Latest news / History

[Pluton]

Latest news / New version of CDMA Workshop

...
...
...

[Pluton]

CDMA Workshop [3.8.3] (18-Apr-2012)

[+] Added new universal method to extract user-locks from NV-items - "Universal, NV-items" method. Mainly this method is very useful to read user locks on models which use non-standard location of user lock in NV-items and where "Default (nv_read)" method does not work (ex. Samsung M300.. A650, A670, etc.. R211, R350, R450, R560, etc.. korean market Samsung SCH-X,E,V,S,B-series, chinese Hisense C177, C199, etc). Find more details in "user_lock_nv.txt" file. This method is able to extract any digital locks, but not only 4-digit.

[+] Added new really very powerful universal BlackBerry security codes calculator to remove SIM-lock (Menu - Tools). This calculator include 255 MEPs, including newest ones to support newest models, supporting 250+ global networks. CDMA/GSM models are also supported (ex. BlackBerry 8830 World Edition, 9530 Storm, etc)

[+] Added BlackBerry engineering menu (eScreen) code calculator (Menu - Tools). There are a lot of interesting things there, for example you can activate GPS receiver on Blackberry 9530 and so on

[+] Added ability to add your own custom methods (AT-commands) to the general list ("DM" button on toolbar) in order to switch devices into DM mode. Find more details in "dm_mode.txt" file

[+] Added new pages with settings to read/write ("Main" tab): CDMA-3 (PRL, Phone book, Special numbers), System page. We duplicated PRL writing under "Main" tab in order to be able to program devices in "one click".

[+] Added EVDO EMPA flag read/write ("Main" tab -"EVDO" page)

[+] "Band class" setting ("Main" tab - "CDMA" page) has been moved to "System" page. Added more global band classes. Changes inside comboboxes

[+] Added new 16-digit passwords for Samsung A612, U360 Gusto, U640 Conwoy, U460 Intensity II, U750 Alias II, i100 Gem, i500 Fascinate, i920 Omnia II, Pantech TXT8010 Blitz, TXT8026, TXT8030 Razzle (MEID/pESN, SPC, A-key)

[+] Added new 16-digit passwords for CDMA/GSM modems Pantech UMW190VW, UML290VW (MEID/pESN/IMEI (under "Main" tab - "GSM" page"), SPC, A-key, Rebuild)

[+] Added ability to remove SIM-lock on CDMA/GSM modems Pantech UMW190VW, UML290VW ("Other" tab - "Miscellaneous" section)

[+] Added new memory presets to read SPC ("Universal RAM" method) for Motorola V3m (Sprint), V9m (Verizon), Sanyo SCP-8600 Zio, BlackBerry 9530 Storm

[+] Updated "nv_skip_list.txt" file with new models: Motorola V9m, Motorola A955 Droid 2, Samsung M350, U640 Conwoy, U350 Smooth, U360 Gusto, U410, R500 Hue, R560 Messager II, i920 Omnia II, LG VX5600, VL-600 LTE USB modem, Sanyo SCP-3800, 8600 Zio, Pantech UMW190VW, Hisense C177, C199, Nokia 7088

[+] Added new EFS path to "spc_efs_paths.txt" file ("Universal EFS" method) to read SPC on models with new EFS structure. Sometimes on some models this file is opened for reading.

[+] Added Palm USB passthrough code calculator (Menu - Tools). It will calculate unlock code for USB Passthrough mode where you can enable/disable «DM» mode on Palm Pre and Palm Pixi. To get access to USB Passthrough mode on your Palm models type on keyboard ##8727277# or #*8227277#.

[+] Added ZTE CDMA models security codes (SPC) calculator (Menu - Tools). Supported models: ZTE C201, C202, C203, C204, C205, C321, C332 Ping, C1602, etc

