't have time to run into the code because of my final exams

I think RPC Components are the same in all wp devices but Samsung have a FCRouter that I can't find it anywhere in Nokia Phones
[Windows Phone 8 Development and Hacking] -W_O_L_F-:
All root OEM operations are done via RPC.
[Windows Phone 8 Development and Hacking] busyfritz:
IE Registry Hack

Hey all,

First off I want to say thanks for the hard work in getting a registry editor together for WP8. Although I have no programming experince with Windows Phone, I am an Access VBA programmer and can appreciate the work that goes into it.

I was wondering, is there ANY registry hack that could be done to make IE inoperable/crash on startup etc. Basically what I'm looking for is some way to disable internet browsing. I read somewhere that someone thought that the 8.1 update might bring such features.

Any thoughts?
[Windows Phone 8 Development and Hacking] jessenic:
If you have Samsung ATIV S you can just rename iexplore.exe, that should do it :)
[Windows Phone 8 Development and Hacking] busyfritz:
bummer. I have the Lumina 928. is there any way to access the file on this thing.
[Windows Phone 8 Development and Hacking] jessenic:
Nope. Currently only Samsung phones have found vulnerabilities that can be exploited.
[Windows Phone 8 Development and Hacking] thals1992:
Yeah.... There isn't anything for the 928, or any Lumias yet. There might be an exploit in one of their apps, but to the non-programmers eyes, I see nothing....
[Windows Phone 8 Development and Hacking] tids2k:
not sure if its going to be any helpful, just reading through the internet I came across regfs file system that is basically inside FFU's (for eg. MMOS.WIM ) for Nokia Lumia's now, it has documented by the author himself here http://reboot.pro/topic/7681-the-registry-as-a-filesystem/#entry71626 . Now attached is the ReGFS.zip which has a plug in for Total Commander I am very new to the WP8, and not even sure if this will help anyone to edit those files .. If it is considered as SPAM mods please delete it .. Thanks.

Documentation on REGFS

http://webcache.googleusercontent.c...tm+&cd=1&hl=en&ct=clnk&gl=au&client=firefox-a
[Windows Phone 8 Development and Hacking] djamol:
[MENTION=2854207]snickler[/MENTION] [MENTION=3529492]GoodDayToDie[/MENTION]

I'm bit confused about Native Registry methods.

Registry.NativeRegistry.ReadDWORD(RegistryHive hive, String, String, String, out uint data)

So i wrote,

uint num1 = 0;

bool num2 = nRegistry.ReadDWORD(RegistryHive, this.txtPath.Text, this.txtKey.Text, this.txtValue.Text, uint num1 );

Error in last arguments

(Out uint data)
[Windows Phone 8 Development and Hacking] djamol:
Please someone can solve this error?

And can explain me the description?

Edit:

Problem solved. :)
[Windows Phone 8 Development and Hacking] GoodDayToDie:
You need to specify that an out-parameter is "out". Also, there are only four parameters to Registry.NativeRegistry.ReadDWORD, counting the out-param.

uint val = 0;

bool success = nRegistry.ReadDWORD(RegistryHive.HKLM, "PATH\\TO\\KEY", "DWORD value", out val);

MessageBox.Show("The data in the registry value is " + val);
[Windows Phone 8 Development and Hacking] djamol:
Yeah, successfully caught. :)

uint num1 = 0;

bool num2 = nRegistry.ReadDWORD(RegistryHive.HKLM, this.PathTextBox.Text, this.KeyTextBox.Text, out num1);

this.ValueTextBox.Text = num1.ToString();

Thanks bro.
[Windows Phone 8 Development and Hacking] djamol:
So I've developed a full featured Registry Editor for any Windows Phone 8x.

> Support for Interop Unlocked phones.

> Support for Non-Unlocked phones (Read Only)

> Support's HKCR, HKCU, HKLM, HKU.

I've used [MENTION=3529492]GoodDayToDie[/MENTION] library, so hell we can't write the values at anywhere for non-unlocked phones.

Can i newly post into achievement thread ?
[Windows Phone 8 Development and Hacking] GoodDayToDie:
Definitely post it somewhere! Here, or in its own thread, or wherever seems most appropriate...

Does it provide browsing? The current editors don't; I've considered jumping the addition of registry editing up the feature list for my webserver just because switching back and forth between a read-only browser and an explicit-path-only editor is annoying.
[Windows Phone 8 Development and Hacking] djamol:
Hi, Sorry for the late reply.

