First we have to force the Android into root access…
–Recently since the release, hackers around the world have been doing their duty to unlock and modify Android as they like. Although it’s open source Google has tricks up it sleeves, well for the T-Mobile phones.

This is starting to turn into a cat-and-mouse game akin to the the back-and-forths we’ve seen between Apple and the iPhone jailbreak underground community. This war has the underground scene always looking for new security exploits that will allow them to gain root access to their handset’s file-system. On the other side, the powers that be are always working to seal whatever security holes were used by the “jailbreak” community.

Google’s most recent move to thwart a nascent Android OS jailbreak uprising by rolling out a new Android OS update (RC30) that aimed to patch the security hole exploited by Android developers. The automatic, over-the-air (OTA) update was expected to essentially kill the Android OS jailbreak movement throughout the T-Mobile G1 fleet.

Today we’re seeing the jailbreak community’s counter-punch to Google’s left-hook. The ever driven developers over at XDA Developers have devised a method that allows G1 users to update their T-Mobile G1 to the latest Android OS RC30 build while still retaining access to the file-system root.

jailbreak the android

In this case, the Android development community has come up with a method that allows them to modify the Android OS’s recovery.img file, which in turn allows them to flash a modified version of Android OS build RC30 to a T-Mobile G1. The modified Android RC30 firmware brings with it all the benefits of the new firmware version while still allowing users to gain root access to the file-system.

If you haven’t yet updated your T-Mobile G1 to the new RC30 update, and you want to preserve root access, you’ll want to follow this G1 jailbreak tutorial.

After the break, that is…

This guide has been made to reflect the latest modified RC30 file – RC30 v1.2.

Please note that this forced update method is to be used only by those that want to preserve the root access exploit. Applying the modified Android OS update file takes time and familiarity with command line. Once applied, you will have to manually update to any future Android OS updates – because of this, it’s not recommended that casual users with no need for root access jailbreak their G1’s.

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41

    * First off, you’ll need to download two files to your desktop:
          o Modified recovery image (which will become your recovery.img file)
            http://fscked.net/%7Ejesusfreke/AndroidMod.zip
          o Modified Android OS RC30 update file with root access preserved
            http://rapidshare.com/files/165227766/update_TC4-RC30_full_xda-dev_v1.2.zip
    * Download and install the Android Telnet Client from the Android Market
    * Download and install the Terminal Emulator app from the Android Market
    * Turn on WiFi and connect to your WiFi network
    * Now, go back to your downloaded files on your desktop
          o Decompress the AndroidMod.zip file
          o Extract “recovery_testkeys.img” to your desktop
          o Rename “recovery_testkeys.img” to “recovery.img”
          o Rename the modified Android OS RC30 update file from “update-RC30-fullupdate-modified-testkeys-v1.1.zip” to “update.zip”
    * Transfer the newly named “recovery.img” file and the newly named “update.zip” to your microSD card (you can use the microSD card that came with your G1)
          o Put microSD card in your G1 (if it’s not already in there)
    * Fire up “Terminal Emulator”
          o Type “cd system” and hit Enter
          o Type “cd bin” and hit Enter
          o Type “telnetd” and hit Enter
          o Type “netstat” and hit Enter
          o The IP address you want is listed on the same line as the word “Established”
          o Write down this IP address
          o Close Terminal Emulator (hit the “Home” button)
    * Fire up “Telnet”
    * In the IP address field (it should show “localhost”) enter the IP address you wrote down
          o Hit “Connect”
    * Now that you have root access, you’ll want to type in the following (hitting “Enter” at the end of each line):
          o mount -o rw,remount -t yaffs2 /dev/block/mtdblock2 /system
          o cat /sdcard/recovery.img > /data/local/recovery.img
          o cd /system
          o cat /sdcard/recovery.img > recovery.img
          o flash_image recovery recovery.img
    * Now turn off your phone
    * Restart the handset by holding down the “Power” and “Home” buttons simultaneously
    * When you see the triangle logo (you’ll know it when you see it), hold press “Alt” and “L” simultaneously
    * Ensure that you see “using test keys” along the top
    * Press “Alt” and “S” simultaneously
    * Follow the on-screen instructions
    * Press “Home” and “Back” buttons simultaneously when you’re done and ready to reboot
    * The G1 will reboot as it does its thing - let it do so.
    * You have now fully updated your T-Mobile G1 to Android OS RC30 with the root access exploit preserved - get at the root with the Terminal app.

Again, you run a very real possibility of bricking your T-Mobile G1 by updating it yourself. Making sure your battery is fully charged and that you disconnect the G1 from your computer before updating will help ensure a smooth update. Should things go awry, however, you’re on your own. (T-Mobile will likely help you out, but it’s not going to be a fun or speedy process)

Sourcex: http://forum.xda-developers.com/showthread.php?t=443041

Now to hack and unlock the gPhone…

Just the other day, Google announced that it will be offering its Android developers a special variant of the T-Mobile G1 (the first ever Android-powered smartphone to hit market) – the Android Dev Phone

1. Today, we’ve stumbled across a new hack that allows T-Mobile G1 owners with a bit of gumption and a dash of courage to turn their T-Mobile G1 into an unlocked Android Dev Phone 1.

