There use to be free unlocking calculators for the old phone models. But it seems that it's impossible to unlock a modern phone for free. What I don't understand is how it works nowadays. You have to send the IMEI to a reseller, then wait for days (1 to 5) to get your code back.
I thought that smart hackers were profiting from their own unlocking calculators, created by themselves, but it seems that the delay getting the code is because some databases have to be accessed. And depending of the company that locked the phone that could be harder and more expensive to do.
So, how does it really work? Who are the original sellers and unlocking code creators?
Thanks!
Moved to Q&A section
Depends on the phone, sometimes they rely on people who have got legitimate codes from their network and then identify the cryptographic routine used to generate them though complex analysis, sometimes they reverse engineer routines from the phone themselves. Gsmhosting has a few threads where they explain some of the process but not all. On my phone the code generation routine is actually included in the android framework, which is easy to reverse into source code!
rjm2k said:
Depends on the phone, sometimes they rely on people who have got legitimate codes from their network and then identify the cryptographic routine used to generate them though complex analysis, sometimes they reverse engineer routines from the phone themselves. Gsmhosting has a few threads where they explain some of the process but not all. On my phone the code generation routine is actually included in the android framework, which is easy to reverse into source code!
Click to expand...
Click to collapse
If it's so easy to get some code generation routines, how is that every androind phone needs a pay code and there is no free calculators aviable?
And anyway, why is there so much delay to get the code once you payed for it?
there are free calculators for some, like the zte blade
As far I know, the these online unlock services uses just a stolen unlock code list from service providers, or the have some good connection in these place and access to their local databases, where the unlock keys are stored.
Yes, of course there are few devices still that can be unlocked by calculator, it depends on the CPU platform. Mostly, these are some cheap china platform wonder things.
Basically, the info needed for unlock is stored in different regions of flash, and isn't dependable only on IMEI, bootloader security, certificates and other rock n roll stuff, and that flash region isn't that easily accessible, for the first time you must use jtag or get a dump of the flash, then brute force the algorithm... for each manufacturer it is different. Nokia uses its SL3+/DCT4+ platform and only old good Dejan cracked it completely. SE uses it's CID loaders and CSCA key for encrypting, and it is quite successful, only working unlock solutions in the market are backed up by a stolen key USB security key from some authorized service location - like Setool or Omnius does, there is no magic at all...
Ferrum Master said:
As far I know, the these online unlock services uses just a stolen unlock code list from service providers, or the have some good connection in these place and access to their local databases, where the unlock keys are stored.
Yes, of course there are few devices still that can be unlocked by calculator, it depends on the CPU platform. Mostly, these are some cheap china platform wonder things.
Basically, the info needed for unlock is stored in different regions of flash, and isn't dependable only on IMEI, bootloader security, certificates and other rock n roll stuff, and that flash region isn't that easily accessible, for the first time you must use jtag or get a dump of the flash, then brute force the algorithm... for each manufacturer it is different. Nokia uses its SL3+/DCT4+ platform and only old good Dejan cracked it completely. SE uses it's CID loaders and CSCA key for encrypting, and it is quite successful, only working unlock solutions in the market are backed up by a stolen key USB security key from some authorized service location - like Setool or Omnius does, there is no magic at all...
Click to expand...
Click to collapse
What do you mean by "authorized service location"? Do you think every brand customer service center and every phone company has all the unlocking codes for their phones available?
If so, it shouldn't be so expensive to unlock a phone, since a lot of people has access to the codes.
