3. cd /etc/rc5.d/; ln -s /etc/init.d/bridgemac.sh S20bridgemac.sh 2. chmod 755 /etc/init.d/bridgemac.sh BTW, the default SIM PIN for GSMA is 1111, but it sounds like you cant even enter the PIN. still works. Thank you. 256MB RAM, 512MB ROM (I think the T9 only had 256M rom, but someone can correct me) WebJust got a T9 Mobile Hotspot. Unfortunately, unless you know a way to unlock the bootloader, fastboot wont let you overwrite system or recoveryfs (recovery and most other partitions are fine though). WebFind many great new & used options and get the best deals for T-Mobile Franklin T9 4G LTE Portable Mobile Broadband WiFi Hotspot Not Tested at the best online prices at eBay! The device supports a SCP connection in SSH mode so this shouldnt be too difficult. Thanks! On the Franklin r850, I was able to use another post that showed how to bypass the MSL/password (using html trick that you mentioned). If so, you probably want to avoid spending the same amount of time troubleshooting and fixing it the next time it happens. I do love this hack, and the revisit to permit the downgrade. This device is using the Qualcomm MDM9207-0 so it should be possible. Just a basic bruteforce against the hash type. when i am connected to the hotspot by USB, everything works as it should and i can get into the web based interface. webpst enable SSH? I was also able to start a collection of firmwares, including an unreleased update. T9 FranklinMobileHotspot Wi-FiandMobileHotspot Security . Just grab off the mega site in the OP. Your T9 Mobile Hotspot See below for details on everything you will find in the box for yourT9. 6. echo iptables -t mangle -I POSTROUTING -o $INTERFACE -j TTL ttl-set $TTL>>/etc/init.d/ttl.sh thanks again to the author of this thread this has been allot of fun playing with this. T9 Franklin Mobile Hotspot Wi-Fi and Mobile Hotspot Security . Hi, Ive been trying to use QPST but it keeps blocking me requesting the SPC. I was able to get the code through a Linux Machine since Mac didnt have the sha1sum package (at least on Catalina). 4. chmod 755 /etc/init.d/startup.sh 1. echo iptables -t mangle -F>/etc/init.d/ttl.sh ten upload it back to the hotspot. If you want, I have created a basic python script that can do this for you, which is available on GitHub. https://www.reddit.com/r/tmobile/comments/m7evpx/my_test_drive_arrived_today_questions_about_use/, In case anyone wants to use more then one of these on the same layer2 network i have found that all of the T9s have the same Mac address of F4:63:49:00:00:01 on the bridge0 interface. What speeds do you observe? Any advice on how to keep it from auto-updating to 2602 on the first boot? Boot for after install - not my work just helping a Internet coax cable cut next to my apartment. Sadly, I cant get root password to work. Is their any way I can get the device activated on Sprint? 3. echo export INTERFACE=rmnet_data0>>/etc/init.d/ttl.sh Any tips? All of a sudden the Roku's will not connect. I can use AT&T 4G LTE with TMobile target as well. Note that if your firmware is above version 891, then to enable SSH you will need to modify the Config File. So i am unable to load .cfg file. In your post, you gave a MSL/password ([emailprotected]) that you got by your methods (above my ability) to be able to disable bands. You can either use the webpst one, or the firmware update page found in the normal webUI under settings. As a bonus, you can enable an ADB shell that drops you right to a root prompt without any password! Desired action has no options available and the button it self is greyed out! Now select your newly created Access Point, your service should disconnect then reconnect. T9 reports 5 bars. magnific Am I doing this right? I did try to force firmware to device using webpst page but it failed. Does anybody have a I tried my best and still can't do. Distance from a Wi-Fi network source is one of the easiest ways to boost a Wi-Fi signal. /etc/default/configs/, Also the following file: I have looked at the various hidden menus and did not see anything. Ive enabled SSH but need assistance in configuring ttl settings. I've seen Chris' comment about the python script and have looked through it, but I'm not very familiar with python. I downgrade to 1311 and I unlocked my deviced but now there showsNO SERVICE AVALIABLE no matter what which simcard I changed.. simcard still working before I downgreade. Any ideas on how to reflash/reset? If so, what is the point of having a data usage limit screen on the modem? Out of the box without letting it update, its on TMOHS1_0.04.18. Please read through the comments, there are multiple documented ways to generate your own unlock code. So Im not double NATing. 