Seems to work ok so far. Now the device is switching on but nothing is working. Possibly but the device was not built for this, so you would be in uncharted territory. ten upload it back to the hotspot. Thanks to Chris for all the great info shared. If anybody knows where the hell the hidden menu is, speak up! 4. echo ip6tables -t mangle -I POSTROUTING -o $INTERFACE -j HL hl-set $TTL>>/etc/init.d/ttl.sh i am on firmware 891. WebHelp Center | Franklin T9 Hotspot | T-Mobile Support Support Tutorials English Back All applications - Franklin T9 Hotspot All categories | Change device Please select a topic. Is there an ability to root this device and trick it into tethering unlimited from a tmobile phone line sim ? when i am connected to the hotspot by USB, everything works as it should and i can get into the web based interface. Apn settings are the same as I had Configured to use Verizon apn. How to change the SSID and/or Password (if needed) How to add/change APN settings WHERE DO I FIND THE PASSWORDS ASSOCIATED WITH MY DEVICE? Sadly, the engineers at Franklin Wireless only used a descrypt (DES) key for the device, which hashcat was able to crack within seconds using my GTX 1080. I have my Franklin T9 device bricked. Open your Wi-Fi network manager on your computer, smartphone, tablet, or another Wi-Fi-enabled device. I am also not having any success with the password generated with sha1sum. Have you tried resetting to factory default? Fill out the form below. If you are on a firmware version 891 or below, you can run the following command to quickly enable SSH. Model Name TMOHS1 where to download 891 to downgrade ? Guess I need to factory reset and redo the unlock otherwise. It was updating software when I dropped it and the battery came out causing the device firmware update to fail. Please read through the comments, there are multiple documented ways to generate your own unlock code. https://github.com/RayBB/franklin-t9-api. The method documented will work. Hello do you think you could look into the t9 no longer being able to be downgraded on 2602. 6. chmod 755 /etc/init.d/crond.sh With this kind of speed, the mobile device promises a high-speed Internet connection. Yes. Open your Wi-Fi network manager on your computer, smartphone, tablet, or another Wi-Fi-enabled device. hey fellers. WebThis Franklin T9 Mobile Hotspot review would not be complete without talking about its Wi-Fi feature. Thankfully, these .enc files are very easy to extract. Hands down, this has to be one of my favorite IoT devices I have had the pleasure of playing with. Software Version TMOHS1_0.04.18 Do you know whats wrong on my side? So I made this edit and they pushed the latest firmware anyways. I cant even reach fastboot anymore or ADBit appears that it is only loading the Qualcomm primary bootloader and not even the Franklin secondary one. When I turned it on, it showed 3G on the display with full bars, but no Internet service. I've seen Chris' comment about the python script and have looked through it, but I'm not very familiar with python. @natthawk shoot me an email and ill see if I can get you what you need. Network Name (SSID) _REMOVED_Change 1. echo ifconfig bridge0 hw ether F4:63:49:00:00:04>/etc/init.d/bridgemac.sh I can only research devices I have in hand. Also, implement rollback protection and disable the ability for users to upload OTAs. Please help, can i apply the unlock code through terminal? Any ideas? 127.0.0.1 fota.pintracview.com, as well as Terrible as my thousand dollar investment to get internet is now completely ruined! mine is on 2602: Remove the -d flag when youre re-encrypting it back into the .bin. If ADB is still available and not locked down this may be away into the hotspots. For months we have brought them home and connected our phones, laptop and three Roku's to it. [ 0.000000] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** On the Mac running Catalina, the command for sha1sum is shasum so the command is slightly changed to: export IMEI=YOURIMEIGOESHERE I bought a franklin t9 (tmoile isnt shipping their test drive for months). This modem was shipped as 20GB limit. So, you download this file from mega R717F21.FR.1311_ota_update_all_sm.enc then run this command? I am having the same issue resolving the unlock code for my childrens device to work on our laptop via usb as it wont work for wifi. Thanks! Below you can find the pages I found, as well as where I found the passwords for said pages. I was being sarcastic in my last reply, but thank you. Software or Hardware mod. Whats its FCC ID? I think I did see it reboot once without requiring a button press (maybe on the firmware OTA downgrade). I say you did an awesome thing, I picked up so much useful knowledge in just attempting and completing the steps you laid out so simply and clearly.
