hacking nokia cell phones --secret codes

Nokia 7110 Secret codes

Jul, 08 2003 - 06:23 contributed by: mef *#06# For checking the IMEI (International Mobile Equipment Identity) *#0000# To view Software Version. *#3370# Enhanced Full Rate Codec (EFR) activation. It will automatically restart. *#3370* Enhanced Full Rate Codec (EFR) deactivation. It will automatically restart. *#4720# Half Rate Codec activation. It will automatically restart *#4720* Half Rate Codec deactivation. It will automatically restart *#746025625# Sim clock allowed status *#92702689# [*#war0anty#] Takes you to a secret menu with 6 choices 1. Displays Serial Number. 2. Displays the Month and Year of Manufacture (0997) 3. Displays (if there) the date where the phone was purchased (MMYY) 4. Displays the date of the last repairment - if found (0000) 5. makes you capebel of transferring user data if you have the gear for it 6. shows how many hours the phone has been on

Nokia 6210 Secret codes Jul, 08 2003 - 06:23
contributed by: mef

*#06# IMEI number

*#92702689# Service menu

1. Side IMEI 2. Side Manufacture date 3. Side Purchase date 4. Side Last Reparatur/Upgrade 5. Side Transfer user DATA

*#746025625# Test mode activate

Nokia 6150 Secret codes Jul, 08 2003 - 06:22
contributed by: mef

*#06# To find IMEI (International Mobile Equipment Identity)

*#0000# Shows the SW version.

*#92702689# To enter service menu.

#92702689# [*#war0anty#] You don't need the warranty-codes any more - you can just scroll through the information like in any other menu. It has the the same data as 81xx and 31xx phones (with "Edit" button for purchase date, and "User data transfer")

Menu: 1: Displays Serial Number. 2: Displays the Month and Year of Manufacture (0997) 3: Displays (if there) the date where the phone was purchased (MMYY) you can here set the Purchasing Date (Warning: You can only do this once - so be careful what you write...) 4: Displays the date of the last repairment - if found (0000) 6: The option is for transferring ALL the telephone data (from the memory) to a "box" so that the technician can fiddle with the phone without worrying about the data stored on it. Stuff stored on the SIM is not transferred, but who delivers their phone with the SIM? :)

Nokia 3330 Secret codes Jul, 08 2003 - 06:21
contributed by: mef

*#06# To find IMEI (International Mobile Equipment Identity)

* # 0000 # bzw.*#9999 # and/or * # 3330 # Software-Version

*#170602112302# Firmware version

* # 92702689 # (* # war0anty #) Service menu

Equipment inquires "warranty code"

6232 (OK) Displays the Month and Year of Manufacture

9268 (OK) Displays Serial Number

7332 (OK) Displays the date of the last repairment - if found

7832 (OK) Displays (if found) the date where the phone was purchased

37832 (OK) Set the Purchasing Date MMYY (This date can be set only once!)

87267 (OK) Transfers ALL phone numbers, Logo's, and ringtones from other gsm phones

SIM Clock stop * # 746025625 # (* # sim0clock #) Functioned with all firmware designs and it does not indicate whether SIM Clock can be stopped. SIM Clock steers Standby mode.

Nokia 3310 Secret codes Jul, 08 2003 - 06:20
contributed by: mef

*#06# To find IMEI (International Mobile Equipment Identity)

*#7780# Restores Factory Settings..(Memory, language, counters not included)

*#3110# For checking the phone's software (SW) - called firmware revision information.

*#746025625# [*#sim0clock#] To check if the Sim-Clock can be Stopped (Sim-clock-stop is a kind of standby mode which will save battery time)

*#92702689# [*#war0anty#] Phone asks 'warranty code:'

6232 (OK) Displays the Month and Year of Manufacture

9268 (OK) Displays Serial Number

7332 (OK) Displays the date of the last repairment - if found

7832 (OK) Displays (if found) the date where the phone was purchased

37832 (OK) Set the Purchasing Date MMYY (This date can be set only once!)

87267 (OK) Transfers ALL phone numbers, Logo's, and ringtones from other gsm phones

