HappyZ / dpt-tools

dpt systems study and enhancement
MIT License
565 stars 130 forks source link

忘了锁屏密码 forgot the encryption password (tldr: only solvable if you have hacked) #111

Closed niqingyu closed 5 years ago

niqingyu commented 5 years ago

连不上DPA( 有更新了唉) 用牙签戳那个reset按钮也不行

Screen Shot 2019-06-23 at 11 24 10 PM

niqingyu commented 5 years ago

在有锁屏密码的情况下是否可以使用factory reset ? 假设可以,我卡在了unpack pkg这一步,

chmod +x official_pkg_unpacker_pkg.sh ./official_pkg_unpacker_pkg.sh <file/path/to/official/pkg> <output/folder/path>

然后报错: Err:failed to verify data with provided signature

Sent with GitHawk

kitsek commented 5 years ago

what's your SN?

niqingyu commented 5 years ago

what's your SN?

@zhangyl08 机器的背面有sn

Sent with GitHawk

niqingyu commented 5 years ago

python dpt-tools.py --diagnosis 报错 ModuleNotFoundError: No module named 'serial'

锁屏密码没有解开能进入维修模式吗? @HappyZ

HappyZ commented 5 years ago

First of, 没有看懂“卡在了unpack pkg” you should not need to unpack anything on pc.

I've never tried but I think the answer is yes. 你需要安装 pyserial 才能用dpt-tools, 请看wiki

Yz

On Mon, Jun 24, 2019, 10:39 niqingyu notifications@github.com wrote:

python dpt-tools.py --diagnosis 报错 ModuleNotFoundError: No module named 'serial'

锁屏密码没有解开能进入维修模式吗? @HappyZ https://github.com/HappyZ

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/HappyZ/dpt-tools/issues/111?email_source=notifications&email_token=ABDVEKSM5AX6IK4J5WLOQI3P4DMBXA5CNFSM4H2ZGR5KYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGODYNETBA#issuecomment-505039236, or mute the thread https://github.com/notifications/unsubscribe-auth/ABDVEKXD2FJHXWAKTI4ICE3P4DMBXANCNFSM4H2ZGR5A .

6bigfire commented 5 years ago

首先看你之前有没有成功运行过dpt-tools并刷入sharkerzhiwu的hacker_basic包,如果是的,那么就可以在开机前按住home键启动,进入黑方块状态,这时用python dpt-tools --diagnosis可进入设备的Linux系统中,在usr/local/bin下有format_userdata.sh,执行过以后就把设备重置了,包括密码,你如果已经备份过你的文件的话,可以试试。

niqingyu commented 5 years ago

@HappyZ

没有看懂“卡在了unpack pkg” you should not need to unpack anything on pc.

  1. 我参考了这个 issue14 那个unpack确实是失败了 第二天又试了一次才成功的(一时大意忘了回复,当然,我并不知道为什么命令执行失败)
  2. 然后就是维修模式这个步骤。

你需要安装 pyserial 才能用dpt-tools, 请看wiki Yz

你好 我装了 这不是 pip install httpsig pyserial urllib3 requests 里的一个命令嘛 奇怪的是 pip install pyserial Requirement already satisfied: pyserial in /Library/Python/2.7/site-packages (3.4)

刚刚又尝试了这条python dpt-tools.py命令 报错 Screen Shot 2019-06-25 at 9 23 23 PM

怎么每次报错的内容都不一样 🤷‍♂️

niqingyu commented 5 years ago

首先看你之前有没有成功运行过dpt-tools并刷入sharkerzhiwu的hacker_basic包,如果是的,那么就可以在开机前按住home键启动,进入黑方块状态,这时用python dpt-tools --diagnosis可进入设备的Linux系统中,在usr/local/bin下有format_userdata.sh,执行过以后就把设备重置了,包括密码,你如果已经备份过你的文件的话,可以试试。

