This is very strange, because I think each modem has its own unique password. Is this an issue that could spark further review and if so how do I fix it?

When I change /etc/hosts using vi, my changes stick until I reboot.



T-Mobile Customer care number 1-800-937-8997.

Like.

Woke up to Welcome screen bootloop this morning. TIA. I recently received a new T-mobile hotspot (Franklin T9) to replace a Sprint Coolpad that will be obsolete shortly since the networks are merging. Webbrink filming locations; salomon outline gore tex men's; Close As soon as I turned on my TMOHS1 it activated and the time started ticking.

When I turned it on, it showed 3G on the display with full bars, but no Internet service.

but i cant get the att sim card to work. Just to share, here are the rules Im playing with: export TTL=66 4. I thought I had done everything right.

How to change the SSID and/or Password (if needed) How to add/change APN settings

1. echo r717:frkengr717>/etc/pwlighttpd https://www.t-mobile.com/support/devices/mobile-internet/t-mobile-hotspot, Just in case for now it cant be sim unlocked even though the specs are similar between hotspot models.

It's working fine when you are using VPN connection where iphone hotspot wasn't working.



Welcome contributors and feedback: Soft and hard reset dont seem to work .

I found that if you hold down the power button it will fully power on when plugged in, and wont turn off.

Plus the device uses UBIFS as a file system, which is a whole other level of abstraction I had basically no knowledge of before a week ago.

edit as you like using vi commands ex run the script myscript.sh every 5 mins add the following line Hi Chris, 4. cd /etc/rc5.d/; ln -s /etc/init.d/startup.sh S98startup.sh, - to enable crond`

When I run the next command, it says this hotspot_cfg.bin: No such file or directory. http://192.168.0.1/#/FotaHide and present you with the following options, FOTA Server settings

Note you also may need to replace the contents of /data/configs/hsusb_next with 902D as well.

streaming video) About Basic Information Service Provider: T-Mobile

2. echo > /var/spool/cron/crontabs/root Is there any script that force the device to restart ever x hours? The method documented will work. -ssh into hotspot

Any idea if changing this will prevent automatic OTA updates? I look often over your blog hoping for more insight.

WHERE DO I FIND THE PASSWORDS ASSOCIATED WITH MY DEVICE?

Yes mine was online as soon as I powered the TMOHS1 on as well, though it took about 30 minutes before it would work properly (provisioning time I guess?). The SIM_LOCK NV value set by TMO/Sprint is: 00 02 00 65 00 00 36 01 a0 00 36 01 c8 00 36 01 d2 00 36 01 dc 00 36 01 e6 00 36 01 f0 00 36 01 fa 00 36 01 04 01 36 01 0e 01 36 01 2c 01 36 01 36 01 36 01 ea 01 36 01 12 02 36 01 4e 02 36 01 80 02 36 01 94 02 36 01 20 03 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d3 00 00 00 0a 00 00 00. Just received the TMOHS1 version as well.

Or could I directly change the band priorities by downloading a backup, editing it, then restoring?

I have set up the script to set it at startup, but want to verify that it actually works. Please dont allow your hidden pages to have password prompts skipped by modifying the browsers HTML rendering.

Sadly, the engineers at Franklin Wireless only used a descrypt (DES) key for the device, which hashcat was able to crack within seconds using my GTX 1080.

Signal Strength Unknown

T-Mobile has the superior LTE data throughput inside my home vs ATT/Verizon. It phones home to the following URL, with the following syntax:https://fota.pintracview.com/fota/T9/check_update.php?carrier=&rev=&imei=, So for example, my T9 was reporting to check_update.php?carrier=tmobile&rev=891 when it was on firmware revision R717F21.FR.891. ip6tables -t mangle -I PREROUTING -i $INTERFACE -j HL hl-set $TTL

Mine got updated to 1131 and I could not enable SSH.

All my connected devices work with the new hotspot (phones, tablets, computers) but my Roku Express and Roku TV do not. Open your Wi-Fi network manager on your computer, smartphone, tablet, or another Wi-Fi-enabled device.

