I recently acquired a T-Mobile T9 mobile hotspot from a friend who used it with their Test Drive program, and like I do with most embedded devices I poked around. This thread will go over my software findings, and will give you the information needed to gain root access and SIM Unlock the device.
NOTE: I am not responsible for any damage done to your T-Mobile Hotspot. Proceed at your own risk. Note that some of the web pages and tools in this device allow you to modify the device in ways that YOU SHOULD NOT DO since it may be ILLEGAL in your jurisdiction. Please do not proceed unless you know what you are doing.
OTAs
The OTA system on the device is very simplistic. It phones home to the following URL, with the following syntax:
https://fota.pintracview.com/fota/T9/check_update.php?carrier=<CARRIER>&rev=<CURRENTVERSION>&imei=<IMEI>
So for example, my T9 was reporting to check_update.php?carrier=tmobile&rev=891 when it was on firmware revision R717F21.FR.891. Manually calling this URL with any outdated revision will link you to the latest OTA file, which is a .enc
Thankfully, these .enc files are very easy to extract. If you are on a newer version of OpenSSL, you can extract this OTA using the following command:
openssl enc -aes-128-cbc -d -md md5 -in R717F21.FR.1311_ota_update_all_sm.enc -out R717F21.FR.1311_ota_update_all_sm.tar -k frkenc##KEY@R717This will then provide you with a .tar file, which contains a file named ota_update_all.zip which has a copy of the rootfs files. On this device, all OTAs are full image releases, so you can upgrade and downgrade as you please using the web interface. As for the decryption key, I extracted this from the binary at /usr/bin/fota_app. I was also able to start a collection of firmwares, including an unreleased update. You can access these OTA files from this Mega Share.
As for the OTA zip, from what it looks like it is unsigned so you may be able to modify it and have it apply, but this has not been tested.
Config File
Once nice thing about this device is you can enable SSH, ADB, and other hidden goodies by simply generating a configuration backup, modifying it, and uploading it back to the device. As for the configuration backup itself, you can convert it from it’s .bin format to it’s true form, a .tar.gz, using the commands below:
openssl enc -aes-128-cbc -d -md md5 -in hotspot_cfg.bin -out hotspot_cfg_packed.tar -k frkenc##KEY@R717
mkdir hotspot_cfg_packed
tar xf hotspot_cfg_packed.tar -C ./hotspot_cfg_packed
cd hotspot_cfg_packed
mkdir hotspot_cfg_packed_2
tar xf hotspot_cfg.tar -C ./hotspot_cfg_packed_2As you can see, the configuration dump is actually aes-128-cbc encrypted, and contains nested tar.gz files. You can now modify the configuration as you wish, repackage it, and re-upload it.
SSH
During my research it was found that SSH can be enabled on this device, and once enabled, you can login as the root user. If you are on a firmware version 891 or below, you can run the following command to quickly enable SSH.
curl "http://192.168.0.1/cgi-bin/webpst.service_setting.cgi" \
-H "Content-Type: application/json" \
-H "Origin: http://192.168.0.1" \
-H "Referer: http://192.168.0.1/webpst/usb_mode.html" \
--data '{"command":"save","params":null,"data":{"ssh":"on","tether":"","bridge":""}}' \
--insecureNote that if your firmware is above version 891, then to enable SSH you will need to modify the Config File. If you want, I have created a basic python script that can do this for you, which is available on GitHub. Just note it requires OpenSSL 1.1.0 or newer, and is only tested on Ubuntu 18.04.
As for logging in over SSH, I was able to discover the root SSH password for these devices is frk9x07. Sadly, the engineers at Franklin Wireless only used a descrypt (DES) key for the device, which hashcat was able to crack within seconds using my GTX 1080.
ADB
As a bonus, you can enable an ADB shell that drops you right to a root prompt without any password! Note this seems to work on firmware version 891 and below, but it may not work on newer firmwares.
curl "http://192.168.0.1/cgi-bin/webpst.usb_mode.cgi" \
-H "Content-Type: application/json" \
-H "Origin: http://192.168.0.1" \
-H "Referer: http://192.168.0.1/webpst/usb_mode.html" \
--data '{"command":"save","params":null,"data":{"usb_mode":"902D"}}' \
--insecureOn newer OTAs, you can still enable ADB but it needs to be done manually from the /data/configs/mobileap_cfg.xml file. This is done by updating the UsbMode setting value from 9025 to 902D, saving, then rebooting the device. Note you also may need to replace the contents of /data/configs/hsusb_next with 902D as well.
Hidden Web Pages
During my digging around the device I found a handful of hidden pages, which were secured by plain text passwords that were statically built into binaries. Below you can find the pages I found, as well as where I found the passwords for said pages.
- Hidden Configuration Pages
- http://192.168.0.1/hidden/
- http://192.168.0.1/webpst/
- Password: frk@r717
- Password was extracted from /var/volatile/www/htdocs/cgi-bin/login.cgi
- IT Admin Page
- http://192.168.0.1/itadmin/
- Password: t9_it_@dmin
- Password was extracted from /var/volatile/www/htdocs/cgi-bin/logi
- http://192.168.0.1/itadmin/
- Hidden Engineering Page
- http://192.168.0.1/engineering/franklin/
- Username: r717
- Password: frkengr717
- User and Password were extracted from /etc/pwlighttpd
- Note: On firmwares newer than 891, you need to first run the following as root before you can access the engineering pages.
/usr/bin/copy_htdocs.sh eng
- http://192.168.0.1/engineering/franklin/
SIM Unlock
While exploring the binary at /usr/bin/QCMAP_Web_CLIENT, I accidentally stumbled upon the logic used to SIM Unlock the device. To generate your SIM unlock code, just use the following below in any Linux or Mac Terminal.
export IMEI=YOURIMEIGOESHERE
echo -n "${IMEI}simlock" | sha1sum | cut -c1-8In the above, replace YOURIMEIGOESHERE with the IMEI number of the T9 Hotspot. Once done, you can enter the generated code into the Web UI to unlock the device for all SIM cards.
Conclusion
Hands down, this has to be one of my favorite IoT devices I have had the pleasure of playing with. I appreciate the fact that Franklin Wireless put minimal effort into securing the device since it makes for a great platform to build on top of. If anyone at Franklin Wireless is reading this, I recommend the following changes to help secure your devices.
- Don’t store passwords in plain text in your binaries. Use sha256 or md5+salt, or some other method.
- Please don’t allow your “hidden pages” to have password prompts skipped by modifying the browser’s HTML rendering. This is just sloppy, and is how I was able to get ADB access to start my research. Either having them locked down using lighttpd, or having a completely separate auth page that is properly hardened is my recommendation.
- Don’t use DEScrypt linux passwords. The time it took me to crack the hash was less than 10 seconds. md5crypt at a MINIMUM, and sha1 if you want to get a bit fancier. Also, make the password longer than 8 characters to help reduce the chance of a successful bruteforce.
- If you need to have ADB, Jail it down. Another T-Mobile hotspot I have allows for ADB, but it runs as a non-existent UID so you can barely view the filesystem. Something like this would probably be a safer bet.
- Move to incremental OTAs, and SIGN THEM CORRECTLY. Most android OTAs use certs for OTA authentication. Also, implement rollback protection and disable the ability for users to upload OTAs.
2021 Update
It appears that in the latest 2602 update, a good chunk of my recommendations above were incorporated. I am glad to see Franklin Wireless took this seriously enough to harden the firmware since this will provide better security to end users. Note that at this time there is no downgrade path but if I find anything expect to see a followup blog post.
I just have to say this is wonderful timing! I just got the T9 test drive device and found your post researching how to bandlock with it. I somehow softbricked it, but holding down the reset button with the cover off while it was powered up did the trick.
Some peculiarities I’ve noticed, after rolling back the firmware to FR.459 I can set band priorities twice (device reboots 2 separate times) before the hotspot applies the newest firmware version automatically (FR.M1311) without my prompting. Fortunately the new band priorities aren’t overwritten, but it worries me that in the future they may implement some kind of rollback protection as you suggest. Any ideas on how to stop it from auto updating/phoning home?
Thanks!
Easiest way to prevent rollback would be to disable the OTA engine and change the URL it points to. This can be done by editing the configuration file at /data/configs/mobileap_cfg.xml and do changes similar to what I have documented at https://gist.github.com/riptidewave93/fc88a7de97abea669bd2d790a1df4c0a
So I made this edit and they pushed the latest firmware anyways. After I reverted back to 891, my edit was still there. Any other ideas for preventing the OTA from happening?
The device needs to be rebooted after the change is made for it to apply, otherwise the changes won’t get picked up by the running process.
As for another method, in theory you could also kill the process for fota_app, and replace /usr/bin/fota_app with a bash script with an infinite loop and sleep.
I simply renamed /etc/rc5.d/S99fota to prevent it from starting. Seems to work ok so far.
I have a Windows/DOS background, not linux.
Can you give me the procedure to “kill the process for fota_app, and replace /usr/bin/fota_app with a bash script for an infinite loop and sleep”?
I am connected as root via SSH and I am in the /usr/bin/fota_app directory.
Thank you. The unlock code worked!!! but I unzipped the OTA files and got tar files that I couldn’t open With and archive extractor 7-Zip WinZip etc
alert(‘Mallory found the XSS!’);
I’m new to this.
Using the following commands in the Mac terminal program does not seem to generate a code.
export IMEI=355827103844556
echo -n “${IMEI}simlock” | sha1sum | cut -c1-8
I know where the IMEI number needs to be inserted in the first line, but does it also have to be inserted in the second line in lieu of the IMEI between the { and } ?
Do I need to enter the first line and hit return first before entering the second line, or cut and paste both together and put them into the terminal window.
I just got into the T9 Game, after getting a T-Mobile test drive hotspot last year from T-Mobile I bought a box of 10 working T9s for cheap off the internet and got a couple of others from a friend with the idea of putting hotspots in my vehicle and a few other places and tossing one or two in my laptop bag as well. I use Google Fi as my cellular provider and the free data sims work straight out of the box in the T9s, I didn’t have to set up any profiles n the hotspot or anything. I assume this is because Google Fi uses the T-Mobile network. the t9s I have have varying FW revs, 1 was 635, 1 was 891 that later self updated to 1311, 7 on 1311, and 4 on 2602.
I’ve done a bit of reading and there’s a LOT of info around on these but I was wondering if anybody has a link to a list that breaks down what firmware revs and the features of each, What menues and passwords work or are removed etc and if there’s a resource for firmware fles. I know you can do a lot wth Linux but I know next to nothing about Linux and a few of the hotspots I have have a place to do an update by selecting an update file I think in the /hidden or /Engineering menu. So does anyone know of a comprehensive resource for info and update files?
TIA,
Clay
Thank you so much for writing this. Lots of fun options to play with on this device. One thing I’d like to do is to make a set of iptables/ip6tables rules for TTL mangling permanent – have you discovered any way to write these to the /data partition in a way that they’d get executed on every boot? Or do I need to go figure out how to build a firmware image? Just to share, here are the rules I’m playing with:
export TTL=66
export INTERFACE=rmnet_data0
ip6tables -t mangle -I POSTROUTING -o $INTERFACE -j HL –hl-set $TTL
ip6tables -t mangle -I PREROUTING -i $INTERFACE -j HL –hl-set $TTL
iptables -t mangle -I POSTROUTING -o $INTERFACE -j TTL –ttl-set $TTL
iptables -t mangle -I PREROUTING -i $INTERFACE -j TTL –ttl-set $TTL
I have this working via ssh (by the way, the ssh option in engineering settings worked for me on 891).
Thanks!
For what it’s worth, the rootfs is actually read/write on this device so you can setup your own /etc/init.d script and that in theory should do the trick.
Put a script together, and instructions. Here it is:
https://gist.github.com/weirded/f49ac134aecbd32b71ab22619c7496ab
is there any code generator for this Tmobile T9 or franklin R717
if si so please contact me
What would be the purpose of TTL modification on a dedicated hotspot device like this, since devices are designed to be tethered to it anyway?
Very fantastic way , good job and blessing
Is there an ability to root this device and trick it into tethering unlimited from a tmobile phone line sim ? I am using a phone sim with 10 GB hotspot with no issue but to be capped at 50 GB would be nice.
Nope since that is all locked on the network side. If you want more data, you can always setup a data line on the device with T-Mobile.
Has anyone found an easy way to send AT commands to the modem? I dug a little bit but haven’t had any luck.
I cant not get the unlock code for sim lock.
The method documented will work. Please make sure your running the terminal command correctly, and on a Linux or MacOS terminal. It will not work on Windows.
Do you recall were you enter the unlock code? I was able to generate an unlock code, and pretty much everything else you discovered was very helpful. Thank you!
Matthew
It is in the normal WebUI (non of the hidden pages) under SIM settings.
Is the SIM unlock page available only after your root it?
Actually, you can do it from Windows if you have WSL installed, aka Windows Subsystem for Linux. That’s how I generated my unlock code.
How do you connect to it, via the WIFI, then use something like Putty on Windows??
Connect to the hotspot via wifi, then browse to its webUI by typing 192.168.0.1 – you won’t need to use Putty to enter the unlock code, as there’s a field in the webUI to enter it.
I used a terminal emulator on an Android phone to generate the unlock code, connected to the hotspot on the same phone and entered the code. Easy.
Would you happen to recall what WebUI was used to enter the sim unlock code? I thought I looked through all of them, but I do not recall seeing it.
Thanks!
I have a few of these, and it occurred to me that it shouldn’t be hard to make this work as a wifi extender or repeater bridge. anyone willing to writes script to set it up?
What other carriers availble after sim unlock ? Anyone tested this with other att sim cards ?
I have been in contact with someone using AT&T via the (Engineering>Change target>DEFAULT) setting, I am using Sprint with the same setting.
I can use AT&T 4G LTE with TMobile target as well. I do need to change the IMEI of the device to mimic an AT&T compatible device to get the LTE, otherwise, it can only connect to 3G.
I can get 4G LTE using one of my TMobile voice lines but it registers as “unknown device” on the TMO website. Is this an issue that could spark further review and if so how do I fix it?
btw, the website does show the updated imei
I was wondering.. if I can unlock it and I have access to its terminal/shell, could I use it as a regular wifi hotspot device? I want to boost the range of the wifi at my house for my IoT devices so I can isolate their network.
