Hacking device with mtty - Windows Mobile Development and Hacking General

A little off topic - but, could mtty be used to hack other devices attached to the USB-port - for instance an Creative mp3 player ?
Sorry for being a bit off topic, but - its hacking and its about mtty
Prip

MTTY is an HTC tool designed to communicate with bootloader of their devices. So it cannot be used with others.

Related

Really Hacking mobile devices

Who can tell me what the "hackable footprint" of a "networked" WM5 device is ?
What I mean is, what ports or services are running on a networked device that I can send commands to ?
Back in the old days with windows, a fresh installed computer had about 12 ports open which enabled a variety of hack attacks.
Using S.O.T.I pocket controller (enterprise) I can see many services running. However, a portscan shows no listeners (quite normal, as there prolly ain't no IIS , SMTP or NETBIOS service running.
The question remains, what's the hackable footprint ? Where should I start to look to hack my way into a networked device ? Has it ever been attempted ?
I did find some usefull stuff here : http://www.phrack.org/phrack/63/p63-0x06_Hacking_WindowsCE.txt
I'm talking about my own device here, not someone elses. Hope I won't be banned for asking this kind of stuff.... I'm just curious.
There's another Phrack article/presentation that goes into more detail on general hacking of WM devices, linking to the post you posted. They don't discuss much network hacking, but day-to-day, there are other ways into the Windows Mobile devices...
V

Universal Diagnostic Tool/Program

Is possible to download this somewhere? Of course with some little guide how to use it
zedino said:
Is possible to download this somewhere? Of course with some little guide how to use it
Click to expand...
Click to collapse
Hi,
did you ever find this program somewhere?
J.
not 100% sure that it works on the universal as i've never tried it, but SiSoft Sandra has/had some kindof pocket pc function.
Maybe i'll download it and try it out.
Hey guys,
what are you exactly looking for
I think a general diagnostic program has never appeared, but you might find many applications to check the functions of your universal, e.g.:
A tool named powerdetect, which is excellent to check your battery,
a tool called cpuid, which gives you detailed information about the CPU (nothing more ),
excellent task manager which gives some details about the OS,
and there's is an excellent benchmark program around here ...
But i don't know, maybe there's some engineering tool from HTC???
At least you might check your hardware with booting linux. There are excellent ways to get some information about the hardware and it's function with this OS!
scholbert
There is one program named DS2760K. You can see Print Screen of it in Universal Service Manual
I never found different HTC utlity programs ;(
According to different service manuals most of them are delivered on special HTC "gold" card as XXXXDIAG.nbh files.
I found power control progs for HTC products called PowerDetect.
File model.txt shows us data for different units:
Galaxy 0,10,11,11
Colorado_adds 0,8,9,9
Universal 0,10,11,11
Apache 0,10,11,11
Sable 0,10,11,11
Hermes 0,10,11,11
Wizard 0,4,5,5
Prodigy 0,4,5,5
Charmer 0,4,5,5
Prophet 0,4,5,5
iBadge 0,10,11,11
Dresden 0,10,11,11
Napa 0,10,11,11

DVB-T USB-Stick and Kaiser

Hi,
perhaps a stupid question:
I have an USB DVB-T-Stick (Type A) which I am using with my laptop. Is there a way to use this DVB-T-Stick also with my HTC Kaiser , so that I can see TV on my mobile ?
What about the TV program ?
What about a converter from TypeA to TypeMini ?
Regards
kuzco1
Please dont create new threads for questions. Ask them in the sticky.
Dave
Short answer: NO
Technical answer: Kaiser doesn't support "USB Host" (there are other reasons beyond that, but this removes the possibility)
And to complete Dave's post: At least post this in the Kaiser forum, with the others.

