Can I read AAA? - Samsung Epic 4G Touch

Can I read the AAA password on my et4g to use my account on another phone for 3g/4g?
Edit: NVM to anyone wondering how to do this, you must got to data ##3282# and run a logcat

Related

epst password

my evo has a pass word when i try to edit something.how do i remove or rest it?
timwebb said:
my evo has a pass word when i try to edit something.how do i remove or rest it?
Click to expand...
Click to collapse
The password is your MSL code. You need to obtain your MSL. The simplest way to do that, is to download an app from the Market called MSL Reader. Run that app and get your MSL code. That will be your password.
ok thanks.one more thing my phone does have user name how do i set that up? thanks!

[Q] Help! Have HTC Evo and Even MSL Reader Won't Read Correct MSL

Have new to me Sprint HTC Evo rooted and I cannot activate on Sprint because I cannot get correct MSL. Sprint Tech gave me number it thought was correct but no luck. I downloaded a msl reader, EScode from PCWorld and it gave the same number Sprint had for the msl.
So, can anyone give me some help on how to obtain the msl?
Thanks for the help.
download msl reader from the market, and it'll give you the 6 digit code. You can remove the battery from the phone, and read off the meid number, and make sure the information matches the actual phone you have.
I'm not sure I understand. I have downloaded a msl reader and it did not work. Are you advising I download an another/different msl reader?
Naw, its the same one. The app asks for super user permissions, then gives you a 6 digit code? Also, your bootloader shows s-off?
WhoreDog said:
Have new to me Sprint HTC Evo rooted and I cannot activate on Sprint because I cannot get correct MSL. Sprint Tech gave me number it thought was correct but no luck. I downloaded a msl reader, EScode from PCWorld and it gave the same number Sprint had for the msl.
So, can anyone give me some help on how to obtain the msl?
Thanks for the help.
Click to expand...
Click to collapse
You may want to do a Factory Reset from Menu > Settings > SD & phone storage > Factory data reset.
After the phone reboots, it may go through the hands free activation. If it does, you're set. If not, by this time you should be able to enter the MSL. I would recommend doing a Data Profile restore by opening up the virtual keypad, typing ##DATA#, entering your MSL, going to Edit Mode and then selecting Data Profile. You'll be taken to the Data Profile page. Once you're there, press the Menu button on the phone and tap on the Restore option. Phone will reboot.
I did this even after rooting with Unrevoked3 and encountering the same issue and it worked.

Htc droid incredible on boost mobile [how to]