Point 1.

I've figured out that, it can't read registry values at some area(dev unlocked). Used all possible capabilities. I don't know the reason, but it is may be kernel level access issue. I've not spent a more time on it, due to busy schedule. Even your WebServer app doesn't displays the content on the web page neatly, each time i need to refresh the web page to load the content on desired Web Page, but it is another issue.

Point 2.

About the OEM libraries, which [MENTION=2854207]snickler[/MENTION] has already tried.

We can easily write the registry values at anywhere using any oem library, but their components must be pre-registered and obviously it doesn't permit without high privileges for 3rd party.

Point 3.

One Noob Question.

There are already unlocked SD Card system files

So, If we replace them accurately, same content, same library, same and linking, same as the oem developed and can launch the homebrew .dll ??

Is there possiblity to launch homebrew .dll in an OEM Installation directory and could've the advantages of registered components?

I know all components are registered in Registry and encryption levels, fails on any mods, licence checking etc-etc.

But, if we get success to launch homebrew .dll, then it will have the same privilege of the OEM(as refers to the Registry).

I'm not interested to downgrade my device to 8.0 GDR 1 and find the security vulnerabilities.

So, *CURRENTLY* this the only way to by passed the security.

Btw Happy Diwali to all of you :)
[Windows Phone 8 Development and Hacking] ngame:
Point 3.

Because of signature of files you can't modify them.

I told a better way to,may allow us to bypass security to good day to die but it didn't helpful too :(

Really damn security !
[Windows Phone 8 Development and Hacking] djamol:
Nope, you can launch modified .dll.

I said that, because of I've already tried.
[Windows Phone 8 Development and Hacking] ngame:
If it's true also we have a problem .

This will only work on SD support devices .

And we have to also find an app with ID_CAP_ INTEROPSERVICES that allow move to sd!

I think it's not a good way even it works!
[Windows Phone 8 Development and Hacking] jessenic:
Just FYI the registry editor I worked on for a while does provide browsing: http://xdaforums.com/showpost.php?p=52733830&postcount=217

I have not updated it though and it is very limited. I may pick up where I left some day, but I'm more than happy to merge pull requests if others want to help developing it.
[Windows Phone 8 Development and Hacking] djamol:
Of course, it is not a proper way but we have to just take an advantage of the registered OEM components. Which can permit's to write the values in Registry.

I'm also investigating for those devices, which don't have SD Card.
[Windows Phone 8 Development and Hacking] djamol:
[MENTION=3529492]GoodDayToDie[/MENTION]

Ok, got it !

But you mess with it !
[Windows Phone 8 Development and Hacking] djamol:
What the ****kkkkkkkkkk

I did it.

This is my 3rd Attempt with success.

Now i can side load 3rd party apps with any documented capability.

Hahahahaha I'm the worlds first Windows Phone Lumia Hacker.

I cant explain my words, what I've achieved.

I'm feeling very crazy :D

---------- Post added at 12:53 PM ---------- Previous post was at 12:17 PM ----------

Another point is now 8.1 package support Samsung"RPCComponent".

Have you any tried it ??
[Windows Phone 8 Development and Hacking] snickler:
Explain :).

Also, Samsung's RPC Component won't work with Lumia devices at least
[Windows Phone 8 Development and Hacking] GoodDayToDie:
[MENTION=5889633]djamol[/MENTION]: Do I understand you correctly as having capability-unlocked a Lumia phone? Is it on a stock ROM or did you have to flash it / JTAG it / something like that? Whatever info you can provide, please provide it! Feel free to PM me if you aren't sure how much to go public with or something like that.

[MENTION=2854207]snickler[/MENTION]: Hypothetically, they *could* work. All you'd have to do is take the relevant binaries and registry keys from a Samsung phone, and put them in a Lumia phone. I doubt it works *out of the box* - you can include the library in an app, but anything it tries to do via RPC (which is what it needs InteropServices for) will probably fail - but it's not actually that hard to add support for other OEMs' components once you have sufficient control over the FS and registry. If I was able to add registry keys under the Services key, I'd have done it already on my phone just because Samsung's library is honestly rather limited (for example, no way to create reg keys).
[Windows Phone 8 Development and Hacking] djamol:
I hate J-Tag. J-tag methods are totally useless for configure registry.

