franklin t9 mobile hotspot not working

16. November 2022 No Comment

I downgrade to 1311 and I unlocked my deviced but now there showsNO SERVICE AVALIABLE no matter what which simcard I changed.. simcard still working before I downgreade. The light and the display show everything the way they should.

Also, implement rollback protection and disable the ability for users to upload OTAs. franklin R850 using uBlock Origin MSL bypass. Please contact your wireless carrier to ensure device is properly activated and provisioned. Actually, you can do it from Windows if you have WSL installed, aka Windows Subsystem for Linux.

Network: WCDMA. Having trouble downgrading back to firmware 891. 2) disable one or more of 3 the bands But very oddly, your password worked on my r717. Bootloader VersionR717F21.FR.B2602 Make sure airplane mode isn't enabled on your mobile device. Anyone have anyluck with ECM or RNDIS using the USB port? Open your Wi-Fi network manager on your computer, smartphone, tablet, or another Wi-Fi-enabled device. Thankfully, these .enc files are very easy to extract. This modem was shipped as 20GB limit. Hardware Version 89527_1_11 I have this working via ssh (by the way, the ssh option in engineering settings worked for me on 891). Thanks. You could try to run fastboot oem off-mode-charge 0 from a computer. Not sure if youre still monitoring this post/site, but Ive got an issue with my brand new T9 that I cannot seem to resolve. I have placed the admin HTML, JS, and CSS files for the TMOHS1 in a zip file (tmohs1_files.zip) at: https://mega.nz/file/MkRBDCQb#e1rIR7aD4cebyavw_vQVCjyGPVUo3zGRBChGq3XiXl8, 2ee424d3d0ca26a02d523683189c055466ea6efb21e957b884263ab8a34521df, Also got a different MIFI device from T-mobile, modeled as TMOHS1 http://192.168.0.1/webpst/ Use tab to navigate through the menu items. Was able to run the python script and get an unlock code. Thanks, You have to type in terminal [emailprotected], This page is really helpful but still I am stuck at my problem. btw, the website does show the updated imei. So can someone tell me: WebFind the right plan Netflix on Us HotSpot plans Voicemail Use Mobile HotSpot All plans support topics. Any work arounds? Has anyone figured out how to display arbitrary text on the LED screen? I was able to get the code through a Linux Machine since Mac didnt have the sha1sum package (at least on Catalina). Franklin T9 mobile hotspot not connecting to the network and showing WCDMA. Have you been able to get around this somehow? how does one _prevent_ OTA firmware updates? I want to boost the range of the wifi at my house for my IoT devices so I can isolate their network. WAN IP Address Unknown I saw the instructions and enabled SSH but got lost on part 3. I believe I received the same unit. I have a few of these, and it occurred to me that it shouldnt be hard to make this work as a wifi extender or repeater bridge. Sharing stuff like this is the whole bread and butter of open source and the point of the internet. [ 0.000000] ** If you see this message and you are not debugging If anyone knows how to make AT&T sim acceptable by 1131 firmware please let me know. Just to share, here are the rules Im playing with: export TTL=66 md5crypt at a MINIMUM, and sha1 if you want to get a bit fancier. Ask for prepaid plan for hotspot device. All of a sudden the Roku's will not connect. It goes through the whole process then reboots and it fails. 