[+] Added ZTE GSM models security codes (NCK, SPCK) calculator (Menu - Tools). Supported models:
- Variant #1: ZTE SFR 114, SFR 231, SFR 232, SFR 341, SFR 342, SFR 343, Orange Vegas, Vodafone Indie, X760, X761, X960, GX760, GX761, GR230, A261+, X990, SFR 251, SFR 251 Messenger Edition, T-Mobile Vairy Touch, Touch II, Vodafone 547i, etc
- Variant #2: ZTE Blade, X850, Racer, Mercury, Link, Xiang, N61, Mercury, 811, Raise, Optus, TMN SilverBelt, BlueBelt I, BlueBelt II, Softstone, SFR 522, Orange SanFransisco, T-Mobile Zest, Vodafone 1230, 1231, 945/Joe, Telstra Smart Touch T3020, etc
- Variant #3: ZTE SFR 132, etc
- Variant #4: ZTE SFR 151, etc

[+] Added Huawei and Huawei-based 3G data-cards/modems security codes calculator (NCK, Flash code) + reset counter of wrong attempts and re-lock. Supported models: Huawei E156, E155, E1550, E1552, E156G, E160, E160G, E161, E166, E169, E169G, E170, E172, E176, E1762, E180, E182E, E196, E226, E270, E271, E272, E510, E612, E618, E620, E630, E630+, E660, E660A, E800, E870, E880, EG162, E880, EG162, EG162G, EG602, EG602G, Vodafone K2540, K3515, K3520, K3565, K3715, etc

[+] Added VK models security codes (NCK) calculator (Menu - Tools). Supported models: VK 200, i200, i230, etc

[+] Added command line parameters COM=xxx and baud=xxx

[+] Added ability to read/write True IMSI on Samsung SPH-M300 ("Other" tab - "Miscellaneous" section). This model use non-standard location of True IMSI in NV-items, thus we added special separate method for this model.

[+] Added ability to unlock internet profiles on many of Motorola models (ex. Motorola Photon, Droid 1, 2, 3, 4, Bionic, Xoom Tablet, Droid Pro 1, 2, etc). After that you can flash your Motorola models under "EVDO" page ("Main" tab) in the same manner as any other regular models. Changes of UserID/Password will be allowed. Restart is not required. See "Other" tab - "Miscellaneous" section. No whiterabbit NV-patches anymore, CDMA Workshop include direct correct solution now

[+] Added new hidden window with advanced settings (CTRL-A hotkey) where you can do some custom advanced tuning and adjust behaviour of CDMA Workshop. Added new advanced settings: CheckPortsState, LoadLatestUsedPort, DragAndDropTabs, UseSpareServerFirst, UseBuiltInPasswords. Some users, who are doing their own investigations, want to create totally their own custom list of passwords. UseBuiltInPasswords option allow you to remove built-in list of 16-digit passwords ("Security" tab - "Password (16 digit)" section). Only passwords from "custom_passwords.txt" file will be in the list. Find more details about these options in Help file

[+] Added support for 5-digit FSC security codes. Found on some of Sanyo models (ex. Sanyo SCP-3800 Katana LX, 8600 Zio, etc)

[+] Added ability to use PageUp/PageDown buttons on keyboard in Hiewer

[+] Added auto save/load (in registry) latest used COM port number and baud rate

[+] Help file has been updated to match all changes

[!] Fixed MetroPCS calculator. It generated wrong codes for some range of ESNs (presumably BlackBerry models)

[!] Fixed compatibility issue under Windows 8 (in full version). Tested under Developer Preview and Consumer Preview builds

[!] Fixed all bugs and defects found since version 3.8.0

[*] Keep working...

[Pluton]

CDMA Workshop [3.8.5] (13-May-2012)

[+] Added new pages with settings to read/write ("Main" tab): Broadcast SMS, SMS-CB, SMS

[+] Added ability to read/write (repair) Bluetooth and WiFi MAC addres_ses (System, IWLAN-2 pages under "Main" tab and "Device Information" section). Many devices (ex. LG, Samsung models, etc) allow to change Bluetooth, WiFi MAC addres_ses without any problems

[+] Added new advanced setting (CTRL-A hotkey): ReadBluetoothWiFi. This function is mostly intended to read "Device Information" on models which restart if you try to read Bluetooth or WiFi MAC addres_ses (mostly older models which do not support Bluetooth and WiFi technologies (ex. SonyEricsson T608))

[+] Added displaying of MEID owner (device manufacturer) in pop-up hint by moving mouse cursor over the MEID field ("Security" tab), in the same manner as it was for ESN. Improved algorithm of detection: it now checks MEID/ESN ranges, but not only prefixes. This feature is very useful to see - is the current MEID original or it already has once been changed