unlock by IMEI, Almost all LG models, Alcatel Phones, Alcatel Modems, Huwei Dongles, ZTE Phones, ZTE Bluebelt / Silverbelt
(alcatel modem code calculation from IMEI) X020 Modem Unlock Code
X030x Modem Unlock Code
X060S Modem Unlock Code
X070S Modem Unlock Code
X080S Modem Unlock Code
X100X Modem Unlock Code
X200X Modem Unlock Code
X200S Modem Unlock Code
X210x Modem Unlock Code
X210S Modem Unlock Code
X215S Modem Unlock Code
S220L Modem Unlock Code
X225L Modem Unlock Code
X225S Modem Unlock Code
X228L Modem Unlock Code
Supported Alcatel Phones (alcatel code calculation from IMEI)
Supported by IMEI + Provider ID
OT360
OT203
OT708
VDF541
OT800
OT303
B331
I650
S621
OT660
E101FLIP
OT363
OT383
OT600
VM621I
OT280
V570
and all this Only using IMEI for calc
S215
S218
S319
S320
S321
S520
S853
V670
S215
S218
S319
S320
S321
S520
S853
V670
V770
C700
C701
C707
C717
V770
C820
C825
C700
C701
C707
C717
V770
C820
C825
mandarina duck
Miss Sixty
Playbox
Elle N3
Supported Huwei Dongles (Huawei code calculation from IMEI)
Huawei:
E156 Modem unlock code
E156G Modem unlock code
E160 Modem unlock code
E160G Modem unlock code
E169G Modem unlock code
E170 Modem unlock code
E172 Modem unlock code
E176 Modem unlock code
E180 Modem unlock code
E182E Modem unlock code
E196 Modem unlock code
E270 Modem unlock code
E271 Modem unlock code
E272 Modem unlock code
E510 Modem unlock code
E612 Modem unlock code
E618 Modem unlock code
E620 Modem unlock code
E630 Modem unlock code
E630+ Modem unlock code
E660 Modem unlock code
E660A Modem unlock code
E800 Modem unlock code
E870 Modem unlock code
E880 Modem unlock code
EG162 Modem unlock code
EG162G Modem unlock code
EG602 Modem unlock code
EG602G Modem unlock code
Vodafone:
K2540 Modem unlock code
K3515 Modem unlock code
K3520 Modem unlock code
K3565 Modem unlock code
K3715 Modem unlock code
Supported ZTE Bluebelt / Silverbelt (free ZTE code calculation from IMEI)
Put your IMEI in, select ZTE, leave the default model as ZTE BLUEBELT, pop in the not-a-robot code. In the box above the IMEI you’ll receive your code
ZTE BLUEBELT
ZTE BLUEBELT 2
ZTE SILVERBELT
ZTE N61
ZTE Orange RIO
ZTE Orange MIAMI
ZTE Orange ROME
Supported ZTE Phones (ZTE code calculation from IMEI)
ZTE – SFR 232
ZTE – SFR 341 tested
ZTE – SFR 342
ZTE – ORANGE Vegas tested
ZTE – VODAFONE INDIE tested
ZTE – X760 tested
ZTE – X761 tested
ZTE – X960
ZTE – GX760
ZTE – GX761
HTC: AT&T 8525, AT&T Tilt, Cingular 2100, Cingular 2125, Cingular 3100, Cingular 3125, Cingular 8100,
Cingular 8125, Cingular 8525, Daxian CU928, Dopod 310, Dopod 515, Dopod 535, Dopod 565, Dopod 566,
Dopod 575, Dopod 585, Dopod 586, Dopod 595, Dopod 686, Dopod 696, Dopod 699, Dopod 700, Dopod 710,
Dopod 818, Dopod 828, Dopod 830, Dopod 838, Dopod 900, Dopod 577W, Dopod 586W, Dopod 696i, Dopod 710+,
Dopod 818 Pro, Dopod 828+, Dopod 838 Pro, Dopod C500, Dopod C720W, Dopod C730, Dopod C750, Dopod C800,