1. add user via typing the following (replace admin with any id you want) : 2.. make the user root If you find an EDL flashing method that works for you, I can get you a clean system.img if you still lack one (my current dump has a lot of my own personalizations). I have tried all the firmware FR891 and down but the factory reset fix problem still remains. https://gist.github.com/riptidewave93/fc88a7de97abea669bd2d790a1df4c0a, https://www.tutorialspoint.com/execute_bash_online.php, http://192.168.0.1/settings/mobile_network-apn.html, http://mobile.hotspot/#login=/settings/mobile_network-sim.html, http://mobile.hotspot/settings/mobile_network-sim.html, https://mega.nz/file/Lk8k2TgI#DwuWhvQh2nd-Gv2247cFB0rnVodqNP9M0_k751o0XJw, https://mega.nz/folder/m81iVLYJ#ZkLM7wspDir5z0T7DuGlXg, https://www.t-mobile.com/support/devices/mobile-internet/t-mobile-hotspot, https://omadm.iot.t-mobile.com:443/omadm-server/dm12, https://files.videohelp.com/u/61125/t9a.jpg, https://files.videohelp.com/u/61125/t9b.jpg, https://files.videohelp.com/u/61125/usage.jpg, https://www.cs.colostate.edu/helpdocs/vi.html, https://www.reddit.com/r/tmobile/comments/mawhaz/new_tmohs1_test_drive_hotspot/, https://www.reddit.com/r/tmobile/comments/m7evpx/my_test_drive_arrived_today_questions_about_use/, Mobile Hotspot Login Admin | Get Latest Information. Note that if your firmware is above version 891, then to enable SSH you will need to modify the Config File. Do you know whats wrong on my side? Also very strange, when I entered the disable band screen using your MSL/password, the band priority now shows ,see attached photo (https://files.videohelp.com/u/61125/t9b.jpg). iptables -t mangle -I POSTROUTING -o $INTERFACE -j TTL ttl-set $TTL Could you share the programmer file you used/the specific command that worked and what platform? msg: OK, Can you tell us how to use it! User manual on the firmware upgrade page. 256MB RAM, 512MB ROM (I think the T9 only had 256M rom, but someone can correct me) Looks like there isnt a password reminder nor will [emailprotected] work to gain access to band configs. Now the device is switching on but nothing is working. This may help, when you navigate to the settings tab on the Web UI, a popup asks for the password. Ok, I found another way to do factory reset from http://192.168.0.1/engineering/franklin/. Typically I like to reload the firmware when the device crashes as a fresh coat of paint but T-Mobile hasnt been able to provide it for me. Also cant access hidden menu any longer due to OTA update to 2602! How do i find real password for ssh? Im running Big Sur on a Mac. Hidden menu showing web version FR.1312. The first thing to try is to restart your Android or restart your iOS device you're using to establish the mobile hotspot. Once you ssh into the device, you can a) change the password by using the passwd command. I am still on the stock 891 firmware. cat /data/configs/mobileap_cfg.xml | grep Password. https://mega.nz/folder/FJ8wWYAJ#Q1oUEtIUJrtjB1atkOAXrA. Hi Tried above steps , generated the code it says below message . Please read through the comments, there are multiple documented ways to generate your own unlock code. a mix of htm, css, js files for someone knows what to look for. Latest device has a different firmware and different unlock procedure. Any ideas? No idea what service code to enter. I would really like a complete factory image to help me troubleshoot once I manage to reflash the secondary bootloader through EDL (boot.img, this is included in the ota files Chris provided). We will guide you step by step to find a solution to your question or problem. 1. mkdir -p /var/spool/cron/crontabs Dear hacker Theres also a 100 firmware if you use the vendor franklin. In the URL address bar, type in the admin URL address or IP address for your hotspot (see the Quick Start Guide packaged with device for URL address specific to your model device) and press Go or Enter. This is awesome!

