Shmuck of the Week: mrkhangba

Among the many, many, many auctions put up by people who are trying to make a buck from the stuff on my blog, I found this gem:

mrkhangba has hence won the prestigious 'Shmuck' award - congratulations!

Dell 2A7B Keygen

A slight modification and the keygen generates now valid passwords for Dell 2A7B serials as well as for the -595B serials.

Source Code & Binaries

Quick How-To:

1. Download the archive of the keygen from the link above. It contains two files: a C file (source code) and an executable. If you are on Windows, just unpack and double-click the executable. If you are on Mac/Linux/BSD, compile the C file:
   gcc -o dell dell.c 
2. You are asked to enter the serial number of your device. Use ONLY CAPITALS for the serial number.
3. Press Enter and you'll get the password. Keep in mind that the passwords are encoded for a QWERTY-type keyboard layout (US-EN). Also, some models require you to press Ctrl+Enter after entering the password.

Update: Here's is an online version.

Shmuck of the Week: reda

From: reda (mmaimouni@hotmail.com)
To: dogber1@gmail.com
Subject: pleez help
Date: 04/29/2010 01:59:28 PM

hi ,iam interested in what u do, it is very helpful for us, this is why i ask u , i need a dell password generator for all the latest editions 2a7b and a95b, and if possible the hp 10 digits pass.pleaase help me.ur my only chance.thanks

Translation:

I shamelessly use the results of your free work to generate parts of my income. I ask you to perform work for which I am both too stupid and lazy. I am not willing to pay you a dime, but I am actually planning on using it for my personal financial gain.

Mhhh... no.

Fix for the -595B Keygen

Apparently, only some of my readers have been able to derive the fix necessary to generate valid HDD passwords. It's been easily guessable that the prehashing scheme needed some minor modification. Before I get countless requests now, here's the C source code for hpgl's keygen:
http://pastebin.com/cu9ijqM1

You need a C compiler to generate the executable (d'uh), e.g. gcc/mingw32, Visual C, lcc, etc., or you can just use the binaries linked below.

Update: Windows binaries...

More crap from Martech.pl

I gotta admit, they have been incredibly fast at stealing the stuff this time:

Martech SBS Tools V3.2.5.0 - DELL FREE

What's new:

- Bios & HDD for DELL 595B, 2A7B, D35B free for users
You can unlock 5 per day without needed payments.

Application is payable, it cost 39 EUR / 52 USD

Download it: SBS Service Tools


Be ready! For next updates :)
Martech Team

That news item is dated one day after I published the previous blog post and two days after I completed the source code for the keygen on a known forum.

Dell -595B Keygen

Before I get spammed with even more emails, here are the C sources for a keygen suitable for -595B and other dells (courtesy of hpgl):
http://pastebin.com/yEsiqyQy

You need a regular C compiler for compiling an executable (e.g. mingw32/gcc).

So now let's sit back and watch the inflation happen...

Update: small fix (Windows binaries) - see this post.


Quick How-To:

1. Download the archive of the keygen from the link above. It contains two files: a C file (source code) and an executable. If you are on Windows, just unpack and double-click the executable. If you are on Mac/Linux/BSD, compile the C file:
   gcc -o dell dell.c
2. You are asked to enter the serial number of your device. Use ONLY CAPITALS for the serial number.
3. Press Enter and you'll get the password. Keep in mind that the passwords are encoded for a QWERTY-type keyboard layout (US-EN). Also, some models require you to press Ctrl+Enter after entering the password.
    

Unlock Code Generator for ZTE Cell Phones

Here's a script which can generate unlock codes for ZTE cell phones:
zte-unlock.py
The script implements an algorithm reverse-engineered by the collaborative effort of elcapitel and y3kt. You need python 2.x to run the script.
Supported Models: GX760, GX761, SFR 232, SFR 341, SFR 342, X760, X761, Orange Vegas, Vodafone Indie, T-Mobile Vairy Touch.

Unlocker for Huawei Modems

I've finished a quick and dirty implementation of a script which calculates unlock codes ("NCK") for Huawei modems:
huawei-unlock.py
The algorithm has been published a while ago, and there are a lot of other tools out there which do just the same thing. You need python 2.x to run the script.
This is a list of devices for which the unlock code ought to work:
Huawei: E156, E155, E1550, E1552, E156G, E160, E160G, E161, E166, E169, E169G, E170, E172, E176, E1762, E180, E182E, E196, E226, E270, E271, E272, E510, E612, E618, E620, E630, E630+, E660, E660A, E800, E870, E880, EG162, E880, EG162, EG162G, EG602, EG602G
Vodafone: K2540, K3515, K3520, K3565, K3520, K3565

A method to unlock the popular E220 devices has been published here.