THIS IS FOR EDUCATIONAL PURPOSE ONLY​
Guide on Flashing HTC Droid Incredible to Boost Mobile
What you NEED
QPST
QXDM 3.11 (Google is your friend)
CDMA Tools 2.7 (Demo is good too)
Patience
HTC Diagnostic or HTC USB MODEM Drivers (I will include Win7 x64 Driver)
Donor Phone Driver (Google is your friend)
Winhex (Again, Google )
Boost Mobile Account [seems difficult for those without it]
What you DONT NEED
Wife
Kids
*Install all drivers and programs**
If you do not know how to manually install a driver, I suggest you stop where you are now.
Step 1: Donor Phone MSL/SPC
This one is really simple, call Boost Mobile Customer Rep. (To get directly to them after the guy says "For espanol press 5", just press 5, then press 2, and wait for it to ask you "To chat with a Boost Customer Rep press 0") and tell them your phone needs to be programmed and they will tell you to dial ##MSL#. SAVE THAT NUMBER and then just hang up on them.
Step 1.5:
Incase you are scared to talk with boost mobile, or you don't know your 6 digit MSL/SPC code you will have to find it manually. *Sigh*
Open QPST, click [Add New Port] on the bottom right, then uncheck [Show serial...] on the bottom left corner and on the screen to the left you should see your Donor's Port number, add it and make note of it.
Next open CDMA workshop, connect to your phones Port (COM) number, click read and your phone information will be displayed on the left.
Click on the memory tab, under memory/Eeprom put start Address: 0363:0000 leave the size at 65536 bytes, now click read and save the .bin files on your desktop.
FINALLY, open up Win Hex, open the memory file you just saved, click on specialist- Gather Text; Recognize text by "6" uncheck everything expect for " Numbers" press "OK", save the file anywhere you like. You should end up with a .txt document with 1 or more 6 digit numbers; one of them is the SPC for your phone, write it or them down.
Step 2: NV Items
Open CDMA Workshop again, go to Security under SPC write your MSL code and click SPC -> Send. It should say phone is unlocked.
Now go to Memory tab, and click Read NV_Items, and you will read NV_Items 455, 466, 1192, and 1194. Save them all.
Step 3: NAM 1 & 2
Stay in CDMA Workshop, and click the NAM Tab. Click “Read” this will display all your phones information inside of “NAM 1” Save the filename as NAM 1 and do the same for NAM 2.
Step 4: M.IP
Close Cdma Workshop. Open Service Programming and enter your Donor phones SPC. Click Read and navigate to the “MIP” Tab, we need your Donor phones NAI. Click on Profile 1 and copy down everything just to be safe. Do the same for Profile 0 if available.
Step 5: HA & AAA Passwords
HA Password for both Profiles will be "secret" in text formatClose Service Programming and open QXDM. Now in the Command Prompt on the top screen type in "SPC [MSL]" Then type in “Requestnvitemread ds_mip_ss_user_prof 1” to retrieve your Profile 1 AAA 6 Digit password. It will be the first 6 Digits in DIAG RX, which is written in HEX mode. For Profile 0, simply open NV_Item 466 all numbers after the number 10 and before the last pair of 0's will be your Profile 0 AAA. Or you can type in QXDM Requestnvitemread ds_mip_ss_user_prof and it will be all the Digits in AAA SHared DIAG RX.
If it says Access Denied it means you do not have a Profile 0. *Dont worry about it*
DONT EVER TURN ON THE DONOR PHONE'S RADIO AGAIN, PUT IT ON AIRPLANE MODE OR SOMETHING
Step 6: Root your HTC DROID INREDIBLE
Follow directions --> http://androidforums.com/incredible...ked-3-rooting-stock-incredible-evo-2-2-a.html
Step 7: Writing NAM and NV Items
Plug in your Droid Incredible to the PC. Open QPST and add its port number. Open CDMA and connect then read the Incredible, next go to Security Tab and under SPC write 000000 and send SPC.
Next go to the "Memory" tab, NV Items and write the 4 NV Items we saved from your donor phone earlier.465, 466, 1192, and 1194. Then navigate to the “NAM” TAB and Write the Nam 1 and Nam 2 Files we saved earlier by clicking Load before each on of them. If done correctly it should display your donor’s phone number and other information.
TYPE IN ##DIAG# IN YOUR DROID TO GO INTO MODEM MODE
Step 8: Zero'ing ESN & MEID
Close CDMA Workshop and open QXDM, Options- Communications- Target Port/ select your Droid Incredible's Port, click OK. You should now be connected to your phone. (if you have any trouble connecting to QXDM make sure you set your com port in QPST Configuration and use the same in Qxdm's communications, So you can actually see what's going on from the View drop down screen, select Command Output. Press F4 to get to the memory view, Change Rows from 8 to 16, Find you HEX MEID and ESN by calling ##786# it will look something like this...
MEID: A1000009C57FQZ
ESN: 8373B5C5