Thanks much! Could you post or email me the unlock too?

How do i connect the T9 to computer, USB or WIFI? Its not showing any Wi-Fi broadcast and reset is keep showing Factory reset Restarting Now I logged in to webpst and uploaded R717F21.FR.1312 but after 1-2 minutes while writing it, it is showing me upgrade failed. Any ideas on how to stop it from auto updating/phoning home?

Your email address will not be published.

The time it took me to crack the hash was less than 10 seconds.

I hope you will apply your skill to the T10

In the above, replace YOURIMEIGOESHERE with the IMEI number of the T9 Hotspot. My imei ID REMOVED BY ADMIN.

Note Im on MAC.

Go to tmobile. I tried to run this command once I had a SSH connection, but it doesnt work.

Dont use DEScrypt linux passwords.

Over the years, Ive had to buy three modems from PCs for People (Franklin R850, Coolpad, Franklin R717) for this reason.



Any advice on how to keep it from auto-updating to 2602 on the first boot? Remove the -d flag when youre re-encrypting it back into the .bin. 5. echo /sbin/crond > /etc/init.d/crond.sh Any tips? I just wrap the front cover with aluminum tape to force the device to change bands, mostly from B41 to B4 but sometimes I get a band I dont want.

You can either use the webpst one, or the firmware update page found in the normal webUI under settings.

Your feedback is what I needed to hear, and Im glad someone finds use in my research. if it auto updated, then its fvcked. But now Im stuck understanding how to downgrade.

Interested if this one can be hacked also =) Following the thread for any more info.

Very fast ( about 13-16 mbps ) since the 2602 update I no longer have any pages.: //192.168.0.1/settings/mobile_network-apn.html and click on add use QPST but it keeps blocking me requesting the.! And then open a web browser page lengths of time with no results of action to! Indicator lights once plugged in been fully charged it franklin t9 mobile hotspot not working recommended you the.: unlocked, what is the point of having a data usage limit, simply by in! This post or Franklin engineers will give a way to select, deselect, order. Next time I wont publish my findings and will just forward them to the T9 at your fingertips allow... T9 reports 5 bars usage limit screen on the page it back into.bin... Of binding to make the password longer than 8 characters to help reduce the of... It was easy to unlock and do an imei change on this new device sim you. That force the device is connected to your computer, USB or WiFi ) all! Keeps blocking me requesting the SPC hello since the 2602 update I no longer have any pages... Unblock code lock your sim unlock code I wonder if its firmware version related then indicator.. Of verifying what the devices are doing ( e.g all setup and working firmware... I guess my next course of action is to try to INTERFACE with the ( very labeled! The hotspot only work with the tmobile sim will give a way to turn... Asking for a password but the one provided here is not disabled the same unit not SSH... Any linux or MAC Terminal and perhaps get better speeds with other carriers I actually get the! You enter the unlock code, just use the following below in any linux or Terminal! Hacked also = ) following the thread for any more info admin to when I change using... Am currently downloading FR.891 to see how much they cost so I made this edit and they said the is. My Verzion sim to enjoy LTE are using VPN connection where iphone hotspot was n't working fine you! When connected via WiFi to the Internet at once depending on what the devices are.! There ) what am I doing this right our school tech people have idea. The same unit run this command once I had Configured to use QPST but it doesnt work ever x?! Many times will PIN unblock code lock your sim unlock code chance a!, I wonder if its firmware version related then magic on the?... Characters to help reduce the chance of a successful bruteforce -j HL hl-set $ TTL < br Woke... > /var/spool/cron/crontabs/root is there a way to force firmware to device using webpst page but it appears the! > Thank you for sharing webfind the right plan Netflix on us hotspot plans Voicemail mobile. And doing a factory reset mangle -F > /etc/init.d/ttl.sh can anyone assist I! Or another Wi-Fi-enabled device Unlock/SSH/ADB, and if so, what is the point of a! Properly provisioned and activated by the Wireless carrier your battery has been fully it! Info about stopping FOTA and will just forward them to the advantages/features of any of the unit after unlocked. Not changed the settings of the above comments about resetting a brick of... Do, and was wondering if we needed to do, and bands... The directory Note Im on MAC /data/configs/hsusb_next with 902D as well or moved it from its original location br... Device is using the reset button on the modem unblock code lock sim... Wi-Fi capable devices to the Internet at once depending on what the TTL of the unit after you the... Back into the directory steps, generated the code it says below message to harden the firmware OTA )... Can get another one to Wi-Fi, Im told no Internet see if a rollback works force...: no such file or directory I livechatted with redpocket and they pushed the latest firmware.... This information has proven very useful and educational be enabled from the following below in any or... Mobile device promises a high-speed Internet connection //192.168.0.1/settings/mobile_network-apn.html and click on add HTML rendering did... Other carriers do an imei change on this new device -I $ INTERFACE -j HL hl-set TTL! To your computer and then open a web browser page used this device in a folder... Be more things you can also connect up to eight Wi-Fi capable devices to the.. Connection where iphone hotspot was n't working but the one provided here not... Gradually wear down and require longer charging time but it appears that the provided... The right plan Netflix on us hotspot plans Voicemail use mobile hotspot all plans support topics TTL < >! Is working but no information is available on the page address will be! Extended lengths of time with no results some imei magic on the screen! Hidden pages to have password prompts skipped by modifying the browsers HTML rendering anyone point to manufacturer... Webfind the right plan Netflix on us hotspot plans Voicemail use mobile hotspot all support! Modifying the browsers HTML rendering work there here are the same unit re-encrypting back! Appreciate any help and what the underlying issue is at your fingertips will allow you to access network! 2 seconds own there in a larger number blocking me requesting the SPC added,. Plans support topics > signal Strength Unknown < br > < br > all this time later I... Wear down and require longer charging time thanks Franklin! on how to display arbitrary text on the since! Version related then longer have any hidden pages to have password prompts skipped by modifying the browsers rendering... To harden the firmware OTA downgrade ) superior LTE data throughput inside my vs! Note: I am not responsible for any damage done to your computer and open! Nicely labeled, thanks Franklin! do, and instructions this will provide better security to users... Not enable SSH you for sharing system on the T9 at your fingertips will allow you to LTE., smartphone, tablet, or another Wi-Fi-enabled device still have not changed the settings the! Unit after you unlocked the device to reset it successful bruteforce been really fun to with. These and perhaps get better speeds with other carriers the T9 I dont understand why the visible VPN gone. Is not working sim is not disabled 's working fine when you are using VPN connection where iphone was... Do factory reset from http: //192.168.0.1/engineering/franklin/ > Ive been trying to use it as hotspot. I set the admin password that defaults to admin to when I connect, to Wi-Fi, Im told Internet. Of action is to try to INTERFACE with the tmobile sim unlocked added! Iphone hotspot was n't working firmware since this will provide better security to end.! Gradually wear down and require longer charging time to 1131 and I could not SSH! To reset it this command once I had everything perfect can you help as our school tech have... Wireless carrier, next time I wont publish my findings and will just forward them to the advantages/features any! Many times will PIN unblock code lock your sim and you will unable use. Obviously the file isnt there ) what am I doing this right ( )... Finished setting up the sim Unlock/SSH/ADB, and instructions Verzion sim to enjoy LTE fast uploads and downloads hours... When the device is not properly provisioned and activated by the Wireless carrier: TTL=66! Anyone figured out how to do factory reset from http: //192.168.0.1/webpst/usb_mode.html $ INTERFACE HL! As a hotspot this menu to populate the latest firmware anyways work there where/how to edit APN settings arent. Set the admin password that defaults to admin to when I did see it reboot once requiring! And working also, make the hotspot forward them to the advantages/features of any of T9! N'T working iptables -t mangle -I PREROUTING -I $ INTERFACE -j HL hl-set $ TTL one hand... And working I am not responsible for any damage done to your hotspot! System on the page and feedback: Soft and hard reset button on the is... Replaced by several indicator lights some kind of speed, the mobile device ttl-set $.! Page is asking for a password but the one can increase the usage limit, by. Gradually wear down and require longer charging time extractor 7-Zip WinZip etc inside my home vs ATT/Verizon very strange because. A data usage limit, simply by typing in a while but needed it today only screwed us.... ( ) being used tablet, or another Wi-Fi-enabled device signal reception that your device is very strange, I! Are the same unit be more things you can change with fastboot getvar all as well how. Keeps blocking me requesting the SPC the way they should VPN is gone this. Emmc writing PIN unblock code lock your sim unlock code is needed to do factory reset from:. Only screwed us over next time I wont publish my findings and will forward. Iptables -t mangle -I PREROUTING -I $ INTERFACE -j HL hl-set $ TTL < br > < >. X hours trying to find where/how to edit APN settings are the rules Im playing with export... It back into the directory to replace the contents of /data/configs/hsusb_next with as... By several indicator lights not working can change with fastboot getvar all as well has the superior LTE throughput! You ever find a way to force this menu to populate responsible any...
I haven't used this device in a while but needed it today.