Possibly but the device was not built for this, so you would be in uncharted territory.
I am able to use the hotspot with sprint now, but have been unable to get the band priority table in hidden>Lte menu area to populate. Is there a way to force this menu to populate?
Before when using stock target (Engineering>Change target>TMOBILE) I had experienced this bug but it was fixed by factory resetting, unfortunately this doesn’t seem to work when my target is set to (Engineering>Change target>DEFAULT). Any idea if there’s an xml file I could alter similar to the FOTA fix? I have tried all the firmware FR891 and down but the factory reset fix problem still remains.
Or could I directly change the band priorities by downloading a backup, editing it, then restoring? I have looked through the cfg’s after extracting them and don’t see a place for band priorities.
The only place I have found the band settings referenced via adb are at (/etc/default/configs/DEFAULT # strings mcfg_sw.mbn) when printed it shows a list of nv locations that refer to band preferences explicitly for example (/nv/item_files/modem/mmode/lte_bandpref), but I dont know how to interreact with the non volatile memory.
can you write a guide for this? would like to use this with my sprint sim
The unlock code doesnt work for me after generating it using the commands with my imei i downloaded the 891 firmware from ur link
On macOS (Catalina) and making sure that openssl was updated, I was able to generate the SIM unlock code in terminal with the command below (changing sha1sum to shasum)
echo -n “${IMEI}simlock” | shasum | cut -c1-8
The code generated successfully SIM unlocked my T9 with firmware R717F21.FR.M1311
Hope this helps.
me podes ayudar con la generación del código para el desbloque no tengo Mac ni Linux
Please read through the comments, there are multiple different methods available to generate an unlock code.
I am also not having any success with the password generated with sha1sum. BTW, I don’t see a “SIM settingss” tab on the http://mobile.hotspot page so I just tried entering the generated password when clicking the “Settings” tab.
I was able to get into the device with SSH though, is there perhaps a way to edit the config directly to do the SIM unlock?
Hmm, I wonder if it’s firmware version related then. Try updating the device and doing a factory reset. That should then hopefully expose the option in the Web Interface.
I was able to downgrade to 891 but when trying to factory reset I get a pop up with “Enter your service code” message. No idea what service code to enter. I tried both the IMEI based code and other passwords you called out in this page and none of that worked.
Ok, I found another way to do factory reset from http://192.168.0.1/engineering/franklin/. But after it rebooted still the same issue – I click on the “Settings” tab and I get prompted for a password and when I type in the one from sha1sum it fails.
Were you able to work around this? My firmware appears to be similar. Settings and additional pages behind a login page, the unlock code rejected as the password.
Hi,
I downgrade to 891 version, then use the command you provided, everytime after i excute the SSH command, then shows:
{
“msg”: “OK”,
“result”: “S_SAVE”
}
Then the device shows “Goodbye” and restart.
And I still cannot connect via SSH.
Do you know what’s wrong on my side?
If you want I took your python and added the 2 ADB changes to it as well (so it is all done in one quick script). Send me an email and I will get it to you.
how do i get the sim unlocked code would like to try with att sim card imei REMOVED BY ADMIN can you get my code for me and email it to me thank you.
I removed your IMEI for privacy reasons, but your unlock code should be 4b3cce62
were do i want to insert it at to unlock it do i just put the other sim inside then goto the iogin page and put the code in there.
Can u get my code for me also.
Sir,
I am having the same issue resolving the unlock code for my children’s device to work on our laptop via usb as it won’t work for wifi. Can you help as our school tech people have no idea and state the carrier unlock code is needed to switch the setting. Here is our IMEI ADMIN REMOVED Can you email or post our code?
Thank you!
CK
Note I won’t be providing codes, please find a way to generate your own, such as https://www.tutorialspoint.com/execute_bash_online.php
That works like magic. I was able to unlock my T-Mobile test drive Franklin T9 I bought on eBay, but when I submit the IMEI to Sprint for activation, it says the device cannot be activated on their network, even though Sprint offers the T9 for $90. Apparently the IMEI is blacklisted. Is their any way I can get the device activated on Sprint?
Sir,
All this time later and I can’t figure out how to get the unlock code. Can you please help me? Thank you!!
Could you possibly tell me my unlock code. My imei ID REMOVED BY ADMIN. I’d Really appreciate it. Thanks in advance.
How do I get the unlock code for the franklin I tried and I get the same code for every imei
Can u give me my unlock code for mine also?
My IMEI
ADMIN REMOVED
Please reply when u have it thank you I dont know how to get the code and dont want to mess up my pc trying to figure out how to get it.
Note I won’t be providing codes, please find a way to generate your own, such as https://www.tutorialspoint.com/execute_bash_online.php
Hi, I’d like to request for the unlock code too.
this is the IMEI: ADMIN REMOVED
Could you post or email me the unlock too? Thanks so much in advance.
Note I won’t be providing codes, please find a way to generate your own, such as https://www.tutorialspoint.com/execute_bash_online.php
Works beautifully to unlock! I was able to get the code through a Linux Machine since Mac didn’t have the sha1sum package (at least on Catalina). thanks!
On the Mac running Catalina, the command for sha1sum is shasum so the command is slightly changed to:
export IMEI=YOURIMEIGOESHERE
echo -n “${IMEI}simlock” | shasum | cut -c1-8
Works perfectly.
This fiddle ought to generate the same codes, if people aren’t able to figure out how to grab it from the command line: https://jsfiddle.net/4zds6531/
Thank you so much! This worked great!
Thanks I worked all day never could get it….. you are the man……
Merci beaucoup !
I had tried running it on MacOS 11.3.1, FreeBSD 11, and Ubuntu 18.04 with different results each time.
@Chris B @Stefan In http://192.168.0.1/webpst/, there is a “FOTA Test” section to change the FOTA server path. Any idea if changing this will prevent automatic OTA updates? Cheers
It should, yes.
Hello, my device version is 891
After it is automatically updated, it keeps looping on the welcome interface when I turn it on.
Is there a way to fix it?
Thank you very much
Hmm have you tried using the reset button on the back of the device to reset it?
Lucky, reset it
Works good now.
Ugh same issue here. I thought I had everything perfect! Even got the TTL script added with scp copy and all was working for a full week. Woke up to Welcome screen bootloop this morning. Soft and hard reset don’t seem to work 🙁
take the sim card out and let it boot up.
Update – I got it to boot by taking out the SIM then a hard reset after it booted once. It looks like I auto-upgraded to version 1311, even though I followed Stefan’s guide for the TTL scripts which were working great before: https://gist.github.com/weirded/f49ac134aecbd32b71ab22619c7496ab
This has been really fun to tinker with BTW! But now I’m stuck understanding how to downgrade.
To downgrade back to 891, what exactly am I uploading? I downloaded 891 .enc file from Mega, converted .enc to .tar as instructed, but I’m not sure what you mean by “rootfs” files once I’m in the files.
And would I upload as a backup restore on IT admin, or as a firmware upgrade on webpst page?
It seems like no one has resolved the blocking of updates though right?
For flashing between versions, just upload the original .enc file (don’t decrypt it!) on the firmware upgrade page. You can either use the webpst one, or the firmware update page found in the normal webUI under settings.
Has anyone been able to get diag mode working on this so we can talk to it with Qualcomm tools like QPST or QXDM? This device is using the Qualcomm MDM9207-0 so it should be possible.
Nevermind, I asked prematurely and just got my hands on the device. I now see that DIAG can be enabled from the following page: http://192.168.0.1/webpst/usb_mode.html
This is a neat little device. Thanks to Chris for all the great info shared. And thanks to Stefan for the TTL script and info about stopping FOTA.
Hi, I’ve been trying to use QPST but it keeps blocking me requesting the SPC. Have you been able to get around this somehow?
Hmm, 000000 is not working?
I’m having the same issue. Have you tried?
Is there a change log for the firmware? I am on 891 and want to see if I should update the firmware or not
I was having trouble following the unlock sim instructions like some others have mentioned in comments.
This may help, when you navigate to the settings tab on the Web UI, a popup asks for the password. This is not the generated unlock key, but it is just “admin”.
From here I had to set a new password then I was able get into the settings tab and view/change settings.
Under Settings > Mobile Network > SIM – scroll down to Carrier Unlock and this is where you need to enter the generated unlock key. Right above mine now says Carrier Unlock Status: Unlocked
I figured out how to do some IMEI magic on the T9!!! I’m making a guide and posting it in a few days.
No need to ruin a good thing.
This was already referred to at the top of the article:
“Note that some of the web pages and tools in this device allow you to modify the device in ways that YOU SHOULD NOT DO since it may be ILLEGAL in your jurisdiction. Please do not proceed unless you know what you are doing.”
Would be interested in what you found out; mind sending an e-mail (please do not remove, this is a temp/throw away e-mail)? Address is [email protected]
I booted one of these devices up, fresh out of box without installing the SIM card
-rooted
-carrier unlocked
-modified the OTA upgrade script to not work and added TTL modification script
-added APN for visible wireless and set it to active
-shutdown / installed visible sim
— it booted, connected, and ran very well.
then — i inserted the stock tmobile test drive sim
it booted and worked, connected…..did some testing…
but it re-locked the carrier unlock status and did some kind of binding to make the hotspot only work with the tmobile sim.
When i try to use a non-tmobile sim in this hotspot, it says “sim error” and the sim status shows locked.
Has anyone else experienced this?
I would recommend NOT using the test-drive SIM if you plan to work with this device and unlock it etc.
I seem to remember previous test-drive sims doing a lock and binding the previous coolpad hotspots to only work with tmobile as well
Did you use the hard reset button on the back of the unit after you unlocked the device? If so, it will need unlocked again. This drove me crazy for quite a while until I figured it out.
Each time the hard reset button is used, the device will need unlocked again.
I’ve been trying to find where/how to edit APN settings that aren’t available in the web GUI. Could you please provide some guidance?
I’ve been digging through the decrypted ROMs and a decrypted settings backup with no luck.
Just go to http://192.168.0.1/settings/mobile_network-apn.html and click on “add”.
Thank you!
Generated and entered the unlock code and now my device is reporting “Unlocked”.
Firmware version: R717F21.FR.1311
Anyone have anyluck with ECM or RNDIS using the USB port? Seems to be 3 modes, but none of them work on any of my machines. Would like to use with a Watchguard Firewall as Failover ISP via USB.
Disregard, I had about 1/2 a dozen USB to microUSB cables that were all just charging cables (no data). after using the correct cable everything worked great.
Can someone do a guide on how to modify the TTL? I saw the instructions and enabled SSH but got lost on part 3. Thanks!
Thank you for sharing the information. It was easy to unlock, enable SSH and ADB. Just a question, is there any advantage to upgrade to a newer firmware beyond 891?
This is super helpful, thank you for your work.
I have a question, I’m reasonably technical but am not super fluent with everything done from the command line. So I’ve unpacked and edited the config to change the update URL and repacked everything into hotspot_cfg_packed.tar, how do I convert that back into the encrypted .bin file?
My best guess was the following but it spit out an error on my macbook pro running MacOS 11:
rich@rbookpro hotspot % openssl enc -aes-128-cbc -d -md md5 -in hotspot_cfg_packed.tar -out hotspot_cfg.bin -k frkenc##KEY@R717
bad magic number
Would appreciate any help and what the underlying issue is?
Thanks in advance
Hello Rich,
I recommend looking at the python script linked under the SSH section, since it helps show the process in which to repackage a configuration dump.
Hello do you think you could look into the t9 no longer being able to be downgraded on 2602
You’re using the -d flag which is for decryption. Remove the -d flag when you’re re-encrypting it back into the .bin.
Hi Tried above steps , generated the code it says below message .
Initial version was _891 , later updated to FR.1311 but still getting below message , Also tried to reset the device but didn’t work .
Incorrect Unlock Code
You will need to contact your service provider to get the unlock code.
Can you downgrade the firmware. I thought I saw that was relatively easy. Just grab off the mega site in the OP.
I tried but that didn’t work either
I unlocked it without any problem, thank you for all the information on this page.
I plan to have this hotspot unattended far from home, is there a way to configure a DDNS ??
thank you
Once you ssh into the device, you can a) change the password by using the passwd command. You can apply a blank password.
You can generate the unlock code directly on the device — use this command (all 1 line)
/var/volatile/www/htdocs/cgi-bin/webpst.imei_mac.cgi | awk ‘/imei/{printf( substr($2,2,15) “simlock”)}’|sha1sum|cut -c1-8
You get that guide yet?
this the code correct
/var/volatile/www/htdocs/cgi-bin/webpst.imei_mac.cgi | awk ‘/imei/ {printf substr($2,2,15) “simlock”}’ | sha1sum | cut -c1-8
Perhaps i am missing something here. Device was unlocked easily. But I am not able to SSH due to the incorrect password ‘frk9x07’. How do i find real password for ssh? Other than that ssh problem, great forum. Thanks
My bad, i mistyped command. Should be ssh [email protected].0.1 then provided password works. Thanks
You have to type in terminal root@ip
This page is really helpful but still I am stuck at my problem. It seems my device bricked while getting the updates from tmobile. It’s not showing any Wi-Fi broadcast and reset is keep showing “Factory reset Restarting Now” I logged in to webpst and uploaded R717F21.FR.1312 but after 1-2 minutes while writing it, it is showing me upgrade failed. Hidden menu showing web version FR.1312. Is there any way to do re-install 1312 or 891 via openssl? or any other way to reset?
Thanks
Hmm somehow my hotspot did OTA and was bricked, LCD gets stuck at WELCOME message and never even starts up the hotspot. Any ideas on how to reflash/reset?
Same issue with my device. Please keep me posted if you find any solution.
Remove the SIM card and reboot it.
This works, thanks
where to download 891 to downgrade ? Mine got updated to 1131 and I could not enable SSH. By the instruction, how do I run ty-enable-ssh.py to enable ssh for 891+ ?
https://mega.nz/folder/FJ8wWYAJ#Q1oUEtIUJrtjB1atkOAXrA
have to load Python on your computer; then save the T9’s configuration (from the menu) to a file on your PC; run python ty-enable-ssh.py hotspot_config.bin, which will generate a new config file. ten upload it back to the hotspot.