They might have an "0x" in front of them, just ignore that, Now pay close attention, following the example MEID and ESN I provided above you are going to separate every 2 characters and then you are going to flip a few to make it backwards just follow my model and do the same to your numbers.
Original: Separated: Flipped:
MEID A1000009C57FQZ MEID A1 00 00 09 C5 7F QZ MEID QZ 7F C5 09 00 00 A1
ESN 8373B5C5 ESN 83 73 B5 C5 ESN C5 B5 73 83
*Note* Your Meid and Esn will differ from the one used in this guide please find your own and use the same method you will need this to find you Meid and Esn in the memory.
Now the tricky part, you may have to Zero them out several times so it will stick (I would consider zero'ing them several times before restarting the phone)
These are all possible ESN and MEID Locations, [ATTACHED]
At each location, find your Meid or ESN and replace it with Zeros (0) then click Write and goto the next Meid or ESN. Do not alter anything but meids or ESNS. After you Zero'ed them out type the command "Requestnvitemread MEID" and "Requestnvitemread ESN". If its Zero'ed restart the phone, if its not, you missed a spot.
To make sure its been Zero'ed out FOR SURE restart the phone and when is back on dial ##778# click View, then Display and make sure your MEID and ESN is all 0. If its not, then try again.
Step 9: Writing MEID
After you get a message that it's zero than u can proceed to write your ESN or MEID which ever you prefer.
Commands are
requestnvitemwrite scm 0x3a
requestnvitemwrite meid 0x0(Your MEID)
MEID = actual 14 digit meid (not in reverse)
If u are writing MEID no need to write the ESN.
requestnvitemwrite esn 0x(Your ESN)
esn= actual 8 digit esn (not in reverse)
Step 10: Configuring Data
Close QXDM, open Service Programming. Navigate to the M.IP tab.
3G Donor PHONES ONLY: Click profile 0 and click edit. Check and make sure your “NAI” is the correct one for boost mobile. Enter your HA Shared password first, then enter your AAA Password into the text box, next Enter all information that you saved earlier and put them in the required box’s. (it may be different for your area)
NAI:[email protected]
Home address: 0.0.0.0
Primary HA address: 68.28.15.12
Secondary HA address: 68.28.31.12
SPI: 4D2
SPI: 4D2
Rev Tunnel Preferred: Checked now with both passwords hit ok.
Enter your HA Shared password first, then enter your AAA Password into the text box, next Enter all information that you saved earlier and put them in the required box’s
NAI:[email protected] (May varie)
Home address: 0.0.0.0
Primary HA address: 255.255.255.255
Secondary HA address: 68.28.89.76
SPI: 4D2
SPI: 4D2
Rev Tunnel Preferred: Checked now with both passwords hit ok
Make Active User 1.
Write to phone, and restart the Droid Incredible.
Now give yourself a pat in the back because you just Fully Flashed your Droid Incredible to Boost Mobile
I have yet to Know how to configure the USE of MMS, but if you know how to drop it in here .
***THIS GUIDE WAS TAKEN FROM A GUIDE I BOUGHT ON EBAY FOR FLASHING HTC EVO TO BOOST MOBILE, AND MODIFIED TO FIT THE HTC DROID INCREDIBLE***
Any questions?
EDIT** Incase your Data isnt working try this and MAKE SURE, you have this.
1. Make sure your ACTIVE USER is 1.
2. Make sure your HTC INCREDIBLE has the same PRL as your donor phone! (THIS IS HIGHLY IMPORTANT) To extract the PRL from your donor phone simply:
Connect your donor phone, Open 'Service Programming' click 'Read from Phone' enter your MSL, and then click 'Save to File' save it anywhere. You will get a qcn file, and a rl0 file. The 'rl0' file will be the PRL.
Also this happened to me before, lol, MAKE SURE MOBILE NETWORK in 'Menu -> Settings -> Wireless and Networks is TURNED ON !!
Any more questions let me know
UPDATE: Try this by igotanmp3 to get MMS working. NOTE* It does not work with Custom Themes http://forum.xda-developers.com/showpost.php?p=16440594&postcount=69
UPDATE: For Droid Incredible S & 2 FOLLOW --> http://forum.xda-developers.com/showpost.php?p=21668680&postcount=145
So did you ever figure out the mms settings? I've seen some guy in New Jersey doing full flashes on HTC Incredibles on Boost Mobile. I tried to contact him, but it seems like he is somewhat of a prick. I've been racking my brains trying to get the mms working. So far my Dinc has talk, text, internet and Sprint TV working.
I have not yet. How did you get Sprint TV running on the Incredible though?
And i think the guide to flash a HTC Hero to alltel i believe might help... changing the APN username adress and whatnot with APN Manager apk, havent gotten around it though been too busy will try tomorrow.
Sent from my ADR6300 using XDA App
eljean said:
I have not yet. How did you get Sprint TV running on the Incredible though?
And i think the guide to flash a HTC Hero to alltel i believe might help... changing the APN username adress and whatnot with APN Manager apk, havent gotten around it though been too busy will try tomorrow.
Sent from my ADR6300 using XDA App
