Request to the Forum Moderators.

[Pasquiindustry]

Hi folk's,
Previously i have described that the how to unlock "WPSystem" root directory on SD Card.
So I've found a two little hack that can be exploits some cool things.
I'm giving an explanation with the simple example.
[...]

I tried this, but I'm getting a black screen or loading screen.
I tried within phone or SD card connected to PC, with the given xap and with a personal project (targeting the live lock screen app). Lumia 1520 and Lumia 620 both 8.10.14192 :/

 

[djamol]

Preview For Developers only has one interesting Capability, but it's a pretty interesting one. Using that capability will give write access to a small portion of the registry. Incidentally, it does in fact write to the registry directly (it would need interopservices to write indirectly). However, the library it uses to do the writing may not be useful for anything else; I haven't checked. In any case, it doesn't give *more* access than any of a number of other OEM or first-party apps' chambers.




@djamol: Some keys under HKLM\System are writable by the right capabilities (without interop, I mean), but it's still possible that NrsRuntime uses interop to gain the ability to write to other places. Worth checking out, for sure. Do please send me that code, or post it here. The simple test app I wrote is attached to this message. It's really basic; I haven't yet tried to do anything particular to make NrsRuntime work so it may just be that it needs a library that I'm not including or something equally silly.

Wow, great project.

Here is my rough project targeted to the "Lumia storage check beta".

I've used another lib, but I'll resolve your projects exception as possible and will post it again. Thanks again for great stuff.

http://www53.zippyshare.com/v/52877502/file.html

 

[chinitopex]

Hi guys i have a doutb about this
my Lumia 520 is not dev unlock there are a posibility installs files xap on SD
I repeat my lumia 520 is not unlock device yet to use xap files

 

[MameTozhio]

Hi guys i have a doutb about this
my Lumia 520 is not dev unlock there are a posibility installs files xap on SD
I repeat my lumia 520 is not unlock device yet to use xap files

If you're on Windows Phone 8.1 this will work.

 

[ngame]

Hi guys i have a doutb about this
my Lumia 520 is not dev unlock there are a posibility installs files xap on SD
I repeat my lumia 520 is not unlock device yet to use xap files

no you should unlock your phone at least with your own outlook account (witch used on your phone as an email) it will make you able to sideload 2 apps

 

[ChrisX930]

Hey Guys,

I found this thread, and I read some interesting things here.
Is there already useful thing that I can use on my dev unlocked Lumia 920?
Any unlocks or somehting?

 

[AlvinPhilemon]

Hey Guys,

I found this thread, and I read some interesting things here.
Is there already useful thing that I can use on my dev unlocked Lumia 920?
Any unlocks or somehting?

No. This unlock requires an SD card. So you are out of luck for now.

---------- Post added at 12:26 PM ---------- Previous post was at 12:16 PM ----------

Hm... will editing the WMAppManifest after deployment work?

 

[ngame]

No. This unlock requires an SD card. So you are out of luck for now.

---------- Post added at 12:26 PM ---------- Previous post was at 12:16 PM ----------

Hm... will editing the WMAppManifest after deployment work?

No , it doesn't
WMAppMainfest.xaml unable to edit .
If you can edit this file it also doesn't work because capabilities are set when you trying to install an application so only editing icon Uri and main page Uri could work

 

[djamol]

Yes, External libs working perfectly. We just need a better resources.

 

[winphoneuser]

Lumia 620, software version 3058.50000.1425.10479, says Lumia Denim but it`s not, I just upgraded to Cyan after the PfD program allowed it and now has Enable Preview for Developers unchecked.

Using PFM v 4.3.6.0 has unhide and unsystem WPSystem folder and renamed Apps to Appssss. Using actual Aerize, moved the content of Glance Background Beta GUID folder to New Folder and then copied the content of your app (previously moved it from phone memory to SD of cource) to Glance Background Beta GUID folder. Using PFM renamed Appssss folder back to Apps and made WPSystem folder hidden and system. Now I have this:

And when I`m trying to start Glance Background, I`m getting this

("Загрузка..." is "Loading...") whick takes forever until I shut off the app manually. What am I doing wrong?

 

[ChrisX930]

I just wait for a way to do this without a SD Card slot... Because I have a Lumia 920

 

[ngame]

Lumia 620, software version 3058.50000.1425.10479, says Lumia Denim but it`s not, I just upgraded to Cyan after the PfD program allowed it and now has Enable Preview for Developers unchecked.

