Develop Bugs

HTC Touch Pro2 as a HACKING tool?

Good evening folks,
I am considering buying the HTC Touch Pro2 when it is released in the USA on Tmobile. I would like to understand what hacking (security testing) tools are available on the Windows Mobile Platform. I am a security professional and have the desire to perform penetration testing from the HTC Touch Pro2.
It seems the MetaSploit framework is not available. I like to work with the command prompt, is the command prompt accessible on the HTC Touch Pro2? I've read some info about being able to mount ISOs or run emulators. Is there WiFi hacking software such as Kismet available?
Does anyone know what hacking tools are available for this platform?
Thank you!

Anyone have any ideas?

It doesn't run real windows, you can't get a command prompt. You'd be better off with a real machine.
There's a couple companies out there that sell WM devices for pentesting, but they are all provided with the hardware since they are focused on wifi and I don't believe the standard WM stuff lets you put it into promiscuous mode.
You'd probably be better off with an android device so you can just compile whatever you want.

MSFT products have never been suitable for comp-sec professionals.
You're better off connecting to a *nix box using either PocketPuTTY or using a webbrowser to connect to a remote server running metasploit.

Check out VxUtil, it gives you DNS, reverse DNS, port scan, ping, finger & so on. Pocket Putty is a good free SSH client, also does port forwarding.
OpenVPN works as well if that takes your fancy. Lots of security tools are available, they are just a bit obscure. I don't think nmap is around though.

thanks for the reply

Our company actually just released a new product (called Security Tools) that lets you ping, traceroute, do a WHOIS lookup, and even do port testing on your Windows Mobile phones. The port testing can even send clear text commands to a port such as 'GET / HTTP/1.0' to verify that it is a HTTP service listening on that port. The traceroute is also able to visually show the trace (if it's public IP address) on a map so you can kind of get a visual representation of where your traffic is going. Please feel free to try our one week free trial which lets you use the application for a week without limitations, so you can make sure everything works as you want before you buy.
You can visit the original post here at xda over at this thread:
http://forum.xda-developers.com/showthread.php?t=550473
or you can visit the website for the product at:
http://www.securenetworksystems.com/SecurityTools/

Punkster812:
I downloaded "security tool" , installed, got a license - and it was already expired...
Also, your company name is "secure network systems" and your web-pages are hosed in Microsoft IIS, and based on aspx .....seriously, if you wish to appear as a security company, you cannot use that crap.
the program with won't work because you serve old license, but one thing is clear; the icon is of very low resolution, and looks bad on WM6.5 or TouchFlo menu.
And: the long Device-ID is there only to annoy your customers, no pir8 would ever be bothered by it, so you may as well stick to 6 characters alphanumeric code +-+++...

AlCapone said:
Punkster812:
I downloaded "security tool" , installed, got a license - and it was already expired...
Also, your company name is "secure network systems" and your web-pages are hosed in Microsoft IIS, and based on aspx .....seriously, if you wish to appear as a security company, you cannot use that crap.
the program with won't work because you serve old license, but one thing is clear; the icon is of very low resolution, and looks bad on WM6.5 or TouchFlo menu.
And: the long Device-ID is there only to annoy your customers, no pir8 would ever be bothered by it, so you may as well stick to 6 characters alphanumeric code +-+++...
Click to expand...
Click to collapse
I am sorry that you had troubles with the trial download, if you PM me with your Device ID I can get you one. We are aware of the low resolution, but rather than focusing on a pretty icon, we worked hard on a functional program. The long Device ID is not to annoy customers, it is actual a very secure method that we use and if you are able to break it, I would be very impressed; I know it's long but it's to protect our intellectual property and no other licensing method existed that prevent piracy like this does. We know ever method is breakable, but this accomplished our goal of restricting to the pirates that are going to steal software no matter what.
As far as the server... you are using a Microsoft product as well for you phone. We very rarely use Asp.net through our site, in fact it's only for license generation and to set up an order, but doesn't actually handle purchases. So the site is secure and I am confused on why you think our site is so insecure. I love Linux and Apache as much as the next network administrator. 4 out of 5 of my personal pc's run Linux with one set up with Apache for my personal site, but for our business needs, we went with IIS.
Again I am sorry that it didn't work for you, I will double check to see if it's still properly generating license, and remember, the trial starts from when you download the license, not run the application with the license.

regarding IIS: http://www.internetnews.com/securit...Microsoft+Rushes+to+Patch+FTP+Hole+in+IIS.htm
This finally got some attention, it was in fact being exploited for years, over several versions.
Hosting software on vulnerable servers gives an opportunity for hackers to easily repack your CAB with spyware/dialer, and you can guess the rest. - such CABs must be inspected for each download.
Regrading long serial number, it only makes a brute force attack harder, at best, which is usually not the method used. You can as well trunk it to a 6-7 char/alphanumeric number, and it will work the same, but annoy people less.
Remember you are at a forum where people often reflash, and entering long serials each time (if cannot be exported from registry) - is boring, and a motivation to workaround.

