Tópico: Atualizaçoes Cyclone BOX - Cyclone Team

CYCLONE BOX - FREE (NO CREDITS) SL2 RPL CALC (inc 9ddb) FOR UNLOCK/RELOCK/REPAIR Hi to all

Starting from now all calculated SL2 RPLs using Cyclone Server are FREE.
One condition you need to met, you need have 200 credits on your account.

Stay tuned for some NCK-thing

Best Regards,
Cyclone Team.

24-01-2010 CYCLONE SHOT SLEEPING SHOT! First STANDALONE BB5 NCK Calculator Released!
Hi,

- Added STANDALONE, FREE (NO LOGS, NO INTERNET!!!) NCK Reader (levels.. pw1..7) for ALL BB5 RAPv3 and RAPIDO phones (including 9ddb new hash, together PA_SL1 and PA_SL2 phones)
- Unlocking Method is now being selected before unlock
- Added BB5 RPL Calc for PA_SL1 phones (using server) for Simlock Repair
- Few changes with BB5 booting, minor bugfixes, cosmetic changes, etc

!! FIRMWARE UPGRADE IS MANDATORY IN ORDER TO USE THIS UPGRADE !!

KEEP IN MIND STILL SOME PHONES (I.E. TELCELL MEXICO) CAN'T BE UNLOCKED USING NCK, THIS CASE USE FREE RPLS.

Avaiable Unlock Methods Now:

PM308 Recalculation (Standalone, Free)
NCK Calculation (Standalone, Free, New Method)
NCK Calculation (Standalone, Free, Old Method) Remark: Works only on SL2 Rapido Phones, SW < v30
RPL Calculation (Server Based, Need Credits)

(need select needed unlock method before unlock)

Some phones unlocked by new method of NCK Calculation:

3600 SL2 HASH 9DDB

Código:

BB5 Unlock Started...
MCU Version    V 07.23
MCU Date    17-07-09
Product        RM-352
Manufacturer    (c) Nokia            
IMEI        353661016041511
Mastercode    261533754
Simlock Server    SIMLOCK SERVER
Simlock Key    2600300000000000
Simlock Profile    8000000000000000
Simlock Key Cnt    0
Simlock FBUS Cnt    0
Simlock [1,1]    State: CLOSED    Type: MCC-MNC    Data: 26003F
Reading Security Block...
Security block OK!
Determining PA Simlock...
Booting RAP...
CMT_SYSTEM_ASIC_ID:    000000010000022600010006030C192101033000
CMT_EM_ASIC_ID:        00000295
CMT_EM_ASIC_ID:        00000B22
CMT_PUBLIC_ID:        1240001610F05850C9695BBBB518C05E116F9CA1
CMT_ASIC_MODE_ID:    00
CMT_ROOT_KEY_HASH:    9DDBFCFE6E73CED7D8C6268C8EB85723
CMT_BOOT_ROM_CRC:    273F6D55
CMT_SECURE_ROM_CRC:    DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.9.11.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using OLD BB5 FLASHING PROTOCOL
FlashChip[0,CMT]: 0x00EC220C00008921, Samsung, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.9.17.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: E4BA39EE248FC5E165E280B6AD60C5C0B1A1DA6D
APE Boot skipped on user request
Flashbus Write baud set to 5.0Mbits
Restarting MCU...
Determined PA Simlock: PA_SL2
Checking for Rootkey Hash support with selected Unlock Method...
Selected Unlock Method: NCK Calculation (new method)
Booting RAP...
CMT_SYSTEM_ASIC_ID:    000000010000022600010006030C192101033000
CMT_EM_ASIC_ID:        00000295
CMT_EM_ASIC_ID:        00000B22
CMT_PUBLIC_ID:        1240001610F05850C9695BBBB518C05E116F9CA1
CMT_ASIC_MODE_ID:    00
CMT_ROOT_KEY_HASH:    9DDBFCFE6E73CED7D8C6268C8EB85723
CMT_BOOT_ROM_CRC:    273F6D55
CMT_SECURE_ROM_CRC:    DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.30.0, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using OLD BB5 FLASHING PROTOCOL
Exploiting - running preloader...
Preloader running OK, Running Custom Loader...
Custom loader running OK! Working...
#pw+949788008380325+1#
#pw+854251965631463+2#
#pw+914751634966481+3#
#pw+253083871743310+4#
#pw+160466531792339+5#
#pw+300636055043893+6#
#pw+831255876340647+7#
Sending NCK Code (Level 7)..
NCK Accepted! Phone unlocked OK!
MCU Version    V 07.23
MCU Date    17-07-09
Product        RM-352
Manufacturer    (c) Nokia            
IMEI        353661016041511
Mastercode    261533754
Simlock Server    SIMLOCK SERVER
Simlock Key    2600300000000000
Simlock Profile    8000000000000000
Simlock Key Cnt    0
Simlock FBUS Cnt    0
Simlock [1,1]    State: OPENED    Type: MCC-MNC    Data: 26003F
Simlock NCK    #pw+831255876340647+7#
Unlock finished!