Click to expand...
Click to collapse
I downloaded the Sprint TV Apk file and that was pretty much it
TRY THIS FOR MMS
MMS
************************************************** *******************************
(My original work)
After making sure web works,
1. Download APN Backup & Restore(Android Market)
2. Click Backup APNs
3. Goto your sdcard/ApnBackupRestore
4. Click the apn file and edit under windows or on your phone.
5. Look for the line that says Production and edit.....
<apn name="Production" numeric="00000" mcc="310" mnc="00" apn="1"
user="[email protected]"(may varie) server="null" password="null proxy="null"
port="" mmsproxy="" mmsport="" mmsprotocol="2.0"
mmsc="http://mm.myboostmobile.com" type="mms" />
6. Save the file(make sure you save it)
7. Open the APN Backup & Restore program
8. Click delete APNs(Very important)
9. Click Restore APNs
10. Close the program
11. Goto messages>menu>settings>connection settings. Make sure everything is as you edited. You should see Name(Production), MMSC(http://mm.myboostmobile.com), MMS proxy(not set), MMS port(not set), MMS protocol(WAP 2.0).
12. If everything is just as it is, viola you are all set...
Taken from http://www.howardforums.com/showthr...lashed-to-Revol-with-working-Internet-and-MMS and fixed to the Boost Mobile apn settings... correct it if its wonrg, Im not 100% sure on the settings...
I haven't tried it yet im still waiting for my MicroSD Card from Ebay :\... lol you be the guinnea pig let me know how it goes
this would go a lot better in the dev section
JoelZ9614 said:
this would go a lot better in the dev section
Click to expand...
Click to collapse
Ahh, I didnt know where else to put it
this is awesome.. what about PTT? does it work?
remy2501 said:
this is awesome.. what about PTT? does it work?
Click to expand...
Click to collapse
Yeah it should
DRIVERS
FORGOT to attach the DRIVERS sorry
Any possible way to go back to verizon MEID?
mttmelton said:
Any possible way to go back to verizon MEID?
Click to expand...
Click to collapse
Just write the original MEID and the phone would provision itself IF it has a clean esn
Sent from my ADR6300 using XDA App
Still no mms on the HTC Droid Incredible on Boost
Just wonder if anyone has figured out the mms settings for the HTC Droid Incredible on Boost Mobile. I paid some guy on Ebay and he emailed me back "here sorry all you do is this:
##3282#
change mms "hxxp;//mm . myboostmobile . com
reboot your phone and test the pics"
I was like WTF ##3282# does not even work on the Incredible, but I already knew the mmsc url. So has anyone figured this little speed bump? I have talk, text, internet & sprint TV working now I just need mms working.
roclikewhat said:
Just wonder if anyone has figured out the mms settings for the HTC Droid Incredible on Boost Mobile. I paid some guy on Ebay and he emailed me back "here sorry all you do is this:
##3282#
change mms "hxxp;//mm . myboostmobile . com
reboot your phone and test the pics"
I was like WTF ##3282# does not even work on the Incredible, but I already knew the mmsc url. So has anyone figured this little speed bump? I have talk, text, internet & sprint TV working now I just need mms working.
Click to expand...
Click to collapse
Same here. I used APN Manager and changed the mmsc url but then it would just give me access denied.
Sent from my ADR6300 using XDA App
Hello,
I read all posts above, but I couldn't understand completely. It is possible use htc incredible 2 on boost mobile?
I can buy one from ebay with clean esn and use it on Boost mobile?
thank you
idk
mttmelton said:
Any possible way to go back to verizon MEID?
Click to expand...
Click to collapse
to be honest with you, I am not entirely sure, theoretically it should be possible but at this moment I do not know since it is a new phone with new software etc etc. And I heard HTC is starting to lock their esn locations with some type of encryption so u cant read it.
Google around u might be able to and if u find someone who says and has backup that is possible come back to this guide and follow it .
for example. Can I activate this on boost mobile?
hxxp://xpressphones.vstore.ca/product_info.php?products_id=379
armars said:
for example. Can I activate this on boost mobile?
hxxp://xpressphones.vstore.ca/product_info.php?products_id=379
Click to expand...
Click to collapse
I did a little bit of research and so far I can conclude that it is not possible. I may be wrong though. I am 90% positive it is not posible YET lol
***THIS GUIDE WAS TAKEN FROM A GUIDE I BOUGHT ON EBAY FOR FLASHING HTC EVO TO BOOST MOBILE, AND MODIFIED TO FIT THE HTC DROID INCREDIBLE***
Click to expand...
Click to collapse
So you could flash it to boost mobile, but couldn't activate?
armars said:
So you could flash it to boost mobile, but couldn't activate?
Click to expand...
Click to collapse
Yeah if your donor phone is already activated