I can't remember what it's called, but there is a CAIN port for Windows Mobile.

Fmstrat said:
I can't remember what it's called, but there is a CAIN port for Windows Mobile.
Click to expand...
Click to collapse
you are right; - it's simply "Cain for PPC:"
http://www.oxid.it/downloads/Cain_setup_PPC.ARM.exe
and yes, it's far away from the "real" Cain.

AlCapone said:
regarding IIS: http://www.internetnews.com/securit...Microsoft+Rushes+to+Patch+FTP+Hole+in+IIS.htm
This finally got some attention, it was in fact being exploited for years, over several versions.
Hosting software on vulnerable servers gives an opportunity for hackers to easily repack your CAB with spyware/dialer, and you can guess the rest. - such CABs must be inspected for each download.
Regrading long serial number, it only makes a brute force attack harder, at best, which is usually not the method used. You can as well trunk it to a 6-7 char/alphanumeric number, and it will work the same, but annoy people less.
Remember you are at a forum where people often reflash, and entering long serials each time (if cannot be exported from registry) - is boring, and a motivation to workaround.
Click to expand...
Click to collapse
Thanks for the link, I looked into and we are not vulnerable against the attack and never have been due to the attacks requirements (http://blogs.technet.com/srd/archive/2009/09/01/new-vulnerability-in-iis5-and-iis6.aspx). As far as brute forcing, without going into to much details, would be extremely difficult to do as it uses standards proven encryption algorithms. The extremely long serial that you are talking about is a unique ID for your phone. We know it's long and are always looking for ways to improve the licensing we use. The license is a file and not something that you key in, you copy to the installation directory; so you can keep a copy in your email, on your computer, flash drive, where ever for back up purposes in case you need to reload the app.
As far as reflashing, that is a very valid point. I am not 100% sure, but I believe reflashing should not hurt the license, which would hopefully mean you wouldn't have to enter your device id again. But if any one could confirm this, that would be appreciated. We know a lot of the people here are very advanced and know more about their phones then most the people at service providers or even the phone manufactures themselves sometimes, which is why we enjoy releasing our products here for testing before we release them to the public. In the little time that Security Tools has been up we have received some constructive feedback on what could be improved.

Punkster812 said:
As far as brute forcing, without going into to much details, would be extremely difficult to do as it uses standards proven encryption algorithms.
Click to expand...
Click to collapse
Right, that's why I said long numbers would be good for only that, once the calculation/verification routine is extracted for a keygen, it's no more job whatever the result is 6 or 50 digits long.
- Therefore, you might save your customers from all the boring entry, because no keygen /(or crack) will be more difficult by having more digits.

WP7 -IS- Backwards compatible (well almost)

Applications that were made for Windows Mobile 6 are compatible with Windows Phone 7 Series. The interface of the new mobile operating system has been changed though, so the user interface for these applications will have to be changed as well.
"So there is no reason why programs written for Windows Mobile 6 cannot run on the new version of the OS", said Maarten Sonneveld of Microsoft Netherlands to Tweakers.net. "The interface is complete different though, so the applications will have to be changed somewhat before being ready for Windows Phone 7 Series".
It is still unclear how developers can port their user interfaces to the new version of Windows Mobile. Microsoft will only disclose how applications can be developed and distributed at their developer event Mix2010.
Microsoft announced it’s new OS on Monday afternoon at the Mobile World Congress in Barcelona. The OS is primarily aimed at synchronisation and integration with Microsft-services like Windows Live, Bing, Zune and Xbox Live. Aside from those Windows Phone 7 Series can also synchronise with Google-accounts and facebook.
Click to expand...
Click to collapse
Source
So in summary, while none of the current applications will run on it, the underlying non-UI APIs will be compatible. So if understand correctly, porting would just a case of redeveloping the UI then recompiling, rather than starting completely from scratch. This acts to filter out apps with no more developer support, and promote a consistent UI.
Doesn't sound too bad to me.

