[Q] ZTE Warp N860 - AAA Secret Password Help

budgreen24 · Nov 20, 2012 at 9:45 AM

I'm trying to view my AAA password on my ZTE Warp but haven't been able to find a method that will work. I've tried the usual methods: 1) QXDM via the command "requestnvitemread ds_mip_ss_user_prof". Results in "error response received from target". 2) QPST EFS Explorer, but the nvm folder is locked so I cannot access. 3) CDMA Workshop via reading nv items, but 466 and 1192 both show "Access denied". Hopefully someone can offer some help on this?

joey716 · Dec 20, 2012 at 11:13 AM

AAA password for N860 ZTE/warp

I know ths post is from November, I just had to go through this myself. You can use "logcat" to read this. Start logcat then enter ##3282# open data profile tap on password keys you can then cancel, go back to logcat, read through and you will find the dialer info ##3282# soon after that you will see the HA ,AAA passwords in hex format, problem solved

budgreen24 · Feb 8, 2013

Thanks for the suggestion. I will try this.

*update: This method worked for me, but only for profile 1 AAA password. Thanks joey716. Still searching for a method to access profile 0 AAA (32 character hex)

GothTech · Jan 13, 2013 7 0 0

did you ever get your aaa key and ha key from logcat??? i need some help

budgreen24 · Jan 17, 2013 at 9:25 AM

GothTech said:
did you ever get your aaa key and ha key from logcat??? i need some help

Yes. I used the procedure described above in post #2.

GothTech · Jan 13, 2013 7 0 0

budgreen24 said:
Yes. I used the procedure described above in post #2.

did it work for you i can seem to make heads or tales of mine at all

budgreen24 · Jan 17, 2013 at 9:00 PM

GothTech said:
did it work for you i can seem to make heads or tales of mine at all

Here's basically what I did:

After creating my logcat file (which was saved to my sd card) I connected my phone to computer and copied the file to my pc. Then I opened the file with notepad and in the menu bar selected Edit > Find. In the box I typed in "aaa" without quotes, then clicked Find Next. Notepad then takes you thru the logcat stopping everywhere it finds "aaa". It takes a few clicks on Find Next, but soon you will see something like "init AAAPassword=xxxxxxxxxxxx" . And you should see your 12 digit AAA password instead of the xxxx's. Do the same thing for your 32 digit AAA password. If you look just before those entries you'll see "init HaPassword=736563726574". That's your HA password, which should be 736563726574 like mine. Write them down and you're all set. If you are still having trouble pm me.

GothTech · Jan 13, 2013 7 0 0

ok so now i just need to get to profile 0 now

warpjavier · Jan 28, 2013 at 8:47 PM

GothTech said:
ok so now i just need to get to profile 0 now

Any luck with profile 0 AAA?

GothTech · Jan 13, 2013 7 0 0

warpjavier said:
Any luck with profile 0 AAA?

im still looking for a way to get it

warpjavier · Jan 29, 2013 at 6:06 PM

GothTech said:
im still looking for a way to get it

Same here.
NVM folder is locked.

GothTech · Jan 13, 2013 7 0 0

warpjavier said:
Same here.
NVM folder is locked.

use logcat to get profile one i just cant seem to find profile 0

warpjavier · Jan 30, 2013 at 3:10 AM

GothTech said:
use logcat to get profile one i just cant seem to find profile 0

That is what we are trying to retrieve, Profile 0 AAA key.
I bet there is a way to unlock NVM folder with a method like HTC phones.

GothTech · Jan 13, 2013 7 0 0

warpjavier said:
That is what we are trying to retrieve, Profile 0 AAA key.
I bet there is a way to unlock NVM folder with a method like HTC phones.

how would this be a please tell

warpjavier · Jan 30, 2013 at 5:56 AM

GothTech said:
how would this be a please tell

On some HTC devices, you create a folder with a "Specific name" in the root of EFS, reboot the phone and NVM folder is accessible. Some samsung devices, you can dump a partition and extract it with magic iso, and see NVM folder, other newer Samsung devices, you downgrade the Modem/Radio and you gain access to EFS file system via QPST.
So I bet there is a method like those mentioned above for the ZTE warp.

Hopefully, someone finds it and post it online. I've tried everything to my knowledge without success.

budgreen24 · Feb 8, 2013 at 8:40 AM

warpjavier said:
On some HTC devices, you create a folder with a "Specific name" in the root of EFS, reboot the phone and NVM folder is accessible. Some samsung devices, you can dump a partition and extract it with magic iso, and see NVM folder, other newer Samsung devices, you downgrade the Modem/Radio and you gain access to EFS file system via QPST.
So I bet there is a method like those mentioned above for the ZTE warp.

Hopefully, someone finds it and post it online. I've tried everything to my knowledge without success.

I was thinking the exact same thing. I've even tried the above methods plus a few other things and no luck.

budgreen24 · Apr 19, 2013 at 4:17 AM

I was finally able to get my profile 0 AAA password on THE ZTE Warp. I did it with CDMA workshop. All I did was read/save nv item 1192. Opened the file with notepad, and there it was! What's weird though is thats one of the first things I tried a long time ago and it didn't work, just said access denied or whatever. But for whatever reason it worked this time. The only thing I can think of that's different is the rom I'm using.

Sent from my N860 using xda app-developers app

gadgetdaddy · Apr 21, 2013 at 9:57 PM

budgreen24 said:
I was finally able to get my profile 0 AAA password on THE ZTE Warp. I did it with CDMA workshop. All I did was read/save nv item 1192. Opened the file with notepad, and there it was! What's weird though is thats one of the first things I tried a long time ago and it didn't work, just said access denied or whatever. But for whatever reason it worked this time. The only thing I can think of that's different is the rom I'm using.

Sent from my N860 using xda app-developers app

Please tell us more, because I tried it and it failed.
What OS / Build are you on?
Where you rooted when you were able to read 1192?
Thanks

budgreen24 · Apr 21, 2013 at 11:56 PM

gadgetdaddy said:
Please tell us more, because I tried it and it failed.
What OS / Build are you on?
Where you rooted when you were able to read 1192?
Thanks

Ok, phone is rooted and running this rom : http://androidforums.com/boost-mobi...0-based-viii-ii-full-install-1-23-2013-a.html

Like I said, I tried to read my aaa with CDMA workshop (v2.7) months ago, and it didn't work. I got the "access denied" message for nv 1192. And it worked for me now and the rom is the only thing thats different I think. Hopefully that helps for now. I'll update this later when I get back to my computer.

Sent from my N860 using xda app-developers app

italianswagger · May 1, 2013 at 7:43 PM

budgreen24 said:
Ok, phone is rooted and running this rom : http://androidforums.com/boost-mobi...0-based-viii-ii-full-install-1-23-2013-a.html

Like I said, I tried to read my aaa with CDMA workshop (v2.7) months ago, and it didn't work. I got the "access denied" message for nv 1192. And it worked for me now and the rom is the only thing thats different I think. Hopefully that helps for now. I'll update this later when I get back to my computer.

Sent from my N860 using xda app-developers app

just did that and ran cdma and its still being denied

[Q] ZTE Warp N860 - AAA Secret Password Help

Senior Member

New member

Senior Member

Member

Senior Member

Member

Senior Member

Member

Senior Member

Member

Senior Member

Member

Senior Member

Member

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member

Member