6. chmod 755 /etc/init.d/crond.sh I can make AT&T LTE work on firmware 891, but not 1131 (1131 always says SIM error). So, you download this file from mega R717F21.FR.1311_ota_update_all_sm.enc then run this command? Note you also may need to replace the contents of /data/configs/hsusb_next with 902D as well. Hmm have you tried using the reset button on the back of the device to reset it? Generated and entered the unlock code and now my device is reporting Unlocked. -shutdown / installed visible sim If your mobile service provider either bills you for data usage or otherwise limits your data, you could end up with large, unexpected surcharges on your bill. Tap Personal Hotspot. Learn how the long-coming and inevitable shift to electric impacts you. Is there an ability to root this device and trick it into tethering unlimited from a tmobile phone line sim ? Apparently the IMEI is blacklisted. Hello since the 2602 update I no longer have any hidden pages. Your hotpsot network could stop working if your phone runs out of power or the Wi-Fi setting gets disabled. Thot hotspot seems to be working. However, abroad, the hotspot says No Service, while my phone connected to 5G wihtout a hitch on a regular Google Fi sim card. My device came with firmware version 2602 and refuses to be downgraded to 891. anyone willing to writes script to set it up? openssl enc -aes-128-cbc -d -md md5 -in R717F21.FR.1311_ota_update_all_sm.enc -out R717F21.FR.1311_ota_update_all_sm.tar -k frkenc##[emailprotected]. Im making a guide and posting it in a few days. The unlock code worked!!! Thanks so much in advance. I picked up another T9 from ebay to test this but this one is stuck at 891 and i cant upgrade or downgrade it. I have tried every combination of things I can think of (SIM in, SIM out, reboot, factory reset, connect via USB to PC and Mac) but every time I try to upload the older firmware it fails. Put R850 into the passwords instead of R717! then i inserted the stock tmobile test drive sim Chris, are you able to look at that? Here it is: https://gist.github.com/weirded/f49ac134aecbd32b71ab22619c7496ab, is there any code generator for this Tmobile T9 or franklin R717 Also, Im thinking of writing a little script that changes the APN after boot depending on the ICCID. heres a copy of the hotspots webpage saved. I searched everywhere in that tar file and cant find the hotspot_cfg.bin file to do the next step. Yes mine was online as soon as I powered the TMOHS1 on as well, though it took about 30 minutes before it would work properly (provisioning time I guess?). Hopefully I wont run into the same issue as you and will keep it off until I need it. Possibly but the device was not built for this, so you would be in uncharted territory. https://mega.nz/folder/FJ8wWYAJ#Q1oUEtIUJrtjB1atkOAXrA. As mentioned earlier, I will not be generating codes for people and I will be censoring any IMEIs posted. I sshd into the device in terminal with command You guys think theres a way to do this? I wonder why accessing factory reset menu in webPST calls for the SPC? Go to Settings -> Mobile networks -> Access Point Names Create a new APN (you can use "IPv4" for the title) Input the same settings from the existing T-Mobile APN Change the "APN protocol" and "APN roaming protocol" settings to IPv4 Select the new APN you created as default. Get your mobile hotspot closer to the devices you're connecting to. It was easy to unlock, enable SSH and ADB. 2) disable one or more of 3 the bands The cell maps sites show which bands are in use near my house but guessing has become too much of a MasterMind game. Ive been getting 405 error. Id be grateful for any ideas! As for another method, in theory you could also kill the process for fota_app, and replace /usr/bin/fota_app with a bash script with an infinite loop and sleep. Free shipping for many products! But now Im stuck understanding how to downgrade. Ryan Perian is a certified IT specialist who holds numerous IT certifications and has 12+ years' experience working in the IT industry support and management positions. 4. cd /etc/rc5.d/; ln -s /etc/init.d/startup.sh S98startup.sh, - to enable crond` Please try again in a few minutes. Got a replacement unit which work exactly as predicted. Can you give me the procedure to kill the process for fota_app, and replace /usr/bin/fota_app with a bash script for an infinite loop and sleep? Everything else still does fine If youve got any suggestions Id love to hear them! This is super helpful, thank you for your work. change the line for the user you just added edit the group from 1001:1001 (could also be 1000:1000) to 0:0 By rejecting non-essential cookies, Reddit may still use certain cookies to ensure the proper functionality of our platform. Itll only work if I downgrade to 891. this is my imei pls help me with the on lock code REDACTED, pls give me unlock code my imei is REDACTED pls help me i am stell waitting, pls as you have my imei pls give me code becouse you put my imei REDACTED. LAN Domain mobile.hotspot Re: Roku Stopped Connecting to Mobile Hotspot Perform both of these steps. how does one _prevent_ OTA firmware updates? iptables -t mangle -I POSTROUTING -o $INTERFACE -j TTL ttl-set $TTL I used the 50gb redpocket in the tmobile franklin t9 for a week then it stopped working SIM Pin Lock sim disabled ..0 attempts remain until your sim is PIN unblock code locked. You can now modify the configuration as you wish, repackage it, and re-upload it. After flashing a modified boot image during my process of troubleshooting (viewed boot logs over UART by hooking it up to an arduino), I managed to