That might explain why TomTom was seen on that screenshot of WP7 running on the HD2 (although, it could be a fake!). TomTom takes control of the screen, so uses no WM interface elements. So, it might be able to run full-screen apps/games without changes.
But, who knows...

elyl said:
That might explain why TomTom was seen on that screenshot of WP7 running on the HD2 (although, it could be a fake!). TomTom takes control of the screen, so uses no WM interface elements. So, it might be able to run full-screen apps/games without changes.
But, who knows...
Click to expand...
Click to collapse
I was just thinking the same except if you use the included .net controls, there's no reason that the OS couldn't just reskin them automatically to be at least somewhat more in line with the WP7 styling.

This would be excellent if it's true - and I can't see why it wouldn't be. The UI may be new but why throw away a perfectly good underlying core.
What would also be ideal is if the "multi-tasking" involved an app being set to pause in the background by default, but with a "keep me running" API call available for apps that needed it. I'm sure most apps hog resourses not because they need to but because the developer hasn't really thought about how the rest of the device performs when his app has been left running.

Makes sense, WindowsCE core is still the same

Zaim2 said:
Applications that were made for Windows Mobile 6 are compatible with Windows Phone 7 Series
Click to expand...
Click to collapse
Absolutely wrong statement due to incorrect translation. Original: "De interface van Windows Phone 7 Series is totaal anders, waardoor er in elk geval iets aan de applicaties moet gebeuren voordat ze geschikt zijn voor Windows Phone 7 Series"
Even google translates it correctly:
"The interface of Windows 7 Phone Series is different, which in any case something should happen to the applications before they are suitable for Windows 7 Phone Series".
We have some "ms confidential" documentation dated January 2010 that proves that none of the existing apps would be compatible with WinPhone7. And the only programming suite that is available to "generic" application-writers is Silverlight+XNA. Native apps are prohibited. Only OEMs and MO are allowed to create them (and even they have a set of limitations).
We would not have even source code compatibility - as all our C++ apps have to be converted to .NET.

mamaich said:
We have some "ms confidential" documentation dated January 2010...
Click to expand...
Click to collapse
What the heck? And you say that only now? What else is in there? Any word about how background tasks are handled? Please give us some more information, or maybe, can you upload that documentation?

freyberry said:
maybe, can you upload that documentation?
Click to expand...
Click to collapse
Obviously I cannot. As it would reveal the person who provided it.
Just to prove that such info really exists - see attached screenshots.
I really hope that the community would force MS to change such a dumb idea to limit independent software vendors to create only managed apps. Prohibiting C++ as a developing language, and "hiding" Windows API from programmer would force lots of developers to abandon this platform. The main reason of success of old WinMobile OSes was the ability to recompile "desktop" apps to WinMobile with just a minor set of changes (ANSI->Unicode + some interface changes).
P.S. I don't read PMs.

Obviously I cannot. As it would reveal the person who provided it.
Just to prove that such info really exists - see attached screenshots.
Click to expand...
Click to collapse
Well, there's certainly a way to remove that information. But anyway, what about background tasks? Are third party applications allowed to run in the background?

mamaich said:
Obviously I cannot. As it would reveal the person who provided it.
Just to prove that such info really exists - see attached screenshots.
I really hope that the community would force MS to change such a dumb idea to limit independent software vendors to create only managed apps. Prohibiting C++ as a developing language, and "hiding" Windows API from programmer would force lots of developers to abandon this platform. The main reason of success of old WinMobile OSes was the ability to recompile "desktop" apps to WinMobile with just a minor set of changes (ANSI->Unicode + some interface changes).
P.S. I don't read PMs.
Click to expand...
Click to collapse
Wow, I can't believe noone has picked up on this

freyberry said:
Are third party applications allowed to run in the background?
Click to expand...
Click to collapse
OS itself supports multitasking, see attach. But "Windows Phone OS 7.0 Application Platform" that we'll be forced to use to create apps may force our application to be paused in background. I never programmed Silverlight and XNA and can't tell how multitatsking is made in them.
WinPhone 7 == Zune Phone. Both are based on CE kernel, and they should have lots of common in implementation of multitasking, clipboard, etc.

