Hello Folks,
Yeah this is the First thread, First Post about the Windows 10 Mobile Hacking.
Now the First Interop Unlock hack for W10M is now available. It's currently limited to LUMIA/SAMSUNG phones, although we're trying to extend it to other OEM Device, of course. (It requires specific Driver/Services to "RUN" into "SYSTEM" Privileges. Hence, other OEM Device is lack of these. I.e HTC/Micromax etc. etc.)
A brief summary, for those unfamiliar with interop-lock:
Windows Phone allows a number of high-privilege app capabilities, which can be used to make changes to the OS which are normally not possible for a third-party Applications.
The limitation on whether we can use these capabilities or not is based on what "level" of developer unlock the phone has.
ON WP7/8/8.1
Standard "ISV" (Independent Software Vendor) Dev Unlock (max 10 apps or less) is what pretty much everybody gets.
OEMs, however, get a special OEM Developer Unlock (300 apps or more) which gives them the ability to use much higher-privilege app capabilities than the standard ISV unlock permits. The name comes from ID_CAP_INTEROPSERVICES, the capability which was most important in WP7/WP8/8.1.
However, there are a great many interesting capabilities. Note that Interop-unlock by itself does not enable all of these. However, at least on Lumia/Samsung phones, it is now possible to enable *all* the capabilities.
As per my Research Microsoft has give up some FREEDOM to the 3rd Party Developers. Now the "ISV" Developers can sideload apps with the All "SECOND PARTY CAPABILITIES". However, having a Some hive privilege "SYSTEM" Resource that we can expand it to Enable All Capabilities.
The instructions are as follows:
1. Turn "ON" Developer Unlock Mode. (Go to Settings> Update & Security> For Developers)
2. Download "Root Tool.xap" from attachments and deploy It.
Recommended:
For Lumia:
Open "vcReg" Tool.
Hit the Application Bar and select "Templates".
Here will see two options, Interop/Capability Unlock and "Full File System" Access through the MTP Protocol.
Check your options, and click "Apply".
You are Done !
Custom:
Go to Device Specific Registry Editor Tool.
Select "HKEY_LOCAL_MACHINE"
Write default values.
(For Lumia)
"SOFTWARE\Microsoft\DeviceReg\Install"
"MaxUnsignedApps"=DWORD:7FFFFFFF
(For Samsung)
"SOFTWARE\Microsoft\DeviceReg\Install"
"MaxUnsignedApps"=DWORD:2147483647
Preventing Unlock:
"SOFTWARE\Microsoft\DeviceReg"
"PortalUrlInt"="http://127.0.0.1"
"PortalUrlProd"="http://127.0.0.1"
Unlocking NEW Capability Engine:
Write these values:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityMana ger\AuthorizationRules\Capability\capabilityRule_D evUnlock]
"CapabilityClass"="capabilityClass_DevUnlock_Inter nal"
"PrincipalClass"="principalClass_DevUnlock_Interna l"
ENJOY :)
I have not got much time to continue the Development on My "Root Tool" App. (Even for the writing tut's)
Hence, this is not a Complete "Root Access" but we are working on it to gain Full SYSTEM Access.
Still, If you got any Issue's after this tutorial then ask your "Questions" In Q/A Thread.
SPECIAL Thanks to @vcfan (Without the RPC Code from "vcFAN" was Impossible to Interop Unlock or Capability Unlock)
Thanks to @ngame and @GoodDayToDie
Thanks Everybody for your Big Support.
Yeah this is the First thread, First Post about the Windows 10 Mobile Hacking.
Now the First Interop Unlock hack for W10M is now available. It's currently limited to LUMIA/SAMSUNG phones, although we're trying to extend it to other OEM Device, of course. (It requires specific Driver/Services to "RUN" into "SYSTEM" Privileges. Hence, other OEM Device is lack of these. I.e HTC/Micromax etc. etc.)
A brief summary, for those unfamiliar with interop-lock:
Windows Phone allows a number of high-privilege app capabilities, which can be used to make changes to the OS which are normally not possible for a third-party Applications.
The limitation on whether we can use these capabilities or not is based on what "level" of developer unlock the phone has.
ON WP7/8/8.1
Standard "ISV" (Independent Software Vendor) Dev Unlock (max 10 apps or less) is what pretty much everybody gets.
OEMs, however, get a special OEM Developer Unlock (300 apps or more) which gives them the ability to use much higher-privilege app capabilities than the standard ISV unlock permits. The name comes from ID_CAP_INTEROPSERVICES, the capability which was most important in WP7/WP8/8.1.
However, there are a great many interesting capabilities. Note that Interop-unlock by itself does not enable all of these. However, at least on Lumia/Samsung phones, it is now possible to enable *all* the capabilities.
As per my Research Microsoft has give up some FREEDOM to the 3rd Party Developers. Now the "ISV" Developers can sideload apps with the All "SECOND PARTY CAPABILITIES". However, having a Some hive privilege "SYSTEM" Resource that we can expand it to Enable All Capabilities.
The instructions are as follows:
1. Turn "ON" Developer Unlock Mode. (Go to Settings> Update & Security> For Developers)
2. Download "Root Tool.xap" from attachments and deploy It.
Recommended:
For Lumia:
Open "vcReg" Tool.
Hit the Application Bar and select "Templates".
Here will see two options, Interop/Capability Unlock and "Full File System" Access through the MTP Protocol.
Check your options, and click "Apply".
You are Done !
Custom:
Go to Device Specific Registry Editor Tool.
Select "HKEY_LOCAL_MACHINE"
Write default values.
(For Lumia)
"SOFTWARE\Microsoft\DeviceReg\Install"
"MaxUnsignedApps"=DWORD:7FFFFFFF
(For Samsung)
"SOFTWARE\Microsoft\DeviceReg\Install"
"MaxUnsignedApps"=DWORD:2147483647
Preventing Unlock:
"SOFTWARE\Microsoft\DeviceReg"
"PortalUrlInt"="http://127.0.0.1"
"PortalUrlProd"="http://127.0.0.1"
Unlocking NEW Capability Engine:
Write these values:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityMana ger\AuthorizationRules\Capability\capabilityRule_D evUnlock]
"CapabilityClass"="capabilityClass_DevUnlock_Inter nal"
"PrincipalClass"="principalClass_DevUnlock_Interna l"
ENJOY :)
I have not got much time to continue the Development on My "Root Tool" App. (Even for the writing tut's)
Hence, this is not a Complete "Root Access" but we are working on it to gain Full SYSTEM Access.
Still, If you got any Issue's after this tutorial then ask your "Questions" In Q/A Thread.
SPECIAL Thanks to @vcfan (Without the RPC Code from "vcFAN" was Impossible to Interop Unlock or Capability Unlock)
Thanks to @ngame and @GoodDayToDie
Thanks Everybody for your Big Support.
Aucun commentaire:
Enregistrer un commentaire