Find Your Forum
  
Welcome, Guest. Please login or register.
Did you miss your activation email?

News: Do you like LG Xenon?
LG Xenon, LG Xenon phone  
Best Screen Protector for LG Xenon      Lowest Price on AT&T Phones
Pages: 1 [2] 3 4
Print
Author Topic: Let the hacking BEGIN! (Filesystem access achieved!)  (Read 27978 times)
bhiga
Administrator
Hero Member
*****
Posts: 848


View Profile
« Reply #15 on: November 18, 2010, 12:35:12 PM »

The standard "home" directory for OBEX access is virtual.  It's actually a filtered view of what exists in the real /Media folder.

So, technically you're already in /Media

I posted a filesystem map for the AT&T-branded firmware a while back.  The Fido/Rogers/Telstra versions will likely have slight differences, but the core structure should be the same.
Logged

--Brandon
LG GR500 Xenon: The Better Manual - get it here
Carrier: AT&T
Data cable: LG-DLC100
Platforms: XP Pro 32-bit, Windows 7 Pro 64-bit
Phone: LG Xenon (GR500) - Black
guitaraddict4791
Newbie
*
Posts: 12


View Profile Email
« Reply #16 on: November 20, 2010, 01:54:28 AM »

Im psyched for this!
This is perfect timing really. God just told my blackjack II to die, and I just got a new spring for my xenon, so its been resurrected, and I have my upgrade at the end of november, so Im willing to work on themes and whatnot.

My only problem is, my laptop is a combination of so many different old laptops (computers break, so I put them together to save money) and I don't have bluetooth yet.

If someone would be willing to get the filesystem off their AT&T Xenon, upload it somewhere, and give me a link, i'd be happy to start crunching down and setting it up.


PS...I got the firmware update for May today....what did they change?
Logged
bhiga
Administrator
Hero Member
*****
Posts: 848


View Profile
« Reply #17 on: November 21, 2010, 07:16:10 PM »

No idea what changed in the May update, I think they might've fixed the bug with the initial SIM contact import, but haven't been motivated enough to check...
Logged

--Brandon
LG GR500 Xenon: The Better Manual - get it here
Carrier: AT&T
Data cable: LG-DLC100
Platforms: XP Pro 32-bit, Windows 7 Pro 64-bit
Phone: LG Xenon (GR500) - Black
askies
Administrator
Newbie
*****
Posts: 19



View Profile Email
« Reply #18 on: February 02, 2011, 01:54:13 AM »

Just found out that myphoneexplorer can browse the filesystem through bluetooth serial on windows sp3 on the windows bt stack. You just need to press the "Create new folder button" and type in ".." as the folder name. Same 4 directory limit. Uploading doesn't seem to work. Regardless of upload ability, the sync function looks like a good way to download most of the filesystem faster.
Logged

LG Xenon GR500FD from Fido - No longer used.
bhiga
Administrator
Hero Member
*****
Posts: 848


View Profile
« Reply #19 on: February 03, 2011, 05:32:48 PM »

Oooh, good tip.  Does it get past the 4-subfolder limit, or does it error out trying to get to say, ../Media/java/cert ?
Logged

--Brandon
LG GR500 Xenon: The Better Manual - get it here
Carrier: AT&T
Data cable: LG-DLC100
Platforms: XP Pro 32-bit, Windows 7 Pro 64-bit
Phone: LG Xenon (GR500) - Black
spillb
Newbie
*
Posts: 19


View Profile
« Reply #20 on: February 25, 2011, 10:33:06 AM »

I have not been here in a while, but as for the 4 layer limitation, in a reply to the following post I showed that I made it in at least 5 layers using obex in linux.

http://www.lg-xenon.com/lg-xenon-modifications/accessing-filesystem-using-bluetooth-and-obex/



Here is what I posted:

I can get passed 4 layers if I use the -S switch. I'm using obexftp in ubuntu. Not sure if openobex has this switch.