5300 SL1 HASH BAF3

Código:

BB5 Unlock Started...
MCU Version    V 07.20
MCU Date    23-10-08
Product        RM-174
Manufacturer    (c) Nokia.           
IMEI        356407014798521
Mastercode    471632634
Simlock Server    SIMLOCK SERVER VERSION 63
Simlock Key    2600600000000000
Simlock Profile    8000000000000000
Simlock Key Cnt    0
Simlock FBUS Cnt    0
Simlock [1,1]    State: CLOSED    Type: MCC-MNC    Data: 26006F
Simlock NCK    #pw+@U˙˙˙˙˙˙˙˙˙˙+17#
Simlock NCK    #pw+˙˙˙˙˙8€+255#
Simlock NCK    #pw+`+38#
Simlock NCK    #pw+˙˙˙ř4&o˙+255#
Reading Security Block...
Security block OK!
Determining PA Simlock...
Booting RAP...
CMT_SYSTEM_ASIC_ID:    000000010000022600010006010C192101001101
CMT_EM_ASIC_ID:        00000232
CMT_EM_ASIC_ID:        00000353
CMT_PUBLIC_ID:        22C000133A0B6E561E7820319A02ED6A64141878
CMT_ASIC_MODE_ID:    00
CMT_ROOT_KEY_HASH:    BAF3A9C3DBFA8454937DB77F2B8852B1
CMT_BOOT_ROM_CRC:    191EC665
CMT_SECURE_ROM_CRC:    DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.9.11.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using OLD BB5 FLASHING PROTOCOL
FlashChip[0,CMT]: 0x00EC220800006921, Samsung, NOR
FlashContent[0,CMT]: 00000000000000000000000000000000, NOR
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAP3Gv3_algo.fg, Type: Algorithm, Rev: 0.9.17.0, Algo: BB5 ALGORITHM
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: D6D07E588DC4E06DEE7012A3C0ECC4E35D3CE263
APE Boot skipped on user request
Flashbus Write baud set to 5.0Mbits
Restarting MCU...
Determined PA Simlock: PA_SL
Checking for Rootkey Hash support with selected Unlock Method...
Selected Unlock Method: NCK Calculation (new method)
Booting RAP...
CMT_SYSTEM_ASIC_ID:    000000010000022600010006010C192101001101
CMT_EM_ASIC_ID:        00000232
CMT_EM_ASIC_ID:        00000353
CMT_PUBLIC_ID:        22C000133A0B6E561E7820319A02ED6A64141878
CMT_ASIC_MODE_ID:    00
CMT_ROOT_KEY_HASH:    BAF3A9C3DBFA8454937DB77F2B8852B1
CMT_BOOT_ROM_CRC:    191EC665
CMT_SECURE_ROM_CRC:    DFAAF68F
RAP3Gv3_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.30.0, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using OLD BB5 FLASHING PROTOCOL
Exploiting - running preloader...
Preloader running OK, Running Custom Loader...
Custom loader running OK! Working...
#pw+160352032409019+1#
#pw+973120735381744+2#
#pw+821765151806152+3#
#pw+691221967364775+4#
#pw+282254235199826+5#
#pw+674406233058521+6#
#pw+159388652648611+7#
Sending NCK Code (Level 7)..
NCK Accepted! Phone unlocked OK!
MCU Version    V 07.20
MCU Date    23-10-08
Product        RM-174
Manufacturer    (c) Nokia.           
IMEI        356407014798521
Mastercode    471632634
Simlock Server    SIMLOCK SERVER VERSION 63
Simlock Key    2600600000000000
Simlock Profile    8000000000000000
Simlock Key Cnt    0
Simlock FBUS Cnt    0
Simlock [1,1]    State: OPENED    Type: MCC-MNC    Data: 26006F
Simlock NCK    #pw+@U˙˙˙˙˙˙˙˙˙˙+17#
Simlock NCK    #pw+˙˙˙˙˙8€+255#
Simlock NCK    #pw+`+38#
Simlock NCK    #pw+˙˙˙ř4&o˙+255#
Unlock finished!