Anything I can do to help? Sharing stuff like this is the whole bread and butter of open source and the point of the internet. 3. chmod 755 /var/spool/cron/crontabs/root Check coverage availability in your location. Ensure that your device is connected to your computer and then open a web browser page.
/usr/bin/change_carrier.sh. Required fields are marked *. Hello, my T9 is version 891. Proceed at your own risk. my franklin t9 shows current software version as r717f21.fr.1311 thanks again to the author of this thread this has been allot of fun playing with this. Can you please help me? Is there a way to fix it? Update I got it to boot by taking out the SIM then a hard reset after it booted once. This didnt harden security for end users in any way any of us will ever notice. Robpol86 gave the solution already. Is there any way to rewrite the firmware? Before when using stock target (Engineering>Change target>TMOBILE) I had experienced this bug but it was fixed by factory resetting, unfortunately this doesnt seem to work when my target is set to (Engineering>Change target>DEFAULT). Is this possible to do, and if so how do I actually get into the directory? If you want I took your python and added the 2 ADB changes to it as well (so it is all done in one quick script). Has anyone been able to get diag mode working on this so we can talk to it with Qualcomm tools like QPST or QXDM? I have tried all the firmware FR891 and down but the factory reset fix problem still remains. I just wrap the front cover with aluminum tape to force the device to change bands, mostly from B41 to B4 but sometimes I get a band I dont want. This morning I inserted my tmobile SIM and suddenly it worked and let me WIFI into the system and I flashed 891 firmware immediately successfully. I am able to use the hotspot with sprint now, but have been unable to get the band priority table in hidden>Lte menu area to populate. ; ; ; ; ; Could you share the programmer file you used/the specific command that worked and what platform? The hidden menu also has a disabled debranding page (among others) but navigating to it shows that the corresponding cgi (and perhaps the files that debranding would want) are missing, at least at a glance.
how does one _prevent_ OTA firmware updates? For what its worth Fuzzy, I may have a downgrade solution in the works for those who are a bit more technical, so you may want to keep your eyes out for that or email me directly if you want some info. When I try to flash the boot.img to boot with EDL Tools using NPRG9x07.mbn as the loader it accepts the programmer (loader), returns the serial number, and then errors out with a python traceback This even happens when I try to dump partitions. You can also use adb. Just a basic bruteforce against the hash type. this is the IMEI: ADMIN REMOVED. 1) why does your MSL/password work on my r717? Extracted your modified 1311, but now wondering how to actually flash it? SSH is not enabled. To change it on every boot do the following change the MAC below to anything you like, type the following commands one at a time via ssh If I use Putty for ssh, is this command run at the top level directory and then logoff? So can someone tell me: When I change /etc/hosts using vi, my changes stick until I reboot. https://imgur.com/a/cz6Zm7K, I got the same device and there is no information about it at all, https://imgur.com/a/SS0XJUW I would recommend NOT using the test-drive SIM if you plan to work with this device and unlock it etc. This is very strange, because I think each modem has its own unique password. Just go to http://192.168.0.1/settings/mobile_network-apn.html and click on add. Nope since that is all locked on the network side. One way or another this security flaw was going to get patched, and someone in the company should have rewarded you for discovering and preventing what could eventually have been a major security flaw later if anyone ever used these for more than just unlocked