Iphone Activation Patch..!

[iqballk]

hello ppl,

i want to share some interest information regarding iphone unlock, it means ACTIVATION PROCESS.

when we come to Activation, a file called xxx.plist created in var\root\Library\Lockdown\activation_records folder. xxx is your SIM's 19 digit ICCID.

this plist file contain encrypted activation records which identified locked or unlocked.

let me explain, i have an iphone 4 which is locked to AT&T network. its 5.01 jailbreak state. i have deactivate nd reactivate it with AT&T Sim, backup xxx.plist file via iphone folders. install SAM module. activate with my local network sim. again backup xxx.plist file. now my phone works with my local network sim.

again i deactivate nd reactivate with AT&T sim. this time, phone could not accept my local network sim. i replace xxx.plist file dt was backuped after SAM method.viola.. now iphone accept my local network sim.

may be it possible to unlock or patch activation data by decrypting this plist file.

i heared, dt plutil.exe can decrypt plist files into simple xml format. u can find plutil.exe from C:\Program Files\Common Files\Apple\Apple Application Support folder.

so.. i use this tool to convert xxx.plist file to xlm format via command line. but dt xml file contain same data as encrypted plist file. may be its only work with old ipod keychain.plist files.

its possible to unlock if we can decrypt this plist file's data.

any idea's welcome..!

[lbd2005]

anyone tested this?can you simplify your explaination...thanks

[iqballk]

this is not a solution. its reversing.

plist
ICCID
Encryption
Decryption

you have to learn more to understand..,

regards..

[frake50]

it is decy. with 2034 bit, if you want to use normal PC to read the code, then you need more than 1 bilion years.

unles you have the code.

[SanjanMobile]

Your local sim accept, can u explain me network comes or not, if there are network, can u call by your iphone
Explain more

[Franks1]

Originally Posted by lbd2005

anyone tested this?can you simplify your explaination...thanks

agree

[mehulkr76]

Originally Posted by frake50

it is decy. with 2034 bit, if you want to use normal PC to read the code, then you need more than 1 bilion years.

unles you have the code.

private and public key are given too in the folder then rsa password can be cracked

[iqballk]

yes, have both keys.. theres no use of RSA. coz RSA depends on IMSI nd ICCID.

regards..

[iqballk]

Originally Posted by satcable20055

Your local sim accept, can u explain me network comes or not, if there are network, can u call by your iphone
Explain more

yes.. it got signal too with SAM's trick (its done b4 apple close sam exploit).

regards..

[stanner_austin]

attached here decoded activationdata and activationcomplete plist from apple.
it don't use rsa or any high security in this activation stuff.
fareplay key is sign every time change on every request.
same as randomizer in both side.

really nice playing with apple activation hole till it was active.

Best Regards
Chevli

[dangke]

if you want to use normal PC to read the code, then you need more than 1 bilion years.

http://forum.gsmhosting.com/iptch/156/Refurbished Apple iPhone 3GS (16GB) Black Color

[iqballk]

with a factory unlocked phone.. is still fareplay signing every request..?

nd can u confirm plist file from activation_records contain that phones lockstate table..?

[Ta@of!k]

• Similar
message
tampering
technique
was
used
in
iPhone4
01.59.00
ultrasn0w
• Apple
started
looking
for
this
message
tampering
(although
they
have
typos
all
throughout
their
debug
strings,
calling
it
"tambering")
• A
much
more
challenging
obstacle
on
the
iPhone4
was
the
hardware-*‐based
DEP
mechanism
(“crossbar”).
• As
soon
as
you
write
to
memory,
hardware
disables
all
execution
rights
for
the
address
range
containing
it
• The
solution
@planetbeing
and
I
developed
for
ultrasn0w
to
overcome
the
crossbar
is
detailed
in
the
iOS
Hacker's
Handbook

[iqballk]

Nice Copy paste..

no regards..

[musicloverdenon]

iPhone activation ticket is encrypted with TEA using iPhone hardware signature (norID, HWID and most probably unique device ID). While unique device ID is easily available through iTunes when the phone is connected, norID and HWID is bit difficult to get. You need to be good in programming.