OS itself supports multitasking, see attach. But "Windows Phone OS 7.0 Application Platform" that we'll be forced to use to create apps may force our application to be paused in background.
Click to expand...
Click to collapse
The question is, can we write applications that are not automatically suspended when sent to the background? What are the policies on this?
It says multiple processes can run at the same time, but it does not say whether they get suspended automatically.
Is there any info on this? Maybe in the "Scheduling" section?

I’m not sure this is a big deal. I can see them saying a lot of native C++ apps may have compatibility issues. I could go either way on it with the limited amount of information I have on this. I’ll have a better opinion at and after MIX
Note that this could be old documentation, and it’s pretty annoying you're leaking confidential documentation. Personally, I hope you get into trouble for breaking your contract - they trust you and you're posting it? Yuck.
To be fair, though, every app we’ve written has been managed, and Microsoft hasn't t said P/Invoking is verboten, so what would be the problem?
There’s probably exceptions for games and the like, and the documents you've scanned even say a waiver is available to use the Native APIs. So I don’t know what you're complaining about…
Microsoft's dev teams have been listening to developers - why not get them to chime in and also give them a chance to hear you. Posting confidential Microsoft documents, assuming those are real, is not the way to get them to listen
Best,
-Auri

freyberry said:
The question is, can we write applications that are not automatically suspended when sent to the background? What are the policies on this?
It says multiple processes can run at the same time, but it does not say whether they get suspended automatically.
Is there any info on this? Maybe in the "Scheduling" section?
Click to expand...
Click to collapse
Personally, I like Android's approach to this, where Services can run in the background, but UI apps are allowed to be "put to sleep" while other apps run. But then again, we may see a lot of that come into play come MIX and "Answer Time"
Best,
-Auri

Well, I am now both excited and nervous -I think I will just cool my jets until MIX10 and just enjoy the eye candy for now. At worst - if the interface is nice, but the core is crap I am sure some of the boys here at xda will make us an inteface port for 6.5.x that acts and looks like the new hotness with the old compatibility. - lets see MIX

AuriRahimzadeh said:
Note that this could be old documentation, and it’s pretty annoying you're leaking confidential documentation.
Click to expand...
Click to collapse
Docs are dated 2010.
I'm not leaking the documentation. I'm sharing the information that anyway would be opened in some days, maybe weeks.
And screens are posted here just as a confirmation of my words. You may think that these pics come from my mind and are made with photoshop - it is your opinion.
I really think that WinPhone 7 would be a failure similar to desktop Vista. Of cause some people would like it, but most would stay on WM 6.x and wait for the next version.
Regarding P/Invoke. As far as I've seen, "unsafe" operations are prohibited in XNA and Silverlight. Otherwise we would be able to call coredll funcs and run native apps (and do everything else that is allowed in our chamber).

mamaich said:
Docs are dated 2010.
I'm not leaking the documentation. I'm sharing the information that anyway would be opened in some days, maybe weeks.
And screens are posted here just as a confirmation of my words. You may think that these pics come from my mind and are made with photoshop - it is your opinion.
I really think that WinPhone 7 would be a failure similar to desktop Vista. Of cause some people would like it, but most would stay on WM 6.x and wait for the next version.
Regarding P/Invoke. As far as I've seen, "unsafe" operations are prohibited in XNA and Silverlight. Otherwise we would be able to call coredll funcs and run native apps (and do everything else that is allowed in our chamber).
Click to expand...
Click to collapse
Mamaich any though of a WP7 ce6.0 bsp for all the current cortex A8 devices running on a ce5.2 bsp, will the new kernel support them natively or will extensive bsp/bootloader hacking be required?

P/invoke surely is a limitation of .NET CF, rather than Silverlight/XNA libraries?
I think it would be a bit stupid to remove P/Invoking, because it's just not realistic to rely on .NETCF alone which has soooo much stuff stripped out to minimize size.
Will we be seeing a whole new .NETCF so soon after 3.5? I highly doubt it...Unless MS have been working overtime the past year

Shame, time to stop mobile development altogether if this is true. When we developers are considered as dumb earning pipes for companies who in their arrogant big ways think they have all the wisdom, and app developers only make annoying software that makes their precious leaky OS'es crash, it's time to move on. i would have been talking about IPhone, Android etc, but sadly we must add Microsoft to the list also.
Then there's the $1195,- and airplane tickets we have to pay to get to the Mix2010 in oder to maybe maybe get to be a "partner" with access to limited native API's (probably only reserved for the big companies) and don't even bother talking about giving away 30% of our earnings to a company that last year made how many billions of profits was it ?
Time to start an XDA OS based on REAL Linux maybe ? NVidia have a nice dev-board available for $400,- with Tegra on it. That's what I call developer friendly.
Cheers !