Awesome work. I see the engineering and other passwords plainly visible in multiple places…what a convenient mess! Do you have any insight into the configurations loaded through the “Change Target” menu? I was thinking of making a universal configuration to load in it, as I see that using the unbranded ‘Default’ breaks things like the ability to enter the SIM unlock code, however I haven’t found where the other configurations are stored to use as an example.
The hidden menu also has a disabled debranding page (among others) but navigating to it shows that the corresponding cgi (and perhaps the files that debranding would want) are missing, at least at a glance.
I wonder why accessing factory reset menu in webPST calls for the SPC?
There’s also a 100 firmware if you use the vendor franklin.
Different config settings are loaded from /etc/default/configs/*
It may be possible to just add your own there in a new folder?
The unbranded, Franklin and SKT configs don’t actually set a SIM_LOCK like the TMO/Sprint configs do which might be why the option to unlock the SIM goes away. I haven’t tested if the lock itself goes away when switching to those configs. Since the original config is TMO (with lock set), the SIM_LOCK NV value may be sticking despite the new unbranded/SKT/etc configs not using a SIM lock. And if set to unbranded/SKT from factory… then the TMO/Sprint SIM_LOCK NV setting never gets set and there’s never a SIM LOCK to remove.
And the reason the SIM LOCK comes back after a factory reset is because the TMOBILE config gets rewritten.. which then rewrites the SIM LOCK NV value.
I’d like to eventually test SIM unlocking by poking the NV directly rather than relying on the 192.168.0.1 pages.. just to figure out how to clear it out of the NV properly. The SIM_LOCK NV value set by TMO/Sprint is: 00 02 00 65 00 00 36 01 a0 00 36 01 c8 00 36 01 d2 00 36 01 dc 00 36 01 e6 00 36 01 f0 00 36 01 fa 00 36 01 04 01 36 01 0e 01 36 01 2c 01 36 01 36 01 36 01 ea 01 36 01 12 02 36 01 4e 02 36 01 80 02 36 01 94 02 36 01 20 03 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d3 00 00 00 0a 00 00 00
May just be as simple as zeroing it out to remove the lock… not sure yet.
The configurations are stored in: /etc/default/configs
Take a look at the configuration folders:
/etc/default/configs/
Also the following file:
/usr/bin/change_carrier.sh
This might help with the custom builds.
My auto upgrade stuck and now only seeing blinking led. Tried upgrading/downgrading ENC file but after 62%, it’s throwing Firmware failed error. SSH is not enabled. Is there any way to rewrite the firmware? Please help, Seems my device is bricked.
Thanks Chris, your work is awesome! After unlocked and added APN, I can use my Verzion sim to enjoy LTE.
This is awesome! I had played around with it a few months ago and managed to gain root access and unlock the SIM on my own through a bit of trial and error. I never reached this level of reverse-engineering, though!
Is there a way to put the T9 into “bridge mode” /firewall-less or a mode that I can put my own NATing router /firewall behind the T9 tethered via USB? So Im not double NATing.
Hmm… is FR891 using a debug kernel?
This is what I see in /var/log/dmesg
[ 0.000000] **********************************************************
[ 0.000000] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE
[ 0.000000] **
[ 0.000000] ** trace_printk() being used. Allocating extra memory.
[ 0.000000] **
[ 0.000000] ** This means that this is a DEBUG kernel and it is
[ 0.000000] ** unsafe for produciton use.
[ 0.000000] **
[ 0.000000] ** If you see this message and you are not debugging
[ 0.000000] ** the kernel, report this immediately to your vendor!
[ 0.000000] **
[ 0.000000] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE **
[ 0.000000] **********************************************************
Why would this be? This keeps getting more interesting…
can someone help me out please, i was able to get unlock code but going to http://mobile.hotspot/#login=/settings/mobile_network-sim.html is asking for password and none of these work frk@r717 t9_it_@dmin frkengr717
If you haven’t yet set up a password, the default for the interface is user:admin and password:admin. If that doesn’t work, just factory reset and try again, because that will set it back to the default admin:admin credentials.
hey bud thanks for reply indeed you were right, as when i opened the link it asked me for password which was “admin”
you will need access to a Linux or Mac terminal or Windows 10 running WSL. i was able to get the unlock code using this free terminal link= https://cocalc.com/doc/terminal.html
On the terminal type:
export IMEI=YOURIMEIGOESHERE
echo -n “${IMEI}simlock” | sha1sum | cut -c1-8
It should give you your unlock code.
and than Go to http://mobile.hotspot/settings/mobile_network-sim.html under “Carrier Unlock” to unlock it (remember ur laptop/pc needs to be connected to the Franklin T9)
Hi, I received my unlock code but the web page is not allowing me to apply the unlock code. Desired action has no options available and the button it self is greyed out! Please help, can i apply the unlock code through terminal?
I am also on FM.version 891
also stuck at this spot.
J’ai pu obtenir le unlock carrier code.
Mon modem a accès au réseau local
Mais mon modem n’as pas accès aux données.
For anyone have issues with it auto updating/boot looping take your sim out, restart it, downgrade back to 891, factory reset it, unlock, change your target in the engineering menu to TMOBILE_GCF, reset device again and when you try to update it says your on the latest version 891
I believe you can also stop the OTAs through a config I just didn’t have the ability/time to do is so I found this temp fix
You lose 3 sprint bands this way but since I have a ATT sim in it it’s not a big deal
Crap…forgot what I set the “admin” password that defaults to “admin” to when I did this. Is there a way to force change it via one of the DEV pages? Guess I need to factory reset and redo the unlock otherwise.
-ssh into hotspot
entering following command should show pass:
cat /data/configs/mobileap_cfg.xml | grep Password
Sadly, I can’t get root password to work. Maybe I’m still doing something wrong but I tried to login via root with Putty.
Nevermind, I figured it out….thanks for the help.
Thanks for all this info Chris!
Here’s a modified 1311 with SSH always on in the configs, FOTA and remote management on loopback, FOTA service start suspended, and engineering pages restored. Remember to trust but verify! Use the information on this page to extract this firmware and the original 1311 and validate my edits for peace of mind.
firmware link – https://mega.nz/file/Lk8k2TgI#DwuWhvQh2nd-Gv2247cFB0rnVodqNP9M0_k751o0XJw
MEGA folder link for future builds – https://mega.nz/folder/m81iVLYJ#ZkLM7wspDir5z0T7DuGlXg
V2 just includes some password reminders
Thank you very much for your contributions. If possible, could you modify the page so we can edit the TTL easily?
By any chance was the password to ‘http://192.168.0.1/hidden/’ updated as part of the changes you made? Looks like there isn’t a password reminder nor will frk@r717 work to gain access to band configs.
Are you sure you flashed V2? I have access to the hidden page using the default password and a reminder is present on the login dialog box.
Hi ServError,
I installed v1 and then v2 following your instructions and my T9 seems to be working well. Its unlocked running a Tmo MVNO sim just fine.
My only issue is SSH off. Can’t seem to figure out for the life of me how to get SSH on.
Extracted your modified 1311, but now wondering how to actually flash it? I tried the web GUI “Software Update” and selecting the ota_update_all.zip file, but after a few seconds of uploading it, it returns an error “Invalid file”. Am I doing this right? TIA.
Question about the firmware:
I am still on the “stock” 891 firmware. Can anyone point to the advantages/features of any of the updated firmware?
I can make AT&T LTE work on firmware 891, but not 1131 (1131 always says SIM error). So I revert back to 891.
If anyone knows how to make AT&T sim acceptable by 1131 firmware please let me know. Thanks.
1. This morning I inserted my tmobile SIM and suddenly it worked and let me WIFI into the system and I flashed 891 firmware immediately successfully.
However,
2. When I tried to unlock it again manually like I did last time, it said my unlock code is incorrect, which I double checked it was the correct one that I used last time successfully. Looks like tmobile did something on the unlock mechanism.
Can someone help figure out how to unlock it again?
Bests,
Jeff
All this information has proven very useful and educational. Thank for all your effort in sharing it. Using the T-Mobile T9 (Franklin Wireless R717) I noticed that if your firmware if higher than the 891, activating SSH through the hidden menu is not possible. I rolled back mine form 1131 to 891 and ha no issues activating SSH in the hidden menu.
Thank you Chris and everyone involved.
I got everything all setup and working.
I got this device for creating a hotspot in my car so that my Android headunit can connect to it and use it for Spotify and Google Maps.
I found out that the device works without the battery if plugged in which is great for keeping in a car that can get really hot in the summer.
I really want the T9 to auto turn on whenever its plugged in (car turned on) without me turning it on manually.
You guys think there’s a way to do this? Software or Hardware mod.
PandaDeng, did you ever find a way to auto turn on once plugged in? I have a similar use case. For me I need to use this to remotely manage door lock access codes. I’d rather not keep the battery in it to avoid overcharging / overheating / failure, but if I leave the battery out and the power goes out, it won’t auto start and then I’ll no longer be able to control the access codes. It’s not a problem for it to go out temporarily, but when I need to change the codes I need it to work. I’d be grateful for any ideas!
I found that if you hold down the power button it will fully power on when plugged in, and won’t turn off. I ended up cutting a piece of plastic to wedge between the inside of the case and the power button so it’s always pressed down. So far it works pretty good for me.
Is there a way to view signal level info like RSRP, RSRQ, SNR?
Doing the test drive and I’d like to have better info to look at, not just a five bar “it’s fine” indicator.
Yes. Go to http://192.168.0.1/about/ and click the “debug” button
Has anyone figured out how to display arbitrary text on the LED screen?
Also, I’m thinking of writing a little script that changes the APN after boot depending on the ICCID.
Hey Chris,
I’m wanting to use one of the backup config files as a template to change SSID, password, device limit, etc. Is this possible to do, and if so how do I actually get into the directory? I’ve downloaded a copy of the config file now as a backup, but the ssl commands aren’t working.
Thanks in advance!!
Turns out it helps when you don’t have a typo in the URL…
I cannot use any other sim card other than the one that comes with the device on the latest firmware. Even the modded latest firmware. It’ll only work if I downgrade to 891.
Also, I had a blast modding this device!
this is my imei pls help me with the on lock code REDACTED
pls give me unlock code my imei is REDACTED pls help me i am stell waitting
pls as you have my imei pls give me code becouse you put my imei REDACTED
As mentioned earlier, I will not be generating codes for people and I will be censoring any IMEI’s posted. Please read through the comments, there are multiple documented ways to generate your own unlock code.
Hello Guys,
Need help!
I have my Franklin T9 device bricked. It was updating software when I dropped it and the battery came out causing the device firmware update to fail.
Now the device is switching on but nothing is working. Mobile.hotspot page is working but no information is available on the page. Same with hidden and webpst. I did try to force firmware to device using webpst page but it failed. IT admin page is asking for a password but the one provided here is not working. So i am unable to load .cfg file.
Any help is appreciated.
Thanks
Have you tried resetting to factory default? If not, pop off the back cover and hold down the reset button while the device is on. Also see some of the above comments about resetting a brick.
Just put your IMEI into this site, and it’ll give you an unlock code.
https://jsfiddle.net/4zds6531/
uffffffff master of puppets…
magnific
can u make an offline code generator whit this.
I need some help repackaging the config file. I’ve tried to just walk it back through the command prompt after successfully unpacking everything, but when I attempt to restore from the backup it fails. I have a feeling the problem is with the way I’m re-encrypting the .tar file. Steps below:
– Edit XML config file
– In command prompt:
$ tar cf [hotspot_cfg.tar] [data]
$ tar cf [hotspot_cfg] [hotspot_cfg_2] <— this includes hash/model/hotspot_cfg.tar
$ openssl enc -aes-128-cbc -md md5 -in hotspot_cfg.tar -out hotspot_cfg.bin -k frkenc##KEY@R717
I've seen Chris' comment about the python script and have looked through it, but I'm not very familiar with python. Any help with this would be greatly appreciated.
I use the R717F21.FR.891_ota_update_all.enc download from your mega drive, and update use the web page to restore from Backup use this file, but now I can’t turn on the device, just the power button light is flashing. What should I do now？ How to reset the device？ Thank you so much.
Is there any script that force the device to restart ever x hours? Thank you
My end goal was to use this as a hotspot with a T Mobile sim, but for fun I also SIM Unlocked.
Quick guide for me-
I ssh’d into the device in terminal with command
ssh [email protected].0.1
when asked for password its frk9x07
now you want to change the TTL with command
echo “Setting TTL on $INTERFACE to $TTL=65
you should see the system confirm
Ran command
exit
Completed speed test and verified TTL was -1 at 64.
for sim unlock code I used website https://jsfiddle.net/4zds6531/ and put in my IMEI- wrote the code down and plugged it in the mobile.hotspot page and the device rebooted and is now unlocked.
If I use Putty for ssh, is this command run at the top level directory and then logoff?
echo “Setting TTL on $INTERFACE to $TTL=65
Also do I need to run this command every time when I power up the T9 to set the TTL?
Does this TTL change only affect tether? In other words, I’m not seeing a TTL change when connected via WiFi to the T9.
How can I set the USB Mode back to RNDIS + ECM after enabling ADB without a full reset?
Nevermind, I was only using the device tethered but after setting up the WiFi address/pw the WebUI is still easily accessible and USB mode can obviously easily be changed from webpst menu.
Most of you guys posting are way more talented geeks, but thanks to this thread I turned the free Test Drive Franklin T9 into a budget backup hotspot to cover gaps in the field and at home when the wired Internet and wifi crap out.
Bottom line used https://jsfiddle.net/4zds6531/ for the SIM code unlock. Used my initial $15/mo T-Mobile Connect UNL Talk & Text w/2GB data SIM card to get a number & to confirm speed/coverage. Changed the plan to a mobile data only (2GB) option @ $10/mo. Ran that SIM on my phone, powered off and put that SIM card into my now unlocked Franklin T9 and restarted the T9. Viola! A complimentary Franklin T9 Mobile Hotspot. T-Mobile has the superior LTE data throughput inside my home vs ATT/Verizon. I can upgrade/downgrade the prepaid data plan as needed without carrying the extra expense of a voice/text plan or just activate/deactivate data service as needed.
Yes, T-mobile stuck me for $25 on the initial SIM card cost and activation for the Prepaid phone SIM.