The Android Dev Phone 1 is intended for Android developers with a need to load up custom firmware builds and test out unsigned software. Moreover, the Android Dev Phone 1 is unlocked to work on any GSM network in the world – a significant difference when compared to the T-Mobile G1, which is locked to T-Mobile’s network.

Fortunately for G1 owners, Google mistakenly shipped an Android Dev Phone 1 as a warranty replacement to an intrepid Android hacker. With a little help from those in the know, dream_kill managed to extract the Android Dev Phone 1’s unlocked bootloader and has posted the file online for all. Now, anyone can unlock their T-Mobile G1 to work just like an Android Dev Phone 1.

The G1-to-DevPhone1 conversion is easier than you think. The conversion requires little more than applying the update.zip file and rebooting the G1. In the end, you’ll have an unlocked G1 capable of running unsigned code. Unfortunately, this hack doesn’t endow your G1 with the Android Dev Phone 1’s cool battery-cover graphics.

More detailed T-Mobile G1 unlock instructions after the jump.

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

    * You’ll need an Android-powered T-Mobile G1 running RC30 with root access - that means you updated your G1 to RC30 using the above workaround method to preserve root access.
    * You must have root access!
    * Download the unlocked bootloader here.
 
   1. Rename the unlocked bootloader file to “update.zip”
   2. Move the newly renamed “update.zip” file to a microSD card.
   3. Insert microSD card into G1.
   4. Restart the handset by holding down the “Power” and “Home” buttons simultaneously
   5. When you see the triangle logo (you’ll know it when you see it), hold press “Alt” and “L” simultaneously
   6. Ensure that you see “using test keys” along the top
   7. Press “Alt” and “S” simultaneously
   8. Follow the on-screen instructions
   9. Press “Home” and “Back” buttons simultaneously when you’re done and ready to reboot
  10. The G1 will reboot as it does its thing - let it do so.
  11. You have now hacked/unlocked your T-Mobile G1 to work just like an Android Dev Phone 1 - enjoy all those unsigned Android builds and the freedom to use whatever GSM network tickles your fancy!

Sourcex: http://www.modmygphone.com/forums/showthread.php?t=8051

So that’s it, if you have successfully followed all these steps above, your gPhone should be unlocked, hacked, and ready to go!

Ronald A. Richardson
www.ronaldarichardson.com

Another possible use is social engineering. Lets say that you are scanning a target company and Nmap reports a “Datavoice TxPORT PRISM 3000 T1 CSU/DSU 6.22/2.06”. You could call up the target pretending to be Datavoice support and discuss some issues with their PRISM 3000. Tell them you are about to announce a big security hole, but are first providing the patch to valued customers. Some naive administrators might assume that only an authorized engineer from Datavoice would know so much about their CSU/DSU. Of course the patch you send them is a Trojan horse that gives you remote access to sniff and traipse through their network. Be sure to read the rest of this chapter for detection accuracy and verification advice before trying this. If you guess the target system wrong and they call the police, that will be an embarrassing story to tell your cellmates.

Nmap (“Network Mapper”) is a free and open source utility for network exploration or security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics. It was designed to rapidly scan large networks, but works fine against single hosts. Nmap runs on all major computer operating systems, and both console and graphical versions are available.

This is a great tool for hacking, nMap has been featured in movies like Bourne Ultinatum, and Matrix. So here I am going to post great nMap learning tools for those interested. These are third party links”

Download the nMap Software:

1
2

http://rapidshare.com/files/136640927/Network_Map_For_Hackr_By_You_Thour.rar
Passw : Double Click Rar Files

Download the nMap Book:

1

http://rapidshare.com/files/136638667/N.map.in.the.Enterse.ur.Gde.2.Nwk.Scanng-virTuAlZin_By_TTT.rar

Download the nMap Video:

1

http://rapidshare.com/files/136657129/VidNMap_By_CoolHell.rar

1

whouare21

I’ve been low on money lately as well. I recently got the Paypal debit, so I’m hoping my little bits of money will transfer into it soon. I have to buy a lot of supplies for my senior graduation project product, I did the website, but I also want to include a model of a futuristic peaceful city on Mars, much like the city on Ergo Proxy.

So much has happened, but never really had the time to post it. I’ve been getting worried about college, I haven’t applied to many colleges at all because of my low money, college applications are so damn expensive! That’s why I’m hoping on getting an acceptance letter from UNCA on the 15th of this December, so I can stop applying to colleges, well that is if I don’t get accepted to NCState. I haven’t applied to a single college out of state, I simply won’t be able to afford it, not even with the money I get from the Marines, I really don’t care, UNCA offers a under-grad program in Mechatronics, and that’s what I want. It will set me up for Biomechatronics grad program at MIT.