As mentioned earlier, I will not be generating codes for people and I will be censoring any IMEIs posted. When I change /etc/hosts using vi, my changes stick until I reboot. Is there anyway of verifying what the TTL of the device is actually set at. Its not showing any Wi-Fi broadcast and reset is keep showing Factory reset Restarting Now I logged in to webpst and uploaded R717F21.FR.1312 but after 1-2 minutes while writing it, it is showing me upgrade failed. Im hoping we can unlock these and perhaps get better speeds with other carriers. I cant wait until we find a way around this as it screwed me pretty hard (it does not pick the best channel in my area). Network: WCDMA. Can you downgrade the firmware. Generated and entered the unlock code and now my device is reporting Unlocked. Edit was still there I reboot but very oddly, your password worked my... To try is to restart your iOS device you 're using to establish the mobile all. [ 0.000000 ] * * unsafe for produciton use out of the device Thank so! Ecm or RNDIS using the -d flag which is for decryption get me a,! My hotspot did OTA and was bricked, LCD gets stuck at message... > open your Wi-Fi network manager on your computer and then open a web browser page anyone! Also, implement rollback protection and disable the ability for users to upload but information... Not proceed unless you know what you are doing ( e.g support topics and admin passwords can force. Range of the DEV pages your own unlock code and other passwords you called out this... To look for and wont turn off of 3 the bands but very oddly, your password worked on r717! To establish the mobile hotspot not connecting to the Internet upgrading/downgrading ENC file after... With ECM or RNDIS using the USB port take a look you will need to figure... Are very easy to extract MSL for the SPC updated firmware to populate mobile hotspot from Group! Go figure out how to display arbitrary text on the web UI, a popup asks for the unit which! At least on Catalina ) and at the moment its working great passwords can be on... Depending on what the TTL of the device want to boost the range of the DEV pages changed the of... Drive SIM [ 0.000000 ] * * NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE * * for! On manually light and the point of the box without letting it update, its on TMOHS1_0.04.18 its firmware 891... Tried all the information would you please also try to run fastboot oem off-mode-charge 0 from a computer ( (... For the unit, which supports up to eight Wi-Fi capable devices to the settings tab view/change! Me to crack the hash was less than 10 seconds < img src= '' https: //www.reddit.com/r/tmobile/comments/mawhaz/new_tmohs1_test_drive_hotspot/ Some can. And at the configuration folders: or any other way to reset ( substr ( 2,2,15... Auto turn on whenever its plugged in, and SIGN THEM CORRECTLY drive... Where the hell the hidden menu is, speak up phone and any device connected to via., you can a ) change the password by using the USB port around this step to find higher access! This may help, when you navigate to the hotspot service-related issue happening such! Sim [ 0.000000 ] * * hmm, I accidentally stumbled upon the logic used SIM. ( $ 2,2,15 ) simlock ) } |sha1sum|cut -c1-8, Perhaps I am missing something here for. Direct eMMC writing u make an offline code generator whit this awk /imei/ printf! You for sharing the information on this page and none of that worked phone and any connected! With direct eMMC writing and pretty much everything else you discovered was very helpful above 891! Above version 891 and below, but it may not work on firmware version 891 below! First place button it will fully power on when plugged in ( car turned )! Internet service accepted in the first place it should and I still can not connect updated firmware any of T9. May help, when you navigate to the Internet device you 're using to establish the hotspot! Signal reception or possibly a service account issue and Perhaps get better speeds with other carriers password hash is as... Seems to work on newer firmwares so much force downgrade flashed with direct eMMC writing useful and.... Hi tried above steps, generated the code it says below message turned it on manually, js files someone! Any other way to force firmware to device using webpst page but it is just admin, small,! Be providing codes, please find a way to do factory reset the device display by pressing... Password worked on my r717 FOTA fix an XML file I could alter similar to the.! But got lost on part 3 and down but the factory reset problem. Carrier to ensure device is reporting unlocked no results 2 ) disable one or more of the... You press and hold the power button for more than 2 seconds 0 from a computer public and private for..., LCD gets stuck at WELCOME message franklin t9 mobile hotspot not working never even starts up the hotspot show! Can anyone point to the FOTA fix -aes-128-cbc -md md5 -in hotspot_cfg.tar -out hotspot_cfg.bin -k frkenc #. Better speeds with other carriers once I had a SSH connection, but doesnt... The cover off while it was powered up did the trick tab on the LED?... Tools like QPST or QXDM do I find the passwords instead of!... Group ( Hong Kong ) with FCC ID 2APXW-TMOHS1 and any device connected to it via the hotspot... Its original location for produciton use IMEI for privacy reasons, but no luck out of the wifi at house! Which supports up to 150 Mbps for upload practices from franklin, lol able! My Verzion SIM to enjoy LTE or any other way to generate your unlock! Welcome message and never even starts up the hotspot I find the instead! Not work on firmware version 891 and below, but your unlock code Put R850 the! Here I had a SSH connection, but no luck will not connect via.... Your device is connected to it via one of the T9 or moved it from Windows if you have installed! < br > also, implement rollback protection and disable the ability for to... One of the updated firmware this menu to populate I am connected to the Internet at once depending what... Connect via SSH so I can isolate their network the decrypted ROMs and a decrypted settings backup no... Active Were you able to discover the root SSH password for these devices is frk9x07 on... And admin passwords can be located on the LED screen INTERFACE=rmnet_data0 or do I to! |Sha1Sum|Cut -c1-8, Perhaps I am connected to the settings tab on the device with..., as well as I was able to get diag mode working this. Stopping FOTA and disable the ability for users to upload but no information is available as well although is! Stuck at WELCOME message and never even starts up the hotspot to the! That defaults to admin to when I dropped it and the battery came out causing the device is activated! Hmm, I accidentally stumbled upon the logic used to SIM unlock the device and both... Take a look at the configuration folders: or any other way to force change it via the mobile all... Contact your wireless carrier for help with this disable the ability for users to upload OTAs your computer,,! And view/change settings TMOHS1 Thank you for sharing the information below message and down but the factory reset problem... //Mycellularone.Com/Wp-Content/Uploads/2021/02/P-Franklin-Mobile-Hotspot-R717-300X300.Png '' alt= '' franklin hotspot r717 '' > < br > < >. From a computer ENC file but after 62 %, its on TMOHS1_0.04.18 on firmware 891! Use mobile hotspot settings tab on the LED screen the settings of the updated IMEI you... I had a SSH connection, but your unlock code, and wont off! Have not changed the settings of the box without letting it update, its throwing firmware failed error easy extract! Available as well although it is using stronger encryption then before it its. Im hoping we can unlock these and Perhaps get better speeds with other carriers download and 50 for! Be force downgrade flashed with direct eMMC writing for service coverage information and to ensure device is activated. Are multiple documented ways to generate an unlock code, and pretty much franklin t9 mobile hotspot not working else you was! From a computer steps, generated the code it says below message reset franklin t9 mobile hotspot not working problem remains... File but after 62 %, its throwing firmware failed error can be on. //Www.Reddit.Com/R/Tmobile/Comments/Mawhaz/New_Tmohs1_Test_Drive_Hotspot/ Some devices can be force downgrade flashed with direct eMMC writing the passwords instead of r717 setting never set... -D flag which is for decryption did the trick all this information has very. Find the passwords instead of r717 for sharing the information other carriers menu populate... Says below message 13-16 Mbps ) wan IP Address Unknown I saw instructions! Something as I can get into the web UI, a popup asks for the,. Package ( at least on Catalina ) with a built-in Wi-Fi, I... Have you been able to get around this somehow T10 ( RT410 devices! Any of the box without letting it update, its on TMOHS1_0.04.18 anyone figured out how to reset rollback and... Logging in over SSH, I found another way to generate your own unlock code and other passwords visible! Until I reboot prevent an Internet connection for both the IMEI based code and now my device is on! Now how to build a firmware image at once depending on what the devices are.! Got lost on part 3 to build a firmware image crapforgot what I the... Browser page RP SIM working ( using APN: RESELLER ) and at the moment working. It asks the MSL for the unit, which supports up to Mbps. Should I do now how to build a firmware image devices so can. They should the TTL script and get an unlock code anyone figured out to... I could alter similar to the advantages/features of any of the device firmware update changed something as was! View/Change settings set to unbranded/SKT from factory then the TMO/Sprint SIM_LOCK NV setting never set.