[UNDER DEVELOPMENT]Windows Mobile 6 Bluetooth and Wiimote

I am currently trying to develop some software that allows to use a wiimote or a ps3 controller (ex. for fpsece).
all in vb.net
I currently discovered that I am unable to connect. I have already found a similar project that stopped because of the same problem!
I have read that the problem is the missing HID/S2CAP support of 32feet.net
The other software uses BlueTools so there may be the same problem!.
Does anyone know something that allows me to connect to my wiimote?! Maybe some SDK with HID/S2CAP support?!
You own an HD2 and another WinMob device and want to help? Take a look here: http://forum.xda-developers.com/showpost.php?p=5553883&postcount=10
Sorry, i cant help you but i will love control a wii with my HD...
I am speaking of the other way round , but I could also try that ^^.
I am talking about to control your HD with a Wiimote
It would be easy, if there is any idea how succesfull connect to the wiimote
I have found something here: http://www.eggheadcafe.com/software/aspnet/31158420/big5bxf276hrqkrnsut.aspx
I will see if it helps
Mhh, to bad, I cannot find the source files I would need
They maybe in the "Windows CE 5 platform builder" But the Online Setup I was able to get doesn't work anymore
scilor said:
I am speaking of the other way round , but I could also try that ^^.
I am talking about to control your HD with a Wiimote
It would be easy, if there is any idea how succesfull connect to the wiimote
Click to expand...
Click to collapse
Control your Wii with HD... It would be a great app.. if you can write it...
Thanks my Friend.
I was looking at doing this at one point. The HD2 with its Widcomm bluetooth stack supports BT HID, and the later WM6.5.X builds have Bth_HID in the SYS.
Pairing doesn't get you very far though. I found some C++ code for using the Wiimotes, but I haven't transfered it yet.
@l3v5y Why you have always the same ideas I do
The Bluetooth Stack of the HD2 seems to be a little bit buggy:
If I try to use a Bluetooth chat, it just works from my HD2 to my Kaiser, not the other way round. It is as my HD2 blocks all incoming Bluetooth connections
Any idea?
please setup a team , winmo need you
cheer
Ok, I have attached the Bluetooth Chat here.
It would be nice if other HD2 users could test it(You will need the HD2 and another WinMob Phone with a Widcomm Stack). Please always post the Roms of the devices, especailly the HD2's.
If it is only occurs on some ROMS, it would be fine, so I will do a Rom upgrade for further testing
My results where:
HD2 - T-Mobile ROM 1.43.11.2 (70315) Ger
Kaiser - Custom Rom WinMob 6.5
Message HD2 to Kaiser: Works fine, but takes a second.
Message Kaiser to HD2: Connection error, no message!
I found following in the thread of WiiMöb: http://wiimob.codeplex.com/Thread/View.aspx?ThreadId=10953
"But it seems likely that any purely bluetooth work was a red herring, and we just need to tackle BTHHID.DLL and devise a P/Invoke library that will get us a Filehandle to the device through the HID stack."
Hi everybody,
I'm also looking for a solution for that.
As I had similar problems with my Notebook (Widcomm-BT-Stack), I could solve it with a different BT stack. But I don't want to part with the Widcomm on my HD2.
I think the main problem is that the OK softbutton is disabled as long as there is no passcode in the inputbox. It only gets enabled if you enter somthing, which would never match up with the empty passcode of the WiiMote (somthing <> nothing ;-).
If the OK softbutton was enabled even with empty passcode box, the codeless pairing might actually work.
Is there anybody capable of unlocking this OK button?
Please
ScruffR
The problem is that the WM Devices misses a special HID driver . You may connect it with out a passcode with some tricks but this won't help because you cannot connect to the device
Look at this Symbian project http://www.symbianresources.com/projects/wiirider.php - maybe that will help. I got the same problem like everybody - can't pair device :s
We cannot connect the WiMote low-level easily, that is the big problem. If we could it would be easy.
...I'm assuming this has been abandoned? :/
Until someone finds a way to get a stream, the development is stopped
There is a way to connect to the Wii Remote with a WM 6 device.
The driver you want to look for should come with WM 5 and 6 devices. It has the prefix "BHI" it is not meant for production use, and it somewhat bare-bones, however you can successfully connect to the Wii Remote with it.
The registry path for this driver is:
HKLM\Software\Microsoft\Bluetooth\Hid\Hid_Class
and
HKLM\Software\Microsoft\Bluetooth\Hid\Instance
If you activate these drivers using the Win32 ActivateDeviceEx command (upon hard reset you don't have to do this), you should be able to open up a file stream to the driver.
Code:
HANDLE read_test = CreateFile(L"BHI0:", 0, 0, NULL, OPEN_EXISTING, 0, NULL);
Code:
unsigned __int64 wii_addr = 0x002659F4EEEDL; // BT_ADDR, 64 bits (8 bytes)
Then, I call the DeviceIoControl function to connect to the Wii Remote:
Code:
bool device_io_success = DeviceIoControl(read_test, 1, &wii_addr, sizeof(wii_addr), NULL, 0, NULL,NULL);
e = GetLastError();
Just replace the wii_addr with your Wii Remote's Bluetooth address.
The source code for this driver can be found by googling:
"bthhid.cxx source code" it should be the first link.
The set of APIs it provides is minimal, and I was not able to get any other function to work besides HIDConnect.
I'm still working on getting some sort of data from it.
Let me know if this works for you,
Mike
Could you send me a link to the source? I am finding any
I will take a look later, maybe we get it running
Unfortunately, I can't post the link due to spam restrictions (I just joined the forums recently). However, I have attached the folder that includes all the source files with this post.
This folder comes with Windows CE Platform Builder. It is located here (if you have Platform Builder installed):
C:\WINCE500\PRIVATE\WINCEOS\COMM\BLUETOOTH\PROFILES\HID
If you navigate to the BASE folder, you will find bthid.cpp. This is the main source that contains the stream driver implementation.
The main section of this file to examine is around line 2500 on down. These are the functions that are exposed when you create a file handle to the driver.
Let me know how it works out,
Mike