E51 SL2 HASH CAEEBB

Código:

BB5 Unlock Started...
MCU Version    V ICPR71_08w44.4
MCU Date    11-12-08
Product        RM-244
Manufacturer    (c) Nokia
IMEI        357663016552576
Simlock Server    SIMLOCK SERVER
Simlock Key    2600100000000000
Simlock Profile    8000000000000006
Simlock Key Cnt    0
Simlock FBUS Cnt    0
Simlock [1,1]    State: CLOSED    Type: MCC-MNC    Data: 26001F
Reading Security Block...
Security block OK!
Determining PA Simlock...
Booting RAP...
CMT_SYSTEM_ASIC_ID:    000000010000022600010006400C192101021103
CMT_EM_ASIC_ID:        00000295
CMT_EM_ASIC_ID:        00000B22
CMT_PUBLIC_ID:        0E60010930850058EEBC00CD174EE90CEB054FF0
CMT_ASIC_MODE_ID:    00
CMT_ROOT_KEY_HASH:    CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_BOOT_ROM_CRC:    A8C1D671
CMT_SECURE_ROM_CRC:    3E691FF8
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.37.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using OLD BB5 FLASHING PROTOCOL
FlashChip[0,CMT]: 0x00EC004000600022, Samsung, ONENAND
FlashContent[0,CMT]: 00000000000000000000000000000000, ONENAND
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAPIDOv11_algo.fg, Type: Algorithm, Rev: 0.1.40.0, Algo: XSR 1.5
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 35AC54F8E31BE1357AB78D73834F020906331653
APE Boot skipped on user request
Flashbus Write baud set to 5.0Mbits
Restarting MCU...
Determined PA Simlock: PA_SL2
Checking for Rootkey Hash support with selected Unlock Method...
Selected Unlock Method: NCK Calculation (new method)
Booting RAP...
CMT_SYSTEM_ASIC_ID:    000000010000022600010006400C192101021103
CMT_EM_ASIC_ID:        00000295
CMT_EM_ASIC_ID:        00000B22
CMT_PUBLIC_ID:        0E60010930850058EEBC00CD174EE90CEB054FF0
CMT_ASIC_MODE_ID:    00
CMT_ROOT_KEY_HASH:    CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_BOOT_ROM_CRC:    A8C1D671
CMT_SECURE_ROM_CRC:    3E691FF8
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.30.0, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using OLD BB5 FLASHING PROTOCOL
Exploiting - running preloader...
Preloader running OK, Running Custom Loader...
Custom loader running OK! Working...
#pw+994514387188636+1#
#pw+274615204717885+2#
#pw+842137240978606+3#
#pw+544842230747164+4#
#pw+653436892097337+5#
#pw+113577555381583+6#
#pw+360432392883102+7#
Sending NCK Code (Level 7)..
NCK Accepted! Phone unlocked OK!
MCU Version    V ICPR71_08w44.4
MCU Date    11-12-08
Product        RM-244
Manufacturer    (c) Nokia
IMEI        357663016552576
Simlock Server    SIMLOCK SERVER
Simlock Key    2600100000000000
Simlock Profile    8000000000000006
Simlock Key Cnt    0
Simlock FBUS Cnt    0
Simlock [1,1]    State: OPENED    Type: MCC-MNC    Data: 26001F
Simlock NCK    #pw+360432392883102+7#
Unlock finished!