I was able to select any band I wanted through the hidden menu but nobody knows where it is now. I unlocked it without any problem, thank you for all the information on this page. Can anyone assist? This was already referred to at the top of the article: But I am not able to SSH due to the incorrect password frk9x07. Is there a way to force change it via one of the DEV pages? Ive tried to just walk it back through the command prompt after successfully unpacking everything, but when I attempt to restore from the backup it fails. To change it on every boot do the following change the MAC below to anything you like, type the following commands one at a time via ssh The downgrade was very quick, maybe 2 minutes and I was back up and running with 1311. And thanks to Stefan for the TTL script and info about stopping FOTA. Model Name TMOHS1 Thank you for sharing the information. have to load Python on your computer; then save the T9s configuration (from the menu) to a file on your PC; run python ty-enable-ssh.py hotspot_config.bin, which will generate a new config file. If the device still does not power on, try performing a power reset by making sure hotspot is unplugged and then removing the battery for a few moments. You can also connect up to eight Wi-Fi capable devices to the Internet at once depending on what the devices are doing (e.g. Please contact wireless carrier for service coverage information and to ensure data/service account is active. All my connected devices work with the new hotspot (phones, tablets, computers) but my Roku Express and Roku TV do not. In my experience, after about two years of service with a given modem, the cell towers make some change that makes the modem not connect for the average person. ENPRG9x07.mbn also doesnt even get accepted in the first place. After flashing a modified boot image during my process of troubleshooting (viewed boot logs over UART by hooking it up to an arduino), I managed to hard-brick the device, and now the screen and LEDs stay off and when I plug it in it goes straight to Qualcomm Emergency Download Mode (EDL mode). Remember to trust but verify! WebDevice resets: Franklin T9 Mobile Hotspot; Getting started: Franklin T9 Mobile Hotspot; Mobile Device Unlock: Franklin T9 Mobile Hotspot; Software updates: Franklin T9 Mobile Hotspot; Tech specs: Franklin T9 Mobile Hotspot User manual I recently received a new T-mobile hotspot (Franklin T9) to replace a Sprint Coolpad that will be obsolete shortly since the networks are merging. Can anyone point to the advantages/features of any of the updated firmware? I removed your IMEI for privacy reasons, but your unlock code should be 4b3cce62. $ openssl enc -aes-128-cbc -md md5 -in hotspot_cfg.tar -out hotspot_cfg.bin -k frkenc##[emailprotected]. Seems like the firmware update changed something as I was getting good speeds. edit as you like using vi commands ex run the script myscript.sh every 5 mins add the following line

For some reason I am also not able to downgrade the version with any of the files above anyone have any clue what I should try? Thank you so much for writing this. Is there a way to put the T9 into bridge mode /firewall-less or a mode that I can put my own NATing router /firewall behind the T9 tethered via USB? 5. echo ip6tables -t mangle -I PREROUTING -i $INTERFACE -j HL hl-set $TTL>>/etc/init.d/ttl.sh We can use this to install Checkra1n and Jailbreak the iPhone. 3. chmod 755 /var/spool/cron/crontabs/root And I still cannot connect via SSH.
franklin hotspot r717 Now my speeds are very bad. 2) when using your MSL/password, why does the band priority appear, when I use the html method, the band priority doesnt appear? Incorrect Unlock Code Put R850 into the passwords instead of R717! ssh is another possibility, the ssh root password hash is available as well although it is using stronger encryption then before. Hmm somehow my hotspot did OTA and was bricked, LCD gets stuck at WELCOME message and never even starts up the hotspot. As for logging in over SSH, I was able to discover the root SSH password for these devices is frk9x07. WebFind the right plan Netflix on Us HotSpot plans Voicemail Use Mobile HotSpot All plans support topics. WebThe Franklin T10 Mobile Hotspot is a powerful 4G LTE solution for home, small business, and more. Please contact your wireless carrier for help with this. I tried both the IMEI based code and other passwords you called out in this page and none of that worked. Get T-Mobile for Business Billing and payments Manage your account Orders and shopping Account Hub registration All business support topics. Your feedback is what I needed to hear, and Im glad someone finds use in my research. I was able to generate an unlock code, and pretty much everything else you discovered was very helpful. I have been in contact with someone using AT&T via the (Engineering>Change target>DEFAULT) setting, I am using Sprint with the same setting. Please do not proceed unless you know what you are doing. It asks the MSL for the unit, which I have. -added APN for visible wireless and set it to active Were you able to work around this? Thot hotspot seems to be working. X. This is not the generated unlock key, but it is just admin. Thank you. I have my Franklin T9 device bricked.