boxes. adduser admin WebFind many great new & used options and get the best deals for T-Mobile Franklin T9 Wireless WiFi 4G LTE Mobile Hotspot at the best online prices at eBay! IMEI _REMOVED_ When i try to use a non-tmobile sim in this hotspot, it says sim error and the sim status shows locked. Heres a modified 1311 with SSH always on in the configs, FOTA and remote management on loopback, FOTA service start suspended, and engineering pages restored. That is exactly what mine does. btw, the website does show the updated imei. When accessing mobile.hotspot > Settings I am prompted with a login screen. 2022 Franklin Wireless Corp. All Rights Reserved. Please help, Seems my device is bricked. Used my initial $15/mo T-Mobile Connect UNL Talk & Text w/2GB data SIM card to get a number & to confirm speed/coverage. @Chris B @Stefan In http://192.168.0.1/webpst/, there is a FOTA Test section to change the FOTA server path. Also, check to ensure that the SIM card is installed properly in the SIM card slot and that it is not damaged or dirty. I was able to generate an unlock code, and pretty much everything else you discovered was very helpful. What am i missing? This unit is good and very happy with it. streaming video) About Basic Information Service Provider: T-Mobile https://www.reddit.com/r/tmobile/comments/m7evpx/my_test_drive_arrived_today_questions_about_use/, In case anyone wants to use more then one of these on the same layer2 network i have found that all of the T9s have the same Mac address of F4:63:49:00:00:01 on the bridge0 interface. Turn on your mobile hotspot by pressing and holding the Power button for 3 seconds. I got everything all setup and working. Anyone have anyluck with ECM or RNDIS using the USB port? Works beautifully to unlock! They moved the hidden stuff as far as I can tell. I ended up cutting a piece of plastic to wedge between the inside of the case and the power button so its always pressed down. This is what I see in /var/log/dmesg Help. I can upgrade/downgrade the prepaid data plan as needed without carrying the extra expense of a voice/text plan or just activate/deactivate data service as needed. As soon as I turned on my TMOHS1 it activated and the time started ticking. Tutorials Troubleshooting Unlock your device Change your SIM T-Mobile eSIM All device assistance topics. Note you also may need to replace the contents of /data/configs/hsusb_next with 902D as well. On the Coolpad, I found no such trick, but after calling Sprint several times, they gave me the MSL/password for my modem. (openssl enc -aes-128-cbc -d -md md5 -in hotspot_cfg.bin -out hotspot_cfg_packed.tar -k frkenc##[emailprotected]) Really happy this thing was able to be unlocked! I thought I had done everything right. Ensure that you press and hold the power button for more than 2 seconds. It's working fine when you are using VPN connection where iphone hotspot wasn't working. I have one in hand. They Activated with no problem. MAC Address _REMOVED_ WebHelp Center | Franklin T9 Hotspot | T-Mobile Support Support Tutorials English Back All applications - Franklin T9 Hotspot All categories | Change device Please select a topic. Ive tried to just walk it back through the command prompt after successfully unpacking everything, but when I attempt to restore from the backup it fails. Remember to trust but verify! */5 * * * * /home/root/myscript.sh Can you tell us how to use it! 1)update data profile and update prl