Still not clear if an unlocked T9 works with Mobile data only AT&T SIMs or Verizon SIMS or MVNO data only SIMS plans or what exact tweaks accomplish that.
Ok so I managed to hard-brick my t9 worse than anyone else so far (lol). I accidentally deleted /bin (long story) and it started bootlooping. However, I did find out that you can enter fastboot mode by shorting the two small pads on the PCB next to the display connector while powering on (you might have to pop off the metal EMI shield).
Anyway, I tried to flash a new system image with fastboot, but it appears that the system.img is not included in the ota images provided above. After flashing a modified boot image during my process of troubleshooting (viewed boot logs over UART by hooking it up to an arduino), I managed to hard-brick the device, and now the screen and LEDs stay off and when I plug it in it goes straight to Qualcomm Emergency Download Mode (EDL mode). I can’t even reach fastboot anymore or ADB–it appears that it is only loading the Qualcomm “primary bootloader” and not even the Franklin secondary one. The boot process seems to be four stages:
1. Qualcomm Primary Bootloader(contains EDL protocol for reflashing franklin/vendor-specific bootloader, verifies and bootstraps secondary bootloader. Factory-set in ROM). — I’m assuming that my system gets stuck here because the verification of the modified boot.img I flashed fails.
2. Franklin (secondary) bootloader — (seems to take care of rest of POST and preliminary system checks. Activates Wifi radios, battery management, other device-specific systems, then loads tertiary android bootloader) However, also seems to contain the linux kernel itself that the following android bootloader loads into RAM (further research required, I’m very uncertain about this process)
3. “aboot” — (android bootloader, this is what loads the linux kernel/mounts the filesystem. This is what fastboot interfaces with.)
4. Linux — (the actual OS itself)
Because the OTA updates appear to be only patches rather than full system ROMs/images, here’s what I would like:
Can someone with a working device dump the ENTIRE filesystem and upload it to a mega or an admin email it to me? The device supports a SCP connection in SSH mode so this shouldn’t be too difficult. You can also use adb. I would really like a complete “factory” image to help me troubleshoot once I manage to reflash the secondary bootloader through EDL (boot.img, this is included in the ota files Chris provided).
@natthawk shoot me an email and ill see if I can get you what you need.
my franklin t9 says stolen device got it off offerup help me brother how can I use it
Unfortunately, unless you know a way to unlock the bootloader, fastboot won’t let you overwrite system or recoveryfs (recovery and most other partitions are fine though). Your only real shot is to use EDL to write a new system image. Bjoern Kerler’s EDL tool is most promising for streaming download to NAND based devices, but it’s a work in progress and doesn’t play nice writing to our units yet (dumps work fine). There are other methods, but they’re very manual. I have dumps of all the partitions. If you find an EDL flashing method that works for you, I can get you a clean system.img if you still lack one (my current dump has a lot of my own personalizations).
Hi, sorry for the delayed reply.
Great minds think alike, I guess, since I tried this very tool to no avail :/ Now I’m beyond even trying to reflash system.img as I said above because I accidentally flashed a modified boot.img. I can’t get the flash programmer mbn file to cooperate, and I don’t even know if it’s legit since it’s a random one I found on a sketchy forum, and I’m also brand new to this Qualcomm Sahara/firehose stuff and how it works so I don’t really know how to troubleshoot either. When I view boot log over UART, it throws an ELF verification error when verifying the boot loader, then drops itself into 900E mode. Fastboot is inaccessible since the android high-level bootloader is never activated.
When I try to flash the boot.img to “boot” with EDL Tools using NPRG9x07.mbn as the loader it accepts the programmer (loader), returns the serial number, and then errors out with a python traceback 🙁 This even happens when I try to dump partitions. ENPRG9x07.mbn also doesn’t even get accepted in the first place. Also, it’s not even showing up in 9008 (EDL) mode, it’s showing up in 900E. Could you share the programmer file you used/the specific command that worked and what platform?
Plus the device uses UBIFS as a file system, which is a whole other level of abstraction I had basically no knowledge of before a week ago.
I guess my next course of action is to try to interface with the (very nicely labeled, thanks Franklin!) JTAG pads on the PCB, unless you can get EDL write working, but this will be a hassle and probably require some soldering.
my franklin was reprted stolen once I bought it from owner what a jerk
anything I can do to use it as a hotspot?
Latest device has a different firmware and different unlock procedure. By going though the js code, it seems that they are using AES ECB base64 now with key “abcdefghijklmn12”. Not sure about the special code though.
Oh interesting, what firmware version does your device report?
Out of the box without letting it update, it’s on TMOHS1_0.04.18
As someone who has this device as part of my postpaid plan I’m glad to see the firmware available for download. Typically I like to reload the firmware when the device crashes as a fresh coat of paint but T-Mobile hasn’t been able to provide it for me.
Thanks.
Right now T-Mobile send the new device is not T9 Franklin. Can you study how to unlock the new device?
I would need the device to do that. What model and brand is it? Can you share photos of it?
I believe I received the same unit. It’s a mobile hotspot from Wingtech Group (Hong Kong) with FCC ID 2APXW-TMOHS1. I guess it’s a new product; no more LCD screen and just dimmable LEDS below the t-mobile logo. It has 5G and 2.4G wifi but cannot operate simultaneously. Apparently and sadly the Franklin hacks doesn’t work on it at all…
Did some research on it. Here’s the manufacturer’s website: http://www.wingtech.com/en (in terms of product support, it’s even less transparent than Franklin’s barren support website, lol)
Here are some notable specifications from T-mobile’s info page on the device, which I pasted a link to in a reply below:
– 256MB RAM, 512MB ROM (I think the T9 only had 256M rom, but someone can correct me)
– MDM9207 CPU/SOC (Same as the T9 – I’m guessing the firmwares are very similar)
-USB C (yay!)
If someone with the device uploads the HTML and JS source of the web interface, maybe we can get a head start on reverse-engineering it. Let’s hope Wingtech learned their security practices from Franklin, lol.
Just received the TMOHS1 version as well. Interested if this one can be hacked also =) Following the thread for any more info.
How do i upload the HTML and JS source of the web interface?
I have placed the admin HTML, JS, and CSS files for the TMOHS1 in a zip file (tmohs1_files.zip) at:
https://mega.nz/file/MkRBDCQb#e1rIR7aD4cebyavw_vQVCjyGPVUo3zGRBChGq3XiXl8
The sha256 is:
2ee424d3d0ca26a02d523683189c055466ea6efb21e957b884263ab8a34521df
The files:
static/js/chunk-vendors.b06997a3.js
static/js/app.cf45a03c.js
static/css/app.5f283b77.css
static/css/chunk-vendors.55852678.css
home.html
Same here!
Also got a different MIFI device from T-mobile, modeled as “TMOHS1”
Searching with the model name leads to some FCC certification docs, and nothing else quite available yet. Here’s a photo of the device I took. The tiny display is replaced by several indicator lights. One good thing about this device is USB-C is used for charging now
Sorry, forgot image link
https://imgur.com/a/cz6Zm7K
I got the same device and there is no information about it at all
more info about TMOHS1
https://imgur.com/a/SS0XJUW
https://fccid.io/2APXW-TMOHS1
I have one in hand. Anything I can do to help?
here’s a copy of the hotspot’s webpage saved. a mix of htm, css, js files for someone knows what to look for.
https://github.com/visible1025/TMOHS1/blob/main/unlock%20page.zip
Any idea how to unlock and do an imei change on this new device?
here are some details from the information page on the TMOHS1 GUI (I don’t have SIM inserted so some of the details are missing or removed)
Phone Number Unknown
IMSI Unknown
IMEI _REMOVED_
Signal Strength Unknown
Network Name (SSID) _REMOVED_ Change
Max Connected Devices 8
LAN Domain mobile.hotspot
MAC Address _REMOVED_
IP Address 192.168.0.1
WAN IP Address Unknown
Software Version TMOHS1_0.04.18
Hardware Version 89527_1_11
IMEI SV 4
Model Name TMOHS1
T-Mobile Customer care number 1-800-937-8997
Hello all,
I just put out a python wrapper for many of the Franklin T9 functionalities exposed in the GUI.
Welcome contributors and feedback:
https://github.com/RayBB/franklin-t9-api
Can you tell us how to use it! I got mine unlocked, SSH accessed,
Can you explain how to do the process, i dont even know where do i have to copy de commands ;’c
can you explain me with wich programm i can do the ssh access and root ? cuz i dont even know where do i have to paste the commands :c
Here’s a tmobile support link for the new device: https://www.t-mobile.com/support/devices/mobile-internet/t-mobile-hotspot
It appears that the T9 may no longer be being sent out.
Please help me unlock code
IMEI: REMOVED BY ADMIN
Pingback: T-Mobile Mobile Hotspot TMOHS1 - Rotar E@rth
Hello, my T9 is version 891. I have unlocked it and set the visible APN, but as soon as I put it in the visible sim card T9, it locked again. The visible VPN is gone. When I put it in Google fi, everything is normal. I don’t understand why the visible doesn’t work.
I have Visible working on the T9 with this apn “VSBLINTERNET” not very fast speeds though 12-15 mbps. I put the Visible sim in a phone and get 45-50 mbps.
Just received the TMOHS1 also. Is it normal to have the sim activated as soon as it is powered on? I never activated it. The speed isn’t very fast (about 13-16 mbps).
Anyone able to enable the OTG function of T9? We can use this to install Checkra1n and Jailbreak the iPhone.
Also, if the screen could be used to show the status of jailbreak, that would be perfect.
there is a hidden path for the TMOHS1, not sure if it’s useful but it’s
http://192.168.0.1/#/FotaHide and present you with the following options
FOTA Server settings
Switch to product server Apply
Switch to STAGING server Apply
Switch to LAB Server Apply
Remove OTA bootstrap Apply
FOTA Server information
ServerID TMOFOTA1
ServerAddress https://omadm.iot.t-mobile.com:443/omadm-server/dm12
ServerPort 443
ServerAuthName TMOFOTA1
ServerAuthType DIGEST
ClientAuthType DIGEST
FOTA Scheduled events
Delaytimes 0
I did some digging on DIGEST Authentication and trying to get the rom file. I’ve been getting 405 error. @Chris B, can you provide some guidance on where should we look at next to somehow get the rom file? Thanks!
Yes mine was online as soon as I powered the TMOHS1 on as well, though it took about 30 minutes before it would work properly (provisioning time I guess?)
Following for unlock updates.
hey fellers. I have t9 unlocked. but i can’t get the att sim card to work. i’ve tried setting different targets and apn. What am i missing?
As soon as I turned on my TMOHS1 it activated and the time started ticking. The speeds I get are never above 10Mbps. That is pretty crappy if you ask me. I’m hoping we can unlock these and perhaps get better speeds with other carriers.
Is there any success on unlocking the new TMOHS1?
I’ve enabled SSH but need assistance in configuring ttl settings. I have the code necessary but not sure where to begin and not very familiar with Putty or others. Note I’m on MAC. Can anyone assist?
When accessing mobile.hotspot > Settings I am prompted with a login screen. I use the default password of “admin” and the password prompt disappears but I am left with a greyed out screen and I am unable to access the settings page. I have tried factory reset via back panel button but I get same results each time. Any work arounds? I am currently downloading FR.891 to see if a rollback works.
I have limited computer ability, but I wanted to ask a few questions about the Franklin R717.
My internet provider is Sprint, which is billed through “PCs for People” which provides $15/mo internet for low income people. The drawback is there is no service or help if you have a problem. In my experience, after about two years of service with a given modem, the cell towers make some change that makes the modem not connect for the average person. Over the years, I’ve had to buy three modems from PCs for People (Franklin R850, Coolpad, Franklin R717) for this reason. Two things that have extended the life of the modem are:
1)”update data profile” and “update prl”
2) disable one or more of 3 the bands
Disabling the bands requires the MSL/password. On the Franklin r850, I was able to use another post that showed how to bypass the MSL/password (using html trick that you mentioned). On the Coolpad, I found no such trick, but after calling Sprint several times, they gave me the MSL/password for my modem. On the Franklin r717, I was able to use the html trick, but the band priority doesn’t show properly, (can’t choose band), see attached photo (https://files.videohelp.com/u/61125/t9a.jpg). In your post, you gave a MSL/password (frk@r717) that you got by your methods (above my ability) to be able to disable bands. But very oddly, your password worked on my r717. This is very strange, because I think each modem has its own unique password. Also very strange, when I entered the disable band screen using your MSL/password, the band priority now shows ,see attached photo (https://files.videohelp.com/u/61125/t9b.jpg).
So can someone tell me:
1) why does your MSL/password work on my r717? It seems that your MSL/password is some kind of master password that might work on all r717, because I think (based on the passwords given from Sprint on the r850 and Coolpad) the MSL/password should have 6 digits, no letters or @ sign, and not contain the modem model (frk,r717).
2) when using your MSL/password, why does the band priority appear, when I use the html method, the band priority doesn’t appear?
3) There is a screen on the r717, see attached photo (https://files.videohelp.com/u/61125/usage.jpg) that sets data usage limit. I thought usage limit was set by Sprint. This modem was shipped as 20GB limit. I’m assuming that when I reach 20GB, the internet will stop. But it appears that the one can increase the usage limit, simply by typing in a larger number. Is this true? If so, what is the point of having a data usage limit screen on the modem?
This works the same on a Sprint (Tmobile) R850.
Put R850 into the passwords instead of R717!
I’m having a lot of problems with the instructions. So, you download this file from mega “R717F21.FR.1311_ota_update_all_sm.enc” then run this command?
openssl enc -aes-128-cbc -d -md md5 -in R717F21.FR.1311_ota_update_all_sm.enc -out R717F21.FR.1311_ota_update_all_sm.tar -k frkenc##KEY@R717
I searched everywhere in that tar file and can’t find the “hotspot_cfg.bin” file to do the next step.
When I run the next command, it says this “hotspot_cfg.bin: No such file or directory”.(obviously the file isnt there) What am I doing wrong? Am I supposed to pull that image off the hotspot? Im running Big Sur on a Mac. I’m completely lost in what to do next cause I have no access to the hotspot to pull files off or anything.