[Q] Error 67 Help Please

Every time I go onto a new rom, after exactly 3 days, I lose my mobile data and get an error 67: the sprint username/password registration is not correct. Can anyone offer any insight as to why this is happening and how I could fix it?
Usually this is an easy fix, it's a mismatch between your username and password on the phone and the username and password sprint has on file, first update your profile and prl under about phone/ system updates, if that doesn't work then call sprint and tell them to reset your username and password for your phone and you should be good.

How to read HA/AAA Keys on Galaxy S3??

I need a way to read my the HA/AAA Secret keys off my Sprint Galaxy S3..
I tried (DFS, CDMA WorkShop, QPST,QXDM, LGPNST) Non worked at reading the Keys.. they would read the other Info fine but not the HA/AAA.
I need to use my phone on Ting Mobile but I need to save the HA/AAA Keys first.
Thank you.
http://forum.xda-developers.com/showthread.php?p=48747260
gedster314 said:
Try logcat.
Put your phone in developer mode.
Connect to the computer
Run; adb logcat > log.txt
On your phone dial ##data#
Enter SPC/MSl
Select edit
Touch HA password (don't change it), exit it
Touch AAA password (don't change it), exit it.
ctrl c to kill adb
open log.txt and scroll through the long list for ha and aaa passwords.
I know kind of a pain to find but that's how I got them on my E4GT and Nexus S 4G.
Somewhere there is thread about doing this on XDA but at the moment I can not find it.
Click to expand...
Click to collapse
------------------------------------------------------------------------
any help reading this? i have the log listed below. how do you convert the symbols for the aaa keys? what is it actually called and then what does it need to be converted to? thanks
I/Dataprofile_Edit( 943): MN_AAA_length :16
E/SharedPreferencesImpl( 943): Couldn't create directory for SharedPreferences file /data/data/com.android.hiddenmenu/shared_prefs/com.android.hiddenmenu_preferences.xml
I/Dataprofile_Edit( 943): aaa_pw:/￲4ルCᄄHᅧᄌpᄅᄅ
ハ3
---------------------------------------------------------------------------
update: I converted it using notepad++ from ascII to hex but it is returning to many characters? it gave me 2 - 32 character lines and 1- 5 character line
jdrogers84 said:
------------------------------------------------------------------------
any help reading this? i have the log listed below. how do you convert the symbols for the aaa keys? what is it actually called and then what does it need to be converted to? thanks
I/Dataprofile_Edit( 943): MN_AAA_length :16
E/SharedPreferencesImpl( 943): Couldn't create directory for SharedPreferences file /data/data/com.android.hiddenmenu/shared_prefs/com.android.hiddenmenu_preferences.xml
I/Dataprofile_Edit( 943): aaa_pw:/￲4ルCᄄHᅧᄌpᄅᄅ
ハ3
---------------------------------------------------------------------------
update: I converted it using notepad++ from ascII to hex but it is returning to many characters? it gave me 2 - 32 character lines and 1- 5 character line
Click to expand...
Click to collapse
Any luck?
I believe these keys are created and/or registered when the phone is initially paired with the account. Removing the phone/esn from the account and adding it back on will fix 3g/4g in the case of a board swap, but that doesn't really help your particular situation. I have swapped a motherboard successfully before this twice, without using the logcat method, but I can't for the life of me recall how. I'd prefer figuring out how to do it manually again, its bugging the crap out of me. That, and just for the sake of learning.
Edit: I got it. It's a pain in the ass now because of updates since then. I was just able to retrieve NV item 1192 using the EFS tab in DFS while running the LJ7 rom with the LG2 modem. NV reader will still say access denied, but once you read the EFS, the "nvm" folder isn't red and locked like it is on newer roms and modems. I remember the LJ7+LG2 combo was necessary to get the spc/msl a while back as well.
nvan7891 said:
Any luck?
I believe these keys are created and/or registered when the phone is initially paired with the account. Removing the phone/esn from the account and adding it back on will fix 3g/4g in the case of a board swap, but that doesn't really help your particular situation. I have swapped a motherboard successfully before this twice, without using the logcat method, but I can't for the life of me recall how. I'd prefer figuring out how to do it manually again, its bugging the crap out of me. That, and just for the sake of learning.
Edit: I got it. It's a pain in the ass now because of updates since then. I was just able to retrieve NV item 1192 using the EFS tab in DFS while running the LJ7 rom with the LG2 modem. NV reader will still say access denied, but once you read the EFS, the "nvm" folder isn't red and locked like it is on newer roms and modems. I remember the LJ7+LG2 combo was necessary to get the spc/msl a while back as well.
Click to expand...
Click to collapse
@nvan7891 Could you help me to get AAA/HA password? I'm stuck at 1xRTT and nv_item was block. I'n in full stock rom NJ2. I was not able to downgrade to other stock rom except NDC or ND8

Categories

Resources