(REPLACE EXE at C:\Program Files\Cyclone Box\)

Best Regards,
"Sleeping" Cyclone Team

Cyclone BOMB ! Standalone : SX4 Emulation, SD Repair, RPL Calc, BB5 NCK Calc, more!!!

Hello,
New version of Cyclone Box Software is ready. There is a lot of changes, here is some of them:

- WORLD'S UNIQUE : Standalone Superdongle Key Calculator Added! No internet, no logs, no time! Calculation time - 0.003 sec ! Works for any SL1, SL2 and SL3.
- WORLD'S UNIQUE : Standalone Unlocking/Relocking using RPL Added! No internet, no logs, no time! Calculation time - 0.002 sec ! Works for any SL1 and SL2.
- WORLD'S UNIQUE : Standalone SX4 Authorization Added! Box is now emulating Nokia SX4 card - no need internet, no need logs to authorize ANY Nokia Phone, just box! Works for any SL1, SL2 or SL3. Emulated SX4 works with ORIGINAL NOKIA Superdongle keys (no need rebuild SD), Custom keys (made by Cyclone,MT,UB), etc. In case of Authorization fail, it will automaticly write and authorize using Custom Keys. Authoirzation time - 0.004 sec ! Supported are RAP and RAPIDO mcu, in case of RAPU phones SX4 Remote Card will be used. After authorization with Cyclone, PHONE STILL CAN be Authorized with ORIGINAL SX4 Card!
- WORLD'S UNIQUE - Cyclone can now authorize Barred Phones (with Correct superdongle keys, but with higher KeyIndex ever used than 0 (possible KeyIndex 0..7), SX4 card can use any higher keyindex at time, when higher key is used, lower keys are automaticly not used in future, and phone requires to use higher key index) - UB and other custom boxes can't do it as long SX4 emulation is not 100% Nokia-Like
- WORLD'S UNIQUE : Starting from now, Cyclone Box have ability to make _FULL RPL BACKUP_ of BB5 phones! Current existing SW on market creating only some part of RPL (NPC,HWC,Simlock) - Cyclone is now backing up missing part:
- Added SUPER DONGLE KEY extracting (this Original Nokia one, so after writing it back phone still can be authorized with original SX4 card)
- Added CMLA KEY DATA extracting
- That means created RPL File by Cyclone is now 100% SAME AS NOKIA'S ONE!
- WORLD'S UNIQUE : Added BB5 MCU & DSP Timestamps Reader / Diagnostic Tool. This will help diagnostic of downgraded phone, will read Security Block, decode timestamps of current installed SW (and factory one, or Dejan Hack if exists) with FLASH installed MCU/DSP timestamps. Will have ability to FULL REBUILD downgrade security zone (dead06) soon.
- WORLD'S UNIQUE : BB5 Security Block Analyzer added, this will read Security Block and analyze it's health for content of following Security Data: SIMLOCK DATA, SUPERDONGLE KEY DATA, ECC KEYS DATA, DIV DATA, CMLA (DRM) DATA. Also it reads ST_SIMLOCK_TEST and ST_SECURITY_TEST and when problems occur, recommends actions.
- WORLD'S UNIQUE : Standalone BB5 Calculator Added. This calculated BB5 NCK (levels 1-7) for unlocking purposes. Calculated codes works only with phones which have been relocked with Cyclone Box. To calculate code is needed only IMEI - no need cable, phone, flashbus logger, etc.
- WORLD'S UNIQUE : BB5 Unlock by NCk/RPL, SD Recalc, SX4 auth using USB !! (once log file readen)
- Upon box upgrade (maintenance) Bootloader in box is syncronized with server to avoid Activation Problems
- Bootagent server upgraded to 1.01, fixed "Box is not activated, ID 09)
- Fixed "Access Violation" when Cyclone Box SW is already launched and connection to box opened
- After BB5 Relock, unlock codes is displayed
- More detailed messages is now shown upon new NCK or RPL calculation
- BB5 Security Code Reading is moved to "UserArea" tab (needed space for MCU/DSP timestamp reading and security block analyzing)
- Total unlock/relock time added after operation is finished (thx to arash)
- Box Firmware version is now checked upon loading of Nokia Module - if box firmware is obsolete, SW asks for upgrade and doing it automaticly
- Selected unlock method is now displayed before RootkeyHash support check
- Upon first reading of NCK Code (Extracting) or RPL Calculation, "CYC" log file is stored in "StoredFiles" and next time upon BB5 Security Actions (Calculation of SD, Extracting NCK, Calculating RPL (Relocking)) phone is no booted anymore and whole process took only 1 second!! Keep in mind calculated CYC file is paired with Box Serial number, so in case if your box serial number is changed-go to stored files and purge all "cyc" files.
- Decrypted AES Subblock of Security Block is now checksum checked (16 bytes checksum at end of block)
- Fixed "This is invalid integer..." when parsing phone with damaged IMEI
- When another copy of Cyclone Software is running, message is displayed instead of errors
- New method of NCK Calculation is now default BB5 unlocking method
- When New Method of NCK calculation is selected, PA_SL is not determined already (saves lots of time)
- Skin Manager updated to v6.54 (more stability)
- When BB5 RPL Don't contain Certificates (NPC,HWC) phone isn't booted
- Fixed bug when Flash RPL BB5 Data is being written two times
- Added more verbose debug messages when preparing Boot BB5 Phone
- Garbage characters when dealing with SLPA phones (#pw+___garbage___+1) bug fixed
- New splash screen added, thx to arash, again
- When Cyclone fails to boot APE subsystem, it shows hint about TX2
- APE subsystem is now no longer booted upon CheckFlashingBus
- Changed "Failed to write CMT Cert Data (3)" message, added TX2 information
- BB5 TX2 Line test added after "CheckFlashingBus"
- Before RPL Write, Software testing TX2 Line and when its faulty (not adapter) it showing apporiate message
- Writing BB5 CMT HWC Certificate from RPL fixed (thx to arash)
- Parsing some Simlock Arrays (5130) produced