I finished setting up the Sim Unlock/SSH/ADB, and was wondering if we needed to do the step for the config file? I tried to run this command once I had a SSH connection, but it doesn’t work. (openssl enc -aes-128-cbc -d -md md5 -in hotspot_cfg.bin -out hotspot_cfg_packed.tar -k frkenc##KEY@R717) Really happy this thing was able to be unlocked!
I used to have one of these! Gonna have to see how much they cost so I can get another one. Had no clue this was even possible.
My Franklin auto updated last night. Ugh. I thought I had done everything right. Current firmware is R717F21.FR.2602. Having trouble downgrading back to firmware 891. When I try to upload the firmware file from Mega, it uploads until about 20% and then errors out with the message “Error occurred at file sending.” I’ve factory reset the device and tried both usb and wifi to upload but no luck. Any tips?
I have an R850, all the stuff posted above worked on it, for the login pw I had to substitute r850 for the r717.
That has now stopped working, the secret page with the settings now returns a 404 page.
It seems Franklin might have changed it. Does anyone know how to access it now?
I’d imagine they would have changed the address the unit calls home to as well.
I guess Franklin’s engineers are reading the same page we are. Heh.
Chris, are you able to look at that?
Oh, and the http://192.168.0.1/itadmin/ page now redirects to http://192.168.0.1/
http://192.168.0.1/webpst/
still works. It asks the MSL for the unit, which I have.
Hello since the 2602 update I no longer have any hidden pages. For some reason I am also not able to downgrade the version with any of the files above anyone have any clue what I should try? Any help is appreciated.
Hello! Not sure if you’re still monitoring this post/site, but I’ve got an issue with my brand new T9 that I cannot seem to resolve.
My device came with firmware version 2602 and refuses to be downgraded to 891. I have tried every combination of things I can think of (SIM in, SIM out, reboot, factory reset, connect via USB to PC and Mac) but every time I try to upload the older firmware it fails.
I also am not able to access the /hidden, /webpst, or /engineering menus. I return a 404 not found error for all of those.
If you’ve got any suggestions I’d love to hear them!
Chris,
2602 had a bunch of security updates, it upgraded mine and I can’t get it to downgrade either. They moved the hidden stuff as far as I can tell. I can’t wait until we find a way around this as it screwed me pretty hard (it does not pick the best channel in my area). Some people are able to downgrade but my guess is yours get stuck at 35% and fails? That is exactly what mine does.
Yes, 35% is the best mine manages.
Also can’t access hidden menu any longer due to OTA update to 2602! Terrible as my thousand dollar investment to get internet is now completely ruined!
Help!
same
This didn’t harden security for end users in any way any of us will ever notice. It only screwed us over. Thanks!
Cool, next time I won’t publish my findings and will just forward them to the manufacturer.
Fuck that shit! Sharing stuff like this is the whole bread and butter of open source and the point of the internet. I say you did an awesome thing, I picked up so much useful knowledge in just attempting and completing the steps you laid out so simply and clearly. One way or another this security flaw was going to get patched, and someone in the company should have rewarded you for discovering and preventing what could eventually have been a major security flaw later if anyone ever used these for more than just unlocked boxes. These were give away throw-away devices long past end of life anyhow. Thank you for sharing. I look often over your blog hoping for more insight.
-Bubba DeeS Troy Von Spankleton III
I was being sarcastic in my last reply, but thank you. Your feedback is what I needed to hear, and I’m glad someone finds use in my research.
Please ignore that troll!
Just to be clear… does ‘SIM Unlock’ mean I can then put an AT&T SIM in it?
Yes
if you are resetting yours allot and playing with targets etc – to prevent it from updatting edit /etc/hosts and add
127.0.0.1 fota.pintracview.com
the OS has VI installed
as well as
127.0.0.1 t9datafiles.s3.us-east-2.amazonaws.com if you accidently turn on remote management
When I change /etc/hosts using vi, my changes stick until I reboot. After a reboot, it returns to the default /etc/hosts
i am on firmware 891.
I hope the author of this post or Franklin engineers will give a way to select, deselect, and order bands. The capability is needed in many areas if the country.
Neither the author of this post or Franklin engineers will do that. It’s up to T Mobile to allow users to select band priority and they won’t do that either. I was able to select any band I wanted through the hidden menu but nobody knows where it is now. I just wrap the front cover with aluminum tape to force the device to change bands, mostly from B41 to B4 but sometimes I get a band I don’t want. If anybody knows where the hell the hidden menu is, speak up!
has anyone gotten cron to work on the t9s version of busybox? its installed and appears to be running but i cant get anything i schedule (via crontab -e) to run. I’ved tried classic cron denotion with times as well as @reboot and */ demotions
just some info i put together that will likely help someone
———————to add your own user/password
1. ssh into hotspot
1. add user via typing the following (replace admin with any id you want) :
adduser admin
2.. make the user root
vi /etc/passwd
change the line for the user you just added – edit the group from 1001:1001 (could also be 1000:1000) to 0:0
3. ssh into you hotspot with your own account (this does get wiped with new firmware)
—————–to automatically enable engineering on 1311
type the following commands one at a time via ssh
1. echo r717:frkengr717>/etc/pwlighttpd
2. echo sleep 60 >/etc/init.d/startup.sh
3. echo /usr/bin/copy_htdocs.sh eng >>/etc/init.d/startup.sh
4. chmod 755 /etc/init.d/startup.sh
4. cd /etc/rc5.d/; ln -s /etc/init.d/startup.sh S98startup.sh
—- to enable crond`
type the following commands one at a time via ssh
1. mkdir -p /var/spool/cron/crontabs
2. echo > /var/spool/cron/crontabs/root
3. chmod 755 /var/spool/cron/crontabs/root
4. crontab -e
edit as you like using vi commands – ex run the script myscript.sh every 5 mins add the following line
*/5 * * * * /home/root/myscript.sh
5. echo /sbin/crond > /etc/init.d/crond.sh
6. chmod 755 /etc/init.d/crond.sh
7. cd /etc/rc5.d/; ln -s /etc/init.d/crond.sh S98crond
—- to set TTL on every boot
type the following commands one at a time via ssh
1. echo iptables -t mangle -F>/etc/init.d/ttl.sh
2. echo export TTL=65>>/etc/init.d/ttl.sh
3. echo export INTERFACE=rmnet_data0>>/etc/init.d/ttl.sh
4. echo ip6tables -t mangle -I POSTROUTING -o $INTERFACE -j HL –hl-set $TTL>>/etc/init.d/ttl.sh
5. echo ip6tables -t mangle -I PREROUTING -i $INTERFACE -j HL –hl-set $TTL>>/etc/init.d/ttl.sh
6. echo iptables -t mangle -I POSTROUTING -o $INTERFACE -j TTL –ttl-set $TTL>>/etc/init.d/ttl.sh
7. echo iptables -t mangle -I PREROUTING -i $INTERFACE -j TTL –ttl-set $TTL>>/etc/init.d/ttl.sh
8. chmod 755 /etc/init.d/ttl.sh
9. cd /etc/rc5.d/; ln -s /etc/init.d/ttl.sh S98ttl
You can edit via the following if you want to change TTL to a different value
vi /etc/init.d/ttl.sh
you can run the command to reset ttl without rebooting to change ttl via the following
./etc/init.d/ttl.sh
—- vi command guide if you have never used it before
https://www.cs.colostate.edu/helpdocs/vi.html
thanks again to the author of this thread – this has been allot of fun playing with this.
Thank you
Hello all, I had been using the t9 just fine with my Verizon lte sim after unlocking months ago. I hadn’t used it for a bit and I recently powered up and went through a firmware update.
Now my speeds are very bad. Less than 1.0 mbps.
Apn settings are the same as I had Configured to use Verizon apn. Any ideas? Seems like the firmware update changed something as I was getting good speeds.
did you disable OTA update? if it auto updated, then it’s fvcked.
been poking at 2026. it seems they included both public and private keys for the settings file in the OTA.
If ADB is still available and not locked down this may be away into the hotspots.
ssh is another possibility, the ssh root password hash is available as well although it is using stronger encryption then before
I picked up another T9 from ebay to test this but this one is stuck at 891 and i cant upgrade or downgrade it. it is fully functional – just stuck at 891. FOTA app is running, the settings file has it enabled, the host file and url are all fine. there is plenty of space. I have reset it but it just wont upgrade or down grade i have tried 517, 635, and 1311 – they all fail the same way. i even tried to get it to upgrade via ota, same result. these same images work on my other t9 so its weird i cant get them to work. It goes through the whole process then reboots and it fails. It is fully functional at 891 – the logs (at least the ones i have found) do not record any info on the upgrade process.
any ideas as to what else to check – if i can’t get this one to upgrade ill just buy another one and sell this one. – hell most people here probably one one stuck at 891.
For what it’s worth Fuzzy, I may have a downgrade solution in the works for those who are a bit more technical, so you may want to keep your eyes out for that or email me directly if you want some info.
> I may have a downgrade solution
yes. sign me up [r850, soon t9]
do you have the solution yet?
Keep your eyes pealed for a new blog post on here sometime in the future.
franklin R850 using uBlock Origin MSL bypass.
how does one _prevent_ OTA firmware updates?
webpst enable SSH? search for OTA file names cp to a backup and rm ?
is there an info page or command line tool to reveal band in use? The cell maps sites show which bands are in use near my house but guessing has become too much of a MasterMind game.
Some devices can be force downgrade flashed with direct eMMC writing.
Just ordered my free T9 from T-Mobile. Any advice on how to keep it from auto-updating to 2602 on the first boot?
Also recently received a free Test Drive from T-Mobile and it wasn’t a T9 Franklin but a TMOHS1.
https://www.t-mobile.com/support/devices/mobile-internet/t-mobile-hotspot
Just in case for now it can’t be sim unlocked even though the specs are similar between hotspot models.
https://www.reddit.com/r/tmobile/comments/mawhaz/new_tmohs1_test_drive_hotspot/
https://www.reddit.com/r/tmobile/comments/m7evpx/my_test_drive_arrived_today_questions_about_use/
Remove sim?
In case anyone wants to use more then one of these on the same layer2 network i have found that all of the T9s have the same Mac address of F4:63:49:00:00:01 on the bridge0 interface.
To change it on every boot do the following – change the MAC below to anything you like
type the following commands one at a time via ssh
1. echo ifconfig bridge0 hw ether F4:63:49:00:00:04>/etc/init.d/bridgemac.sh
2. chmod 755 /etc/init.d/bridgemac.sh
3. cd /etc/rc5.d/; ln -s /etc/init.d/bridgemac.sh S20bridgemac.sh
4. /etc/init.d/bridgemac.sh
If you want to load balance or PBR between multiple of these you will likely need to do this.
I used the 50gb redpocket in the tmobile franklin t9 for a week then it stopped working “SIM Pin Lock sim disabled ..0 attempts remain until your sim is PIN unblock code locked. Entering an incorrect PIN too many times will PIN unblock code lock your SIM and you will unable to use this device. You will need to contact your service provider to unlock the SIM.” it’s a 4 digit pin which i never set.
i livechatted with redpocket and they said the sim is not disabled. they were right as i got it working again on a different phone.
my franklin t9 shows current software version as r717f21.fr.1311
what is the 4 digit sim pin unblock code /how do i unlock ?
thanks
I have a feeling RP blocked the sim for hotspot usage, but the rep doesn’t see it on their end. I’ve also just got my RP sim working (using APN: RESELLER) and at the moment it’s working great. Was planning to use it on a trip later this week. Hopefully I won’t run into the same issue as you and will keep it off until I need it. BTW, the default SIM PIN for GSMA is 1111, but it sounds like you can’t even enter the PIN.
I know this thread has been quiet for a while but does anyone know how to change the maximum DHCP Clients above 15 ?
Is there any way to make the device boot when you apply power (no battery scenario), rather than waiting for someone to hold the power button?
You can jam the power button on and it’ll boot anytime there’s power is my understanding
Never mind. Robpol86 gave the solution already. A couple Velcro ties, a toothpick, and some folded cardstock, and now the power button is pinned down. I’d love a software solution – but there’s no need to go looking for it now. I think I did see it reboot once without requiring a button press (maybe on the firmware OTA downgrade). So, there’s probably a software solution. But meh.
I do love this hack, and the revisit to permit the downgrade. It’s awesome!
The T9 has fastboot if you hold down the WPS button while turning it on. You could try to run ‘fastboot oem off-mode-charge 0’ from a computer. There might be more things you can change with ‘fastboot getvar all’ as well if that doesn’t work.
Is there a way to make T9 turn on automatically anytime it gets power over USB?
Is there anyway of verifying what the TTL of the device is actually set at. I have looked at the various hidden menus and did not see anything. I have set up the script to set it at startup, but want to verify that it actually works.
Any link to datasheet?
Whats its FCC ID?
What speeds do you observe?
Thanks
Curious, what hashcat command did you use to crack the ssh password?
Just a basic bruteforce against the hash type. It was honestly nothing special, didn’t even need to use a wordlist.
Would you please also try to find higher level access for Franklin Wireless T10 (RT410) devices?
Get me a device, and I will take a look. I can only research devices I have in hand.
Chris, Did you ever get a T10? If not I can provide you with one so you can do research on it. I might like to pay you to help me wth my T9s as well as I’m not fluent with Linux. But we can work that out. For now just let me know about the T10.
Clay
did you ever get a device? i can provide you with a couple T10’s to mess with. I have 300 of them i need to get unlocked so i can use them with my proxy software (I provide 4g mobile proxy’s to proxy sellers). thanks!
Help….
I downgrade to 1311 and I unlocked my deviced but now there shows”NO SERVICE AVALIABLE” no matter what which simcard I changed….. simcard still working before I downgreade….
Current Software Version
R717F21.FR.1311
Thank you so much!
I had that problem with it not connecting to the cell service, upgrade it back to the 2000 firmware. The hidden menus still work there.
Dear hacker
I hope you will apply your skill to the T10
I keep getting the same ipv4 address which has a low integrity score preventing me from using some apps.
Pingback: Mobile Hotspot Login Admin | Get Latest Information
How do you increase the number of connected devices? I tried editing mobileap_cfg.xml but it doesnt let me go over 15. I would like to not have to use an additional router to get more devices online…
How do i connect the T9 to computer, USB or WIFI?
You connect with wifi.
You have to first disconnect your PC from your home network.
