Thread: How To get forgotten lock code from locked device
View Single Post
Lukas is offline Lukas
2011-12-02 , 22:37
Posts: 8 | Thanked: 4 times | Joined on Dec 2011 @ ulm, germany
#1
Hey,

i have to post this, because there is no post like this in the internet i know so far.

This instructions are helpful if you have changed your lock code from 12345, forgotten it and then locked it.
You dont have to flash it and you can keep all your data.

It worked for me with on archlinux. If your using windows or something else the instructions may be helpful.

1. Get shell access to and on your phone
This is the hard part, because it is not supported by default.
The idea is to start the flasher and give him another kernelimage to boot.

You have to download the following files:
nin101.uni.cx/N900/rescueOS/rescueOS-initrd-0.5.img.new
nin101.uni.cx/N900/rescueOS/2.6.37
(I saw it and use it because of this post: talk.maemo.org/showpost.php?p=1077983&postcount=18)


Also you have to download the flasher software and install libusb 32bit.
tablets-dev.nokia.com/maemo-dev-env-downloads.php

Then to the following:
(listed here: wiki.meego.com/ARM/N900/Using_Rescue_Initrd)
  • Remove the back cover
  • Turn off your device by removing battery
  • Insert the battery back to the device
  • Put back cover to the device (This is not needed if you don't need to have access to the microsd card, or if you use magnet instead).
  • Start flasher with the following:
PHP Code:
sudo ./flasher-3.5 -k 2.6.37 -n rescueOS-initrd-0.5.img.new -l -b"rootdelay root=/dev/ram0" 
If it works your getting an terminal access on your phone.
Successful output will look like this:
PHP Code:
[lukas@PC-INF-LH2 maemo_flasher-3.5_2.5.2.2]$ sudo ./flasher-3.5 -k 2.6.37 -n rescueOS-initrd-0.5.img.new -l -b"rootdelay root=/dev/ram0"
flasher v2.5.2 (Oct 21 2009)

USB device found found at bus 004, device address 056.
Found device RX-51, hardware revision 2204
NOLO version 1.4.14
Version of 'sw-release': RX-51_2009SE_20.2010.36-2_PR_MR0
Sending kernel image (1901 kB)...
100% (1901 of 1901 kB, avg. 38032 kB/s)
Sending initfs image (12096 kB)...
100% (12096 of 12096 kB, avg. 37565 kB/s)
Using kernel command line: "rootdelay root=/dev/ram0" 
2. Use this access
This video youtube.com/watch?v=vVE4tjPpWG4 tells you this:
when you are in the terminal type:
PHP Code:
cat /dev/mtd1 | grep -A 13 lock_code | tail -1 
If you cant type this "|" type the following and take the last line
PHP Code:
grep -A 13 lock_code /dev/mtd1 
this outputs e.q. "9vJ3.d85nKD0w"
save "root:OUTPUT:" to a file named "tmpfile" then type
PHP Code:
john -format:DES -i:digits tmpfile 
After some time the output is: YOUR LOCK CODE!

so have fun

ps: sorry for the bad formatted links, im not allowed to post links as a new user.
Last edited by Lukas; 2011-12-03 at 13:19.
 

The Following 4 Users Say Thank You to Lukas For This Useful Post: