NSS pro - Nokia Service Software Professional ------------------------------------------------------------Warning: This software can seriously damage your Nokia phone.

Please do not play with it if you are not sure what are you doing! ------------------------------------------------------------Nokia Service Software - it is a revamped version of the good old Nss. Not all functions are ported. Many more features to come. As of version 0.20 USB and FBUS protocols are supported. To use FBUS you will need SCNI (Super Cheap Nokia Interface) real hardware or emulated on Genie (as scni.exe application). Notes on Firewalls/Antivirus: Any good quality Firewall or Antivirus will most probably detect this program as virus and will warn about internet activity. If you still think this program is dangerous for your PC, please do not use it! Notes on Flashing: Updating of the firmware of your Nokia requires almost full erase and then restore of your phone. The protocols are implemented to the best of my ability and intention, but as clean room reverse engineering is used, there is always a possibility for errors and dead phones as result. Please understand that you perform Flashing on your own risk and sometimes it can result in completely bricked phone. Best advice is always to have at hand another flashing box (original or 3rd party) with active suppport, so you can restore your phone if something goes wrong. Flashing is free feature and is not part of the annual subscription of NSS, so no support can be given Updating: Please drop all the files from this archive into your old NssPro folder. If you delete old files or start from fresh dir some settings and also your annual registration data will be lost! If you need to read phones for bruteforce you will need loaders. To get them just tick 'Auto download extra files...' in Simlocks->Settings, restart NSS and those will be downloaded ------------------------------------------------------------Credits for some solutions used in this software, made by others: Old fbus loaders stack exploit - me/Cinek & Marc - independent RAPIDO sec ram read via debug unit - Dejan Kaljevic PA_XX execute via Timer hack - Vesko (GT) New dual rate loaders stack exploit - X-Shadow (ATF) TZ API exploit and full dump - X-Shadow (ATF) DCT4+ RSA exp3 hack - Daniel Henzulea/ karwos(impl) DCT4+ Infineon C166 flash read - laser(SETool) New RAPIDO primapp key modifier - karwos(Cyclone) NssPro will open via shell Ighashgpu by Ivan Golubev NssPro will open via shell Oclhashcat by Atom

If you think i am using solution made by you and you are not in the list, pls contact me, so i can update this list ------------------------------------------------------------History: 01 April 2012, v 0.44 - Many small bug fixes

- Total redesign of the UI, SL3 BF admin functions now separate from user access and moved to the Tools menu - Introduction of Credit Rules and Tariffs, now server owners can create different price based on MCC+MNC, root hash, simlock table hash and phone generation. Also 3 different tariffs are avaible - Ability to auto start as Twitter Agent added Special thanks to Murpy for the Credit Rules/Tariffs idea! 21 March 2012, v 0.42 - Bug fix on the server regarding analisis of done jobs(some were excluded from the list) - Const IP address to fix dropped DDNS service - Full factory reset for Symbian product implemented Note: On some Symbian models you have to remove the battery after reset (example: N8) 16 March 2012, v 0.41 - Updated the unlock code upload function. Now phones that have the new handler(N8,etc) will work too - Ability to add custom path for flash files install directory added - Download .cod file on a done job with a user account added, also all 7 code levels will be returned - Admin add on - display done jobs(imei,code,rnd and time per job), also average calculation time for all done jobs will be shown - Admin add on - statistical analysis on done jobs, distribution of RND values of sampled phones in keyspace, etc 14 March 2012, v 0.40 - Added new checkbox in Settings to allow longer server timeouts when the user is far away from Europe or have slow internet connection - Updated server code to show percentage on active job in Twitter status 13 March 2012, v 0.39 - New feature - the SL3 server can now post its own status directly to Twitter - Bug fix on Broadcomm and RAPU unique key reading(usb errors) on some computers, NSS pro loader is version 0.22 now - Support for the new GenieProjects server IP introduced - Bug fix on Read Phone Info with improper data parsing (repeated data printed on screen) 09 March 2012, v 0.38 - Updated extended - Critical bug fix version 0.36 - Critical bug fix to create multiple phone info read on BB5 models on the client side, buffer overflow introduced by on the server, security vulnerability where was possible accounts with administrative privileges

04 March 2012, v 0.36 - Bug fix on the SL3 BF server, fixed issue with server freezing Keep alive thread implemented, plus much better handling of exceptions Also debug print implemented for the server (need DebugView and enable from Settings) - Bug fix on Broadcomm CPU USB communication, fixed issue where the Nokia driver was causing BSOD on Windows 7, 64 bit while reading data in flash mode Improved USB communication in flash mode for all CPU types in flash mode - Support for RAP3v4 CPU phones USB reading implemented 26 Feb 2012, v 0.34 - A bug fix when wrong refresh data from a node was crashing the server - Client updated to refresh the server when not working on a job so the status of online nodes is visible from the monitor - New Tools tab added, cod file calculation moved from Simlocks->Misc to Tools->SX-5 - Added RPL file calculation for DCT4/DCT4PLUS phones with TI UPP processor(Tools->TDS-6 tab) - SL3 Public Servers list updated to show each server status - online or offline - Nokia WP7 flashing implemented (Lumia 800,710,etc) Special thanks to dzirt for excelent work on reversing the Lumia flash protocol and help with debugging 14 Feb 2012, v 0.33 - Client update to support HC 0.9 with kernel 1900 - Removed support for HC 0.8 - Added status refresh on client when not splitting chunks - Ability to change refresh interval (1 - 100, 0 will dissable refresh) - New Mega chunks implemented (1/100 of total keyspace) - it might prove beneficial to people who have less than 10 machines - Process Monitor updated to show ETA on each individual cluster when non split mode is used - New server feature - test jobs. Will allow to load a bunch of test jobs and test whole server/clients/nodes configuration - Extra option in Settings to dissable TeamViewer nag dialogs - Bug fix on FBUS communication regarding old DCT4+ models(SCNI device) - Updated Security Code reading routine to support more DCT4+ models - User Account add on - now possible to Check/Submit/Cancel jobs on a server running on Local Machine instead of a public server. It is usefull if you want to run your cluster on LAN and don't want to publish server details Notes: Using kernel 1900/Non split job/Mega chunks will give major load on your video cards. Make sure that the GPUs inside all cards never run on more than 43 degrees celsius by appropriate cooling. If you set refresh interval to zero on Mega chunks will also prevent the server to abort your nodes remotely! Mega chunks feature is still experimental, so please if you have some issues, switch back to old split or non split mode. The test jobs feature will delete any current jobs you have, so please backup all files from the server 'sl3' directory before use. Special thanks to Mr.Ultimate for some nice ideas and help to make the 1900 kernel to work

08 Feb 2012, v 0.31 - One day licence support added for testing/evaluation - Ability to move jobs in the queue implemented - Supposed fix on bad form refresh and badly drawn controls - Initial support for Nokia Windows Phone 7 - read basic phone details for now - Buf fix, last idle job not shown, jobs parser in Monitor was unable to show it, local server updated to v 0.16 - SL3 BF client updated to support multiple versions of command line bf software(ig,hc 0.6,0.8,0.9). Last stable HC version (0.6) will work without rewinding your pc clock 02 Feb 2012, v 0.29 - Auto Refresh implemented in monitor mode - Improved display of clusters and total speed - Auto Start that allows to make NssPro go directly to Client, Server or Monitor mode - Display extra info on readed codes - Ability to generate all 7 levels from cod file - Check added for extra BF files before start of the Client Note: If you use the SL3 BF feature, please update new exe and dll on all computers that run it! 30 Jan 2012, v 0.28 - Fully implemented Nokia BB5 bruteforce system Note: Changes in this version - usb loaders are not supplied, will need to tick a box in Settings, restart and get them For SL3 unlocking procedure, please check the supplied with this version sl3_unlock_how_to.txt 28 Jan 2012, v 0.23 - Much better application cleanup to hanlde increased number of threads added by new funtionality - SL3 Server/Client implemented 27 Jan 2012, v 0.22 - Auto download on startup of important files added - Infineon ARM DCT4+ models log file reading for BF added 20 Jan 2012, v 0.21 Speed up on flash read operations if backup is present Save of simlock.bin file, when backup is performed Added direct unlock of SL2 BB5 phones, via Code or RPL Added Lock to network on SL2 BB5 phones

19 Jan 2012, v 0.20 - Fbus support enabled, all NssPro functions,requires SCNI device - Some UI improvement - Detect will now show generation and CPU type (for known phones) - Restart of phone power (Vcc button) added - but FBUS interface only 04 Jan 2012, v 0.19 - Support for RAPIDO cpu phones - both .log reading and server submit - Bug fix - Normal mode detection was not possible on some phones, now fixed 01 Jan 2012, v 0.18 Ability to show and change phone mode implemented Multi phone support added with auto polling Display phone generation added Some UI improvement

30 Dec 2011, v 0.17 (internal beta) - Bug fix on Broadcomm .log file reading 30 Dec 2011, v 0.16 - Back up changed to save to a new folder, named as the phone imei number - PM read and write implemented 26 Dec 2011, v 0.15 - Reading of StartUp self tests added - ability to execute single test 24 Dec 2011, v 0.14 - First release of the initial Beta preview 2012, GenieProjects