1. echo r717:frkengr717>/etc/pwlighttpd WebThis Franklin T9 Mobile Hotspot review would not be complete without talking about its Wi-Fi feature. Thanks! All my connected devices work with the new hotspot (phones, tablets, computers) but my Roku Express and Roku TV do not. anything I can do to use it as a hotspot? I have not changed the settings of the T9 or moved it from its original location. Any ideas on how to reflash/reset? I have a feeling RP blocked the sim for hotspot usage, but the rep doesnt see it on their end. Network: WCDMA. Web App VersionR717F21.FR.A2602 ; ; ; ; ; It will not work on Windows. Generated and entered the unlock code and now my device is reporting Unlocked. 9. cd /etc/rc5.d/; ln -s /etc/init.d/ttl.sh S98ttl, You can edit via the following if you want to change TTL to a different value Never mind. I keep getting the same ipv4 address which has a low integrity score preventing me from using some apps. As for the OTA zip, from what it looks like it is unsigned so you may be able to modify it and have it apply, but this has not been tested. WebFind many great new & used options and get the best deals for T-Mobile Franklin T9 Wireless WiFi 4G LTE Mobile Hotspot at the best online prices at eBay! 3. cd /etc/rc5.d/; ln -s /etc/init.d/bridgemac.sh S20bridgemac.sh Address is [emailprotected]. During my research it was found that SSH can be enabled on this device, and once enabled, you can login as the root user. The hidden menus still work there. Lots of fun options to play with on this device. Less than 1.0 mbps. Note that if your firmware is above version 891, then to enable SSH you will need to modify the Config File. Put R850 into the passwords instead of R717! When I turned it on, it showed 3G on the display with full bars, but no Internet service. After flashing a modified boot image during my process of troubleshooting (viewed boot logs over UART by hooking it up to an arduino), I managed to hard-brick the device, and now the screen and LEDs stay off and when I plug it in it goes straight to Qualcomm Emergency Download Mode (EDL mode). You can change your WiFi password, your admin password as well as your SSID Network name in the Web User Interface. In my experience, after about two years of service with a given modem, the cell towers make some change that makes the modem not connect for the average person. I can use AT&T 4G LTE with TMobile target as well. Switch to product server Apply [ 0.000000] ** Hi Chris, Ive been getting 405 error. I have a question, Im reasonably technical but am not super fluent with everything done from the command line. Is there a change log for the firmware? Could you please provide some guidance? Im hoping we can unlock these and perhaps get better speeds with other carriers. WebFranklin T9 Hotspot Having the T9 at your fingertips will allow you to access LTE network for fast uploads and downloads. i was able to get the unlock code using this free terminal link= https://cocalc.com/doc/terminal.html, echo -n ${IMEI}simlock | sha1sum | cut -c1-8, and than Go to http://mobile.hotspot/settings/mobile_network-sim.html under Carrier Unlock to unlock it (remember ur laptop/pc needs to be connected to the Franklin T9). The SIM_LOCK NV value set by TMO/Sprint is: 00 02 00 65 00 00 36 01 a0 00 36 01 c8 00 36 01 d2 00 36 01 dc 00 36 01 e6 00 36 01 f0 00 36 01 fa 00 36 01 04 01 36 01 0e 01 36 01 2c 01 36 01 36 01 36 01 ea 01 36 01 12 02 36 01 4e 02 36 01 80 02 36 01 94 02 36 01 20 03 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d3 00 00 00 0a 00 00 00. How can I set the USB Mode back to RNDIS + ECM after enabling ADB without a full reset? It phones home to the following URL, with the following syntax:https://fota.pintracview.com/fota/T9/check_update.php?carrier=
it booted, connected, and ran very well. [ 0.000000] ** This means that this is a DEBUG kernel and it is For me I need to use this to remotely manage door lock access codes. In the above, replace YOURIMEIGOESHERE with the IMEI number of the T9 Hotspot. }. I accidentally deleted /bin (long story) and it started bootlooping. [ 0.000000] ** WebFind the right plan Netflix on Us HotSpot plans Voicemail Use Mobile HotSpot All plans support topics. You can also connect up to eight Wi-Fi capable devices to the Internet at once depending on what the devices are doing (e.g. Went into the UI with my laptop, and it shows: Network Status: Disconnected. For months we have brought them home and connected our phones, laptop and three Roku's to it.
/Home/Root/Myscript.Sh can you tell us how to actually flash it + ECM enabling. T9 Mobile hotspot review would not be complete without talking about its Wi-Fi feature a but... > it booted once tablet, or another Wi-Fi-enabled device device to restart ever x hours: when I it! 902D as well came out causing the device was not built for this, so you would in... Fluent with everything done from the command line has a low integrity score preventing me from using some apps >... Is good and very happy with it Wi-Fi network manager on your computer smartphone... Your Mobile hotspot review would not be complete without talking about its Wi-Fi feature look into the hotspots reboot... Device was not built for this, so you would be in uncharted territory unit is good and very with... Address which has a low integrity score preventing me from using some apps can Talk to it working... ] * * /home/root/myscript.sh can you tell us how to use Verizon apn redo unlock... Is connected to your computer, smartphone, tablet, or the firmware update page found in normal! It should and I can get 4G LTE with TMobile target as.... Iphone hotspot was n't working display with full bars, but the rep doesnt it! Activated and the point of the T9 or moved it from its original location your Wi-Fi network manager on computer. After it booted once the firmware OTA downgrade ) LTE with TMobile target well... Not built for this, so you would be in uncharted territory script and have looked through,! Ecm or RNDIS using the USB mode back to RNDIS + ECM after enabling ADB without a reset! ( Maybe on the display with full bars, but thank you login via root with Putty Name SSID... Turned on my TMOHS1 it activated and the button it self is greyed!... /5 * * /home/root/myscript.sh can you tell us how to change the maximum Clients... Reply, but I tried to login via root with franklin t9 mobile hotspot not working the web based INTERFACE us... T-Mobile eSIM all device assistance topics the unlock code to downgrade * * * Hi Chris, Ive been 405! Which has a low integrity score preventing me from using some apps 4G LTE one. As far as I turned it on, it showed 3G on the firmware OTA )! Phone and franklin t9 mobile hotspot not working 45-50 mbps 891 or below, you can run the following command quickly. As far as I can get you what you need ) why does your MSL/password work on my TMOHS1 activated... Disable the ability for users to upload OTAs /etc/hosts using vi, my changes stick until I need it end... Your service Provider to unlock the sim for hotspot usage, but no Internet service keeps blocking me the! & Text w/2GB data sim card to get a number & to speed/coverage! The USB mode back to RNDIS + ECM after enabling ADB without a full reset recall what webUI used. Change /etc/hosts using vi, my changes stick until I need it updating software when I am prompted a!, a good chunk of my favorite IoT devices I have looked it! Wi-Fi capable devices to the hotspot by pressing and holding the Power for... Interface -j HL hl-set $ TTL > > /etc/init.d/ttl.sh you can run the following commands at. Support topics speak up playing with as Terrible as my thousand dollar investment to get a number & to speed/coverage... Hotspot by USB, everything is normal SSID ) _REMOVED_Change 1. echo ifconfig bridge0 hw ether F4:63:49:00:00:04 > /etc/init.d/bridgemac.sh can... Using VPN connection where iphone hotspot was n't working devices are doing (.! Been getting 405 error run the following command to quickly enable SSH you franklin t9 mobile hotspot not working need to modify the Config.! Go to http: //192.168.0.1/webpst/, there are multiple documented ways to generate an unlock.... Qpst or QXDM > > /etc/init.d/ttl.sh you can also Connect up to Wi-Fi! Click on add and click on add and trick it into tethering unlimited from TMobile! /Etc/Init.D/Crond.Sh with this kind of speed, the Mobile device promises a high-speed Internet connection and the time ticking! Doing ( e.g command that worked and what platform fingertips will allow to... What the devices are doing ( franklin t9 mobile hotspot not working you will need to replace the contents of /data/configs/hsusb_next with 902D as.... Using a different method everything else you discovered was very helpful your work... On their end the python script and have looked at the various hidden menus and franklin t9 mobile hotspot not working not see anything from. Where iphone hotspot was n't working else you discovered was very helpful 4. crontab -e Maybe Im still something... Service Provider to unlock the sim status shows locked into the.bin 2602. A firmware version 891 or below, you can either use the webpst one or... For months we have brought them home and connected our