Because these registry values must be configure at the runtime. In short mean after the boot process.

Yes, I've stock ROM, Retail Image and never did flash.

I'm on my own code with "InteropServices", so of course i can "READ" and even the "WRITE" Registry Values. My code have a permissions.

I'm confused to where to report these one. To Microsoft or here on XDA. For Microsoft because of Nokia has a good security model so i think we have to really improve the security more and more. An another i really love this forum. I really want to put it here. But sadly my exams are ahead and firstly i should be concentrate on my study. I really don't have a time. :(
[Windows Phone 8 Development and Hacking] ceesheim:
maybe explain Abit how you did that or pm it to me so that also others can look at it because when this really works this means that Nokia has the same fun as Samsung :)

and no , MS doesn't need this because they want to kill freedom for devs who want to code nice and cool apps

interop makes allot of stuff really interesting and the security isn't hacked with that so there is nothing for MS to worry about
[Windows Phone 8 Development and Hacking] snickler:
When you have time please explain it to us over PM at least what you're able to achieve. I wouldn't rush to MS with this, but instead help to improve those who are trying to make the most out of the Windows Phone.
[Windows Phone 8 Development and Hacking] Myriachan:
My exploit allows a modification to the registry so as to trigger a bug resulting in allowing unsigned code to execute--including kernel drivers. I don't know how WinPhones work, but if they're similar in the kernel and use UEFI booting, the exploit should work.

Note that this requires modifying SYSTEM areas of the registry in order to do.

Melissa
[Windows Phone 8 Development and Hacking] ceesheim:
Hi Melissa :)

If you have a Samsung you could test your exploit because that's the only phone that can modi the register.

or drop it at GDTD and let him test it :) , could be real interesting.

Greetings cees
[Windows Phone 8 Development and Hacking] GoodDayToDie:
She already pointed me at it. I don't want to reveal *why* I haven't gotten it to work (because that would give away info about what it is, and Myriachan has not given me permission to do that), but... I haven't gotten it to work. It's hypothetically possible, but will require considerable work. BTW, Myriachan, I sent you an encrypted PM with the results of my latest research in that area. Incidentally, a Huawei phone may be easier for this hack than a Samsung (but I don't have one and don't know much of anything about ROM hacking, which is how we unlock Huawei phones).

Bringing this thread back on topic: if djamol really can edit the registry of a Lumia phone, that makes a hack like Myriachan's more likely to be possible too. Allowing execution of unsigned code would enable full "root" pretty easily; just add (or modify) any service that runs as SYSTEM with a custom binary. You'd still have to get Myria's hack working though, which I haven't yet managed on my Samsung.
[Windows Phone 8 Development and Hacking] djamol:
Just gave first exam paper.

Ok, read all posts. So I'm posting it here very soon when I've a time. I'm also excited. :)
[Windows Phone 8 Development and Hacking] ArthurB.:
Deploying XAP file to WP

Hi,

I'm sorry if this is too basic of a question, but I hope I'm posting it to a relevant thread/forum (if not, please let me know and I'll be happy to move).

I tried side-loading the file WP8RegistryToolsv1.1.xap to my Lumia 1520, using the Application Deployment tool under Windows Phone SDK 8.0 group that I got on my computer during the developer preview registration, choosing Device as the target (phone connected to the laptop, screen unlocked), and it displays "Deploying XAP file..." for a while, but then fails with "Error - 0x89731B01."

Do you know by any change what might be wrong or if there's a better way to side load?

My ultimate goal is to be able to change the defaults fonts on the phone.

Thanks in advance.

– Arthur
[Windows Phone 8 Development and Hacking] GoodDayToDie:
First point: that's just plain not going to work, unless you know something about hacking WP8 that we don't (this is possible but seems unlikely). Most people can't write to the registry at all with this app. If you hijack the chamber of a privileged OEM app, you can write to a *little* bit of the registry. I don't know what registry key you're planning to change to modify the system fonts, but unless it's one of the handful of OEM-writable ones, this won't work.

Second point: did you try doing a search on that error code? By the way, the first character is a zero, not an o; 0x is the prefix for a hexadecimal number.

Third point: the usual series of debugging steps, in order, are to try unplugging and reconnecting the phone, closing and restarting the deployment software, rebooting the phone, and rebooting the PC. If none of that works, you may need to reinstall the SDK or something.