Regardless of how this will play out, I'm pretty sure of two things:
1. Closing down the OS may be beneficial for the majority of users by bringing stability, ease of use, UI consistency, etc. Even though I don't like it.
2. Because the OS itself is multitasking, any and all restrictions may be hacked around, and a "jailbreak" will be possible.
Depending on how this whole thing will be implemented, jailbreaking and using "illegal" apps may be a major PITA (think iPhone 3GS/tethered jailbreak) or as easy as a few registry tweaks/installing additional certs/whatever. If Apple didn't chase JB with every update it would be a rather good platform for both mainstream "ordinary" users and those who want rather unusual things from their phones.
We'll have to wait and see how it evolves really to make a final judgment.

The WinMo App Store

Freeware PPC, and the numerous FTP sites, along with device update, and PDM.
These are the many places I've fund over 85 different applications("apps") that I run on Windows Mobile 6.x.x. These all being in many places, sometimes hard to find, sometimes easy to find. Other "apps" include going to a website, made for and by the "app" parent company.
I have around 500 cabs on my HDD, updating and reorganizing them all the time.
Now say I make up a handy spreadsheet(on my phone) That goes over screen size Supported OS versions, and various other things including a description. Is there any way that someone else, that has a lot better understanding of mobile "app" writing than I do, take the info I compile, and apply it to their Marketplace for window Mobile, the real one.
I would hope to include my best Icon(that may take a while), and Potentially server mirroring the apps, since I already keep all the "apps" I use and have acquired, in a very organized fashion.
The style of PDM I like a lot more than M$Marketplace, the search feature is nice(sorting ITL and WWE is convenient. The touch interface, such as the drop down info, is also well implemented.
Device Update on the other hand it awesome, its simple, very similar to the OS it runs on.
I know WinMo is dead, within a few months from this threads initial post, it will be outdated, and completely forgotten shortly thereafter. But I know plenty of people sticking with at least one older model(e.g. HD2) and the apps are really out there.
Anyone care to work on this? I just lost my main PC and have been using my phones word processor and multiple web browsers to keep myself as close to a real PC as possible, this also had me downloading apps for usage similar to what I was doing on my PC.
Alongside this, I read an article about why someone is using the iPhone 4 as a "daily driver." When it came to his comparison of the apple, android, and WinMo marketplaces, he went over how although there is always an app there for WinMo its painstakingly hard to find. This is true(at least to those average consumers) and as he mentioned the Marketplace holds 1100 "apps."
I've been using a PPC since 05-06(can't remember...) and love what WinMo has had I.M.O. Over the other OS's. I have always been able to find exactly an app(s) for that. Normally in the larger "collections" I've grabbed from the net, there are thousands in each 0day pack and he was releasing them on a regular basis.
I also know that this could really help the platform, it would be the user made the marketplace. Then what's stopping M$ from handing us helpful(outdated e.g.. code) info that can make our app store even better.
I don't want a mimicking app store(although a skinnable one would beat unique) I just want something that can help out and be user made, user maintained.
Let me know what you guys think.
I worte, and published thi from my TyTn II(at&t tilt)

XDA Marketplace
Hi,
Nice to see your thoughts on this...
xda member 'davidgida' has developed an application 'XDA Marketplace' (thread)
Your repository would be a great addition to it ... I will point him to this thread as I have pointed to his
Hope to see a great partnership come in place !