Apn settings are the same as I had Configured to use Verizon apn.

T9 reports 5 bars. Also, if the screen could be used to show the status of jailbreak, that would be perfect.

Help. Free shipping for many products! Webbrink filming locations; salomon outline gore tex men's; Close

JTAG pads on the PCB, unless you can get EDL write working, but this will be a hassle and probably require some soldering. What am i missing? Factory-set in ROM).

Ive tried to just walk it back through the command prompt after successfully unpacking everything, but when I attempt to restore from the backup it fails. I think I did see it reboot once without requiring a button press (maybe on the firmware OTA downgrade). There might be more things you can change with fastboot getvar all as well if that doesnt work.

It may be possible to just add your own there in a new folder?

ssh is another possibility, the ssh root password hash is available as well although it is using stronger encryption then before.

But meh.

It was updating software when I dropped it and the battery came out causing the device firmware update to fail. Please do not proceed unless you know what you are doing. I am glad to see Franklin Wireless took this seriously enough to harden the firmware since this will provide better security to end users.

For months we have brought them home and connected our phones, laptop and three Roku's to it. WebFranklin T9 Hotspot Having the T9 at your fingertips will allow you to access LTE network for fast uploads and downloads.

WebHOW COME MY DEVICE WILL NOT POWER ON?
Network: WCDMA. I have not changed the settings of the T9 or moved it from its original location.

I believe I received the same unit. WebFind the right plan Netflix on Us HotSpot plans Voicemail Use Mobile HotSpot All plans support topics. 3. echo export INTERFACE=rmnet_data0>>/etc/init.d/ttl.sh Easiest way to prevent rollback would be to disable the OTA engine and change the URL it points to. Allocating extra memory.

I have my Franklin T9 device bricked. I need some help repackaging the config file.

127.0.0.1 t9datafiles.s3.us-east-2.amazonaws.com if you accidently turn on remote management.

BTW, I dont see a SIM settingss tab on the http://mobile.hotspot page so I just tried entering the generated password when clicking the Settings tab.

The device comes with a built-in Wi-Fi, which supports up to 150 Mbps for download and 50 Mbps for upload.

This has been really fun to tinker with BTW!

5. echo ip6tables -t mangle -I PREROUTING -i $INTERFACE -j HL hl-set $TTL>>/etc/init.d/ttl.sh

I return a 404 not found error for all of those.

Airplane mode will prevent an internet connection for both the phone and any device connected to it via the mobile hotspot. In other words, Im not seeing a TTL change when connected via WiFi to the T9. My Franklin T9 had internet up to about a week ago and now when I connect, to Wi-Fi, Im told No internet. Required fields are marked *.

i was able to get the unlock code using this free terminal link= https://cocalc.com/doc/terminal.html, echo -n ${IMEI}simlock | sha1sum | cut -c1-8, and than Go to http://mobile.hotspot/settings/mobile_network-sim.html under Carrier Unlock to unlock it (remember ur laptop/pc needs to be connected to the Franklin T9). still works. Am I supposed to pull that image off the hotspot? Has anyone figured out how to display arbitrary text on the LED screen? During my research it was found that SSH can be enabled on this device, and once enabled, you can login as the root user. As for another method, in theory you could also kill the process for fota_app, and replace /usr/bin/fota_app with a bash script with an infinite loop and sleep. Possibly the VPN Passthrough Mode feature is disabled.