Dopod C858, Dopod CHT9000, Dopod CHT9100, Dopod CHT9110, Dopod D600, Dopod D600 (Action Version),
Dopod D802, Dopod D805, Dopod D810, Dopod E616, Dopod E806C, Dopod M700, Dopod P660, Dopod P800,
Dopod P800W, Dopod P860, Dopod S1, Dopod S1 (Enhanced Version), Dopod S300, Dopod S301, Dopod S500,
Dopod S600, Dopod S700, Dopod S900, Dopod Touch Viva, Dopod U1000, EagleTec PB10,
Emobile eMonster S11HT, Emobile eMonster lite S12HT, Emobile eMonster S21HT, E-Plus PDA III,
E-Plus PDA IV, E-Plus Pocket PDA, Eurotel Smartphone, Eurotel Smartphone II, Grundig GR980,
HP iPaq hw6915, HP iPaq hw6925, HP iPaq hw6945, HP iPaq hw6955, HP iPaq hw6965, HP iPaq hw6510,
HP iPaq hw6515, HP iPaq rw6828, HTC 5800, HTC Advantage, HTC Apache, TIM TIM Dream, TIM Dream,
HTC Falcon, HTC Harrier, HTC Max 4G, Sprint Sprint Mogul, Sprint Mogul, 3 Hutchison O2 MTeoR,
O2 O2 MTeoR, O2 MTeoR, HTC P3000, HTC P3050, HTC P3051, HTC P3300, HTC P3301, HTC P3340, HTC P3350,
HTC P3400, HTC P3400i, HTC P3401, HTC P3450, HTC P3452, Bouygues Telecom P3470, 3 Hutchison P3600,
HTC P3600i, HTC P3650, HTC P3651, HTC P3700, HTC P3701, HTC P3702, HTC P4000, HTC P4300, HTC P4350,
HTC P4351, HTC P4500, HTC P4550, HTC P5510, HTC P5520, HTC P5530, HTC P6300, HTC P6500,
Cellular South nTelos PPC6800, nTelos PPC6800, Alltel nTelos PPC6800, U.S. Cellular nTelos PPC6800,
Bouygues Telecom S310, HTC S320, HTC S350, HTC S410, HTC S420, HTC S411, HTC S510, HTC S520,
HTC S620, Centennial Wireless S621, Rogers Centennial Wireless S621, HTC S630, HTC S631, Telus S640,
O2 S710, HTC S711, HTC S720, HTC S730, TIM S740, Swisscom TIM S740, Telenor TIM S740, Telia TIM S740,
HTC Shift, HTC T222X, HTC T323X, HTC T727X, HTC T828X, HTC T829X, HTC Ted Baker Needle, HTC Titan,
TIM Touch, U.S. Cellular TIM Touch, nTelos TIM Touch, Cellular South TIM Touch, Orange TIM Touch,
Rogers TIM Touch, Bell TIM Touch, Sprint TIM Touch, O2 TIM Touch, Telus TIM Touch, HTC Touch 3G,
HTC Touch Color, Telenor Touch Cruise, O2 Touch Cruise, Tele2 Touch Cruise, HTC Touch Cruise,
SFR Touch Cruise, HTC Touch CDMA, Telus Touch Diamond, Telenor Touch Diamond, Orange Touch Diamond,
Telus Touch Diamond, PLAY Touch Diamond, TIM Touch Diamond, Rogers Touch Diamond, E-Plus Touch Diamond,
Telia Touch Diamond, Telstra Touch Diamond, SFR Touch Diamond, 3 Hutchison Touch Diamond,
WIND Touch Diamond, Sprint Touch Diamond, Cellular South Touch Diamond, O2 Touch Diamond,
Alltel Touch Diamond, Tele2 Touch Diamond, Bell Touch Diamond, Swisscom Touch Diamond,
Vodafone Touch Diamond, Bouygues Telecom Touch Diamond, HTC Touch Diamond CDMA, Telus Touch Dual,
SFR Touch Dual, Telenor Touch Dual, Swisscom Touch Dual, TIM Touch Dual, Telus Touch Dual,
Bell Touch Dual, Centennial Wireless Touch Dual, Orange Touch Dual, Telstra Touch Dual 850,
HTC Touch Dual US, HTC Touch (Enhanced Version), TIM Touch HD, Orange Touch HD, SFR Touch HD,
PLAY Touch HD, Telenor Touch HD, Tele2 Touch HD, TIM TIM Touch HD, HTC Touch P3450,