Using PFM v 4.3.6.0 has unhide and unsystem WPSystem folder and renamed Apps to Appssss. Using actual Aerize, moved the content of Glance Background Beta GUID folder to New Folder and then copied the content of your app (previously moved it from phone memory to SD of cource) to Glance Background Beta GUID folder. Using PFM renamed Appssss folder back to Apps and made WPSystem folder hidden and system. Now I have this:

And when I`m trying to start Glance Background, I`m getting this


("Загрузка..." is "Loading...") whick takes forever until I shut off the app manually. What am I doing wrong?

reinstall Glance background it will fix

I just wait for a way to do this without a SD Card slot... Because I have a Lumia 920

many windows phone users and hackers have phone with Non-SD card support like me and also ultrashot has lumia 920 , htc 8x without sd support so surely we work on these phones too but surely devices without sd card support are sooooooooooo much much harder to hack .
but why ?
surely you can't access to the system folders easily like WPSystem at sd card !
or you can't edit WMAppMainfest.xaml easily
sd card features are new so they have some interesting BUGS and we can use them but Internal storage is much secure

 

[ChrisX930]

many windows phone users and hackers have phone with Non-SD card support like me and also ultrashot has lumia 920 , htc 8x without sd support so surely we work on these phones too but surely devices without sd card support are sooooooooooo much much harder to hack .
but why ?
surely you can't access to the system folders easily like WPSystem at sd card !
or you can't edit WMAppMainfest.xaml easily
sd card features are new so they have some interesting BUGS and we can use them but Internal storage is much secure

That's very nice to hear
I know that I'm able to install custom .xaps to my phone with dev-unlock and WP-Power-Tools, I can use Glance Background + to check the registry entry that is already given with this tool
https://fbcdn-sphotos-g-a.akamaihd.net/hphotos-ak-xpa1/v/t1.0-9/10353110_854560124575053_8376102533040205679_n.jpg?oh=bb54b9e1862eb06462ab07b4a33a3a2b&oe=5519A77F&__gda__=1423907015_63bdacca3c6c5c90a37adb00c058cdfd
I really hope there will be a way to hack my Lumia920 soon

 

[ngame]

@GoodDayToDie : where capabilities save ?! in registry ?!
what i want to say?
I want to say if capabilities will save in a registry key is it possible to create our own capabilities for each app using the registry and do not replace apps anymore !

 

[winphoneuser]

reinstall Glance background it will fix



many windows phone users and hackers have phone with Non-SD card support like me and also ultrashot has lumia 920 , htc 8x without sd support so surely we work on these phones too but surely devices without sd card support are sooooooooooo much much harder to hack .
but why ?
surely you can't access to the system folders easily like WPSystem at sd card !
or you can't edit WMAppMainfest.xaml easily
sd card features are new so they have some interesting BUGS and we can use them but Internal storage is much secure

Reinstalled. Still same situation, I don`t need Glance Background Beta working (it is before I trying to "replace" it with @djamol `s one), I need to be able to launch his registry editor with Glance BB permissions.

Update:
Nevermind, just fixed it. But for some reason I was unable to rename Appssss folder back to Apps using PFM, I did tried enabling energy saving mode (all background apps were seems to be down) but the error was still there, I tried also to rename with Aerize and Microsoft Files, no luck. Then I restarted my phone and get all my SD installed apps broken

Still, I tried to install Registry Editor again. With success that time. Here is what I been doing:
1. Installed Glance Background Beta from marketplace and sideloaded @djamol `s Glance_Background_Release_ARM.xap
2. Moved @djamol `s sideloaded app to SD card, marketplace apps are installs on SD card by default on my phone
3. Using Pocket File Manager v 4.3.6.0 I stripped SD Card WPSystem folder from System and Hidden attributes
4. Renamed Apps folder to Appszzz
5. Erased content from the folder {7C3378FF...
6. Renamed Appszzz folder back to Apps ( !!! I was made it into Pocket File Manager BEFORE copying content)
7. Closed Pocket File Manager (all the previous actions were made with it), opened Aerize Explorer and copied content from {D9448DE9... folder to {7C3378FF... one, closed Aerize, then I get this:

Seems good, opened Glance Background (first one in the listing)...

...success! Is there anything inresting I can do with this for now?

 

[GoodDayToDie]

@ngame: Capabilities are stored in the registry, but I'm not sure of *all* the ways and places they are stored. It's frustrating; trust me, I've been working on this for a while.

 

[fonix232]

@ngame: Capabilities are stored in the registry, but I'm not sure of *all* the ways and places they are stored. It's frustrating; trust me, I've been working on this for a while.

There's a registry table that stores all capabilities and their access level - OS, OEM, 3rd party. By patching all to 3rd party, you can install any app with any caps (also you can edit the number of dev unlock installable apps, up to 65535 I think).

The Samsung hacks did that to enable custom app install, and also a friend of mine did some research with a JTAG-ed device pushing changed firmware with these patches.

 

[GoodDayToDie]

You can push it well past 65k - all the way up to 0x7FFFFFFF (max value for a 32-bit signed integer) is known to work - but in practice it doesn't really matter past about 300.
I've just made big progress in figuring out how capabilities work on the phone. Setting them via custom ROM is definitely one of the easier ways it might be done, if you can create arbitrary registry keys and set arbitrary values in them. Otherwise, you need write access to the HKLM\SOFTWARE\Microsoft\SecurityManager key.

 

[djamol]

SUCCESS !!!

Do not update anything until & unless I release my new hack.

 

[justmpm]

Hi Everyone,
I did a small thread cleaning. Can we please keep this development related? That means no asking for ETAs or offering to test out any new developments.

Thanks!