Date: Tuesday, December 13, 1994 2:08pm From: INTERNET: macgyve755@aol.com To: ** ALL ** Re: Cellular info FAQ, part 1 of ??? Here's the most common question I have recieved: "Where can i find info on doing xxx to Model yyy cellular phone?" Here's a short list... MacGyverrr **************************** A-Z.ZIP Cellular programming/Maintenance codes for many, many, phones. A complete collection of programming procedures for just about every brand of cellphone out there. C.G.Cs intensive programming guide for 110 + cellfones, also has some (little) information on back door test modes and other goodies, such as a definition file and a FAQ on ESN emulation. BEECH.ZIP Beech Util's: Prog. Pana, Mot., Nec, & serial E2Proms BLUEBOOK.ZIP Motorola's "Blue Book" on programming MOT phones BOOOTLEG.ZIP Bootleg's files on cellular phones BRAVO-V1.ZIP Motorola "Bravo Plus" Pager Programming Software 1/2 BRAVO-V2.ZIP Motorola "Bravo Plus" Pager Programming Software 2/2 CELL_INT.ZIP Hooking up scanner to catch cell ch.'s CELL9411.ZIP READ THIS! Up to date info on moding cel phones CELLHAK.ZIP Old file - beginning of Cell Phreaking CELL-1.ZIP RDT's Cellular Telephony: Part I CELL-2.ZIP RDT's Cellular Telephony: Part II CELLCODE.ZIP Cellular Carrier SID/BID Listings By Company CELLINF.ZIP Cellular Technology: By The Shadow People CELL_INT.ZIP Info on How to track calls on PC, Cell to Cell CELLFONE.ZIP Old file: Info on some models, good glossary & intro CELLMOD.ZIP Telecode's Hacking Cellular Phones: Transcribed By Dr. Bloodmoney CELLMON.ZIP Now this one is interesting, it seems to want to interface with a MOT Mircotac, and supposedly, scans the channels to monitor the the frequency, this also may be a simple form of a DDi, (digital Data interface) which is used to read the RCC (reverse control channel). *The RCC is a channel the fone uses to communicate with the tower, ESN/MIN/SCM data is xfered through this chan. CELLNUTS.ZIP Articles On Cellular Telephony In Nuts & Volts CELLPRG.ZIP NAM programming for 30+ cellular telephones CELLPROG.ZIP Programming The Motorola Cellphone CELLSAT.ZIP Information On Cellular Phone Satellites CELLSECR.ZIP Bootleg's Cellular Phone File CELLSOFT.ZIP Collection of Cellular Reprogramming Software for many phones. This is original stuff that was sold as a package from Cellular press, A.K.A Spy Supply, it was priced at $500 and now can be yanked from any good H/P board, it contains the warez to do the Motorolas Panasonics and NEC p300/301/200/201/400. CELLULR1.ZIP Phrack article on cells, cell freq. directory CELPHONE.ZIP More info; covered better elsewhere CHKCALC.ARJ This is a checksum calculator for NOKIA,MOBIRA, RADIO SHACK\TANDY ESN's CLONABL.ZIP Partial list of cloneable phones CLONEFON.ZIP More on programming ESN's, NAMS. Binary files & exe's CLONING.ZIP Intro to phone cloning CM.ZIP Cellular Telephone Manager CPP.ZIP Ultimate Cellular Phone Phreaking Manual DDIINFO.ZIP Information on DIGITAL DATA INTERPRETER TEST SET DEMON105.ZIP Wardialer; pretty basic. DOS. DMS100.ZIP Info on cellular switching equipment DNABOX.ZIP The DNA-Box Cellular Technology File GE-FONE1.ZIP NAM PGRMING PROCEDURE FOR GE CARFONE MODELS CF-1000/2000/2500 GE-FONE2.ZIP Part two GE-FONE3.ZIP Part three MIT800.ZIP mitsubishi 800 phone info MIT-800.ZIP THE DIRECTORY OF CELLULAR MODIFICATION: MITSUBISHI 800. Includes executable file to reprogram ESN and test codes. MOBFON.ZIP File on the old IMTS system of mobile fones MOTCODEZ.TXT Almost all of the Motorola Test Codes MOTOCELL.ARJ "This software is used to reprogram your cellular phone's ESN (electronic serial number) via your parallel port LPT1 using the programming clip described in the file "CABL_PIN.OUT" MOTOROLA.ZIP More info on Motorola's MOTOROM.ARJ THE BIN FILE ARE ROM FILES FOR FACILITATING PROGRAMMING ON PHONES ABOVE SOFTWARE REVISION 9121 IN MOTOROLA CELLPHONES. PROGRAM A 27512 TYPE ROM AND REPLACE EXISTING ROM DURING PROGRAMMING IN CELLPHONE. -THE 1660.BIN USED TO CHECK THE BAG PHONES FOR XTRA FEATURES ETC.! V9122 -THE MOTBAG.BIN USED TO PROGRAM ANY BAG PHONE.! V9009 -THE MOTOBRK.BIN USED TO PROGRAM ALL NEW BRICK-8000 SERIES PHONES V9027 NOT THE ULTRACLASSICS!!!!!! -THE MOTOLRGBK.BIN FOR ALL THE OLDER BIG BLACK BRICKS SOME HAD A NEW SOFTWARE VERSION THAT COULD'NT BE DONE WITHOUT THIS CHIP.! V???? -MOTOFLIP.BIN USED TO PROGRAM "FLIPS" V9148 MOTRLA93.ZIP Motorola Electronic Chip Selection Guide MTRLA.ZIP Part 1 of 2 of Motorola programming manual NEWFONES.ARJ This package is the Shareware (?!?!) release of Cellular press's moding ware. It contains all the files aforementioned plus wiring diagrams, and some warez to do NEC9A/11A NOKIAs , TANDY, R-SHACKS, and MITSUS MT3/MT4. * Also contains ROMS from the