[+] Updated BlackBerry security codes calculator (SIM-lock) with new MEPs to support newer models: MEP-11534-009, MEP-12209-010 (257 MEPs totally supported)

[+] Added ability to read EFS in low-level RAW format, sector by sector, but not as a regular list of files and directories. Mostly, this function is very useful to search, in the resulting dump, security codes (SPC, NCK..), EVDO logins, passwords, etc, while regular access to system files in EFS is locked by manufacturer. You can use very useful built-in "Keyboard codes searcher" tool for such purposes. Many brands and models allow reading EFS in low-level RAW format, such as: wide range of LG, Samsung, Kyocera, Motorola, BlackBerry models, Huawei, Sierra, C-motech, Franklin modems, etc. See "Memory" tab - "Memory" section

[+] Added one more powerful universal fully automated method to read SPC - "Universal EFS_RAW" method ("Security" tab - "SPC" section). Manufacturers in newer models may lock regular access to system files in EFS (where security codes are located) and access to a RAM memory so the other universal methods will not work, but we still have a chance to read EFS in low-level RAW format, sector by sector, and extract SPC from the resulting dump. You can use this method for wide range of different brands and models, just for example: LG VN150PP, VX5600PP, VX8550, VX9700.. Kyocera E2000, K433L, K494L.. Audiovox 8945.. BlackBerry 8703e, 8830we.. Samsung A700, M500, R500, R560, U360, U640.. modems Huawei EC122, EC168, EC228, EC360.. C-motech U300 (Franklin), Franklin U210.. Sierra 250U, 597, 598U.. and much more.

[+] Updated "nv_skip_list.txt" file with new models: LG VN150PP Revere, VX5500PP, Samsung R380 Freeform III, M500 (Bell), Audiovox 8945, Sierra 250U (Aircard 3G/4G), Sierra 597 Compas

[!] Updated Help file

[!] Minor fixes and improvements

[*] Stay tuned, more universality coming in next version..

[Pluton]

CDMA Workshop [3.8.7] (18-July-2012) - video overview on YouTube

[+] Added new advanced setting (CTRL-A hotkey): UseWindowsThemes. By default this option is turned off, so CDMA Workshop will keep use classic user interface. But if you like to follow current Windows style you can turn it on

[+] Updated BlackBerry security codes calculator (SIM-lock) with new MEPs to support newest latest BB devices: MEP-09292-007, MEP-11534-010, MEP-14896-006, MEP-17483-016, MEP-27501-001, MEP-40488-004 (263 MEPs totally supported)

[+] Added new 16-digit passwords for Samsung R600, U810 Renown (CDMA/GSM), U365 Gusto 2 (MEID/pESN, SPC, A-key)

[+] Added new memory presets to read SPC ("Universal RAM" method - "SPC" section) for Kyocera M9300 Echo, C5120 Milano

[+] Updated "nv_skip_list.txt" file with new model: Motorola QA30 Hint

[+] Improved "Universal EFS" method ("CAVE" section). Added support of newer structure of system files in EFS. CAVE files of newer structure of EFS are locked for reading in most cases, but they still may be opened for reading in some models, just for example where this method will additionally work: Samsung M350, R380, U820, etc

[+] Added new universal method to read CAVE keys - "Universal EFS_RAW" method ("CAVE" tab - "CAVE" section). This method has the same power and universality as "Universal EFS_RAW" method in "SPC" section, will work for the same models, but just intended to read authentication keys A-key, SSD_A, SSD_B instead of security codes. This method uses heuristic algorithms and as a result supports both structures of system files in EFS, older and newer, thus you will be able to operate with even older models also

[+] Improved "Keyboard codes searcher" (Menu - Tools). Added ability to correctly extract A-key, SSD_A, SSD_B authentication keys for NAM1 and NAM2 from EFS_RAW dumps (gotten by using "EFS_RAW" methods in CDMA Workshop, see "Memory" section), full-flashes or any other dumps which contain EFS area inside. This method supports both structures of system files in EFS, older and newer, thus you will be able to operate with even older models also