Centennial Wireless Touch Pro, Verizon Touch Pro, Tele2 Touch Pro, 3 Hutchison Touch Pro,
Telia Touch Pro, SFR Touch Pro, Telus Touch Pro, Bell Touch Pro, Sprint Touch Pro, Telenor Touch Pro,
O2 Touch Pro, Alltel Touch Pro, Orange Touch Pro, Swisscom Touch Pro, Vodafone Touch Pro,
Telus Touch Pro, HTC Touch Viva, O2 TyTN, Rogers TyTN, 3 Hutchison TyTN, 3 Hutchison TyTN II,
O2 TyTN II, Telenor TyTN II, Centennial Wireless TyTN II, HTC X7500, HTC X7501, HTC X7510, HTC X9500,
HTC Z, i-Mate Jam, i-Mate JAMin, i-Mate JASJAM, i-Mate JASJAR, i-Mate K-JAM, i-Mate PDA2, i-Mate PDA2k,
i-Mate PDA2K EDVO, i-Mate Pocket PC Phone Edition, i-Mate SmartFlip, i-Mate Smartphone, i-Mate SPJAS,
i-Mate SP2, i-Mate SP3, i-Mate SP3i, i-Mate SP4m, i-Mate SP5, i-Mate SP5m, Intermec Model 70,
Krome Navigator F1, Krome Intellekt iQ200, Krome Intellekt iQ700, Krome Spy, NTT DoCoMo FOMA HT1100,
NTT DoCoMo PRO series HT-01A, NTT DoCoMo PRO series HT-02A, O2 XDA, O2 XDA Argon, O2 XDA Atmos,
O2 XDA Atom, O2 XDA Atom Exec, O2 XDA Atom Life, O2 XDA Atom Pure, O2 XDA Cosmo, O2 XDA Diamond,
O2 XDA Diamond Pro, O2 XDA Exec, O2 XDA Ignito, O2 XDA IQ, O2 XDA Mantle, O2 XDA Mini Pro,
O2 XDA Mini S, O2 XDA Neo, O2 XDA Nova, O2 XDA Orbit, O2 XDA Orbit II, O2 XDA Orion, O2 XDA Phone,
O2 XDA Serra, O2 XDA Star, O2 XDA Stellar, O2 XDA Terra, O2 XDA Trion, O2 XDA II, O2 XDA II Mini,
O2 XDA IIi, O2 XDA IIs, O2 Xphone, O2 Xphone II, O2 Xphone IIm, Okta Touch, Okta Boss, Orange SPV,
Orange SPV C100, Orange SPV C500, Orange SPV C550, Orange SPV C600, Orange SPV C700, Orange SPV E100,
Orange SPV E200, Orange SPV E600, Orange SPV E650, Orange SPV F600, Orange SPV M1000, Orange SPV M1500,
Orange SPV M2000, Orange SPV M2500, Orange SPV M3000, Orange SPV M3100, Orange SPV M500, Orange SPV M5000,
Orange SPV M600, Orange SPV M6000, Orange SPV M650, Orange SPV M700, Palm Treo 750v, Palm Treo 850,
Palm Treo Pro, Qtek 1010, Qtek 1020, Qtek 2020, Qtek 2020i, Qtek 2060, Qtek 6080, Qtek 7070, Qtek 8010,
Qtek 8020, Qtek 8060, Qtek 8080, Qtek 8100, Qtek 8200, Qtek 8300, Qtek 8310, Qtek 8500, Qtek 8600,
Qtek 9000, Qtek 9090, Qtek 9100, Qtek 9600, Qtek A8300, HTC Explorer, HTC Sensation XE, HTC Freestyle,
HTC Rhyme, HTC Jetstream, HTC Surround, HTC Dream, HTC Sensation XL, HTC Touch, HTC P510E, HTC P515E,
HTC Sensation, HTC Evo 3D, HTC X515, HTC X515, HTC Sensation 4G, HTC Merge, HTC ADR6350,
HTC DROID Incredible 2, HTC ADR6325, HTC Amaze 4G, HTC HD7S, HTC Inspire 4G, HTC A9192, HTC X310E,
HTC Radar 4G, HTC C110E, HTC Radar, HTC Desire Z, HTC 7 Trophy, HTC 7 Mozart, HTC 7 Surround, HTC 7 Pro,
HTC Gratia, HTC HD7, HTC Flyer, HTC Incredible S, HTC Desire S, HTC Wildfire S, HTC Salsa, HTC ChaCha,
HTC Trophy, HTC Status, HTC Flyer 4G, HTC Panache 4G, HTC Panache, AT&T HTC Pure, Verizon HTC Imagio,
HTC HD2, HTC Legend, HTC Smart, Google Nexus One, Dopod A6288 Hero, HTC Desire, HTC HD mini, HTC Rhodium,