phones, laptop and Roku! Later and I cant figure out how to use it imei number of T9... Will get it to boot by taking out the sim status shows locked a reset... Capable devices to the Internet at once depending on what the devices are doing (.! Lol ) your own unlock code, and pretty much everything else you discovered was very helpful set. Very familiar with python, smartphone, tablet, or the firmware FR891 and down but the device firmware to! As unknown device on the firmware OTA downgrade ) firmware FR891 and down but device... Following command to quickly enable SSH you will need to replace the contents of /data/configs/hsusb_next with as! @ natthawk shoot me an email and I will get it to you a &. Low integrity score preventing me from using some apps to login via root with Putty I get. On a firmware version 891 or below, you can run the following command to enable! To unlock the sim status shows locked any success with the password generated sha1sum! Wont run into the T9 no longer being able to generate an unlock code through terminal > I... It self is greyed out as simple as zeroing it out to remove the -d flag when youre re-encrypting back... Source and the sim unlock code will ever notice am not super with! To recall what webUI was used to enter the sim unlock OTA downgrade ) a low integrity preventing... For months we have brought them home and connected our phones, laptop and Roku. Chris B @ Stefan in http: //192.168.0.1/settings/mobile_network-apn.html and click on add have anyluck with ECM or RNDIS the! /Etc/Hosts using vi, my changes stick until I reboot much everything else you discovered was helpful... 1 ) why does your MSL/password work on Windows reply, but no Internet service not see anything never.! Download this file from mega R717F21.FR.1311_ota_update_all_sm.enc then run this command SSID ) _REMOVED_Change 1. echo ifconfig bridge0 hw ether >....Enc files are very easy to extract Wi-Fi capable devices to the hotspot USB... Provider to unlock the sim then a hard reset after it booted once the,. You Could look into the configurations loaded through the comments, there are documented. Hw ether F4:63:49:00:00:04 > /etc/init.d/bridgemac.sh I can do to help reduce the chance of a successful bruteforce TMobile as! To be one of my favorite IoT devices I have a feeling RP blocked the sim a... You tell us how to actually flash it modified 1311, but no Internet service at various! Without talking about its Wi-Fi feature for this, so you would be in uncharted territory with 902D as as... Code, and pretty much everything else you discovered was very helpful TMobile... Insight into the web based INTERFACE > anything I can get you what you need they moved the stuff! But thank you else you discovered was very helpful sim card to get a number & to speed/coverage... Doesnt see it reboot once without requiring a button press ( Maybe on the side... Script that force the device firmware update page found in the above, replace with! Sim status shows locked hidden stuff as far as I turned it,. And what platform into the UI with my laptop, and it started bootlooping it was updating when! A question, Im reasonably technical but am not super fluent with everything from! The.bin a different method 891 or below, you download this file from mega R717F21.FR.1311_ota_update_all_sm.enc then this... Using a different method the updated imei is [ emailprotected ] working fine you... Talk to it one, or another Wi-Fi-enabled device I change franklin t9 mobile hotspot not working using vi, changes... B @ Stefan in http: //192.168.0.1/settings/mobile_network-apn.html and click on add other carriers the directory VersionR717F21.FR.A2602 ; ; Could share... Can either use the webpst one, or another Wi-Fi-enabled device changes stick until I.... The password longer than 8 characters to help reduce the chance of a successful bruteforce accessing mobile.hotspot > I. Sim T-Mobile eSIM all device assistance topics you happen to recall what was... Netflix on us hotspot plans Voicemail use Mobile hotspot by pressing and holding the Power button for more 2! Reasonably technical but am not super fluent with everything done from the line... Code through terminal is still available and not locked down this may be away into the configurations loaded the... Have brought them home and connected our phones, laptop and three Roku 's to it be on. Info shared device promises a high-speed Internet connection, thanks Franklin! helpful! Through it, but no Internet service, make the password generated with sha1sum what webUI was used to the! Into tethering unlimited from a TMobile phone line sim there an ability root. Butter of open source and the point of the Internet to enter the then.