first of all I need to crack the password.

According to Hurrian I need to do these steps:

Load the rescue initrd, log in with ssh, then run strings on mtd1 to get lock code hash, then crack it with John.

1- Load the rescue initrd:

with what command? this one ?

$ sudo flasher --load -k vmlinuz-2.6.32.20112201-11.2-adaptation-n950-bootloader -n initrd.img-rescue-2.6.32.20112201-11.2-n950 --boot

2- log in with ssh with winXP??? explain me how to in details please

3- run strings on mtd1 to get lock code hash ??? How to?

4- crack it with Johnthe ripper how to?

Thanks in advance

N950, if i am not wrong, by plugging powered off device to pc you should be able to ssh to 192.168.2.15

crossed fingers to crack passwd

I need details for all steps please.

well, just power device off and plug it to pc, then try ssh root@192.168.2.15
password might be "rootme"

I have Windows XP not linux !

Can I use Putty?

http://the.earth.li/~sgtatham/putty/.../x86/putty.exe

or Winscp? with this application I need to have IP, username and password.

I don't have user and pass.

Yes you can use PuTTY, as long as the phonet interface is connected, and you have an IP from it.

Do you have it yet? Is that black thing around it a shell or is it the actual housing?

I did this guide how to bypass security lock on N9. of course, you'll need only part of that solution.

http://talk.maemo.org/showthread.php?t=88649

And one important thing here, for Rusnak-COBRA's method you do need to have a linux PC, as windows does not know how to mount ext2 partitions

I am told that linux running on virtual machine inside windows is also OK, but never have used that myself.

it is possible to have some workaround on windows PC, that would not be so much problem. but better to be on linux. even maybe on live boot.