myvoip07
join:2006-04-29
USA
 ·VOIPo
| reply to Sukru Bey
Re: [PAP2] Unlocking Guide
Thanks for the info.
Per the above my GPP_K value is fake. My pap2 went thru a factory reset after f/w 3.1.12 and that probably is the reason it is not asking for the firmware file after uploading the xml file. It also wants to load the same xml file using port 21 & 2400. Gives error msg saying destination unreachable(port unreachable on 21 & 2400) |
|
mazilo
From Mazilo
Premium
join:2002-05-30
Lilburn, GA
| said by myvoip07  :Thanks for the info. Per the above my GPP_K value is fake. My pap2 went thru a factory reset after f/w 3.1.12 and that probably is the reason it is not asking for the firmware file after uploading the xml file. It also wants to load the same xml file using port 21 & 2400. Gives error msg saying destination unreachable(port unreachable on 21 & 2400) While your PAP2 still runs on v3.1.12 firmware, can you try to perform several consecutive factory reset on an isolated LAN (no Internet connection) to see if you can gain back the original GPP_K values? You won't know if your PAP2 will have the original GPP_K values once perform this task unless you have the original GPP_K values to decrypt/encrypt an XML file with a know admin password to feed your PAP2.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574) |
|
petershilo
@comcast.net | reply to rcilink
I have a Linksys PAP2-NA that was aparently running on verizon. The firmware reported from the telephone **** interface is 2.0.10 aparently. Can someone guide me to a unlocking guide? |
|
meister_sd
Premium
join:2006-01-29
La Mesa, CA
| said by petershilo :
I have a Linksys PAP2-NA that was aparently running on verizon. The firmware reported from the telephone **** interface is 2.0.10 aparently. Can someone guide me to a unlocking guide?
There isn't. The Verizon units have a user password which prevents the hack. Also, Verizon doesn't use the pap2-na, it's the pap2-vn. Right now the only way to unlock it is to remove the chip and reprogram it. |
|
tangojoker
Peace
join:2004-01-25
Beaverton, OR
 ·T-Mobile US
·Teleblend
1 edit | reply to Sukru Bey
said by Sukru Bey :OK. Virgin GPP_K: TqwDX2wRXENe+PlAZU10XjlFsRYntqYBPp7iRTZ4CaG= i have a unlocked PAP2 on 3.1.6 LS.
The GPP_K value is similar to above example.
said by Sukru Bey :Fake GPP_K: d49207a329ydd7557e3s9928416dfe9688adca6196e6791382ee10ccb0f13cbf As you can see, the fake one is longer and does not finish with equation mark (=). i used VuckFonage and decrypted the XML file. in the file, the GPP_K value is as above.
if i understand correctly, i should keep the first GPP_K value for unlocking after a reset.
pls correct me if i am wrong. |
|
Tecman
@bulldogdsl.com
| reply to rizzo2dial
Can anybody publish his MAC address and GPP_K factory value? This would help another guys download xml file(using VuckFonage), decrypt it, and look in new GPP_K and GPP_D values, which could help with decrypting next xml file, which contains upgrade rules, so we could know if vonage is pushing upgrade to next firmware ie. 3.1.12?