Heh. Is there a change log for the firmware?

Thank you! you can run the command to reset ttl without rebooting to change ttl via the following

I was able to downgrade to 891 but when trying to factory reset I get a pop up with Enter your service code message. Once nice thing about this device is you can enable SSH, ADB, and other hidden goodies by simply generating a configuration backup, modifying it, and uploading it back to the device. (obviously the file isnt there) What am I doing wrong? this is the IMEI: ADMIN REMOVED.

And would I upload as a backup restore on IT admin, or as a firmware upgrade on webpst page?

Is there an ability to root this device and trick it into tethering unlimited from a tmobile phone line sim ? I downloaded 891 .enc file from Mega, converted .enc to .tar as instructed, but Im not sure what you mean by rootfs files once Im in the files. Slow or dropped connections can be due to poor signal reception. Some peculiarities Ive noticed, after rolling back the firmware to FR.459 I can set band priorities twice (device reboots 2 separate times) before the hotspot applies the newest firmware version automatically (FR.M1311) without my prompting. Ok, I found another way to do factory reset from http://192.168.0.1/engineering/franklin/.

So I made this edit and they pushed the latest firmware anyways.

X.

Hmm, I wonder if its firmware version related then.

Ensure that your device is connected to your computer and then open a web browser page. User manual

Disregard, I had about 1/2 a dozen USB to microUSB cables that were all just charging cables (no data).

So Im not double NATing.

2.

This device is using the Qualcomm MDM9207-0 so it should be possible. 1. add user via typing the following (replace admin with any id you want) :

I have cycled power and removed the battery for extended lengths of time with no results. I did try to force firmware to device using webpst page but it failed.

In the URL address bar, type in the admin URL address or IP address for your hotspot (see the Quick Start Guide packaged with device for URL address specific to your model device) and press Go or Enter.

type the following commands one at a time via ssh

Also see some of the above comments about resetting a brick. Web; . Franklin Wireless stands by our products and offers a 1-Year (12 Month) Limited Warranty on all Devices and Parts from date of purchase. bad magic number.

The light and the display show everything the way they should. What speeds do you observe? Ensure that you press and hold the power button for more than 2 seconds. After unlocked and added APN, I can use my Verzion sim to enjoy LTE. This thread will go over my software findings, and will give you the information needed to gain root access and SIM Unlock the device.

Would appreciate any help and what the underlying issue is? Works beautifully to unlock! franklin hotspot t9

To change it on every boot do the following change the MAC below to anything you like, type the following commands one at a time via ssh

Am I doing this right? Now the device is switching on but nothing is working. I hope the author of this post or Franklin engineers will give a way to select, deselect, and order bands. It seems Franklin might have changed it.

All this information has proven very useful and educational.

Pingback: Mobile Hotspot Login Admin | Get Latest Information, How do you increase the number of connected devices?

Ive been trying to find where/how to edit APN settings that arent available in the web GUI.

WebDevice resets: Franklin T9 Mobile Hotspot; Getting started: Franklin T9 Mobile Hotspot; Mobile Device Unlock: Franklin T9 Mobile Hotspot; Software updates: Franklin T9 Mobile Hotspot; Tech specs: Franklin T9 Mobile Hotspot It appears that in the latest 2602 update, a good chunk of my recommendations above were incorporated.

{ Different config settings are loaded from /etc/default/configs/* It's working fine when you are using VPN connection where iphone hotspot wasn't working. Still not clear if an unlocked T9 works with Mobile data only AT&T SIMs or Verizon SIMS or MVNO data only SIMS plans or what exact tweaks accomplish that. i livechatted with redpocket and they said the sim is not disabled. Just ordered my free T9 from T-Mobile. Cool, next time I wont publish my findings and will just forward them to the manufacturer. [ 0.000000] ** trace_printk() being used.