hard-brick the device, and now the screen and LEDs stay off and when I plug it in it goes straight to Qualcomm Emergency Download Mode (EDL mode). Entering an incorrect PIN too many times will PIN unblock code lock your SIM and you will unable to use this device. Not sure about the special code though. Most computer sand laptops connect to networks via one of these bands. MDM9207 CPU/SOC (Same as the T9 Im guessing the firmwares are very similar) I had that problem with it not connecting to the cell service, upgrade it back to the 2000 firmware. -ssh into hotspot If ADB is still available and not locked down this may be away into the hotspots. I found that if you hold down the power button it will fully power on when plugged in, and wont turn off. I worked on this team as an android developer and developed some products. 2. echo > /var/spool/cron/crontabs/root You can access these OTA files from this Mega Share. i was able to get the unlock code using this free terminal link= https://cocalc.com/doc/terminal.html, echo -n ${IMEI}simlock | sha1sum | cut -c1-8, and than Go to http://mobile.hotspot/settings/mobile_network-sim.html under Carrier Unlock to unlock it (remember ur laptop/pc needs to be connected to the Franklin T9). Neither the author of this post or Franklin engineers will do that. did you disable OTA update? Hardware Version 89527_1_11 In today's Internet centric society, having issues with your connectivity is something you have to avoid. Manually calling this URL with any outdated revision will link you to the latest OTA file, which is a .enc. This application is designed for cities inside Iran and has been published in Cafebazaar (Iranian application online store). [ 0.000000] ** What am I doing wrong? I dug a little bit but havent had any luck. When I try to upload the firmware file from Mega, it uploads until about 20% and then errors out with the message Error occurred at file sending. Ive factory reset the device and tried both usb and wifi to upload but no luck. /var/volatile/www/htdocs/cgi-bin/webpst.imei_mac.cgi | awk /imei/{printf( substr($2,2,15) simlock)}|sha1sum|cut -c1-8, Perhaps i am missing something here. if this dont work try setting APN Protocol & APN Roaming Protocol to IPv4/IPv6. -USB C (yay!). Ive tried to just walk it back through the command prompt after successfully unpacking everything, but when I attempt to restore from the backup it fails. Required fields are marked *. No question is too small, but please be sure to read the rules and [posting guidelines](https://www.reddit.com/r/HomeNetworking/comments/3hvyg0/rhomenetworking_posting_guidelines_and_helpful/) before asking for help. Hmm somehow my hotspot did OTA and was bricked, LCD gets stuck at WELCOME message and never even starts up the hotspot. If the mobile hotspot is working properly, open a web browser on your mobile device and make sure you can access various websites. I havent tested if the lock itself goes away when switching to those configs. As long as you're connected to more than one Internet source, chances are you will not get disconnected completely from the Internet, thanks to Speedify'sautomatic failover protection. Curious, what hashcat command did you use to crack the ssh password? Any help is appreciated. No idea what service code to enter. Is there a way to fix it? adduser admin In other words, Im not seeing a TTL change when connected via WiFi to the T9. Thank you for sharing the information. I tried editing mobileap_cfg.xml but it doesnt let me go over 15. Looks like tmobile did something on the unlock mechanism. Before extensive troubleshooting, check with your mobile provider to be sure they aren't having an internet outage. But it appears that the one can increase the usage limit, simply by typing in a larger number. During my research it was found that SSH can be enabled on this device, and once enabled, you can login as the root user. Max Connected Devices 8 Note that some of the web pages and tools in this device allow you to modify the device in ways that YOU SHOULD NOT DO since it may be ILLEGAL in your jurisdiction. Typically I like to reload the firmware when the device crashes as a fresh coat of paint but T-Mobile hasnt been able to provide it for me. $ tar cf [hotspot_cfg] [hotspot_cfg_2] < this includes hash/model/hotspot_cfg.tar Franklin Christoph 14K 1.1cc vs S.I.G. the is a network outage or some maintenance work done by the carrier. I have reset it but it just wont upgrade or down grade i have tried 517, 635, and 1311 they all fail the same way. thanks. 1. ssh into hotspot I have developed a lot of apps with Java and Kotlin. cat /data/configs/mobileap_cfg.xml | grep Password. But after it rebooted still the same issue I click on the Settings tab and I get prompted for a password and when I type in the one from sha1sum it fails. Disabling the bands requires the MSL/password. ive tried setting different targets and apn. Also, its not even showing up in 9008 (EDL) mode, its showing up in 900E. Note I wont be providing codes, please find a way to generate your own, such as https://www.tutorialspoint.com/execute_bash_online.php. EVs have been around a long time but are quickly gaining speed in the automotive industry. I have been in contact with someone using AT&T via the (Engineering>Change target>DEFAULT) setting, I am using Sprint with the same setting. 