Update 5/9/2011: Neil McPhail has put together an automated unlocker script for Linux.

Shmucks of the Week: Martech.pl & Kulankendi.com

This time, the "shmuck of the week" goes to Poland: in a rather shameless fashion, the idiots from Martech.pl and Kulandkendi.com have literally stolen my GPL'd password generators: Martech has implemented them into a shitty piece of software called "Martech SBS Service Tools" which they are trying to sell. They didn't even bother to hide their theft: the message in the screenshot below is copied verbatim from one of my scripts:

Kulankendi.com are trying to sell the passwords themselves for 50 USD each:

Shmuck of the Week: Felix Hernandez

Felix runs a shady business by basically selling the results my GPL'd work to naive people. Since I'm such a dandy fellow, he wants me to help him fill his pockets some more by reverse-engineering the password schemes used in Sony and Dell laptops:

From: Felix Hernandez (felixlapbios@gmail.com)
To: dogber1@gmail.com
Subject: HELP BIOS PASSWORD TO DELL THANKS
Date: 02/22/2010 08:46:55 PM

Hello Friend I'm Mexican and my truth because just like you I like the
community help me ah been very helpful all you've developed programs to
generate the master passwords
That's why I want to give the link to unlock the sony vaio to send the
disabled system error

Only need the last serial number of the laptop to come on back

http://hpgl.googlegroups.com/web/SONY_Form1.rar?gda=73_AtUAAAADBratxJI3TcN2SnEOtgI52Or9i_fMM3dcP7Nz297qKnGJHTKS9woYaVuufKj-4-9ttxVPdW1gYotyj7-X7wDON

 Hear also want to see if you can help me learn how to unlock sony vaio
onetime password and dell 595B 2A7B A95B

HELP ME PLEASE TO UNLOCK BIOS TO DELL THANKS

Guess what, Felix...

Shmucks of the Month

So I stumbled across these sellers on eBay who seek to gain financial profit from my work:

• petrachesimona
• transgression
• biosdepot
• laptopunlock
• amazanj2010
• repairsales2011
• and lots of others....

I get emails every now and then which strongly suggests that the eBay stuff is merely the tip of the iceberg. For instance, one guy complained that he paid a substantial amount of money to obtain the scripts which I have released under the terms of the GPL for free. Apparently, I'm fueling a small industry.
That being said, I want to make clear one thing: I'm not interested in financial profit, but merely in the technical challenge which lies in breaking these security systems (or rather 'obscurity systems').

Unlocker for Option GI0225 3G Modems

A couple of months ago, I bought a dirt-cheap 3G modem labeled as 'T-Mobile Web'n'Walk' stick. It's actually a relabeled Option Globetrotter Icon 225 which supports both 3G and CDMA networks. The provider installed an annoying netlock on the device - breaking it was quite tough. Here's a quick how-to for Windows for people who want to free their devices:

1. Install python 2.6.x (32 bit version): http://www.python.org/download/releases/2.6/   
2. Install pywin32 for python 2.6: http://sourceforge.net/projects/pywin32/files/
3. Install pyserial: http://sourceforge.net/projects/pyserial/files/
4. Download the unlocker (http://sites.google.com/site/dogber1/blag/msm-unlock-v1.6.zip) and unpack it (e.g. into the directory C:\msm)
5. Download a firmware update for the 3G modem from Option or T-Mobile
6. Unpack the firmware update into the directory used above (e.g. C:\msm)
7. IMPORTANT: The superfire.exe file of the update is packed. Unpack the Superfire.exe file of the firmware update once again (e.g. WinRAR can do that). For the newest update, the superfire.exe can be used as it is.
8. Remove the SIM card from the modem and plug it in . Make sure that you have the latest drivers from the option website installed before you start msm_unlock.py. Also, close all the tools for the stick ('connection manager' etc.). 
9. Write down the unlock code. Unplug the stick, replug it and apply the unlock code with msm_apply.py. If the unlock code is not accepted, search the comments for a posting by "muxx" - he has given detailed instructions on how to manually enter the unlock code.
10. Unplug and replug the stick once more and you've got yourself an unlocked 3G modem. 

The script should also work for Linux, MacOS, BSD and any other system which has drivers for the modem and a python interpreter. Also, it might work for other devices from Option. I'd like to know whether this worked for you, so please leave a comment. Also, all sources of the unlocker have been released under the terms of the GPL. Feel free to hack away with them.

Audiophile Audiophoolery

An Information Campaign

The very same applies to all other cell phone and BIOS unlocking:
http://iphonejtag.blogspot.com/2009/11/information-campaign.html