好的谢谢提醒 我应该是没有成功运行过😅

6bigfire commented 5 years ago

你的Python环境是2.7,应该用Python3.x

niqingyu commented 5 years ago

Screen Shot 2019-06-25 at 9 37 49 PM

戏真多。。。。而且说话阴阳怪气的 这个账号注册时间真是醉了 Screen Shot 2019-06-25 at 10 32 26 PM

我最初是给HappyZ发邮件问他忘了锁屏密码怎么办 然后人家建议我去GitHub建立一个issue集思广益 我才发现原来这个dpt工具下的Issue就是指讨论页面。。。。

我感觉吧 锁屏密码绕不过去 因为我问了淘宝一家破解店人家说得邮寄dpt然后用专门的设备解锁 价格倒是和索尼维修中心的一样 都是100¥ 个别商户定价¥500。。。。。

niqingyu commented 5 years ago

你的Python环境是2.7,应该用Python3.x

嗯 是的 我就是用python3 运行的这条命令pip install httpsig pyserial urllib3 requests 之前用python2运行报错 然后就安装python3还改了bash的python环境 这个pyserial才安装上去了 而且我安装完后再次运行还是报错同样的问题 是不是安装之后得重启操作系统?今天早些时候有过一次重启 也不知道为什么它装到python2上面去了 而且我刚查了下python的环境居然是2 昨天明明改了bash环境的啊

niqingyu commented 5 years ago

python dpt-tools.py --diagnosis 报错 ModuleNotFoundError: No module named 'serial'

emm 我检索black square时发现这个 为什么会出现serial报错 其实还是python版本问题 建议wiki for beginnerpip install httpsig pyserial urllib3 requests 改成 pip3 install httpsig pyserial urllib3 requests
这样的话再次运行python3 dpt-tools.py --diagnosis找不到parseserial的报错会消失

niqingyu commented 5 years ago

Screen Shot 2019-06-26 at 12 58 48 AM 现在的问题是dpt上没有black square

6bigfire commented 5 years ago

Screen Shot 2019-06-26 at 12 58 48 AM 现在的问题是dpt上没有black square

如果你的Python环境搞好了就用python dpt-toos.py -id deviceid.?? -K private.?? -ip ... -d debug模式刷入hacker_basic目录下的FwUpdater.pkg 去看看这个包的说明

6bigfire commented 5 years ago

Screen Shot 2019-06-26 at 12 58 48 AM 现在的问题是dpt上没有black square

你自己先摸索吧,如果你的设备已经刷成淘宝买来的ROM了就不一定能允许你刷入安装包了,我遇到过这种情况,最终是通过离线硬刷boot分区才搞定的。

niqingyu commented 5 years ago

python dpt-toos.py -id deviceid.?? -K private.?? -ip ...

这条命令报错: Cannot authenticate. Make sure your id, key, and ip addresses are correct.

id和key我可以确定没问题,因为是从DPA里拷出来的,至于这个ip.... 由于作者说是参考janten's dpt-rp1-py 所以我又试了@janten的脚本并报错:TypeError: unsupported operand type(s) for /: 'str' and 'str' Screen Shot 2019-06-26 at 2 43 41 AM

这个问题也有人问了但开发者并没有回复

由于我并没有输入锁屏密码 所以我又试了大陆的ip 挂了vpn之后的墙外ip 均报错

我注意到这样一段话

Second, find the DPT-RP1's IP address. If you're on WiFi, go to Wi-Fi Settings on the device and tap the connected network. If you're on Bluetooth, it's likely 172.25.47.1. You can also try the hostname digitalpaper.local.

嗯 又返回系统看了下 Screen Shot 2019-06-26 at 2 31 05 AM 所以没有锁屏密码的话电脑是不是无法访问dpt?😇

niqingyu commented 5 years ago

如果你的设备已经刷成淘宝买来的ROM了就不一定能允许你刷入安装包了

没有刷 甚至不知道有这个东西的存在🤪 问淘宝商家怎么解开锁屏密码他也没多说什么只说得邮寄过去解锁 因为是按照这个进行的 https://github.com/HappyZ/dpt-tools/issues/14#issuecomment-442637541 所以....反正还没进入维修模式