I would love it if you upload your cab files to the xda market
If you have an idea what could be improved on the xda market or a feature you would love to be added just PM me. Every new idea is welcome.
EDIT:
Nearly I forgott:
This is the official thread for the xda market: http://forum.xda-developers.com/showthread.php?t=707988

Wow, I saw this thread drop off the main page listing so fast, I figured all was missed.
Glad to find the App that's here already, Just got my Tilt2 Monday, was busy borrowing other peoples internets to flash deepshining on it. Got it up and working the same day I got it.
I'll try to get my FTP server back up. I'm currently running all my computers in my office on shared shared internet. Tethering to my main rig, and sharing the net to the other three. My switch recently died, and the wire running from the lower floor died shortly thereafter. I've been only online with my phone.
After I get the XDA app store on my phone, I'll compare my list to yours, then null out the duplicates. The spreadsheet I can custom tailor to similar categories, but I haven't seen the layout yet. Hopefully it will only take me a few days to write up some descriptions.

s1ugh34d said:
Wow, I saw this thread drop off the main page listing so fast, I figured all was missed.
Glad to find the App that's here already, Just got my Tilt2 Monday, was busy borrowing other peoples internets to flash deepshining on it. Got it up and working the same day I got it.
I'll try to get my FTP server back up. I'm currently running all my computers in my office on shared shared internet. Tethering to my main rig, and sharing the net to the other three. My switch recently died, and the wire running from the lower floor died shortly thereafter. I've been only online with my phone.
After I get the XDA app store on my phone, I'll compare my list to yours, then null out the duplicates. The spreadsheet I can custom tailor to similar categories, but I haven't seen the layout yet. Hopefully it will only take me a few days to write up some descriptions.
Click to expand...
Click to collapse
Okay,
There will be some design problems with the qvga/vga version. I currently working on a complete new version of the xda market. I will fix this error with the new version

Hi,
I hope you are still interested in a market.
I'm now finished with developing xda market v2.1
if you want to you can take a look at it:

[Q] REAL hacking.

Hello there to all the souls of the xda forums.
im new to wp7. never used one before like 3 days ago. i like it, great device my surround is. but im not here to tell you about how good it is. we all know its good.
im here to ask if theres any real hacking going on with this thing yet. im looking for at least some kind of command line.
from there i could use tools such as aircrack, nmap, metasploit, SET, etc.
ive had an iphone for about 3 years, booting iOS and Android. i am used to hacking from that, but at the same time i know there a bigger user base for those devices, so theres more devs for it. i just wanted to know if anyone has already started on such a project before i dedicate alot of my time to developing this for you all.
BTW i am not interested in pirating apps, cracking apps

With enough effort, command-line interface *might* be possible - the OS technically supports such things - but the underlying core is Windows CE. Even less so than NT, CE really isn't meant for a CLI; apps are written with the intent of being run on a graphical interface. Also, having no POSIX compatibility and only partial Win32 compatibility, a lot of apps that you're used to from the desktop (or from POSIX-based phone OSs like iOS and Android) aren't going to be available.
That said, if you want to get started in the WP7 hacking space, there's certainly plenty to do. One project that I have on the back burner until I get some more urgent stuff out of the way is a SSH client. There are a number of things that are required here. First of all, we have homebrew Socket support, but the official SDK lacks it so you'd need to use a native Homebrew DLL. Second, there's no official command line interface, so you'd need to write one. The second point is all sorts of fun, since what you're really writing is a terminal emulator.
Other interesting projects include getting a unified cross-platform approach to writing to the filesystem, or even reading from all of it (instead of the relatively small portions currently accessible) or figuring out how to make third-party apps run in the background.

thanks man. I think I'll work on getting a full file browser for the phone. That should happen , i think, before anything else. As far as a terminal emu, it sounds like its going to be more of a chalange for me. Again, I'm used to more Linux and UNIX systems than I am windows. I had to reinstall windows 7 onto a partition just so I could sync the phone with the Zune software Microsoft insisted I use.
So is anyone currently working on the file browser? Has there been any progress with it? If so, who should I contact so I can help?

sea_bass said:
thanks man. I think I'll work on getting a full file browser for the phone. That should happen , i think, before anything else. As far as a terminal emu, it sounds like its going to be more of a chalange for me. Again, I'm used to more Linux and UNIX systems than I am windows. I had to reinstall windows 7 onto a partition just so I could sync the phone with the Zune software Microsoft insisted I use.
So is anyone currently working on the file browser? Has there been any progress with it? If so, who should I contact so I can help?
Click to expand...
Click to collapse
TouchXplorer. Do a bit of searching. A lot of homebrew has already been in the works.

thesecondsfade said:
TouchXplorer. Do a bit of searching. A lot of homebrew has already been in the works.
Click to expand...
Click to collapse
Thanks. Just found that page