i.e.  5 layers

obexftp -b xx:xx:xx:xx:xx:xx -S -c ../Media/Obigo/ref/theme/2 -l

Sending "../Media/Obigo/ref/theme/2"...|done

Receiving "(null)".../<?xml version="1.0"?>
<!DOCTYPE folder-listing SYSTEM "obex-Folder-listing.dtd">
<folder-listing version="1.0">
<parent-folder />
<file name="ls_Browser_softkey_forward.bmp" size="7076" />
<file name="Browser_softkey_favorite_dim.bmp" size="4196" />
<file name="tab_active2nd.bmp" size="30054" />
<file name="zoombar_out.bmp" size="1712" />
<file name="Browser_softkey_forward_p.bmp" size="4196" />
<file name="ls_Browser_softkey_back.bmp" size="7616" />
<file name="zoombar_in_p.bmp" size="1712" />
<file name="Browser_softkey_zoom.bmp" size="4736" />
<file name="zoombar_out_p.bmp" size="1712" />
<file name="Browser_softkey_refresh_p.bmp" size="4196" />
<file name="Browser_softkey_forward_dim.bmp" size="4196" />
<file name="Widgets_softkey_back.bmp" size="4536" />
<file name="ls_Browser_softkey_zoom_p.bmp" size="7796" />
<file name="Browser_softkey_refresh.bmp" size="4196" />
<file name="Browser_softkey_back.bmp" size="4736" />
<file name="zoombar_in.bmp" size="1712" />
<file name="zoombar_bg.bmp" size="21740" />
<file name="Browser_softkey_back_dim.bmp" size="4736" />
<file name="ls_Browser_softkey_refresh.bmp" size="7076" />
<file name="ls_Browser_softkey_stop_dim.bmp" size="7076" />
<file name="Browser_softkey_zoom_dim.bmp" size="4736" />
<file name="ls_Browser_softkey_zoom.bmp" size="7796" />
<file name="Browser_softkey_option.bmp" size="4536" />
<file name="ls_Browser_softkey_back_p.bmp" size="7616" />
<file name="ls_Browser_softkey_zoom_dim.bmp" size="7796" />
<file name="ls_Browser_softkey_favorite_p.bmp" size="7076" />
<file name="ls_tab_active1st3.bmp" size="54254" />
<file name="ls_tab_active1st.bmp" size="54254" />
<file name="Browser_softkey_close_p.bmp" size="9176" />
<file name="Browser_softkey_next_p.bmp" size="9176" />
<file name="browser_close_p.bmp" size="776" />
<file name="Browser_softkey_refresh_dim.bmp" size="4196" />
<file name="Widgets_softkey_back_p.bmp" size="4536" />
<file name="Browser_softkey_stop_dim.bmp" size="4196" />
<file name="Browser_softkey_close.bmp" size="9176" />
<file name="Browser_softkey_forward.bmp" size="4196" />
<file name="ls_tab_active2nd.bmp" size="54454" />
<file name="Browser_softkey_favorite_p.bmp" size="4196" />
<file name="ls_Browser_softkey_back_dim.bmp" size="7616" />
<file name="ls_Browser_softkey_stop_p.bmp" size="7076" />
<file name="Widgets_softkey_option_dim.bmp" size="4536" />
<file name="ls_tab_active2nd3.bmp" size="54454" />
<file name="Browser_softkey_prev_p.bmp" size="9176" />
<file name="Browser_softkey_next.bmp" size="9176" />
<file name="ls_Browser_softkey_refresh_dim.bmp" size="7076" />
<file name="Browser_softkey_option_dim.bmp" size="4536" />
<file name="ls_Browser_softkey_refresh_p.bmp" size="7076" />
<file name="zoombar_cursor.bmp" size="470" />
<file name="Browser_softkey_stop_p.bmp" size="4196" />
<file name="ls_Browser_softkey_option_dim.bmp" size="4536" />
<file name="Widgets_softkey_option.bmp" size="4536" />
<file name="ls_Widgets_title_bg.bmp" size="60056" />
<file name="ls_Browser_softkey_forward_p.bmp" size="7076" />
<file name="Widgets_title_bg.bmp" size="36056" />
<file name="Browser_softkey_prev.bmp" size="9176" />
<file name="ls_Browser_softkey_forward_dim.bmp" size="7076" />
<file name="Browser_softkey_option_p.bmp" size="4536" />
<file name="ls_Browser_softkey_bg.bmp" size="48056" />
<file name="ls_Browser_softkey_stop.bmp" size="7076" />
<file name="Browser_softkey_back_p.bmp" size="4736" />
<file name="ls_Browser_softkey_favorite.bmp" size="7076" />
<file name="tab_left_bg.bmp" size="6454" />
<file name="ls_Browser_softkey_option.bmp" size="4536" />
<file name="Widgets_softkey_option_p.bmp" size="4536" />
<file name="Browser_softkey_favorite.bmp" size="4196" />
<file name="Browser_softkey_bg.bmp" size="28854" />
<file name="ls_Browser_softkey_option_p.bmp" size="4536" />
<file name="Browser_progress_bar.bmp" size="132" />
<file name="browser_close.bmp" size="776" />
<file name="tab_active1st.bmp" size="30054" />
<file name="Browser_softkey_stop.bmp" size="4196" />
<file name="Browser_softkey_zoom_p.bmp" size="4736" />
<file name="ls_Browser_softkey_favorite_dim.bmp" size="7076" />
</folder_listing>

Logged

OS: Linux Ubuntu 9.04

Computers are like Air Condiitoners, everything works fine until you start opening Windows.
Melody-M
Newbie
*
Posts: 1


View Profile Email
« Reply #21 on: March 18, 2011, 07:56:52 PM »