old firms of MOT phones for the ESN replacement technique NETPH.ARJ NETPHONE -=- Software & Cable Diagrams for ALL Mot/Pan/etc. Phones NOKIA.TXT NOKIA 101/1000/N201/211/191 CELLULAR HANDPORTABLE TELEPHONE NAM PROGRAMMING INSTRUCTIONS NOVATEL1.DOC This file has information for moding the novatel 83XX series fone, including changing the ESN info, (*warning, can only be done 3 times) NOVATEL.DOC Novatel 8320 Programming, Specifications, Security, and Misc. Information NOVATEL.DOC Programming info on Novatel 83XX cellphones including changing ESN through the handset! NOVATEL.ZIP Same as above, in zip form NOVTEL-K.ZIP Cloning the Novatel, by Kingpin NWCTNID.ZIP Non-Wireline Cellular Telephone Network ID Utility OKI-DUMP.ZIP OKI EPROM Dumps, Hex & Bin Images OKI320.GZ (Don't know -- don't have unzip for GZ) OKI900.BIN Binary data for OKI900 NAM programming OKI900.GZ (See OKI320.GZ) OKITEST.ZIP Test codes for the OKI cellphone. this is a listing of test commands for the OKI series fones, which is considered to be a "HACKER PHONE!" P3.ZIP NEC P3 Chip for changing info through handset. P3TST001.TXT P3 Test operations and more. P3tst001.txt, a text on the test commands for the NEC p300/301/600/601 /400/401 phones, includes instructions for ESN modification PAN-PROG.ZIP Panasonic Cellular Programming Software (Need Interface) PANACELL.ARJ Believe for Panasonic. "This software is used to reprogram your cellular phone's ESN (electronic serial number) via your parallel port LPT1 using the programming clip described in the file "pin-out" PHONE.ZIP Introductory article on WIRELINE phones (not cell's) SELLULAR.ZIP Infotech: stand on guard. (computer security) (includes related articles on computer bugs, computer security, cellular phone security) SICE252D.ZIP Soft-Ice V252D. Disassembler for ESN's RMD1.ARJ Scanner Modification Directory Volume 1 RMD2.ARJ Scanner Modification Directory Volume 2 RMD3.ARJ Scanner Modification Directory Volume 3 TEL.EXE Telephone interface for OKI 900 need interface cable TEST.EXE TEST program for OKI-900 needs interface cable TL110.ZIP Tone-Loc V1.10. "Widely regarded as *the* best wardialer on the market, ToneLoc has rapidly become the scanning utility choice among pro and amateur alike... TRIK2.ZIP Info on using/installing 'trick clip' for later model MOTOROLA FLIP 27c512 EPROM reprogramming UNICELL.ARJ Lots of mod infos on lots of phones. Another package similar to the unichip.zip except this one contains a better Checksum calculator for programming the 9346-16911 eprom, and does a larger variety of fones (Sony/Phillips/Nokia/Cleartone/Novatel/Mobira) UNICHIP.ZIP This is another package containing moding wares for the MOTS/NEC/PANS, but this one also contains new software for doing the p400/401/600/601 firms before and after V.34, offered by unisoft. Also has Wiring Digrams for building the cables UNIDEN.ZIP Uniden Phone Dump / Dissassembled & Hex WIRED.ZIP Article On Cellular Hacking From Wired Magazine Internet Sites to get Cell info: Here is a list of Anon. FTP sites where Cell info is stored, I've checked them all in the past month, and they're still up. SPY.ORG /pub/SECURITY/SECTEC/cellular Corrupt.Sekurity.com /pub/phones and /pub/incoming l0pht.com /pub/blackcrwl/cell src.doc.ic.ac.uk wiretap.spies.com ftp.winternet.com /users/craigb quartz.rutgers.edu Ftp.Netcom.com siam.unibe.ch ftp.eff.org ftp.cic.net camelot.usc.edu /pub/cellular If you got any more, don't hold out, email em, or upload em to me at the above email address. ----------------------------------------------------------------- BBSes: I'll add some as I make a list. Half of these will probably be down before you read this. ----------------------------------------------------------------- That's all for now. Watch for a alt.cellular-phone-tech FAQ coming soon!!! *<*<*<*<*< -- MacGyverrr -- >*>*>*>*>* -------------------------------------- *>*>*>*>*> MacGyverrr *<*<*<*<*< <*<*<*<*<* @SeTec.AsTRoNomY *>*>*>*>*> "Honestly, Bish... I don't care if you go to jail, I'm just in it for the money." (Compiled from various sources) *************************************************************************** Downloaded from Phoenix Rising Communications - Stockton, California ----> Note to Phoenix Rising Online users: Some of the files and programs listed above are copyright and being distributed on the Internet and/or underground BBS systems in violation of said copyright. As such, those files that it would be illegal for us to distribute will never be carried online by Phoenix Rising Communications. Aside from those pirated files or software collections, we will continue with our efforts to maintain the largest online archive of cellular and hacking- related information.