Having this information could give us oportunity to prepare our spoofed dns and tftp's to unlock our locked toys 
I'm currently stucked with Vonage 3.1.9Lsc(I wasn't aware and I wasn't so smart to know what will happen after factory reset and pap2 connected to internet ((( )
I have my environment ready to unlock, buy current vonage xml files, they are not pushing new firmware to my device, so I don't have any entries to http sites at all |
|
mazilo
From Mazilo
Premium
join:2002-05-30
Lilburn, GA
| said by Tecman :I'm currently stucked with Vonage 3.1.9Lsc(I wasn't aware and I wasn't so smart to know what will happen after factory reset and pap2 connected to internet ((( ) A common sense will tell you that a factory reset will reset the device to replace its current configurations with default factory settings. So, you don't have to be smart to know such a thing. And, for any reason if you just can't use your common sense in this matter, at least you could have gotten rid off your ignorance and read the posts in this thread to find out that you ain't supposed to factory reset a Linksys/Vonage locked PAP2 that you had unlocked previously. I reckon you just learnt your lesson pretty hard. That's good; however, unless you still have your ignorant flag raised, please don't forget to read posts in this thread because they contain some additional DOs and DON"Ts information that may help you to operate your unlocked PAP2 in a safer way. Good luck.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574) |
|
mazilo
From Mazilo
Premium
join:2002-05-30
Lilburn, GA
| reply to tangojoker
said by tangojoker :i have a unlocked PAP2 on 3.1.6 LS. The GPP_K value is similar to above example. i used VuckFonage and decrypted the XML file. in the file, the GPP_K value is as above. if i understand correctly, i should keep the first GPP_K value for unlocking after a reset. The factory default GPP_K values are stored in the ROM of your PAP2. Every time when you perform a factory reset on your PAP2 (runs on firmware v3.1.6 and/or older ONLY), the BIOS will replace the existing GPP_K values from the one stored in the ROM. So, it is very important that you have this factory default GPP_K values saved.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574) |
|
Tecman
@193.131.x.x
| reply to mazilo
I'm not an ignorant! I bought my device as unlocked on ebay and it worked fine(so I wasn't bodering with problem that most of the people on this forum have). But one day, very smart support guy from my voip provider told me to do factory reset(I had some problems with PAP2 behind windows XP and ICS - I could recievie calls, but I couldn't dial at all - busy signal almost immediatelly after dialing) and because I didn't know that pap2 can upgrade itself through internet after factory reset (neither support guy from my voip provider), I did factory reset and locked my device with the newest 3.1.9Lsc.
So in my case, I wasn't messing around with unlocking my new device, because It has been already unlocked by ebay seller. I've found this forum after factory reset, not before!!!
Ps. I did read this thread thoroughly, but as an action after what happend to my pap2.
Ps2. I was asking for something else, I wasn't wining about "how can I unlock it", because in my case I can only wait for new vonage config files with new firmware upgrade policy, but currently I don't know when it will happen, because I don't have my original GPP_K.
If I could decrupt others config files (required GPP_K and mac adddres and VuckFonage), I can find out, when vonage will upgrade to 3.1.10 or to 3.1.12.
I know that in config file, You can specify what to do, if device is on specified firmware level, so they designed policy, which doesn't upgrade 3.1.9Lsc, because it is their approved firmware. |
|
Sukru Bey
join:2005-09-17
Toronto, ON
| reply to tangojoker
said by tangojoker :if i understand correctly, i should keep the first GPP_K value for unlocking after a reset. Correct. Keep the first GPP_K value, which is shorter. You will NEVER need the fake GPP_K, which is longer, value at all.
said by Tecman :
Can anybody publish his MAC address and GPP_K factory value? Remember guys: The more we talk, the smarter Fonage gets.
I don't think it is a good idea to puplic a MAC address and its GPP_K value; but if you are a registered user for this informative BBR forum, then some one  could send you whatever you request privately, right?
--
SUKRU BEY, a Linksys PAP2 user |
|
Tecman
@193.131.x.x | Sure, I will register and ask somebody about it. cheers |
|
tecman
join:2006-06-16
England | reply to Sukru Bey
Ok, I'm registered now. Can somebody send me these details?
MAC and their initial GPP_K key?
Please PM me this.
Kind Regards,
Pawel |
|
petershilo
@comcast.net
| reply to meister_sd
Thank you.
Since the linksys PAP2-VN is unlockable, is there a good recommended adapter for asterisk, then? I have a couple of the IAXY devices, but I'm unsatisfied with both the price and the performance. There are alot of choices out there, but no clear "comparison chart" that I've been able to find. |
|
meister_sd
Premium
join:2006-01-29
La Mesa, CA
| reply to Tecman
said by tecman :Can anybody publish his MAC address and GPP_K factory value? I did already quite a few pages back. Maybe searching for my handle will bring it up. I'm at work and don't have my notes. I can post it sometime this weekend if you can't find my older post.
The pap2 that the key comes from died a long time ago, so I didn't mind sharing it but the last time I checked it, it was still in the vonage system. |
|
tecman
join:2006-06-16
England
| Yes, I'v found it and this information was quite useful.
Can anybody send me a initial values for GPP_A-GPP_K?
I'm talking about the ones after factory reset.
You can take them after changing firmware to hacked sipura and making factory reset, and feeding it with your plain xml file with known admin password.