Speaking of MIT, I submitted my project to MIT THINK 15 days ago. I’m excited, I hope I win. I’ve been thinking of Verdis so much, and I need a new computer to setup a repository on it. Not only that, but I’ve been thinking about working off FreeBSD…

Speaking of updates, I need to update my Wordpress, I don’t even know what version this is, but I know there is a version 2.6.5 out, I’m probably on 2.5, can’t remember, this was setup more than a year ago. ANIME, ANIME, ANIME… I love it, great story’s great stuff. I really like cyberpunk stuff, and short series anime’s. Like so far I’ve seen “Serial Experiments Lain,” which is my absolute favorite, not only is it cyberpunk, but it’s so psychologically disturbing! It’s a great anime, and it’s 13 episodes long. I also enjoyed “School Days,” which is a great love triangle anime, but get’s crazy at the end, very disturbing, but I loved it! My little brother is the one who told me about it, the anime makes me think about him a lot. My little brother has always been able to get girls, lucky him, he was born “cute” I guess. Me, I’m not so lucky, not so cute looking, rather rough, and I’m very shy to the girls I really like, ahahaha, well at least I won’t have to worry about that “School Days” situation. I LOVE WWW.CRUNCHYROLL.COM!

In Newspaper, I’ve been drawing more than usual. I think I can become “go to artist,” I’ve been increasing my skills, and self-style of drawing. I’ve also became a fan of a well-known artist.. Keith Thompson, of http://www.keiththompsonart.com/ – His art is insane! I love it, its great, his photoshop skills are excellent too, his artwork is superb! Someday I hope to be able to draw as good as him, and use photoshop as good as him. I mean, I can draw pretty well, and use Photoshop pretty well, just enough to impress my high school. OH, and at school I also decided to join the “Save Darfur NOW” club. I’m hoping on contributing what I can for the cause.

Like I said early, the ZocialNET. Well the “.ZocialNET/” which is coming out of the box more, unique interface and design, and “the system” I must say I think is better than Facebook, and MySpace. I also set it up to where you HAVE to be invited to join the system, that way the ZocialNET won’t accumulate a bunch of losers, and bots, and un-wanted people on the network. Other projects in the ZocialNET I’m working towards are the a social visualization system, based off the JIT ( Javascript Information Visualization Toolkit) which is superb! A system where you can visualize the social interaction between each user is what I’m aiming for an JIT has the tools to make it happen, but of course this will take several months of development before I can integrate it into the ZocialNET. I also built the ZocialNET with a CLI, and IDE, which I think are pretty neat and handy. The CLI provides news, an the IDE are for people who want to get involved. I also ended up making a small, sweet looking home base interface for the ZocialNET. I thin it looks, and works great! Now I just have to fix the eyeOS…

hmmm… soo much has happened, and so much is about to happen. I’ve watched “A Victim of the Brain” a docu-drama on Google videos, which was great, and very interesting, it’s about cognitive science and the brain. I learned more about the conscious of the brain, and how WE ARE victims of the brain, because some things are just pre-defined, which define our choices. I learned there is NO free-will, but there is desires. I think it’s really interesting and that everyone should take a look at it. More about a victim of the brain: a 1988 film by Dutch director Piet Hoenderdos, loosely based on The Mind’s I, a compilation of texts and stories on the philosophy of mind and self, co-edited by Douglas Hofstadter and Daniel C. Dennett. The film weaves interviews with Hofstadter with adaptations of several works in the book: Dennett’s Where am I?, The Soul of the Mark III Beast by Terrel Miedaner, and also the short story The Seventh Sally by Stanis?aw Lem. The film was shown several times on television in Holland in the late eighties…. WHERE TO WATCH: http://video.google.com/videoplay?docid=8576072297424860224

I’m also getting ready to setup a new layout on the website one last time today. Hopefully everyone will like it, and it’ll be a surprise. It’s more personalized, and efficient.

In school I’ve been reading “Dracula” good but not my style. Out of school I’ve been listening to the Audiobook of “Little Brother” by Cory Doctorow! Which is excellent cyberpunk book, all about hacking and stuff. Reminds me of the good ol’ telnet days etc… when it was cool to be a super geek, well it still is too me! w1ld3833zt!!! lol Anyways, I say check out the book. I might upload the audiobook so everyone can download it. It’s been reviewed at cyberpunkreview.com here: http://www.cyberpunkreview.com/books/cyberpunk-books/little-brother/ – CHECK IT OUT!

I think i’ll opne up a downloads section where you can download things I like, and I’ll include hacking/ bypass software with tutorials. Not super-serious killing, stealing, and destroying hacking software, but things like $sys$Firefox lol, and things like that…

I think I’m going to close this post now, so much has happened, too much to blog about, and so much is getting ready to happen, that I will try to blog about.

-!RONALD A. RICHARDSON!