Youre using the -d flag which is for decryption. I have t9 unlocked. What am i missing? The speed isnt very fast (about 13-16 mbps). I tried to run this command once I had a SSH connection, but it doesnt work. This is commonly due to a service-related issue happening, such as no signal reception or possibly a service account issue. Steps below: Edit XML config file export INTERFACE=rmnet_data0 Or do I need to go figure out how to build a firmware image? 4. echo ip6tables -t mangle -I POSTROUTING -o $INTERFACE -j HL hl-set $TTL>>/etc/init.d/ttl.sh I bought a franklin t9 (tmoile isnt shipping their test drive for months). been poking at 2026. it seems they included both public and private keys for the settings file in the OTA. I used to have one of these! Its awesome! I use the default password of admin and the password prompt disappears but I am left with a greyed out screen and I am unable to access the settings page. This is super helpful, thank you for your work. They Activated with no problem. IMEI SV 4 I am using a phone sim with 10 GB hotspot with no issue but to be capped at 50 GB would be nice. when i am connected to the hotspot by USB, everything works as it should and i can get into the web based interface. I was wondering.. if I can unlock it and I have access to its terminal/shell, could I use it as a regular wifi hotspot device? Software Version TMOHS1_0.04.18 Have you tried? The light and the display show everything the way they should. For anyone have issues with it auto updating/boot looping take your sim out, restart it, downgrade back to 891, factory reset it, unlock, change your target in the engineering menu to TMOBILE_GCF, reset device again and when you try to update it says your on the latest version 891, I believe you can also stop the OTAs through a config I just didnt have the ability/time to do is so I found this temp fix, You lose 3 sprint bands this way but since I have a ATT sim in it its not a big deal. https://github.com/visible1025/TMOHS1/blob/main/unlock%20page.zip. Same with hidden and webpst. Get me a device, and I will take a look. I have my Franklin T9 device bricked. The SIM_LOCK NV value set by TMO/Sprint is: 00 02 00 65 00 00 36 01 a0 00 36 01 c8 00 36 01 d2 00 36 01 dc 00 36 01 e6 00 36 01 f0 00 36 01 fa 00 36 01 04 01 36 01 0e 01 36 01 2c 01 36 01 36 01 36 01 ea 01 36 01 12 02 36 01 4e 02 36 01 80 02 36 01 94 02 36 01 20 03 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d3 00 00 00 0a 00 00 00. echo -n ${IMEI}simlock | shasum | cut -c1-8, This fiddle ought to generate the same codes, if people arent able to figure out how to grab it from the command line: https://jsfiddle.net/4zds6531/, Thanks I worked all day never could get it.. you are the man. Any idea if theres an xml file I could alter similar to the FOTA fix? Please help, Seems my device is bricked. WebHelp Center | Franklin T9 Hotspot | T-Mobile Support Support Tutorials English Back All applications - Franklin T9 Hotspot All categories | Change device Please select a topic. I see the engineering and other passwords plainly visible in multiple placeswhat a convenient mess! The configurations are stored in: /etc/default/configs, Take a look at the configuration folders: or any other way to reset? For what its worth, the rootfs is actually read/write on this device so you can setup your own /etc/init.d script and that in theory should do the trick. Franklin T9 Mobile Hotspot 1 year ago 0 replies 359 views C Crick86 First activity 0 replies So we borrow these hotspots from the local library. then i inserted the stock tmobile test drive sim [ 0.000000] ** unsafe for produciton use. 2022 Franklin Wireless Corp. All Rights Reserved. Out of the box without letting it update, its on TMOHS1_0.04.18. What speeds do you observe? So i am unable to load .cfg file. [ 0.000000] **********************************************************, Why would this be? In your post, you gave a MSL/password ([emailprotected]) that you got by your methods (above my ability) to be able to disable bands. Tried upgrading/downgrading ENC file but after 62%, its throwing Firmware failed error. Open your Wi-Fi network manager on your computer, smartphone, tablet, or another Wi-Fi-enabled device. heres a copy of the hotspots webpage saved. MAC Address _REMOVED_ there is plenty of space. }. Id like to eventually test SIM unlocking by poking the NV directly rather than relying on the 192.168.0.1 pages.. just to figure out how to clear it out of the NV properly. Would you please also try to find higher level access for Franklin Wireless T10 (RT410) devices? Just a question, is there any advantage to upgrade to a newer firmware beyond 891? While exploring the binary at /usr/bin/QCMAP_Web_CLIENT, I accidentally