Just download EXE file and replace at C:\Program files\Cyclone Box\
Make sure Installer is installed aswell (this one from january, else you will have message RootkeyHash not supported).

You don't need any activations,logs to use this update.

Notes:
SX4 Emulation works offline and emulates SX4 card 1:1, in case of failure still server will be used.

BB5 NCK Calculator works for phone relocked by Cyclone Only (unlocking using IMEI only, no need know other data, just imei - no need cable or connection to box too).

BB5 USB Unlocking and other security tools works only if phone log (by flashbus) is readen before.

Update is fast and most of security functions (sd,rpl) works very fast.

Don't forget to upgrade your Box Firmware to v01.21.

[Somente usuários registrados podem ver os links.]

More coming.
Best Regards,
Cyclone Team

Hello,

you can download latest beta from here:

(please use it only for test DCT4 RSA purposes, full stable installer will be released tonight hopefully.).

Don't forget to upgrade box firmware!

Post unlocked phones here.

Best Regards
Cyclone Team

Postado originalmente por Fernando Moraes

Alguem ja testou ???

Tópico somente de atualização, vamos manter a organização do fórum, PESQUISE que vc vai ver que já tem tópico sobre isso.

Cyclone Box Firmware v01.36 Released

- Fixed smartcard issues in some enivronments (Smartcard is not responding for reset)
- Fixed issues when some phones couldn't calculate NCK Codes with new method (Security Section Checksum Error)
- Minor changes and bugfixes

!! CYCLONE - STOP ME IF YOU CAN !!