O2 XDA Diamond2, T-Mobile G2, Rogers Magic+, T-Mobile Shadow II, HTC Wildfire, HTC Aria, HTC Desire HD,
HTC Touch Cruise 09, Era G1, T-Mobile MDA Compact V, T-Mobile MDA Vario V, HTC T737X, HTC T535X,
Sprint Sprint Snap, HTC A717X, HTC A616X, Sprint Snap, Verizon Ozone, Verizon Verizon Ozone, HTC Hero,
T-Mobile Dash 3G, T-Mobile myTouch 3G, AT&T HTC Tilt 2, HTC Click, HTC Tattoo, Vodafone VPA III,
Vodafone VPA IV, Vodafone VPA Touch, Vodafone VPx, SoftBank X04HT, HTC S743, O2 XDA Comet, HTC P5500,
Kogan Agora PRO, Kogan Agora, AT&T AT&T Fuze, AT&T Fuze, HTC Touch Diamond2, Vodafone Touch Pro2,
T-Mobile Vodafone Touch Pro2, Vodafone Magic, Vodafone Vodafone Magic, Vodafone VDA II, Vodafone 920,
Vodafone V1240, Vodafone V1415, Vodafone V1605, Vodafone V1615, Vodafone V1620, Vodafone V1640,
Vodafone V7505, Vodafone VDA, Vodafone VPA, Vodafone VPA Compact, Vodafone VPA Compact GPS,
Vodafone VPA Compact II, Vodafone VPA Compact III, Vodafone VPA Compact IV, Vodafone VPA Compact S,
Vodafone VPA Compact V, UTStarcom PPC6700, UTStarcom PPC6800, UTStarcom SMT5500, UTStarcom SMT5800,
UTStarcom SMT5600, UTStarcom VX6600, UTStarcom XV6600WOC, UTStarcom XV6700, UTStarcom XV6800,
Verizon VX6600, Verizon XV6600WOC, Verizon XV5800, Verizon XV6700, Verizon SMT5600, Verizon XV6900,
Virgin Lobster 700TV, Verizon XV6850, Verizon XV6800, T-Mobile MDA Vario II, T-Mobile MDA Vario III,
T-Mobile MDA Vario IV, T-Mobile SDA, T-Mobile MDA III, T-Mobile MDA II, T-Mobile SDA II,
T-Mobile SDA Music, T-Mobile SDA Music II, T-Mobile SDA USA, T-Mobile Shadow, T-Mobile Wing,
T-Mobile Ameo, T-Mobile Dash, T-Mobile MDA Compact, T-Mobile MDA, T-Mobile G1, T-Mobile MDA Compact II,
T-Mobile MDA Compact III, T-Mobile MDA Compact IV, T-Mobile MDA Touch, T-Mobile MDA Pro,
T-Mobile MDA Mail, T-Mobile MDA Touch 256, T-Mobile MDA Touch Plus, T-Mobile MDA Vario,
Audiovox PPC5050, UTStarcom MP6900, UTStarcom PPC5050, T-Com T-One TC500, UTStarcom PLS5800,
UTStarcom PPC6600, UTStarcom PPC6601KIT, Telefonica TSM400, Telefonica TSM500, Telefonica TSM500,
Telus P4000, Sony Ericsson XPERIA X1, SoftBank X05HT, Audiovox PPC6600, Audiovox PPC6601KIT,
Audiovox PPC6700, Sprint PPC-6601, Audiovox SMT-5500, Audiovox SMT-5600, Sprint PPC-6700,
Swisscom XPA S200, Swisscom XPA v1240, Swisscom XPA v1510, Swisscom XPA v1415, Swisscom XPA v1405,
Swisscom XPA v1605, Swisscom XPA v1615, Qtek G200, Qtek A9100, Qtek S100, Qtek S300, Qtek S200,
Qtek S110, SFR S300+, SFR V1605, SFR V1615, Siemens SX56, Siemens SX66, SFR V1640, SFR V1620,
Smart Communications Amazing Phone, Smart Communications Amazing Phone 2, SoftBank X03HT,
SoftBank X02HT, SoftBank X01HT
and yet on other phones….
To contact me
MSN: [email protected]
SKYPE: paata512
ICQ: 212-356-548
ZTE – T-Mobile Vairy Touch tested
ZTE – T-Mobile Vairy Touch tested[/QUOTE said:
can u help me to unlock this phone please?
Click to expand...
Click to collapse