6bigfire commented 5 years ago

那你只能试试把设备正常启动后通过USB与电脑连接,如果能够正常与同步软件连接和同步,去同步软件的设置里看看能不能远程打开设备的WIFI并给他配置热点信息,如果OK了,在设置软件的热点信息中就可以查到设备的IO,或者去路由器上查看。

6bigfire commented 5 years ago

如果连不上DPA试试教程说明这个方法: Simply run python dpt-tools.py and it should automatically find required information. 如果还不行,从我熟悉的方法上来讲只能拆芯片离线修改了。

HappyZ commented 5 years ago

This is a place to solve problems, not a place to fight, both of you please stop @jss-cmyk @niqingyu. I'll remove not helpful comments here. As a reference in the future, please only post questions/answers regarding techniques.

python dpt-toos.py -id deviceid.?? -K private.?? -ip ...

这条命令报错: Cannot authenticate. Make sure your id, key, and ip addresses are correct.

id和key我可以确定没问题,因为是从DPA里拷出来的,至于这个ip.... 由于作者说是参考janten's dpt-rp1-py 所以我又试了@janten的脚本并报错:TypeError: unsupported operand type(s) for /: 'str' and 'str' Screen Shot 2019-06-26 at 2 43 41 AM

这个问题也有人问了但开发者并没有回复

由于我并没有输入锁屏密码 所以我又试了大陆的ip 挂了vpn之后的墙外ip 均报错

我注意到这样一段话

Second, find the DPT-RP1's IP address. If you're on WiFi, go to Wi-Fi Settings on the device and tap the connected network. If you're on Bluetooth, it's likely 172.25.47.1. You can also try the hostname digitalpaper.local.

嗯 又返回系统看了下 Screen Shot 2019-06-26 at 2 31 05 AM 所以没有锁屏密码的话电脑是不是无法访问dpt?😇

Possible. You may have to go to diagnosis mode. Questions for you @niqingyu:

  1. What system version on what device were you using? If you use Taobao hacks, they likely have modified the updater script and you cannot use our method anymore.
  2. Did you try our hack before 02/09/2019? If so, what operating system did you use to do the hack?
  3. Have you ever hacked before?
HappyZ commented 5 years ago

@niqingyu did you solve it? can you confirm if locked files can be erased in diagnosis mode without problems? ideally it should be easily doable, if you look at how diagnosis resets stuff in /usr/loca/bin/factory_reset.sh

6bigfire commented 5 years ago

@niqingyu did you solve it? can you confirm if locked files can be erased in diagnosis mode without problems? ideally it should be easily doable, if you look at how diagnosis resets stuff in /usr/loca/bin/factory_reset.sh

I have tried,It was useful that use the “/usr/local/bin/format_userdata.sh” in diagnosis mode to clear the password and all.

niqingyu commented 5 years ago

1.What system version on what device were you using? If you use Taobao hacks, they likely have modified the updater script and you cannot use our method anymore. 2.Did you try our hack before 02/09/2019? If so, what operating system did you use to do the hack? 3.Have you ever hacked before?

嗯,没有hack过。

在有锁屏密码的状态下,是没法进入维修模式的吧,他问你:你看到黑色方框了吗?没有。

去了维修中心,给机子插了一个U盘,插上去不到30秒吧机子就解锁成新机了。

已经用上你的软件了,装了KOreader,全按wiki走,没接触什么淘宝rom。

不过有个新问题,报错什么的,无法更新1.6,过段时间再说。

谢谢 HappyZ 6bigfire 全程跟进与陪伴! IMG_7564-2

6bigfire commented 5 years ago

恭喜,维修中心的原理是相同的,因为他们手里有应该root的原厂密码,设备被hack之前只有通过OTG的方式才能进入diagnosis模式,所以需要插一个特制的U盘。hack主要就是为了绕过这两样障碍。

HappyZ commented 5 years ago

please do not update to 1.6 yet as sony announced issues with it.. who knows what other bugs they had in it..

yea, if you know the password, then it is an easy task, given your situation. As a reference in near future, if you forgot the password, AND you have already hacked the device, then it is an easy recovery.

Or, if you forgot the password, AND you know the official root password, then it is an easy recover.

Otherwise, sorry, nothing we can do.