Then open up a web brower and go to http://192.168.0.1 ; the password is admin all lowercase
Go to http://192.168.0.1/settings/mobile_network-sim.html to enter the SIM Unlock code.
Hi Chris,
mine is on 2602:
Software VersionR717F21.FR.2602
Firmware VersionR717F21.FR.M2602
Build DateApr 15 2021
Web App VersionR717F21.FR.A2602
Bootloader VersionR717F21.FR.B2602
Is there anything I can do? Any way to downgrade it?
Thanks
Ha, nm, I saw your update regarding the 2602, got mine downgraded no problem.
Had a Tmobile SIM in it already, with data working.
The downgrade was very quick, maybe 2 minutes and I was back up and running with 1311.
Was able to run the python script and get an unlock code.
Thanks much!
Any idea on how to generate a lock code for the Franklin T-10? It looks like they are using a different method.
I was looking for a way to poke and prod at the LCD screen. Luckily Franklin was nice enough to include a utility to allow you to display what ever text you want! It always seems to cut off the first char though.
/usr/bin/guimgr_cli lcd_eng_mode xMessageHere
It can be as long as you want, the LCD scrolls 🙂
Can set it back to “normal” with
/usr/bin/guimgr_cli lcd_eng_mode 0
It seems overall they use nano-x as the GUI manager. If you want to bit bang raw data to the LCD, /dev/fb0 is your man. You can kill the process that draws to the buffer (nano-X) and it won’t clear it on you anymore, but you’ll lose the backlight control. It’s 128x36px, 1 bit per pixel.
Blank the LCD
echo 1 > /sys/class/graphics/fb0/blank
TV static
cat /dev/urandom > /dev/fb0
You can control the backlight yourself, but you’ll need a helper program for it. Cross complies on ubuntu with arm-linux-gnueabi-gcc just fine
On: ioctl(28, _IOC(0, 0x00, 0xc8, 0x00), 0)
Off: ioctl(21, _IOC(0, 0x00, 0xc9, 0x00), 0)
Where 28/21 is just an fd to /dev/fb0
#include
#include
int main() {
return ioctl(open(“/dev/fb0”, O_RDWR), _IOC(0, 0x00, 0xc8, 0x00));
}
just fyi, i was having trouble connecting the hotspot to my work laptop. I could connect to my personal laptop just fine. couldn’t figure out why the work laptop was blocking it but what got it working was adding DNS entries to the hotspot.
Dear Author,
Your work was amazing w.r.t T9 and its findings. Now with test drive T-mobile released massive loads of T10 devices, T-mobile won’t unlock T10, they say they can only unlock phones not Hotspots. Any light you can throw on T10 is really appreciated.
Thank You
Hey can you find a way to get mintmobile, boostmobile or other t-mobile mvno sim working in this box?
Hey can you find a way to get mintmobile, boostmobile or other t-mobile mvno sim working in this box? T10 NOT T9
Hello i judt disable the reset button on my router t-mobile t9 and disable the dhcp and i can’t use it anymore i can’t rvdn get access to the admin webpage.
I need a unlock my Franklin T9 with Claro? Somebody can help me?
I deleted all the “change target” in the engineering menu, except the default, and my hotspot no longer works. Does anyone have the files that I can load to restore the targets?
Can someone give me the code to unlock the country, my IMEI number is 355866234738917, thank you very much, I can’t do it myself
9d60795f
buenas noches
tengo una duda tengo el mismo dispositivo R717 Mobile Hotspot pero me dice Invalid Sim me puede ayudar con eso o a alguien le ha pasado esto sucedio porque sin pensar se reseteo el dispositivo ahora me dice eso
I am a little late to this party lol
I just got this device a couple of weeks ago, a fun little device to fool with.
these enc firmwares are so limited and cannot recover any borked device.
the real firmware dumped from the device is much more versatile.
Already made a build with everything baked in it
it loads from edl (9008) mode with a properly patched loader.
hynix nand is always kind of a pain in the ass, but it is what it is.
—————
Novatel Wireless Status Port (COM110)
Novatel Wireless VCOM GPS Port (COM10)
NETGEAR WWAN Modem VSP (COM3)
NETGEAR DM Port VSP (COM4)
NETGEAR NMEA Port VSP (COM5)
=======================================================
Enter QDLoader port #: 110
Chipset: MDM9x07
Waiting for a Hello packet from the device…
Boot image id: 0000000d
Loading loaders/9607p.bin…
Sending the Loader to the device…
Loader transferred successfully
Hello ver: 3
Chipset: MDM9x07
NAND controller base address: 079b0000
Nand flash: Hynix H9TA2GG1GJAMCR, NAND 256MiB 1.8V 8-bit
Sector size: 516 byte
Page size: 2048 byte (4 sectors)
Pages num in block: 64
OOB Size: 64 byte
ECC Type: BCH, 4 bit
ECC Size: 7 byte
Spare size: 4 byte
Bad block marker position: user+1d1
Total Flash Size = 2048 blocks (256 MB)
Press any key to continue . . .
Hello ver: 3
Chipset: MDM9x07
NAND controller base address: 079b0000
Nand flash: Hynix H9TA2GG1GJAMCR, NAND 256MiB 1.8V 8-bit
Sector size: 516 byte
Page size: 2048 byte (4 sectors)
Pages num in block: 64
OOB Size: 64 byte
ECC Type: BCH, 4 bit
ECC Size: 7 byte
Spare size: 4 byte
Bad block marker position: user+1d1
Total Flash Size = 2048 blocks (256 MB)
Press any key to continue . . .
reading raw images with spare
# Start Size A0 A1 A2 F# format —— Name——
============================================================
00 0 00000a ff 01 00 00 LNX 0:SBL
01 a 00000a ff 01 ff 00 LNX 0:MIBIB
02 14 000060 ff 01 ff 00 LNX 0:EFS2
03 74 000006 ff 01 00 00 LNX 0:TZ
04 7a 000003 ff 01 00 00 LNX 0:RPM
05 7d 000005 ff 01 00 00 LNX 0:aboot
06 82 00003f ff 01 00 00 LNX 0:boot
07 c1 000082 ff 01 00 00 LNX 0:SCRUB
08 143 000148 ff 01 00 00 LNX 0:modem
* R: Block 00015b [start+018] (7%)
! Page 33 sector 3: adjusted bit: 1
09 28b 00000a ff 01 00 00 LNX 0:misc
10 295 00003f ff 01 00 00 LNX 0:recovery
11 2d4 00000c ff 01 00 00 LNX 0:fota
12 2e0 00008f ff 01 00 00 LNX 0:recoveryfs
13 36f 000002 ff 01 00 00 LNX 0:sec
14 371 00048f ff 01 00 00 LNX 0:system
* R: Block 0007ff [start+48e] (100%)
—- response —
00000000: 7e 0c 14 3a 7e *~..:~ *
Press any key to continue . . .
Hola, necesito saber cómo ponerlo en EDL y si puedes facilitarme el firmware, yo solo puedo ponerlo en Facebook y no más, mi System.img está dañado. [email protected] ese es mi correo. Gracias.
Hi, I need to know how to install it on EDL, and if you can provide the firmware, I can only install it on Facebook. My System.img is corrupted. That’s my email, [email protected]. Thanks.
Hi members, can a Franklin R702 4G LTE Portable Wi-Fi Hotspot be unlocked?
Device Name Franklin R702
Device Description 4G LTE Portable Wi-Fi Hotspot
Manufacturer Franklin Technology Inc.
Modem Model R702
Hardware Version MP1
Firmware Version R702F47.SM.M280
I just got a T10/RT410
The T9 firmware can run on it, not the firm posted here but if you can nand dump and
make it reloadable it will run just fine on the t9.
I made a post about it here if anyone is initerested
https://wirelessjoint.com/viewtopic.php?p=28489&sid=955c3064aadd106b9da2e5511a6e160f#p28489
To all the people posting their IMEI#s and not reading the whole thread where several people have already posted their IMEI and been told “I WILL NOT be providing unlock codes” Several times, and instructions posted about a linux terminal command and even links to virtual terminals where one can EASILY do this, For you special people I will post a link to a tool someone created where you don’t even need to use a virtual terminal and copy/paste a simple command, Nope, this is the laziest of the lazy, It couldn’t get any simpler, With this tool, All you need to do is enter your IMEI and click “Generate code” and easy peasy lemon squeezy Bobs your uncle. Visit https://steftodor.github.io/franklin-unlock/
It literally couldn’t be any simpler. You’re welcome.
buenas noches alguien que pueda ayudarme , tengo el hotspot franklin a10 de att, pero tiene codigo de acceso al menu , no funciona con codigo admin y intento resetear con boton alado de la pila ,pero no hace nada. lei el manual y ese boton reset se puede configurar para no funcionar desde configuracion…alguien me pueda ayudar podra ser recompensad $$$ saludos excelente grupo
can confirm this all still works as of 09/2024. I did this
1) unlock device
2) root device and SSH
3) change imei to a phone compatible with visible wireless
4)add APN for VSWINTERNET Use only Ipv4 i because I couldnt change TTL to 65 on device. i had no luck with the commands listed here for TTL
I am getting 6 mpbs down and 5 mbps up
5)
I finally figured out TTL for the Franklin T9 over the weekend. It’s not that difficult.
Hello
How do you repair it imei
Soft SSH ADB
Thanks
James Bourne here
I should also mention i just started doing this so i have no idea if i will get blocked, or a cease and desist letter. I also use a strong vpn to further hide what i am doing. Who knows how good visibles detection systems are. I try to also use only one device at a time on the hotspot.
Great post! I appreciate the detailed steps on rooting and unlocking the T-Mobile T9. It’s clear and easy to follow. I can’t wait to try it out and see what new features I can access. Thanks for sharing your expertise!
Pouvez-vous me donner mon UNLOCK CODE?
Mon IMEI est : 355866230822855
c326b6d2
Thanks for the detailed guide! I’ve been wanting to root my T-Mobile T9 to customize it a bit more. Your step-by-step instructions made the process a lot clearer. Can’t wait to try it out!
Great guide! I appreciate the detailed steps for rooting and unlocking the T9. I’ve been struggling to find reliable information on this device, and your post made the process much clearer. Can’t wait to try it out!
calculadora de tmobile unlock online
https://steftodor.github.io/franklin-unlock/
Great post! I’ve been wanting to root my T9 for better control and features. Your instructions are clear and straightforward. Looking forward to trying it out and seeing what I can customize! Thanks for sharing!
Great post! I found the step-by-step instructions really helpful and clear. I’ve been wanting to root my T9 for better customization. Thanks for sharing your insights and tips!
Great post! I appreciate the detailed steps for rooting and unlocking the T-Mobile T9. I’ve been hesitant to try it myself, but your guide makes it seem much more manageable. Looking forward to giving it a shot!
Great post! I’ve been wanting to unlock my T9 for some time now, and your step-by-step guide makes it seem so manageable. Thanks for sharing your expertise!
Great guide! I followed your steps to unlock my T9 and it worked perfectly. Thanks for the detailed instructions and tips on rooting. Super helpful for someone new to this process!
Hello
Brand new from the box R717F21.FR.891
USB Cable is good
Is anyone know why not able to SSH it
Asking for block on 22 ports
Win 7 Pro 32 no firewall
Ubuntu no firewall
Also how to repair imei
Surprised no one else commented about this, but I cannot get the built in SMS / text messages to display text messages/sms on visible. I can only get them to display on Tmobile MVNOs and Tmobile. Anybody have a fix? visible is a real pain in the butt constantly requiring SMS verification for everything on their site.
export IMEI=355827103844556
echo -n “${IMEI}simlock” | sha1sum | cut -c1-8
export IMEI=355300475802810
echo -n “${IMEI}simlock” | sha1sum | cut -c1-8
Thank you for this detailed guide on rooting and unlocking the T-Mobile T9! I’ve been looking for a way to customize my device, and your step-by-step instructions make it seem much easier. Can’t wait to try it out!
Great post! I really appreciate the detailed instructions on rooting and unlocking the T-Mobile T9. It’s nice to see a step-by-step guide that’s easy to follow. Can’t wait to try this out on my device!
Wow you guys make it sound so plausible. Too bad there isn’t a place that sell T9s with this already done.
Great guide! I successfully unlocked my T9 using your steps. The troubleshooting tips were especially helpful. Thanks for sharing!
Thank you for the detailed guide on rooting and unlocking the T-Mobile T9! I’ve been wanting to customize my device and your step-by-step instructions made it much easier. Appreciate the tips you included for troubleshooting as well!
Thanks for the detailed guide on rooting and unlocking the T-Mobile T9! I really appreciate the step-by-step instructions and the troubleshooting tips. It made the process so much easier for me. Keep up the great work!
jwjnm3
And for more information, you lavatory hear this in-profundity
article. In males, Viagra ordinarily whole kit and boodle inside
close to 1 hour later it’s interpreted.
Here is my web page Buy Provigil online
I’m not certain where you are getting your info,
but good topic. I needs to spend some time studying more or figuring out more.
Thanks for fantastic info I was looking for this information for my mission.
Sildenafil is the active ingredient in Viagra.
Viagra is a brand name for a medication that contains sildenafil.
So, the main difference is that sildenafil is the generic name for the
drug, while Viagra is a specific brand of the drug.
The active ingredient in Viagra is sildenafil
citrate. “Viagra” is the trade name used by Pfizer.
Trending Questions Why is ranitidine not available? What stimulant is also referred to as crystal or crank and leaves the user feeling confused and shaky and paranoid when it wears off?
Can you take a hormone pill to give you a bigger butt?
https://digi162sa.z30.web.core.windows.net/research/digi162sa-(108).html
This sweet and stylish midi with a built-in cape would look simply as stylish paired with an evening shoe as
it might with a floor-length maxi.
Hello! I could have sworn I’ve visited this blog before but after looking at many of
the articles I realized it’s new to me. Regardless,
I’m certainly delighted I discovered it and I’ll be bookmarking it and checking back often!
my web blog; Улыбайтесь сегодня
Hello! I could have sworn I’ve visited this blog before but after looking at many of
the articles I realized it’s new to me. Regardless,
I’m certainly delighted I discovered it and I’ll be bookmarking it and checking back often!
my web blog; Улыбайтесь сегодня
Hello! I could have sworn I’ve visited this blog before but after looking at many of
the articles I realized it’s new to me. Regardless,
I’m certainly delighted I discovered it and I’ll be bookmarking it and checking back often!
my web blog; Улыбайтесь сегодня
I need to to thank you for this great read!! I certainly enjoyed every bit of it. I have you book-marked to check out new things you post…
https://classic-blog.udn.com/59912bf7/188331784
Wear yours with grass-friendly footwear like block heels or woven wedges.