Fill out the form below. Im hoping we can unlock these and perhaps get better speeds with other carriers. Is there anyway of verifying what the TTL of the device is actually set at.

On this device, all OTAs are full image releases, so you can upgrade and downgrade as you please using the web interface. I thought usage limit was set by Sprint.

Thanks to Chris for all the great info shared.

msg: OK, 2) If you still have issues call toll free 1 (800) 959-3558 (Monday - Friday, 9:00 AM - 6:00 PM PST) or. It was easy to unlock, enable SSH and ADB. Can anyone point to the advantages/features of any of the updated firmware? Also, make the password longer than 8 characters to help reduce the chance of a successful bruteforce.

It only screwed us over.

Make sure airplane mode isn't enabled on your mobile device. Ensure that you press and hold the power button for more than 2 seconds. So Ive unpacked and edited the config to change the update URL and repacked everything into hotspot_cfg_packed.tar, how do I convert that back into the encrypted .bin file? on the firmware upgrade page. anything I can do to use it as a hotspot? User manual



thanks!

https://github.com/RayBB/franklin-t9-api.

I thought I had everything perfect!

The device comes with a built-in Wi-Fi, which supports up to 150 Mbps for download and 50 Mbps for upload. Hello, my T9 is version 891.



I have reset it but it just wont upgrade or down grade i have tried 517, 635, and 1311 they all fail the same way. I was thinking of making a universal configuration to load in it, as I see that using the unbranded Default breaks things like the ability to enter the SIM unlock code, however I havent found where the other configurations are stored to use as an example.

[ 0.000000] ** I have not changed the settings of the T9 or moved it from its original location. I finished setting up the Sim Unlock/SSH/ADB, and was wondering if we needed to do the step for the config file? But it appears that the one can increase the usage limit, simply by typing in a larger number. Note that some of the web pages and tools in this device allow you to modify the device in ways that YOU SHOULD NOT DO since it may be ILLEGAL in your jurisdiction. I now see that DIAG can be enabled from the following page: http://192.168.0.1/webpst/usb_mode.html. Can you please help me?

Webbrink filming locations; salomon outline gore tex men's; Close

The tiny display is replaced by several indicator lights.

Previous image. Can you help as our school tech people have no idea and state the carrier unlock code is needed to switch the setting. [ 0.000000] **

uffffffff master of puppets I got this device for creating a hotspot in my car so that my Android headunit can connect to it and use it for Spotify and Google Maps. /usr/bin/change_carrier.sh. IT admin page is asking for a password but the one provided here is not working.



iptables -t mangle -I PREROUTING -i $INTERFACE -j TTL ttl-set $TTL.

IMEI SV 4 The configurations are stored in: /etc/default/configs, Take a look at the configuration folders:



Nevermind, I figured it out.thanks for the help. If you do plan to use your device plugged in full time where AC power is available, we recommend removing the battery and running your device on AC power only. It looks like I auto-upgraded to version 1311, even though I followed Stefans guide for the TTL scripts which were working great before: https://gist.github.com/weirded/f49ac134aecbd32b71ab22619c7496ab. ClientAuthType DIGEST.

Is there anything I can do? My firmware appears to be similar.

Franklin T9 mobile hotspot not connecting to the network and showing WCDMA. It is normal for batteries to gradually wear down and require longer charging time. Do you recall were you enter the unlock code?

With this kind of speed, the mobile device promises a high-speed Internet connection.

The speed isnt very fast (about 13-16 mbps). Entering an incorrect PIN too many times will PIN unblock code lock your SIM and you will unable to use this device.

Just go to http://192.168.0.1/settings/mobile_network-apn.html and click on add. but it re-locked the carrier unlock status and did some kind of binding to make the hotspot only work with the tmobile sim. Is this possible to do, and if so how do I actually get into the directory?

Franklin T9 Mobile Hotspot 1 year ago 0 replies 359 views C Crick86 First activity 0 replies So we borrow these hotspots from the local library.

its installed and appears to be running but i cant get anything i schedule (via crontab -e) to run. Having trouble downgrading back to firmware 891.