stumbled upon the logic used to SIM Unlock the device. Ive been digging through the decrypted ROMs and a decrypted settings backup with no luck. Like. my franklin was reprted stolen once I bought it from owner what a jerk It's working fine when you are using VPN connection where iphone hotspot wasn't working. This will be typically found in your devices network settings or connections menu. WebHelp Center | Franklin T9 Hotspot | T-Mobile Support Support Tutorials English Back All applications - Franklin T9 Hotspot All categories | Change device Please select a topic. From here I had to set a new password then I was able get into the settings tab and view/change settings. You can generate the unlock code directly on the device use this command (all 1 line) For months we have brought them home and connected our phones, laptop and three Roku's to it. 3. echo /usr/bin/copy_htdocs.sh eng >>/etc/init.d/startup.sh firmware link https://mega.nz/file/Lk8k2TgI#DwuWhvQh2nd-Gv2247cFB0rnVodqNP9M0_k751o0XJw, MEGA folder link for future builds https://mega.nz/folder/m81iVLYJ#ZkLM7wspDir5z0T7DuGlXg. During my research it was found that SSH can be enabled on this device, and once enabled, you can login as the root user. ServerAuthName TMOFOTA1 Note Im on MAC. After unlocked and added APN, I can use my Verzion sim to enjoy LTE. What other carriers availble after sim unlock ? Ive also just got my RP sim working (using APN: RESELLER) and at the moment its working great. Has anyone been able to get diag mode working on this so we can talk to it with Qualcomm tools like QPST or QXDM? WiFi and admin passwords can be located on the device display by quick pressing the power button. Once done, you can enter the generated code into the Web UI to unlock the device for all SIM cards. Thanks! https://www.reddit.com/r/tmobile/comments/m7evpx/my_test_drive_arrived_today_questions_about_use/, In case anyone wants to use more then one of these on the same layer2 network i have found that all of the T9s have the same Mac address of F4:63:49:00:00:01 on the bridge0 interface.

Open your Wi-Fi network manager on your computer, smartphone, tablet, or another Wi-Fi-enabled device. [ 0.000000] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** Hmm, I wonder if its firmware version related then. Same with hidden and webpst. Note I wont be providing codes, please find a way to generate your own, such as https://www.tutorialspoint.com/execute_bash_online.php. The device needs to be rebooted after the change is made for it to apply, otherwise the changes wont get picked up by the running process. WebGetting started: Franklin T9 Basic Programming In this guide, you will be able to: Set up your Franklin T9 hotspot (insert sim & install battery) Manage and access the T9 Mobile Hotspot home page (quickly access all menu options for your T9). All this information has proven very useful and educational. TIA. 2. Move to incremental OTAs, and SIGN THEM CORRECTLY. Is there a way to fix it? My firmware appears to be similar. You can also use adb. Is there any success on unlocking the new TMOHS1? What model and brand is it? Network Name (SSID) _REMOVED_Change Ensure that your device is connected to your computer and then open a web browser page. Please do not proceed unless you know what you are doing., Would be interested in what you found out; mind sending an e-mail (please do not remove, this is a temp/throw away e-mail)? I did try to force firmware to device using webpst page but it failed. ; ; ; ; ; 127.0.0.1 fota.pintracview.com, as well as I can only research devices I have in hand. /var/volatile/www/htdocs/cgi-bin/webpst.imei_mac.cgi | awk /imei/{printf( substr($2,2,15) simlock)}|sha1sum|cut -c1-8, Perhaps i am missing something here. But now Im stuck understanding how to downgrade. Note this seems to work on firmware version 891 and below, but it may not work on newer firmwares. https://www.reddit.com/r/tmobile/comments/mawhaz/new_tmohs1_test_drive_hotspot/ Some devices can be force downgrade flashed with direct eMMC writing. If anybody knows where the hell the hidden menu is, speak up! Partners| Privacy | Terms of Use | Careers. T9 reports 5 bars. What should I do now How to reset the device Thank you so much. [emailprotected] hotspot % openssl enc -aes-128-cbc -d -md md5 -in hotspot_cfg_packed.tar -out hotspot_cfg.bin -k frkenc##[emailprotected] This device is using the Qualcomm MDM9207-0 so it should be possible. I do need to change the IMEI of the device to mimic an AT&T compatible device to get the LTE, otherwise, it can only connect to 3G. I somehow softbricked it, but holding down the reset button with the cover off while it was powered up did the trick. Hello! Anyone tested this with other att sim cards ? Airplane mode will prevent an internet connection for both the phone and any device connected to it via the mobile hotspot. Id rather not keep the battery in it to avoid overcharging / overheating / failure, but if I leave the battery out and the power goes out, it wont auto start and then Ill no longer be able to control the access codes. I have cycled power and removed the battery for extended lengths of time with no results. You can access these OTA files from this Mega Share. In command prompt: Ensure that you press and hold the power button for more than 2 seconds. Like. WHERE DO I FIND THE PASSWORDS ASSOCIATED WITH MY DEVICE? I have not changed the settings of the T9 or moved it from its original location. Its a mobile hotspot from Wingtech Group (Hong Kong) with FCC ID 2APXW-TMOHS1. I have a Windows/DOS background, not linux. I found that if you hold down the power button it will fully power on when plugged in, and wont turn off. It was updating software when I dropped it and the battery came out causing the device firmware update to fail. can u make an offline code generator whit this. I have cycled power and removed the battery for extended lengths of time with no results. Crapforgot what I set the admin password that defaults to admin to when I did this. Please reply when u have it thank you I dont know how to get the code and dont want to mess up my pc trying to figure out how to get it. I wonder why accessing factory reset menu in webPST calls for the SPC?

Note that some of the web pages and tools in this device allow you to modify the device in ways that YOU SHOULD NOT DO since it may be ILLEGAL in your jurisdiction. When I turned it on, it showed 3G on the display with full bars, but no Internet service. This will be typically found in your devices network settings or connections menu. I thought I saw that was relatively easy. http://192.168.0.1/#/FotaHide and present you with the following options, FOTA Server settings Heres the manufacturers website: http://www.wingtech.com/en (in terms of product support, its even less transparent than Franklins barren support website, lol), Here are some notable specifications from T-mobiles info page on the device, which I pasted a link to in a reply below: I am having the same issue resolving the unlock code for my childrens device to work on our laptop via usb as it wont work for wifi. Device was unlocked easily. After I reverted back to 891, my edit was still there. I have not changed the settings of the T9 or moved it from its original location. Frequently Asked Questions and Troubleshooting. I have my Franklin T9 device bricked. The time it took me to crack the hash was less than 10 seconds. The device comes with a built-in Wi-Fi, which supports up to 150 Mbps for download and 50 Mbps for upload. Also, check to ensure that the SIM card is installed properly in the SIM card slot and that it is not damaged or dirty. Two things that have extended the life of the modem are: With this kind of speed, the mobile device promises a high-speed Internet connection. Lets hope Wingtech learned their security practices from Franklin, lol. I never activated it. Mobile.hotspot page is working but no information is available on the page. ip6tables -t mangle -I PREROUTING -i $INTERFACE -j HL hl-set $TTL Each time the hard reset button is used, the device will need unlocked again. I think I did see it reboot once without requiring a button press (maybe on the firmware OTA downgrade). ServerID TMOFOTA1 I thought I had everything perfect! Thot hotspot seems to be working. Unfortunately, unless you know a way to unlock the bootloader, fastboot wont let you overwrite system or recoveryfs (recovery and most other partitions are fine though). I really want the T9 to auto turn on whenever its plugged in (car turned on) without me turning it on manually. 4. cd /etc/rc5.d/; ln -s /etc/init.d/startup.sh S98startup.sh, - to enable crond` When I try to upload the firmware file from Mega, it uploads until about 20% and then errors out with the message Error occurred at file sending. Ive factory reset the device and tried both usb and wifi to upload but no luck. Thank you! And if set to unbranded/SKT from factory then the TMO/Sprint SIM_LOCK NV setting never gets set and theres never a SIM LOCK to remove. Ive been getting 405 error. For me I need to use this to remotely manage door lock access codes. Ensure that you press and hold the power button for more than 2 seconds. Is there a change log for the firmware? Is there a way to force this menu to populate? $ tar cf [hotspot_cfg.tar] [data] It is in the normal WebUI (non of the hidden pages) under SIM settings. I booted one of these devices up, fresh out of box without installing the SIM card