[APP] Lemon v1.3.0.1

Lemon
MODERN BROWSING
FEATURED
Massive Overhaul - completely rewritten to optimize the code and unify the overall interface
OTA Updates - updates require little to no user interaction
Security - hide and lock the browser with the touch of a button
Privacy - browsing history is only stored locally and can even be automatically deleted on exit
Auto Complete - suggests words depending on your history
Screenshot - nothing special, but you may take HD screenshots right within the browser
Notepad - notes that save automagically
Open Source - the source has now been released
Click to expand...
Click to collapse
NEW
Privileges Fixed - no longer runs needs to run in administrator mode thanks to @SixSixSevenSeven
Click to expand...
Click to collapse
BUGS
Outdated Browser Component - this browser is based off IE7 on some computers
Mishandles Links - links that open in a new window or tab will most likely open in your default browser
Click to expand...
Click to collapse
Lemon has been abandoned for quite some time now and I have removed the screenshots and download links. I am considering coming back to this project in the near future when I have time to put Windows on my MacBook. Until then, however, you may play with the source.
Source // Website

Maybe post some screenshots, or possibly a download?

netham45 said:
Maybe post some screenshots, or possibly a download?
Click to expand...
Click to collapse
Thank you for the recommendations Just uploaded 3 screenshots and added a download link towards the bottom.

Nice start. No go on RT.

cx1 said:
Nice start. No go on RT.
Click to expand...
Click to collapse
I wonder why this is not working on the RT.. I wish I had this device to test some things on. Anyways, this build was focused on 4.0 .NET framework made in visual studio 2012 for windows 8 Desktop. Thanks for trying.
EDIT: Problem is with the installer, download the ZIP below it and use that. I will try to find a fix for the installer. Sorry for the inconvenience.

mellowdev said:
I wonder why this is not working on the RT.. I wish I had this device to test some things on. Anyways, this build was focused on 4.0 .NET framework made in visual studio 2012 for windows 8 Desktop. Thanks for trying.
Click to expand...
Click to collapse
Try targeting 4.5 for Windows RT.

netham45 said:
Try targeting 4.5 for Windows RT.
Click to expand...
Click to collapse
Just updated to .NET 4.5

Nope will not run on RT unless I'm doing something wrong?

THEBIG360 said:
Nope will not run on RT unless I'm doing something wrong?
Click to expand...
Click to collapse
hmm, any errors being displayed? Or just not opening?
EDIT: Problem is with the installer, download the ZIP below it and use that. I will try to find a fix for the installer. Sorry for the inconvenience.

You would need to target "Any CPU" in the .NET code, and recompile any third-party x86 libraries that you are using to target ARM, and it would probably work then. Most (although not all) of the system libraries on Win8 are also on Windows RT, and (at least in the case of .NET libraries), the ones that aren't can sometimes be brought over from a Win8 box anyhow.

GoodDayToDie said:
You would need to target "Any CPU" in the .NET code, and recompile any third-party x86 libraries that you are using to target ARM, and it would probably work then. Most (although not all) of the system libraries on Win8 are also on Windows RT, and (at least in the case of .NET libraries), the ones that aren't can sometimes be brought over from a Win8 box anyhow.
Click to expand...
Click to collapse
At the moment, I am trying to get geckoFX 15 and xulrunner 19 added to the project so I do not have to use the default WebBrowser component given in Visual Studio. If you would like, I could send you the source and maybe you could help porting to Windows RT and adding geckoFX? Btw after v1.0 this will be Open Source to all Thanks for all the support guys.

Works now thanks, scrolling is a little hitchy how ever its a great start. On another note would it be possible to make the onscreen keyboard auto pop up?
Will the flash be optimized, the browser is really fast. Its just the flash side of things that is buggy.

Seems to bypass the Flash whitelist on Windows RT. That's quite handy.

Re: [APP] Lemon Browser v0.9.7.3
I can surely attempt the auto pop up on screen keyboard, also the glitchy scrolling will be fixed soon. Thanks
Sent from my Nexus 4 using xda premium

Just FYI: a web browser requiring Administrator to run is absolutely unacceptable. Browsers should run with extremely limited permissions (lower than standard user, ideally) rather than elevated permissions. I fixed this by hand-editing the .EXE file's embedded manifest to run AsInvoker (rather than RequireAdministrator). You should change the manifest in VS. Preferably, the whole thing would run in a low-IL sandbox the way IE does, and/or use some other sandboxing technique.
Also, there's little reason, especially for RT-targeted builds, to use Debug unless you include the source files and expect people to use them when reporting bugs. Release builds are typically smaller and faster.
Finally, could you get this to use a somewhat less awful rendering engine than IE7? I don't mind using Trident in general, but IE7 is archaic and awful. How do you justify "faster than Chrome" on a browser that can't even pass Acid2, much less run a modern speed benchmark? Gecko would be awesome, though I don't believe anybody has managed to port it to RT yet so that would be x86-only at first.
There are other things I'd like to see, ranging from simple UI conventions (double-clicking the tab bar, tapping Alt to show the menu bar, etc.) to some significant security issues (loading mixed content - that is, HTTP content on an HTTPS site - is a potentially serious risk).