Your article helped me a lot, is there any more related content? Thanks! https://www.binance.info/register?ref=JW3W4Y3A
https://jeffery7777369.jimdofree.com/2026/05/11/1/
Much like the mom of the groom, step-mothers of both the bride or groom ought to observe the lead of
the mom of the bride.
https://spero634499.wordpress.com/2026/04/22/1/
Guests love to watch the joy and satisfaction seem in your face as you watch your daughter
marry their greatest friend.
Социальный проект Volonteru — платформа для волонтеров и поддержки общества. Здесь публикуются обзоры социальных проектов, а также статьи о безопасности в сети.
Главный портал сообщества: https://volonteru.ru
Сегодня многие пользователи активно интересуются запросами «кракен зеркало», а также «гайд кракен». Эксперты Volonteru отмечают, что подобные темы важно рассматривать в контексте защиты данных пользователей.
[url=https://volonteru.ru]Кракен ссылка[/url]
На Volonteru.ru регулярно выходят обзоры интернет-угроз, а также истории волонтеров. Люди, которые ищут «кракен актуальная ссылка», часто встречают на фишинговые страницы.
[url=https://volonteru.ru]kraken onion[/url]
Авторы Volonteru.ru регулярно рассказывают о защите данных пользователей. В материалах проекта часто анализируются темы, связанные с опасными интернет-ресурсами, которые могут встречаться пользователям при поиске запросов «кракен ссылка».
Интернет-технологии помогают людям, но одновременно требуют внимательности.
[url=https://volonteru.ru]кракен ссылка[/url]
На платформе Volonteru.ru также публикуются истории волонтеров. Проект объединяет людей, готовых помогать обществу и одновременно объясняет принципы безопасного поведения в сети.
Посетители сети ищут запросы «кракен зеркало», однако специалисты советуют проверять информацию.
[url=https://volonteru.ru]кракен маркет[/url]
В связи с этим редакция проекта рекомендуют соблюдать правила цифровой безопасности. Авторы Volonteru считает важным рассказывать о безопасном интернете и помогать развитию социальных инициатив.
Сообщество Volonteru объединяет людей, которым небезразлична помощь обществу, а также публикует контент о цифровой безопасности.
Great post! I really appreciate the detailed steps you provided for rooting and unlocking the T-Mobile T9. I’ve been wanting to customize my device, and your guide makes it seem much more manageable. Thanks for sharing your knowledge!
bxb91h
089fr4
Clear cost estimates and transparent terms, we encountered zero hidden fees during the entire production process.
https://git.woopwoopserver.com/liliafenwick1
https://classic-blog.udn.com/f19eef72/188665306
The contrast between these two gowns is in how they are chosen.
https://mypaper.pchome.com.tw/8433919497042041/post/1384641425
Discover our hand-picked assortment of mom of the bride clothes and you’re assured to be best-dressed – apart from
the bride, of course!
https://alicehlampron453.amebaownd.com/posts/58719454
Mother of the groom attire are down to non-public selection on the day.
Die Auswahl der Tischspiele im Live Casino lässt keine Wünsche offen und läuft super flüssig.
https://card.addiscustom.com/gerardocanfiel
https://ameblo.jp/lillie3484468/entry-12966128177.html
Another floral possibility for you , however this time
in a match and flare style.
https://traci9564376.wordpress.com/2026/04/17/3/
Find jacket clothes in champagne, orchid, pink, lavender, or
navy for women of all ages.
Sehr übersichtlicher Wettanbieter, bei dem die Abgabe der Sportwetten Sekunden dauert.
https://gogolive.biz/@lenardclick095?page=about
It is generally not recommended to take ephedrine and Viagra together without consulting a
healthcare professional.
https://agathasterry8685.wordpress.com/2026/04/08/1/
This mother’s gown featured a striped off-the-shoulder neckline that was an attractive complement to the bride’s personal wedding
ceremony gown.
Die Freispiele ohne Einzahlung waren perfekt, um die
Spielautomaten risikofrei zu testen.
https://link.peds.to/noralibby0470
c0ncl4
PalmSlots ist ein zuverlässiger Wettanbieter mit fairen Bonus Bedingungen für alle Sportwetten Fans.
https://keymoments.com/author/calvintritt87/
rent a car airport malta
Dieser Wettanbieter überzeugt mich bei meinen Sportwetten Tipps jedes Wochenende aufs Neue.
https://vydiio.com/@letascollen740?page=about
Thanks for sharing. I read many of your blog posts, cool, your blog is very good. https://www.binance.bh/register?ref=JW3W4Y3A
Thanks for finally talking about > Rooting and Unlocking the T-Mobile T9 (Franklin Wireless R717) – Server Network Tech
< Loved it!
Thanks for finally talking about > Rooting and Unlocking the T-Mobile T9 (Franklin Wireless R717) – Server Network Tech
< Loved it!
Thanks for finally talking about > Rooting and Unlocking the T-Mobile T9 (Franklin Wireless R717) – Server Network Tech
< Loved it!
Thanks for finally talking about > Rooting and Unlocking the T-Mobile T9 (Franklin Wireless R717) – Server Network Tech
< Loved it!
Cabinet IQ
8305 Stɑte Hwy 71 #110, Austin,
TX 78735, United Statеѕ
254-275-5536
Makers (https://bailirlllu.raindrop.page/bookmarks-71368938)
Nice replies in return of this issue with genuine arguments
and describing all regarding that.
ie34gi
whoah this blog is excellent i love studying your posts. Keep up the great work!
You already know, a lot of persons are hunting around for this information, you could aid them greatly.
Wow, attractive website. Thnx … Great looking site.
Presume you did a great deal of your own coding.
Global patent nano caps
My blog post – organic pest control products for home
Wow, attractive website. Thnx … Great looking site.
Presume you did a great deal of your own coding.
Global patent nano caps
My blog post – organic pest control products for home
Wow, attractive website. Thnx … Great looking site.
Presume you did a great deal of your own coding.
Global patent nano caps
My blog post – organic pest control products for home
Wow, attractive website. Thnx … Great looking site.
Presume you did a great deal of your own coding.
Global patent nano caps
My blog post – organic pest control products for home
Great article! We will be linking to this great
post on our site. Keep up the great writing.
โพสต์นี้ อ่านแล้วเพลินและได้สาระ ครับ
ดิฉัน ไปเจอรายละเอียดของ เนื้อหาในแนวเดียวกัน
ดูต่อได้ที่ Kieran
ลองแวะไปดู
มีตัวอย่างประกอบชัดเจน
ขอบคุณที่แชร์ บทความคุณภาพ นี้
จะรอติดตามเนื้อหาใหม่ๆ ต่อไป
After looking over a handful of the blog posts on your website,
I truly appreciate your way of writing a blog. I saved as a
favorite it to my bookmark site list and will be checking back in the near future.
Please visit my website as well and tell me what you think.
I really like your blog.. very nice colors &
theme. Did you design this website yourself or did
you hire someone to do it for you? Plz respond as I’m looking to create my own blog and
would like to find out where u got this from.
thanks
I really like your blog.. very nice colors &
theme. Did you design this website yourself or did
you hire someone to do it for you? Plz respond as I’m looking to create my own blog and
would like to find out where u got this from.
thanks
I really like your blog.. very nice colors &
theme. Did you design this website yourself or did
you hire someone to do it for you? Plz respond as I’m looking to create my own blog and
would like to find out where u got this from.
thanks
I really like your blog.. very nice colors &
theme. Did you design this website yourself or did
you hire someone to do it for you? Plz respond as I’m looking to create my own blog and
would like to find out where u got this from.
thanks
Heya just wanted to give you a brief heads up and let you know
a few of the images aren’t loading correctly. I’m not sure
why but I think its a linking issue. I’ve tried it in two different web browsers and both show the same outcome.
Asimismo es necesario prestar atención a los opciones de
depósito disponibles. Un casino serio en Argentina ofrece Mercado Pago, transferencia bancaria, CVU/CBU,
y a veces criptomonedas. Evitá sitios que solo aceptan métodos raros.
Hey! I know this is kinda off topic however I’d figured
I’d ask. Would you be interested in trading links or maybe guest authoring a blog post or vice-versa?
My website covers a lot of the same topics as yours and I think we could greatly benefit from each other.
If you might be interested feel free to shoot me an email.
I look forward to hearing from you! Fantastic blog by the way!
If some one desires to be updated with hottest technologies afterward he must be visit this web site and be up
to date every day.
I’m not that much of a online reader to be honest but your blogs really
nice, keep it up! I’ll go ahead and bookmark your site
to come back down the road. All the best
I am not sure where you’re getting your info, but great topic.
I needs to spend some time learning more or understanding more.
Thanks for excellent information I was looking for this info for
my mission.
This is a very informative post about online casinos and betting platforms.
I especially liked how it explains the importance of choosing a secure site before signing up.
Many players often ask where they can find reliable gaming platforms with fair odds and smooth payouts.
From what I’ve seen, checking platforms like vn22vip helps users compare features, bonuses,
and overall experience.
Thanks for sharing these insights — they’re helpful for both beginners and experienced bettors.
Hatur nuhun atas postingan yang sangat luar biasa ini.
Sangat membantu bagi saya yang sedang mencari referensi dunia pendidikan. Sebagai tambahan, bagi adik-adik yang
berada di wilayah Bogor Barat, SMA PGRI Leuwiliang bisa menjadi pilihan sekolah terbaik dengan fasilitas yang lengkap.
Terus berkarya! SMA PGRI Leuwiliang
Hatur nuhun atas postingan yang sangat luar biasa ini.
Sangat membantu bagi saya yang sedang mencari referensi dunia pendidikan. Sebagai tambahan, bagi adik-adik yang
berada di wilayah Bogor Barat, SMA PGRI Leuwiliang bisa menjadi pilihan sekolah terbaik dengan fasilitas yang lengkap.
Terus berkarya! SMA PGRI Leuwiliang
Hatur nuhun atas postingan yang sangat luar biasa ini.
Sangat membantu bagi saya yang sedang mencari referensi dunia pendidikan. Sebagai tambahan, bagi adik-adik yang
berada di wilayah Bogor Barat, SMA PGRI Leuwiliang bisa menjadi pilihan sekolah terbaik dengan fasilitas yang lengkap.
Terus berkarya! SMA PGRI Leuwiliang
Hatur nuhun atas postingan yang sangat luar biasa ini.
Sangat membantu bagi saya yang sedang mencari referensi dunia pendidikan. Sebagai tambahan, bagi adik-adik yang
berada di wilayah Bogor Barat, SMA PGRI Leuwiliang bisa menjadi pilihan sekolah terbaik dengan fasilitas yang lengkap.
Terus berkarya! SMA PGRI Leuwiliang
We are a group of volunteers and opening a new scheme in our community.
Your website provided us with valuable info to work on. You’ve done an impressive job and our entire community will be grateful to you.
Hi there! I just wanted to ask if you ever have any problems
with hackers? My last blog (wordpress) was hacked and I ended up losing months of hard work
due to no backup. Do you have any solutions to stop hackers?
迅速な対応に感謝しております。ウエスト・ヒップをはじめ詳細な数値データが開示されている。ボディの細部ディテールのクオリティが高く完成度に期待が持てる。超リアルボディメイクのオプションが選択可能な点は非常に嬉しい。今後も新しい情報更新と丁寧な対応を期待しています
Keep this going please, great job!
Your point of view caught my eye and was very interesting. Thanks. I have a question for you.
Great post. I was checking constantly this blog and I’m impressed!
Very helpful info particularly the last part 🙂 I care for such info much.
I was seeking this particular info for a very long time.
Thank you and good luck.
Skilled karaoke performers maintain steady rhythm throughout songs.
The crowd sang together during the final song..
how to connect a karaoke microphone to your tv
Thanks for your marvelous posting! I quite enjoyed reading it, you’re a great author.I will make certain to bookmark your blog and will eventually come back
sometime soon. I want to encourage one to continue your great writing, have a nice evening!
Hello my family member! I wish to say that this post is awesome, great written and come
with almost all vital infos. I’d like to look extra posts like this .
Hey! Do you use Twitter? I’d like to follow you if
that would be ok. I’m definitely enjoying your blog
and look forward to new updates.
It’s an remarkable piece of writing for all the web people; they will get advantage from it
I am sure.
Hi! This post could not be written any better! Reading through
this post reminds me of my good old room
mate! He always kept chatting about this. I will forward
this write-up to him. Fairly certain he will have a good read.
Thank you for sharing!
Hey! Quick question that’s totally off topic. Do
you know how to make your site mobile friendly? My site looks weird
when viewing from my iphone4. I’m trying to find a theme or plugin that might be able to resolve this
problem. If you have any suggestions, please share. Thank you!
These are really enormous ideas in regarding blogging. You have touched some nice things here.
Any way keep up wrinting.
I’m extremely impressed with your writing skills as well as with the layout on your blog.
Is this a paid theme or did you customize it yourself?
Either way keep up the nice quality writing, it’s rare to see a nice blog like this
one nowadays.
Почему пользователи выбирают площадку KRAKEN?
Маркетплейс KRAKEN заслужил доверие многочисленной аудитории благодаря сочетанию ключевых факторов.
Во-первых, это широкий и разнообразный ассортимент,
представленный сотнями продавцов.
Во-вторых, интуитивно понятный интерфейс KRAKEN, который упрощает навигацию, поиск
товаров и управление заказами даже
для новых пользователей. В-третьих, продуманная
система безопасных транзакций, включающая
механизмы разрешения споров (диспутов) и возможность
использования условного депонирования, что минимизирует риски для обеих
сторон сделки. На KRAKEN функциональность сочетается с внимательным отношением к безопасности клиентов, что делает процесс покупок
более предсказуемым, защищенным и, как следствие, популярным среди пользователей,
ценящих анонимность и надежность.