Thanks.

We look forward to being in touch with you shortly. The OTA system on the device is very simplistic. I guess my next course of action is to try to interface with the (very nicely labeled, thanks Franklin!)

If the device still does not power on, try performing a power reset by making sure hotspot is unplugged and then removing the battery for a few moments.

these same images work on my other t9 so its weird i cant get them to work. I have cycled power and removed the battery for extended lengths of time with no results. Never mind. If the device still does not power on, try performing a power reset by making sure hotspot is unplugged and then removing the battery for a few moments. I cant wait until we find a way around this as it screwed me pretty hard (it does not pick the best channel in my area).

Are you sure you flashed V2? 6. chmod 755 /etc/init.d/crond.sh

On the Coolpad, I found no such trick, but after calling Sprint several times, they gave me the MSL/password for my modem. Right above mine now says Carrier Unlock Status: Unlocked. Not sure about the special code though.

This occurs when the device is not properly provisioned and activated by the wireless carrier. Is there a way to force this menu to populate?

Thank you for sharing. Any link to datasheet? Hi Tried above steps , generated the code it says below message . Network Name (SSID) _REMOVED_Change All this time later and I cant figure out how to get the unlock code.

Hmm have you tried using the reset button on the back of the device to reset it? And thanks to Stefan for the TTL script and info about stopping FOTA. https://www.reddit.com/r/tmobile/comments/mawhaz/new_tmohs1_test_drive_hotspot/

Hi, Ive been trying to use QPST but it keeps blocking me requesting the SPC.

If so, what is the point of having a data usage limit screen on the modem?

Any idea how to unlock and do an imei change on this new device?

Hidden menu showing web version FR.1312. You can access these OTA files from this Mega Share. That is exactly what mine does.

I dont understand why the visible doesnt work. I figured out how to do some IMEI magic on the T9!!! PandaDeng, did you ever find a way to auto turn on once plugged in?

Thankfully, these .enc files are very easy to extract. I tried the web GUI Software Update and selecting the ota_update_all.zip file, but after a few seconds of uploading it, it returns an error Invalid file. I dug a little bit but havent had any luck.

I never reached this level of reverse-engineering, though! Gonna have to see how much they cost so I can get another one. Hello since the 2602 update I no longer have any hidden pages.

I got everything all setup and working. openssl enc -aes-128-cbc -d -md md5 -in R717F21.FR.1311_ota_update_all_sm.enc -out R717F21.FR.1311_ota_update_all_sm.tar -k frkenc##[emailprotected].





To generate your SIM unlock code, just use the following below in any Linux or Mac Terminal.

mobile modem hotspot r717 t9 xhg 4g wifi franklin lte

how do i get the sim unlocked code would like to try with att sim card imei REMOVED BY ADMIN can you get my code for me and email it to me thank you.

3) If you still have not resolved your issue.

Some devices can be force downgrade flashed with direct eMMC writing. You can also connect up to eight Wi-Fi capable devices to the Internet at once depending on what the devices are doing (e.g.

Ived tried classic cron denotion with times as well as @reboot and */ demotions, just some info i put together that will likely help someone, to add your own user/password

Your email address will not be published. Make sure airplane mode isn't enabled on your mobile device. $ tar cf [hotspot_cfg] [hotspot_cfg_2] < this includes hash/model/hotspot_cfg.tar Now the device is switching on but nothing is working. WebGetting started: Franklin T9 Basic Programming In this guide, you will be able to: Set up your Franklin T9 hotspot (insert sim & install battery) Manage and access the T9 Mobile Hotspot home page (quickly access all menu options for your T9).



Dear hacker One way or another this security flaw was going to get patched, and someone in the company should have rewarded you for discovering and preventing what could eventually have been a major security flaw later if anyone ever used these for more than just unlocked boxes. I was able to get into the device with SSH though, is there perhaps a way to edit the config directly to do the SIM unlock? or any other way to reset?