Motorola Analogue Phones

Jun, 20 2002 - 14:24 MOTOROLA PROGRAMMING INSTRUCTIONS NOTES: Some units have dual NAM's. The ESN prefix is 130 decimal, 82 hex. Determine which access sequence to use: HAND HELD PORtable MODELS If the phone has a FCN button and no MENU button use sequence 1. If the phone has no FCN button use sequence 2. If the phone has a MENU button and a FCN button use sequence 4. INSTALLED MOBILE PHONES AND TRANSPORtable MODELS If the phone has no FCN button and no RCL button use sequence 3. If the phone has a FCN button use sequence 4. If the phone has a MEM button use sequence 5. If the phone has a RCL button and no FCN button use sequence 6. SEQUENCE# ACCESS CODE 1 FCN (SECURITY CODE TWICE) RCL 2 STO # (SECURITY CODE TWICE) RCL 3 CTL 0 (SECURITY CODE TWICE) * 4 FCN 0 (SECURITY CODE TWICE) RCL 5 FCN 0 (SECURITY CODE TWICE) MEM 6 CTL 0 (SECURITY CODE TWICE) RCL The default security code is 000000. The CTL (control) button is the single black button on the side of the handset. NAM programing: 1. Turn the power on. 2. Within ten seconds enter the access sequence as determined above. 3. The phone should now show "01" in the left of the display, this is the first programing entry step number. If it does not the security code is incorrect, or the programing lock-out counter has been exceeded. In either case you can still program the unit by following the steps under TEST MODE PROGRAMING below. 4. The * key is used to increment each step: Each time you press * the display will increment from the step number, displayed on the left, to the data stored in that step, displayed on the right. When the data is displayed make any necessary changes and press * to increment to the next step number. 5. The SND key is used to complete and exit programing when any STEP NUMBER is displayed. If you have enabled the second phone number bit in step 10 below then pressing SND will switch to NAM 2. Steps 01 thru 06, 09 and 10 will repeat for NAM 2, the step number will be followed by a "2" to indicate NAM two. 6. The CLR key will revert the display to the previously stored data. 7. The # key will abort programing at any time. PROGRAMING DATA: STEP# #OF DIGITS/RANGE DESCRIPTION 01 00000 - 32767 SYSTEM ID 02 3 DIGITS AREA CODE 03 7 DIGITS TEL NUMBER 04 2 DIGITS STATION CLASS MARK 05 2 DIGITS ACCESS OVERLOAD CLASS 06 2 DIGITS GROUP ID (10 IN USA) 07 6 DIGITS SECURITY CODE 08 3 DIGITS LOCK CODE 09 0333 OR 0334 INITIAL PAGING CHANNEL 10 6 DIGIT BINARY OPTION PROGRAMING (SEE NOTE 1) 11 3 DIGIT BINARY OPTION PROGRAMING (SEE NOTE 2) NOTES: Take care with Motorola's use of "0" and "1". Some options use "0" to enable, some use "1". 1. This is a 6 digit binary field used to select the following options: Digit 1: Internal handset speaker, 0 to enable. Digit 2: Local Use Mark, 0 or 1. Digit 3: MIN Mark, 0 or 1. Digit 4: Auto Recall, always set to 1 (enabled). Digit 5: Second phone number (not all phones), 1 to enable. Digit 6: Diversity (Two antennas, not all phones), 1 to enable. 2. This is a 3 digit binary field used to select the following options: Digit 1: Continuous DTMF, 1 to enable. Digit 2: Transportable Ringer/Speaker, 0=Transducer, 1=Handset. Digit 3: 8 hour time out in transportable mode, 0 to enable. TEST MODE ACCESS: INSTALLED MOBILE PHONES AND TRANSPORtable MODELS To enter test mode on units with software version 85 and higher you must short pins 20 and 21 of the transceiver data connector. An RS232 break out box is useful for this, or construct a test mode adaptor from standard Radio Shack parts. For MINI TR or Silver Mini Tac transceivers (smaller data connector) you can either short pins 9 and 14 or simply use a paper clip to short the hands free microphone connector. HAND HELD PORtable MODELS: There are two basic types of Motorola portable phones, the Micro-Tac series "Flip" phones, and the larger 8000 and Ultra Classic phones. Certain newer Motorola and Pioneer badged Micro-Tac phones do not have a "flip", but follow the same procedure as the Micro-Tac. 8000 & ULTRA CLASSIC SERIES: If you have an 8000 series phone determine the "type" before trying to enter test mode. On the back of the phone, or on the bottom in certain older models, locate the F09... number this is the series number. If the FOURTH digit of this number is a "D" you CAN NOT program the unit through test mode, a Motorola RTL4154/RTL4153 programer is required to make any changes to this unit. Having determined that you do not have a "D" series phone the following procedure is used to access test mode: Remove the battery from the phone and locate the 12 contacts at the top near the antenna connector. These contacts are numbered 1 through 12 from top left through bottom right. Pin 6, top right, is the Manual Test Mode Pin. You must ground this pin while powering up the phone. Pin 7 (lower left) or the antenna connector should be used for ground. Follow one of these procedures to gain access to pin 6: 1. The top section of the battery that covers the contacts contains nothing but air. By careful measuring you can drill a small hole in the battery to gain access to pin 6, alternately simply cut the top off the battery with a hack saw. Having gained access use a paper clip to short pin six to the antenna connector ground while powering up the phone. 2. If you do not want to "destroy" a battery you can apply an external 7.5 volts to the + and - connectors at the bottom of the phone, ground pin 6 while powering up the phone as above. 3. You can also try soldering or jamming a small jumper between pins 6 and 7 (top right to lower left), or between pin 6 and the antenna connector housing ground. Carefully replace the battery and power up the phone. Use caution with this method not to short out any other pin. 4. A cigarette lighter adaptor, if you have one, also makes a great test mode adaptor as it can be disassembled to give you easier access to pin 6. Many are pre marked, or even have holes in the right location. This is because they are often stamped from the same mold that the manufacturer uses for making hands free adaptor kits and these kits require access to the phone's connectors.