Re: [APP] Lemon Browser v0.9.7.3
I appreciate the feedback, about the debug, i honestly did not even think about that, its just much faster to update using the debug folder. I will make it the release build next time. Next - about the admin permissions - Unfortunately this is needed to enable the temporary download of version.txt (allows OTA updates). And I was not planning on targeting the RT at all. I simply made this on my windows 8 laptop and released to the public for however they would like. I am now working on a 3D FPS though and will be releasing the code to this very shortly. And for the IE7 subject, I tried using firefox component but it does not allow the "LoadComplete" sub. Simply put, I do not know how to do 'if web page loaded' do this. I need this feature so i can load favicons etc. Please understand that this was made < 1 week ago. I highly appreciate all the comments though because I can not even begin testing all of these. Plus with school and other activities I do not expext this to be a huge project. Just simply a fun project (focused on gui) to add to my projects. Thanks again
Sent from my Nexus 4 using xda premium

No worries on the Debug/Release, just a tip.
The admin thing, though... that's a serious problem. If the problem is just downloading a file, download it to the local application data folder instead of the install directory. If auto-updating is desired, make a separate updater that runs as Admin, and have the browser launch the updater program when it detects an update.
That said, though, admin is only needed if the browser is "installed" to a location where Admin is required to write. Programs installed in (for example) the user profile don't require this. In fact, on machines where the user *can't* get Admin (think about computers at a school, library, or office), the fact that it can install and run without requiring admin is a major advantage.
I understand that this is a side project for you, and I applaud you for hobby programming and sharing it with us, that's fantastic to see. I also do quite like the GUI, although I find it a bit bare-bones at the moment. Additionally, you getting it to work on RT is fantastic. However... I cannot in good conscience recommend using a web browser that sets the state of environment security back by nearly seven years. The web is an extremely hostile "place" and we've learned many lessons over the years. one of the critical ones is that web browsers are simply too easy to attack for them to be trusted; the only safe way to use one is to assume it will be compromised, and run it in a suitable contained environment. Microsoft did his with the IE7 Protected Mode on Vista betas in 2006, but even on XP it was possible to run IE as a non-Admin.

Re: [APP] Lemon Browser v0.9.7.3
I will admit chrome will always be my favorite browser Just wanted to throw something visually appealing together though after seeing all the horribly designed ones on youtube lol. If anyone would like the source just email me. The code is (slightly cluttered) but OCD friendly. everything labeled and named properly. If someone would like the source, i recommend also downloading the android holo icons from their site. That is what I am currently using and this allows identical pre-made light / dark icons.
Sent from my Nexus 4 using xda premium

Hello !
really thank for this build ! :good:
A question:
Can you integrate a download manager which allow us to download files with screen off but which avoid the complet stand-by state of the tablet during the download ?
Because with IE it's impossible to download something with the Surface screen OFF.
It could be a really cool feature, and the only browser which allow that ! :highfive:
@+
*********_
Edit:
Oh......
Your browser yet intagrate this feature !
Cool... Now I can download big files with screen Off !
I love you

samco08 said:
Hello !
really thank for this build ! :good:
...
Cool... Now I can download big files with screen Off !
I love you
Click to expand...
Click to collapse
Thanks! I appreciate that aha. Major update (kinda lol) will be released soon. Have to work on Mango Tools first (I might toss a thread up on this tool) but this can be found on my site mellowdev.net It just allows you to easily perform ADB commands on android phone. Anyways right after this I will work on v0.9.8! Hoping to add lots of cool, unique features to give this browser an edge. I know that speed means a lot and I have received many complaints on using the IE7 component. However my focus at the moment is to add features. Web browsing for most is just type in words and search. I want this to be so much more. So anyways aha thanks again. Love the support here!