Cheers, |
|
mazilo
From Mazilo
Premium
join:2002-05-30
Lilburn, GA
| said by tecman :Yes, I'v found it and this information was quite useful. Can anybody send me a initial values for GPP_A-GPP_K? First, you asked for XML file, and now you asked for GPP_A-GPP_K values. What exactly you want to accomplish by asking these values? Didn't meister_sd's post have all these values you want?
--
Mazi (UK Non-Geo Phone: +44-703-194-2574) |
|
tecman
join:2006-06-16
England
1 edit | I asked for these values, because I'm trying to follow xml config file logic and try to understand it.
I know how the conditions in this file works, but without knowing initial GPP_A-P values, I don't know why there is no request for downloading the firmaware file.
So answering to Your question, his post didn't answer to my questions.
Ps. Stop being so agressive in your posts. I'm trying to help us. |
|
mazilo
From Mazilo
Premium
join:2002-05-30
Lilburn, GA
| said by tecman :Stop being so agressive in your posts. I'm trying to help us. I wasn't trying to be aggressive towards you! BTW, if you want to contribute, you are certainly welcome to do so. However, before you go ahead, it will be nice for you to read the posts here who knows what you want to contribute has been well addressed here before.
When meister_sd posted a copy of his XML file, it contains all the GPP_A - GPP_K values. Also, Sukru Bey has already posted several times about some GPP_K values. All you need is to search and use them. When you don't bother to first use the search engine to search on what you want and start posting asking questions that have been posted and addressed here, you are not only adding to this thread longer, but also making it unbearable for others to read, especially to newbies. Isn't what we call this an ignorance?
--
Mazi (UK Non-Geo Phone: +44-703-194-2574) |
|
tecman
join:2006-06-16
England
| You didn't understand what I asked for...
I can decrypt meister_sd config file, but this only shows me values for GPP_* where Vonage changed them(like GPP_K,GPP_D,etc), but it doesn't give me idea about previous values (values after factory reset, but before initial vonage config file).
Why do I need them? I need them, because first vonage file uses GPP_* values taken from factory reseted device, and based on their values, makes logical decisions (IF, ELSEIF, AND, OR). Vonage, updated some values as an action, after reading some of them (GPP_K,GPP_D,GPP_N, GPP_O, etc).
I ask for this, because I can't check it on my device, because as You may know, I've locked it unfortunately.
That's why I'm contriuting to this forum.
PS. I've found only meister_sd's mac and GPP_K information in this thread. Nobody else published it here. Knowing somebody's GPP_K is not enough as You may probably know.
PS2. Thank You for some of You who pm'ed me their mac and GPP_K values.
PS3. Why GPP_K value from initial vonage xml file doesn't decrypt next xml file? Does anybody know? |
|
aat0995
join:2005-08-14
West Palm Beach, FL
| reply to rcilink
I did the following which was explained by Rizzo here:
supercool (and anybody else who's recently unlocked their PAP2 running 3.1.7 or above firmware):
With your PAP2 unlocked, downgraded to PAP2 3.1.6 or lower firmware, and disconnected from the internet, FACTORY RESET your adapter. This will cause the adapter to get re-locked, but it will restore all FACTORY DEFAULTS. Then re-unlock it using the original & very easy to accomplish unlock method described in the OP of this thread. The FACTORY RESET will restore the FACTORY FRESH GPP_K value, and firmware 3.1.6 (or lower) will permit USER MODE firmware upgrades. Once you have the GPP_K value, should your adapter ever get re-locked, you can re-unlock it by downloading & decrypting your then "current" Fonage primary XML file. (That file contains the admin pw for your adapter).
After you've extracted your FACTORY FRESH GPP_K value, you're ready to use VuckFonage to download & decrypt your Fonage PAP2 XML files.
Rizzo
So inshort, I can go from 3.19 Lsc to sipura and from sioura to 3.13. I can access the admin in 3.13 and in sipura. I can even read the 64bit (bad file) GPP_K file. Now as suggested when I upgrade it to 3.16 and do a factory reset,I lose my admin access. I also fed the following xml files with no luck:
4321
1234
80
Yes
Yes
No
It seems I am sooo close but still very far. Can anyone please help? I swear I read all the posts and spend the whole weekend doing this. All I want now is to access it using admin but it seems it is not working.
Please help. |
|