I downloaded the bluesoleil. but how do i use the program and what's a dongle? :S
Logged
bhiga
Administrator
Hero Member
*****
Posts: 848


View Profile
« Reply #22 on: March 21, 2011, 03:47:00 PM »

"dongle" is a colloquialism for a USB adapter, usually of the short, 'stick' type.
In this context it means a USB Bluetooth adapter.
Logged

--Brandon
LG GR500 Xenon: The Better Manual - get it here
Carrier: AT&T
Data cable: LG-DLC100
Platforms: XP Pro 32-bit, Windows 7 Pro 64-bit
Phone: LG Xenon (GR500) - Black
iMan69
Newbie
*
Posts: 1


View Profile
« Reply #23 on: March 23, 2011, 08:28:06 PM »

great job in breaking through!
however i don't quite understand exactly which files you must upload to where to replace the security policy...do we have to have a modified security policy file or something? could you please clarify, and i do apologize im not too sure about phone software
Logged
bhiga
Administrator
Hero Member
*****
Posts: 848


View Profile
« Reply #24 on: March 25, 2011, 07:22:00 PM »

The Java security policy file is just a text file.

For AT&T Xenons, it's /Media/java/cert/att.pol
For Rogers Xenons, it's /Media/java/cert/rogers.pol

First, MAKE A LOCAL BACKUP COPY OF THE FILE

Then open the file in WordPad (not Notepad, WordPad - because WordPad understands files with only CR and no LF) and modify it.

Once you have modified your policy file, save your new att.pol or rogers.pol file (don't overwrite your backup of the original file - save to a new file in a different location), then upload the file to your phone in /Media/Java/cert



If you look through the file, you'll find lines that look like
Code:
allow: HTTP_HTTPS
allow: Comm_Connectivity
blanket(oneshot): SSL
blanket(oneshot): Datagram
session(oneshot): SMS

eventually you'll come down to a section that reads
Code:
domain: untrusted
oneshot: HTTP_HTTPS
or something very similar.

The oneshot means that every access to that function (very annoying), in this case every access to HTTP and HTTPS connections prompts you.  Also, there's nothing else listed in this section, which means ONLY HTTP and HTTPS connections are allowed - all the rest of the functions like SMS, SIM, Location (GPS), FILE (card and allowed Java filesystem areas) are DENIED.

If you look up a little bit, you'll notice
Code:
domain: C=KR;O=LG Electronics;CN=CA, LG Electronics for Developer
type: operator
allow: HTTP_HTTPS
allow: Comm_Connectivity
allow: SSL
allow: Datagram
allow: Socket
allow: SIP
allow: Push
allow: PIM
allow: FILE
allow: SMS
allow: CBS
allow: MMS
allow: Bluetooth
allow: SIM
allow: Location
allow: Record_Control
Which is the section for applications that have been signed by the LG Developer SDK.  It's all allow which means essentially the application has unrestricted access to all those function groups and doesn't even have to prompt the user first.


If you trust all your applications not to do sneaky stuff, you can just delete the oneshot: HTTP_HTTPS line under domain: untrusted and copy all the allow: ____ lines so it looks like:
Code:
domain: untrusted
allow: HTTP_HTTPS
allow: Comm_Connectivity
allow: SSL
allow: Datagram
allow: Socket
allow: SIP
allow: Push
allow: PIM
allow: FILE
allow: SMS
allow: CBS
allow: MMS
allow: Bluetooth
allow: SIM
allow: Location
allow: Record_Control
In this case, apps have access to pretty much all phone functions and are not required to prompt the user.  Essentially this is leaving the door unlocked.  If you download a malicious application that tries to delete all your SIM contacts, upload your location somewhere, whatever, it will work and you will not see any sign of what it did, because it is not required to prompt the user.


If you're a little more cautious and want to be notified the first time an app uses a particular function, but not on additional accesses on that run of the application, you can use session(oneshot): instead, so your domain: untrusted section would look like:
Code:
domain: untrusted
session(oneshot): HTTP_HTTPS
session(oneshot): Comm_Connectivity
session(oneshot): SSL
session(oneshot): Datagram
session(oneshot): Socket
session(oneshot): SIP
session(oneshot): Push
session(oneshot): PIM
session(oneshot): FILE
session(oneshot): SMS
session(oneshot): CBS
session(oneshot): MMS
session(oneshot): Bluetooth
session(oneshot): SIM
session(oneshot): Location
session(oneshot): Record_Control
This will prompt you on access the first time a function is used, on every use of the application.  This means if you run Gmail, it'll ask you for access once, then you won't be asked again until you exit Gmail.  If you exit Gmail, then run it again, it'll ask you for access once, but if you just leave Gmail running, it won't ask for access again unless it's for a different function.