[+] Improved "Keyboard codes searcher". Added new function to extract from EFS dumps: serial numbers, security codes, authentication keys, EVDO login/passwords, Mobile IP profiles. Mostly, we use this function to extract SPC, EVDO login/passwords, and Mobile IP profiles from EFS_RAW dumps gotten by using "EFS_RAW" methods in CDMA Workshop, full-flashes or any other dumps which contain EFS area inside. What about A-key, SSD_A, SSD_B, we still recommend to use specialized method described above, because that method supports both newer and older structure of EFS files. The last but not the least, we use special optimized searching algorithms written on pure assembler, so you can parse even large full-flashes extremely fast

[+] Added new page "Samsung legacy" to the "Real-time network monitor" ("Monitor" tab). Mostly, we use this page to read some specific 4-digit lock codes which are used in some of Samsung legacy models (non Windows Mobile and Android based) and which cannot be read by any other universal methods. Some of such Samsung models which use more than one NAMs (two) may have different user lock for each NAM. Also, they may use calls and services restriction 4-digit lock code, which is also may be different for NAM1 and NAM2. You will find all of these lock codes on this page. For example: Samsung U350, U360, U410, U640, U820, R380, R560, M350, etc.. Also, there you will find exact software version for such Samsungs - screen shot

[+] Added new section "IMEI" under "Security" tab (see switch in "MEID" section). Added three new methods to change IMEI: "Default (nv_write)", "LG method", "Universal, EFSx method". These methods work absolutely in the same manner as the same methods in "MEID" section, but just changed to operate with IMEI instead of MEID. We do not have enough GSM devices for testing, let us know please where (on which models) these methods have worked and where not:
- Default (nv_write): in many cases sending correct 16-digit security password will allow you to use this method (ex. Pantech UMW190, UML290 3G modems, etc)
- LG method: tested on LG VL600 4G LTE modem
- Universal, EFSx method: tested on Pantech UMW190, UML290 3G modems, HTC 4G Thunderbold

[+] Improved "Universal, NV-items" method ("User lock" section): added new item to read user lock for NAM2 for some specific Samsung models

[!] Several noncritical but annoying bugs were fixed. Misc minor pleasant improvements

[Pluton]

CDMA Workshop [3.9.0] (09-Dec-2012) - video overview on YouTube

[+] Added new tool "pESN -> MEID bruteforcer" (Menu - Tools). MEID and pESN must be matching each other in CDMA devices, otherwise they will not work properly. It is not possible to retrieve exact original MEID value from the known pESN. But we can find (via bruteforce attack) any other MEID value that will match our pESN. This function is sometimes very useful when re-flashing MEID-based CDMA devices in ESN-based networks. Take less than a minute and it will find a correct MEID for you

[+] Added support of Alternate way of access to EFS_RAW. Now all "EFS_RAW" methods in CDMA Workshop support and automatically detect both standard and Alternate ways to access to EFS_RAW. As a result, you will additionally be able to operate with more devices where "Alternate" way is used, for example: Huawei 3G Mobile WiFi (MiFi) E585, E5832, E5830, E583C, etc

[+] Added new access type to a memory - "RAM_3A" method ("Memory" section - "Memory" tab). The access type to a memory which is only available in Download Mode and in devices with download protocol version 6 or greater. This method is mostly supported by newer devices, just for example: Novatel modems/routers PC770, C777 (Merlin), U720, U727, U760, MiFi2200, etc.. Huawei M635, M735.. Kyocera S3015 Brio.. GSM phones Sony XPeria X2, LG Optimus Elite, etc). You can use this method and then extract SPC, EVDO logins, passwords, etc from the resulting dump using "Keyboard codes searcher"

[+] Added new universal method to read SPC - "Universal RAM_3A" method ("Security" tab - "SPC" section). See supported models in the above point

[+] Added new universal method to read CAVE keys - "Universal RAM_3A" method ("CAVE" tab - "CAVE" section). This method has the same power and universality as "Universal EFS_RAW" method in "SPC" section, will work for the same models, but just intended to read authentication keys A-key, SSD_A, SSD_B instead of security codes. This method uses heuristic algorithms and as a result supports both structures of system files in EFS, older and newer, thus you will be able to operate with even older models also