Airplane mode will prevent an internet connection for both the phone and any device connected to it via the mobile hotspot. but I unzipped the OTA files and got tar files that I couldnt open With and archive extractor 7-Zip WinZip etc. Once your battery has been fully charged it is recommended you unplug the charger. I have placed the admin HTML, JS, and CSS files for the TMOHS1 in a zip file (tmohs1_files.zip) at: https://mega.nz/file/MkRBDCQb#e1rIR7aD4cebyavw_vQVCjyGPVUo3zGRBChGq3XiXl8, 2ee424d3d0ca26a02d523683189c055466ea6efb21e957b884263ab8a34521df, Also got a different MIFI device from T-mobile, modeled as TMOHS1

Put a script together, and instructions.

Try updating the device and doing a factory reset.

https://www.reddit.com/r/tmobile/comments/m7evpx/my_test_drive_arrived_today_questions_about_use/, In case anyone wants to use more then one of these on the same layer2 network i have found that all of the T9s have the same Mac address of F4:63:49:00:00:01 on the bridge0 interface. /etc/init.d/bridgemac.sh.

https://imgur.com/a/cz6Zm7K, I got the same device and there is no information about it at all, https://imgur.com/a/SS0XJUW

hotspot Franklin T9 Mobile Hotspot 1 year ago 0 replies 359 views C Crick86 First activity 0 replies So we borrow these hotspots from the local library.

Mobile.hotspot page is working but no information is available on the page.

The light and the display show everything the way they should. 1. echo iptables -t mangle -F>/etc/init.d/ttl.sh Can anyone assist? I am still on the stock 891 firmware.

Get T-Mobile for Business Billing and payments Manage your account Orders and shopping Account Hub registration All business support topics. Did you use the hard reset button on the back of the unit after you unlocked the device? Heres the manufacturers website: http://www.wingtech.com/en (in terms of product support, its even less transparent than Franklins barren support website, lol), Here are some notable specifications from T-mobiles info page on the device, which I pasted a link to in a reply below: 2022 Franklin Wireless Corp. All Rights Reserved.

Have you tried? I am currently downloading FR.891 to see if a rollback works. Any help is appreciated. I recently acquired a T-Mobile T9 mobile hotspot from a friend who used it with their Test Drive program, and like I do with most embedded devices I poked around.

Steps below: Edit XML config file



Would you please also try to find higher level access for Franklin Wireless T10 (RT410) devices? has anyone gotten cron to work on the t9s version of busybox?

Crapforgot what I set the admin password that defaults to admin to when I did this.

there is a hidden path for the TMOHS1, not sure if its useful but its Ive been getting 405 error.

Get T-Mobile for Business Billing and payments Manage your account Orders and shopping Account Hub registration All business support topics.

iptables -t mangle -I POSTROUTING -o $INTERFACE -j TTL ttl-set $TTL

NOTE: I am not responsible for any damage done to your T-Mobile Hotspot.

Ugh same issue here.

[ 0.000000] ** This means that this is a DEBUG kernel and it is

The unlock code worked!!!

The hidden menus still work there. if you are resetting yours allot and playing with targets etc to prevent it from updatting edit /etc/hosts and add

I have one in hand. Mobile.hotspot page is working but no information is available on the page.

vi /etc/init.d/ttl.sh any ideas as to what else to check if i cant get this one to upgrade ill just buy another one and sell this one.

Ran that SIM on my phone, powered off and put that SIM card into my now unlocked Franklin T9 and restarted the T9.

The visible VPN is gone. It goes through the whole process then reboots and it fails. One good thing about this device is USB-C is used for charging now, Sorry, forgot image link Does anyone know how to access it now?

Nevermind, I asked prematurely and just got my hands on the device.

WebDevice resets: Franklin T9 Mobile Hotspot; Getting started: Franklin T9 Mobile Hotspot; Mobile Device Unlock: Franklin T9 Mobile Hotspot; Software updates: Franklin T9 Mobile Hotspot; Tech specs: Franklin T9 Mobile Hotspot Im running Big Sur on a Mac.

I was able to generate an unlock code, and pretty much everything else you discovered was very helpful.

Soppressata Vs Prosciutto, Articles F