There are other variations you can use, like blanket(oneshot) which (I think) asks once then never asks again until the app is uninstalled  - or you can remove lines for functions you don't want apps to be able to use.

For example, you'll notice that even signed apps have certain restrictions, at least in AT&T-land, only apps signed by AT&T "Trusted" root have access to the Location API (which includes the GPS).  The AT&T "Preferred" root apps have access to the same stuff except SIM and Location.

Third-party apps have access to an even smaller set of functions, until finally your reach untrusted (unsigned, or signed by an unrecognized authority) applications which have only HTTP and HTTPS access, with prompt on every access (oneshot).


Note: You can actually go and install the LG Developer SDK, then re-sign applications as a developer (I call this "dev signing") but it's a real PITA compared to just changing your Java policy file.
Logged

--Brandon
LG GR500 Xenon: The Better Manual - get it here
Carrier: AT&T
Data cable: LG-DLC100
Platforms: XP Pro 32-bit, Windows 7 Pro 64-bit
Phone: LG Xenon (GR500) - Black
SQUADALA
Newbie
*
Posts: 4


View Profile
« Reply #25 on: April 06, 2011, 04:38:26 PM »

where can i get IVT bluesoleil v1.7? i can only fine 6.# 7.# and 8.#
THANKS!
Logged
bhiga
Administrator
Hero Member
*****
Posts: 848


View Profile
« Reply #26 on: April 06, 2011, 04:46:02 PM »

I got 2.7 from the site pointed to on the package of my POTHXXXXAD09 Bluetooth dongle.
Logged

--Brandon
LG GR500 Xenon: The Better Manual - get it here
Carrier: AT&T
Data cable: LG-DLC100
Platforms: XP Pro 32-bit, Windows 7 Pro 64-bit
Phone: LG Xenon (GR500) - Black
SQUADALA
Newbie
*
Posts: 4


View Profile
« Reply #27 on: April 06, 2011, 05:38:41 PM »

i got in!
how do you install jar files?
THANKS!
P.S. im on rogers
« Last Edit: April 07, 2011, 06:47:59 PM by SQUADALA » Logged
Rdub
Newbie
*
Posts: 4


View Profile
« Reply #28 on: April 23, 2011, 03:36:37 PM »

I just purchased a Xenon off of fleabay to replace my old phone and am willing to dedicate it to some hacking.


From reading this thread, and just to confirm, we do have write access everywhere on the phone correct?
If so...
Have we figured out a way to modify the SMS Message limit? If not, I can start working on that as soon as I get a bluetooth dongle.

Looking through the filesystem that was posted, it looks as if it would be a modification of a couple files, but since I have never dealt with a .pxo file before I am not quite sure what to expect.

I will be available all summer to do the hacking since my 9-5 can get pretty slow most days.
Logged
bhiga
Administrator
Hero Member
*****
Posts: 848


View Profile
« Reply #29 on: April 25, 2011, 12:58:32 AM »

As far as I know, using the posted trick, yes, you do have access to write anywhere on the phone.

As for editing PXO's, I'm in the dark too.  The folks in the Vu forum have much more information there.
Logged

--Brandon
LG GR500 Xenon: The Better Manual - get it here
Carrier: AT&T
Data cable: LG-DLC100
Platforms: XP Pro 32-bit, Windows 7 Pro 64-bit
Phone: LG Xenon (GR500) - Black
Pages: 1 [2] 3 4
Print

Jump to:  

Got a new phone? Find the forum here





Galaxy S3 | Galaxy Note | Galaxy Nexus | Kindle Fire | Atrix 4G | Motorola Xoom | Windows Phone 7
Nokia Lumia | Tech Support Forum | Top Hosts | Samsung Galaxy Tab | Samsung Galaxy S2 | Samsung Galaxy S | Samsung Wave
HTC Evo 3D | HTC Evo 4G | HTC Incredible | HTC Incredible 2 | HTC Incredible S | HTC Thunderbolt
Motorola Droid Razr
| HTC Desire | HTC Desire HD | HTC Desire Z | HTC Desire S | HTC Wildfire
Motorola Droid | Galaxy Indulge | Nokia N8 | Droid Charge | Droid X | Droid X2 | Droid 2| Droid 3 | Fascinate
HTC Sensation | HTC Flyer | LG Revolution | Asus Transformer | Xperia Play | iPhone 4 | Nexus S | Droid Bionic
HTC One | HTC Wildfire S | HTC Droid Eris


This is an Un-Official fan based Website. The views expressed on this website are solely those of the proprietor, or contributors to the site, and do not necessarily reflect the views or opinions of the parties it covers, and is not affiliated with, endorsed or sponsored by parties involved.
If you have a problem with any of the content posted on this website, please contact "mobile@vssupportqueue.com"
Term of Use | Privacy Policy | BlackRain 2006 by, Crip