Developping a bluetooth gateway on htc hd2 to interface blutooth keyboard BK600

Greetings,
sorry to post again, but it seems that i posted in a wrong place (htc hd2 forum), because this post adress a wm software development.
So, this is the problem : I'm stuck with my old BK600 (com one, but omiz and freedom kb rebranded)
There are new keyboard (expensive), news driver (not working), future drivers (never going to be released), so as i'm a software developper, i wasn't really glad to abandon and to buy another. The problem is that've never made a driver for windows mobile, and i'm not specialized on bluetooth, so be indulgent...
After searching internet and seeing some articles, i've been on broadcom site (they're doin' the bt stack, so it's normal to go on their site ... guess what ...
i've downloaded the bluetooth stack sdk)
As i develop under linux, but also under windows, i've a visual studio 2008 installed. I compiled the Spp (probably serial port) sample, and without any driver the keyboard paired, negociated a serial port and the monitor show byte received when typing on the keyboard.
So now, if someone know some place to find tutorials to write windows phone driver, i take.
I also would like to discuss about another approch.
What would you think to transcode the keyboard code received in a thread and to redirect them on standard input ? would it be possible ?
Anyway, my needs are very simple, just a bluetooth kb to type on it, no extra functions, ...
Regards, and thanks you for your answers and help.
CLS.
Hi, it seems that there already is such a software, see:
http://www.youtube.com/watch?v=dLRXSBcu6WI
It is stated that it also supports bluetooth keyboards and mouses.
HI radhoo,
they seems to have a problem to release the software (5-6 month they say they're going to), but nothing
on this page : http://www.teksoftco.com/index.php?section=blueinput&tab=download
you click on this link http://www.teksoftco.com/index.php?section=blueinputbroadcom
and you get on this broken page :
http://www.teksoftco.com/index.php?section=blueinputbroadcom
as you see on the xda-forums
http://forum.xda-developers.com/showthread.php?t=628538&page=2
we are a lot to wait for this software, but nothing.
that's why i'm trying to do a little piece of software (which i'll consolide after i think)
I'm taking the base of the broadcom/widcom stack, and my approach will be to transcode chars to stdin.
It seems that there is a C# wrapper, so it think that i'll recode in c#
anyway,
thanks for answering and long life to xda-dev (very useful)
Ludovic.
work status
- have found a c# wrapper of widcom dll (recompiled) : works bu ti'm rewritting some part of the wrapper as it seems to lacks some feature
- in parallel : working on c++ legacy broadcom sample (works perfectly now with my keyboard, bind with com port done, receiving "things"
now struggling with threads to pump messages and transcode.
If you have something that gets the basic keyboard working, I'd love to test it out.
if your driver is ready for testing, please send me a beta of it for testing on my htc hd2
thanks
I have a same problem .
CLS have u finish your program already? please
I would like to use BK600 on my htc hd mini too
hi, how far did you get?
still at it...?
lots of succes, vicenza

Categories

Resources