[+] New "A-key checksum calculator" ("CAVE" section). It now supports MEID-based devices (only for CDMA Workshop users). You can now manually program A-key via keypad on many of MEID-based devices where checksum based on pESN does not work (ex. all HTC smartphones)

[+] Updated BlackBerry security codes calculator (SIM-lock) with 12 new MEPs to support newest latest Blackberry smartphones: MEP-12599-004, MEP-12907-003, MEP-17568-004, MEP-24660-002, MEP-26490-001, MEP-26900-001, MEP-27501-002, MEP-27559-001, MEP-27561-001, MEP-29080-001, MEP-40488-001, MEP-46976-001 (275 MEPs totally supported)

[+] Added Pantech models security codes (NCK) calculator (Menu - Tools). Supported models: Pantech P1010, P2000 Breeze, P2020 Ease, P7040 Link, P7000 Impact, P8000 Crossover, P9020 Pursuit, P9050 Laser, C600, C610, C740 Matrix, C790 Alladin Duo, C810 Duo, C820 Matrix Pro, P6010, P5000, P7040P, P2030 Breeze III, etc

[+] Added Doro models security codes (NCK) calculator (Menu - Tools). Supported models: Doro 345 GSM, PhoneEasy 345, 409, 409s, 410, 410s, 610, 610s, etc

[+] Added Alcatel models security codes (NCK, SPCK) calculator (Menu - Tools). Supported models:
- Alcatel V670, C700, C701, Playboy, C707, C717, Elle N3
- Alcatel V770, C820, C825, Mandarina Duck
- Alcatel S215, S218, S319, S320, S321
- Alcatel S520, Miss Sixty
- Alcatel S853

[+] "Test SPC codes" dialog is now directly accessible in Menu - Tools. We also improved it: you can now load files by right mouse click pop-up menu. All probable 6-digits SPC codes will be automatically found and extracted for testing

[+] Added new function "Keypad emulator" ("Keypad" page - "Other" tab)

[+] Added new function "Display capture" ("Display" page - "Other" tab)

[+] Added new 16-digit passwords for Samsung R860 Caliber (MEID/pESN, SPC, A-key)

[+] Added ability to do full rebuild on many of Novatel/Merlin modems (ex. Novatel S620, S720, PC770, C777 (Merlin), MiFi2200, etc). See "Rebuild" section - "Other" tab. Network settings, security codes will be reset to factory values. This function can recover damaged modems

[+] Updated "nv_skip_list.txt" file with new models: Samsung U810 Renown, R350 Freeform

[+] Added "get battery level" AT-commands script

[+] New nice and functional "About" window with new nice logo

[!] Fixed all reported and found till now bugs and defects

[*] Buy original - get quality and benefits

[kusakhan]

Next version release date post

[rajeev13131]

[+] Added Huawei and Huawei-based 3G data-cards/modems security codes calculator (NCK, Flash code) + reset counter of wrong attempts and re-lock. Supported models: Huawei E156, E155, E1550, E1552, E156G, E160, E160G, E161, E166, E169, E169G, E170, E172, E176, E1762, E180, E182E, E196, E226, E270, E271, E272, E510, E612, E618, E620, E630, E630+, E660, E660A, E800, E870, E880, EG162, E880, EG162, EG162G, EG602, EG602G, Vodafone K2540, K3515, K3520, K3565, K3715, etc


where is the metjod to unlock these models please provide the guidance
as i am not a player of cdma so plz help me ..........

[Pluton]

Originally Posted by rajeev13131

[+] Added Huawei and Huawei-based 3G data-cards/modems security codes calculator (NCK, Flash code) + reset counter of wrong attempts and re-lock. Supported models: Huawei E156, E155, E1550, E1552, E156G, E160, E160G, E161, E166, E169, E169G, E170, E172, E176, E1762, E180, E182E, E196, E226, E270, E271, E272, E510, E612, E618, E620, E630, E630+, E660, E660A, E800, E870, E880, EG162, E880, EG162, EG162G, EG602, EG602G, Vodafone K2540, K3515, K3520, K3565, K3715, etc


where is the metjod to unlock these models please provide the guidance
as i am not a player of cdma so plz help me ..........

Menu - Tools - GSM Calculators - Huawei calculator.

You can find more info in Help file.