3. echo /usr/bin/copy_htdocs.sh eng >>/etc/init.d/startup.sh Here is our IMEI ADMIN REMOVED Can you email or post our code? So be sure you understand your plan limitations before you start using your mobile hotpot too frequently. Thank you for sharing. After unlocked and added APN, I can use my Verzion sim to enjoy LTE. Anyone tested this with other att sim cards ? I would really like a complete factory image to help me troubleshoot once I manage to reflash the secondary bootloader through EDL (boot.img, this is included in the ota files Chris provided). I cant wait until we find a way around this as it screwed me pretty hard (it does not pick the best channel in my area). se Speedify to combine all your available connections at the same time. or any other way to reset? You will need to contact your service provider to unlock the SIM. its a 4 digit pin which i never set. Just ordered my free T9 from T-Mobile. Pingback: T-Mobile Mobile Hotspot TMOHS1 - Rotar [emailprotected]. When I run the next command, it says this hotspot_cfg.bin: No such file or directory. The internet will simply stop working. Thank you very much for your contributions. Turning off automatic hotspot switching Go to Settings. the cellular Internet - uses the network provided by your carrier. Either having them locked down using lighttpd, or having a completely separate auth page that is properly hardened is my recommendation. In this video, we show you how to set up your mobile hotspot from T-Mobile's Project 10Million program. Guess I need to factory reset and redo the unlock otherwise. One thing Id like to do is to make a set of iptables/ip6tables rules for TTL mangling permanent have you discovered any way to write these to the /data partition in a way that theyd get executed on every boot? Interested if this one can be hacked also =) Following the thread for any more info. I was able to generate an unlock code, and pretty much everything else you discovered was very helpful. So Ive unpacked and edited the config to change the update URL and repacked everything into hotspot_cfg_packed.tar, how do I convert that back into the encrypted .bin file? Obviously I want the device to broadcast wifi. Still not clear if an unlocked T9 works with Mobile data only AT&T SIMs or Verizon SIMS or MVNO data only SIMS plans or what exact tweaks accomplish that. I think I did see it reboot once without requiring a button press (maybe on the firmware OTA downgrade). any ideas as to what else to check if i cant get this one to upgrade ill just buy another one and sell this one. Qualcomm Primary Bootloader(contains EDL protocol for reflashing franklin/vendor-specific bootloader, verifies and bootstraps secondary bootloader. Hello all, I had been using the t9 just fine with my Verizon lte sim after unlocking months ago. It only screwed us over. If you have other Internet connections available along with your mobile hotspot, you can use Speedify to combine all your available connections at the same time. Could you post or email me the unlock too? i livechatted with redpocket and they said the sim is not disabled. it is fully functional just stuck at 891. ./etc/init.d/ttl.sh, - vi command guide if you have never used it before As for the configuration backup itself, you can convert it from its .bin format to its true form, a .tar.gz, using the commands below: As you can see, the configuration dump is actually aes-128-cbc encrypted, and contains nested tar.gz files. You may be connected to the hotspot but can't access any websites with your browser. That is exactly what mine does. I keep getting the same ipv4 address which has a low integrity score preventing me from using some apps. If the Hotspot is plugged into a USB port, disconnect it. This is just sloppy, and is how I was able to get ADB access to start my research. [ 0.000000] ********************************************************** Could you possibly tell me my unlock code. Your connection to the internet stops working while you're using the hotspot. $ tar cf [hotspot_cfg.tar] [data] A couple Velcro ties, a toothpick, and some folded cardstock, and now the power button is pinned down. */5 * * * * /home/root/myscript.sh Factory-set in ROM). https://www.t-mobile.com/support/devices/mobile-internet/t-mobile-hotspot, Just in case for now it cant be sim unlocked even though the specs are similar between hotspot models. msg: OK, Khooshe application is related to the sms system of Khooshe Ads Company, which is used to send bulk advertising text messages to the users of the system. Troubleshoot your device How Tos Apps & Accessories Battery, Memory, & Storage Connections & Network It was updating software when I dropped it and the battery came out causing the device firmware update to fail. Ran that SIM on my phone, powered off and put that SIM card into my now unlocked Franklin T9 and restarted the T9. Disregard, I had about 1/2 a dozen USB to microUSB cables that were all just charging cables (no data). -added APN for visible wireless and set it to active We recommend Magenta Plus for the biggest hotspot allowance. or SIM card, please make sure the deviceis notconnected to any power sources. When you're traveling, on the go, or cellular is simply the best Internet connection you have in your area, you are probably using a mobile hotspot device. Doing the test drive and Id like to have better info to look at, not just a five bar its fine indicator. WebVisit the T-Mobile website for ongoing support and resources. This is especially important when having no Internet connection can impact your real time online activities: To wrap this up, whenever possible, use multiple Internet connections at once to avoid the mobile hotspot connected but no Internet access error. Other than that ssh problem, great forum. I cant not get the unlock code for sim lock. Is this an issue that could spark further review and if so how do I fix it? My firmware appears to be similar. Incorrect Unlock Code Im having the same issue. I would like to not have to use an additional router to get more devices online. Never mind. However I cannot find any of the wifi it is supposed to be broadcasting. WebThe Franklin Wireless T9 has a micro USB port for charging, and it comes with a removable, 2450mAh Lithium-Ion battery. 5. echo ip6tables -t mangle -I PREROUTING -i $INTERFACE -j HL hl-set $TTL>>/etc/init.d/ttl.sh It appears that the T9 may no longer be being sent out. Same issue with my device. This thread will go over my software findings, and will give you the information needed to gain root access and SIM Unlock the device. hey bud thanks for reply indeed you were right, as when i opened the link it asked me for password which was admin, you will need access to a Linux or Mac terminal or Windows 10 running WSL. https://github.com/RayBB/franklin-t9-api. I was being sarcastic in my last reply, but thank you. I got this device for creating a hotspot in my car so that my Android headunit can connect to it and use it for Spotify and Google Maps. On this page: Apps & Accessories Battery, Memory, & Storage Connections & Network Email & Messaging Settings & Tech Specs Software Updates However, I can't connect to pi from internet using the WAN IP. Make sure your Franklin Wireless R717 T9 access point is on firmware 2602 and has a charged battery, and has a working data connection. ssh is another possibility, the ssh root password hash is available as well although it is using stronger encryption then before. This is very strange, because I think each modem has its own unique password. Is there a way to force change it via one of the DEV pages? When I change /etc/hosts using vi, my changes stick until I reboot. Great minds think alike, I guess, since I tried this very tool to no avail :/ Now Im beyond even trying to reflash system.img as I said above because I accidentally flashed a modified boot.img. There are other methods, but theyre very manual. I recently acquired a T-Mobile T9 mobile hotspot from a friend who used it with their Test Drive program, and like I do with most embedded devices I poked around. In this video, we show you how to set up your device and get connected to your T I had played around with it a few months ago and managed to gain root access and unlock the SIM on my own through a bit of trial and error. Any idea if theres an xml file I could alter similar to the FOTA fix? If your mobile device can't access the internet, it won't be able to share its own internet connection with other devices on the hotspot network. Is there a way to view signal level info like RSRP, RSRQ, SNR? When you're accessing the Internet through a mobile hotspot, the connectivity comes from your cellular connection, which is shared via WiFi to your laptop and other devices you connect. Whether you want to build your own home theater or just learn more about TVs, displays, projectors, and more, we've got you covered. I tried both the IMEI based code and other passwords you called out in this page and none of that worked. Airplane mode will prevent an internet connection for both the phone and any device connected to it via the mobile hotspot. One way or another this security flaw was going to get patched, and someone in the company should have rewarded you for discovering and preventing what could eventually have been a major security flaw later if anyone ever used these for more than just unlocked boxes. On the phone, do a network reset. I have limited computer ability, but I wanted to ask a few questions about the Franklin R717. So I revert back to 891. md5crypt at a MINIMUM, and sha1 if you want to get a bit fancier. The configurations are stored in: /etc/default/configs, Take a look at the configuration folders: Sorry, our virus scanner detected that this file isn't safe to download. With the downgrade file you downloaded, go to the config restore page at http://192.168.0.1/settings/device-backup_and_restore.html. Some devices can be force downgrade flashed with direct eMMC writing. It phones home to the following URL, with the following syntax:https://fota.pintracview.com/fota/T9/check_update.php?carrier=
2022-11-07