چند وقت پیش با یکی از دوستام درباره این فضا حرف میزدیم و همین باعث شد من هم کمی دقیقتر دنبال اطلاعات بگردم.
درود به همه، خواستم نظر شخصی خودم رو درباره این موضوع بگم.
دیروز وقتی دنبال مقایسه چند سایت بودم به
این سایت رسیدم. اولش حس کردم
برای آشنایی اولیه میتونه مفید باشه.
از نظر من هر کسی باید قبل از ورود، شرایط و
جزئیات رو کامل بخونه. یکی از رفیقام
به اسم سینا همیشه میگفت
قبل از هر کاری باید شرایط رو کامل خوند.
به همین خاطر چند بخش رو با حوصلهتر خوندم.
چیزی که برای من جالب بود که چند بخشش برای مقایسه
مفید بود. بااین حال نباید فقط با یک کامنت نتیجهگیری
کرد. برای افرادی که دنبال اطلاعات درباره شرط بندی هستن، بد نیست
این صفحه رو هم ببینن. وقتی این
حوزه رونگاه میکنی برندهایی مثل سایت enfeϳaronline وѕib-bet در بین بعضی کاربران شناختهتر شدن.
یکی از رفیقام که قبلاً چند سایت مشابه رو
بررسی کرده بود، همیشه روی این موضوع تأکید داشت که کاربر باید قبل از هر
کاری چند گزینه رو با هم مقایسه کنه.
به طور کلی به نظرم میشه به عنوان یک گزینه قابل بررسی بهش نگاه
کرد. اگر کسی قصد بررسی داره بهتره با دقت همه بخشها رو ببینه.
جمعبندی من اینه که تجربه بدی
نبود و حداقل برای آشنایی اولیه ارزش وقت گذاشتن داشت،
مخصوصاً اگر کسی بخواد قبل از تصمیمگیری
دید بهتری پیدا کنه.
Havе a look at my homepaɡe; استراتژیهای کلیدی برای برنده شدن در تاس پوکر
Thank you a bunch for sharing this with all people you really know
what you’re speaking about! Bookmarked. Please also visit my site =).
We may have a hyperlink change arrangement among us
Hello, this weekend is pleasant designed for me, because this time i am reading this great educational post here at my home.
I know this website gives quality depending content and extra material, is there any other site which provides these kinds of data in quality?
You are so cool! I don’t think I’ve read through something like this
before. So great to discover somebody with some original thoughts on this
subject. Really.. thank you for starting this up. This website is something that’s needed on the
internet, someone with a little originality!
I do not even understand how I stopped up here, but I assumed
this put up used to be great. I do not understand who you
are but definitely you’re going to a famous blogger if you
happen to aren’t already. Cheers!
tz6ee4
Viagra is the name that Slidenafil is sold under.
Hi! I could have sworn I’ve been to your blog before but after
browsing through some of the articles I realized it’s new to me.
Anyways, I’m certainly happy I stumbled upon it and
I’ll be book-marking it and checking back frequently!
Cabinet IQ
8305 Ѕtate Hwyy 71 #110, Austin,
TX78735, United Ѕtates
254-275-5536
upscalecabinets
fantastic points altogether, you simply won a logo
new reader. What could you suggest about your publish that you just made a
few days ago? Any certain?
8chcee
Very nice article, totally what I wanted to find.
I’m not that much of a internet reader to be honest but your blogs really nice, keep it up!
I’ll go ahead and bookmark your site to come back later on. Many
thanks
Viagra leaves the body so yes.
Viagra makes penises erect, but Viagra has side effects.
whoah this weblog is excellent i really like studying your posts.
Keep up the great work! You know, lots of individuals are hunting around for this
information, you could aid them greatly.
I got this site from my pal who told me about this web site and at the moment this
time I am browsing this web page and reading very
informative articles at this place.
Спасибо за качественный контент по теме казино.
1win
Спасибо за качественный контент по теме казино.
1win
Спасибо за качественный контент по теме казино.
1win
Спасибо за качественный контент по теме казино.
1win
For latest information you have to go to see world-wide-web and on world-wide-web I found this website as a finest website for hottest updates.
Hurrah, that’s what I was looking for, what a data!
present here at this website, thanks admin of this website.
问：Cryptify Hub能做什么？答：帮你在30秒内找到某个加密工具的官网。问：Cryptify Hub不能做什么？答：帮你赚钱、教你交易、保证链接安全、预测币价、鉴定项目真伪……清单很长，总之别把它当万能钥匙。
Aw, this was a really nice post. Taking the time and actual effort
to generate a great article… but what can I say… I put things off
a lot and never seem to get nearly anything done.
Took me time to read all the comments, but I truly enjoyed the article.
It proved to become Very useful to me and Im
certain to all the commenters here It is always great when you
can not only be informed, but also entertained Im positive you had fun writing this post.
Thanks very nice blog!
Hey there! I could have sworn I’ve been to this website before but
after browsing through some of the post I realized it’s new to me.
Anyways, I’m definitely glad I found it and I’ll be bookmarking and checking back frequently!
I like the helpful information you provide
in your articles. I will bookmark your blog
and test again right here frequently. I am moderately sure
I’ll learn lots of new stuff right here! Best of luck for the following!
You could definitely see your skills in the work
you write. The world hopes for even more passionate writers like you who aren’t afraid to say
how they believe. All the time follow your heart.
What’s Happening i am new to this, I stumbled upon this I’ve discovered It positively useful and
it has helped me out loads. I’m hoping to contribute
& aid other customers like its aided me. Good job.
What’s Happening i am new to this, I stumbled upon this I’ve discovered It positively useful and
it has helped me out loads. I’m hoping to contribute
& aid other customers like its aided me. Good job.
What’s Happening i am new to this, I stumbled upon this I’ve discovered It positively useful and
it has helped me out loads. I’m hoping to contribute
& aid other customers like its aided me. Good job.
What’s Happening i am new to this, I stumbled upon this I’ve discovered It positively useful and
it has helped me out loads. I’m hoping to contribute
& aid other customers like its aided me. Good job.
I’m amazed, I must say. Seldom do I encounter a blog that’s equally educative and engaging,
and without a doubt, you’ve hit the nail on the head.
The problem is something which too few folks are speaking intelligently about.
I am very happy I stumbled across this during my hunt for something concerning this.
Excellent blog right here! Additionally your site rather a lot up fast!
What web host are you the use of? Can I get your associate link to your host?
I want my site loaded up as fast as yours lol
I am really impressed along with your writing skills as
well as with the structure on your weblog. Is this a paid theme or did you modify it
yourself? Anyway keep up the nice high quality writing, it’s rare to
peer a nice weblog like this one today..
Hello just wanted to give you a quick heads up. The text in your article seem to be running off the screen in Internet explorer.
I’m not sure if this is a format issue or something to do with browser compatibility but I thought I’d
post to let you know. The design look great though!
Hope you get the issue fixed soon. Kudos
3h6dkg
Hello just wanted to give you a quick heads up.
The words in your post seem to be running off the screen in Chrome.
I’m not sure if this is a formatting issue or something to do with internet
browser compatibility but I thought I’d post to let you know.
The style and design look great though! Hope you get
the issue solved soon. Kudos
A fascinating discussion is definitely worth comment.
There’s no doubt that that you should write more on this topic, it may not be a taboo subject but generally people
do not speak about these subjects. To the next!
Many thanks!!
Digital advertising method was birthed. For more keywords to searcch for targets
see http://nanacast.com/100kshoutout
Bosslike скачать приложение на андроид https://www.apkfiles.com/apk-621108/bosslike
King88 | Link vào trang chủ King88 – Nhà cái casino uy tín 2026
p7gsl8
It is generally not recommended to take ephedrine and Viagra together without consulting a healthcare professional.
บทความนี้ อ่านแล้วเข้าใจง่าย ครับ
ผม เพิ่งเจอข้อมูลเกี่ยวกับ หัวข้อที่คล้ายกัน
ดูต่อได้ที่ betflik365
เผื่อใครสนใจ
เพราะอธิบายไว้ละเอียด
ขอบคุณที่แชร์ บทความคุณภาพ นี้
และอยากเห็นบทความดีๆ แบบนี้อีก
car rental becici
Hi there, I log on to your blog daily. Your writing style is awesome, keep up the good work!
Saved as a favorite, I really like your site!
Hey I know this is off topic but I was wondering if you knew of any widgets
I could add to my blog that automatically tweet my newest twitter updates.
I’ve been looking for a plug-in like this for quite some time and was hoping maybe you would have some experience
with something like this. Please let me know if you run into anything.
I truly enjoy reading your blog and I look forward to your
new updates.
Ahaa, its nice discussion on the topic of this post
here at this website, I have read all that, so at this time
me also commenting here.
Concert Attire Stamford
360 Fairfield Ave,
Stamford, CT 06902, United Տtates
+12033298603
Gauntlets
Yes! Finally something about google.
วีซ่า, ต่อวีซ่า, ขอวีซ่า, ไทย, ใบอนุญาตทำงาน, วีซ่าธุรกิจ, วีซ่าแต่งงาน, วีซ่าเกษียณอายุ,
วีซ่าติดตามภรรยาไทย, วีซ่าธุรกิจ, วีซ่าทำงาน, วีซ่าเกษียณอายุ, วีซ่าติดตามภรรยาไทย,
ต่อวีซ่าไทย, Visa, workpermit, เปลี่ยนวีซ่าทำงาน, วีซ่าไทยสำหรับชาวต่างชาติ,
Thailand visa, Thai Visa
rz68ci
Xoilac là điểm đến lý tưởng cho những ai đam mê cá cược
bóng đá thể thao với trải nghiệm tối ưu và
dịch vụ chuyên nghiệp. Nhà cái này không chỉ nổi bật với
tỷ lệ cược hấp dẫn mà còn mang đến giao diện trực tiếp link bóng đá mượt
mà, giúp người chơi dễ dàng theo dõi và đặt cược
hiệu quả.
I enjoy what you guys tend to be up too. Such clever work and reporting!
Keep up the very good works guys I’ve incorporated
you guys to my personal blogroll.
‘It can be triggered by illness, life experiences—during pregnancy, after having a
baby—stress, hormonal changes like menopause, medication side-effects, cancer treatment, chronic illness or depression.
Thanks for sharing your thoughts. I really appreciate your
efforts and I will be waiting for your further
post thank you once again.
Trust wallet mobile app download apk file http://www.apkfiles.com/apk-621004/trust-wallet-mobile-app-download
نتیجهگیری اینکه
برای کاربرایی که در جستجو هستن
بازیهای شانس
میخوان شروع کنن
اینجا
به خوبی میتونه
انتخاب قابل قبولی باشه
نکته مثبت اینه که
پلتفرمهایی مثل
enfejaгonline جدید
و
sibbet
تونستن کاربرا جذب کنن
در آخر کار
بد نبود
و
بیتردید
حتما برمیگردم
Ⅿy blog post – پرداختها و تسویهحسابها (Aja)
من خودم خیلی حرفهای نیستم و بیشتر
از زاویه یک کاربر کنجکاو این سایت رو بررسی کردم.
سلام وقتتون بخیر، من معمولاً اهل کامنت گذاشتن نیستم.
هفته قبل وقتی داشتم درباره بازیهای آنلاین
پولی سرچ میکردم به این سایت رسیدم.
در نگاه اول حس کردم ساختارش بد
نیست. چیزی که برای من مهم بود اینه که بهتره آدم چند منبع مختلف
رو هم ببینه. یکی از رفیقام به اسم آرش بیشتر از همه روی امنیت و قابل فهم بودن توضیحات حساس
بود. همین موضوع باعث شد فقط سطحی رد
نشم. چیزی که باعث شد چند دقیقه بیشتر
بمونم این بود که برای کسی که تازه با اینفضا آشنا
میشه قابل فهم بود. طبیعتاً همیشه بهتره چند گزینه کنار هم مقایسه بشن.
برای کسایی که به موضوع کازینو آنلاین علاقه دارن، میتونه برای آشنایی اولیه مفید باشه.
گاهی هم اسمهایی مثل enfejaronline شناخته شده یا sibbet شناخته شده در بین بعضی کاربران شناختهتر شدن.
یکی از بچهها که اسمش رضا بود، میگفت مشکل
خیلی از سایتها اینه که فقط شعار میدن ولی توضیح
درست نمیدن؛ برای همین من هم بیشتر به متنها دقت کردم.
اگر بخوام خیلی ساده بگم تجربه بررسی این سایت برای
من مثبت بود. از نظر من کسی که وارد این
فضا میشه باید صرفاً بر اساس
تبلیغ تصمیم نگیره. در پایان، برداشت من اینه که این سایت
برای بررسی اولیه میتونه مفید باشه،
ولی تصمیم نهایی همیشه باید
با تحقیق شخصی و مقایسه چند گزینه گرفته بشه.
Feel free t᧐ surf to my website: سرمایه گذاری
Cabinet IQ
8305 Statｅ Hwy 71 #110, Austin,
TX 78735, United Ꮪtates
254-275-5536
Designs
بخوام خودمونی بگم، اولش فکر نمیکردم چیز خاصی ببینم ولی چند بخشش
برام قابل توجه بود. سلام دوستان، چون چند وقتیه درباره این فضا کنجکاو شدم گفتم اینجا هم نظرم رو ثبت
کنم. مدتی قبل وقتی داشتم درباره کازینو آنلاین سرچمیکردم اینجا برام جالب شد.بعد از چند دقیقه بررسی متوجه شدم متنها خیلی پیچیده نیستن.
به نظرم کاربر باید خودش با دقت بررسی کنه.
یکی از دوستای نزدیکم همیشه
میگفت قبل از هر کاری باید شرایط رو کامل خوند.
به همین خاطر چند بخش رو با حوصلهتر خوندم.
چیزی که برای من جالب بود که متنها خیلی خشک و تبلیغاتی نبودن.
در عین حال هر کسی باید خودش تصمیم
بگیره. برای اون دسته از کاربرها که میخوان درباره بازی انفجار بیشتر بدونن، میتونه برای آشنایی
اولیه مفید باشه. در کنار این
موضوع سایتهایی مثل enfejarօnline آنلاین و پلتفرم sibbet نشون میدن این حوزهچقدر گسترده شده.
یکی از رفیقام که قبلاً چند سایت مشابه رو بررسی کرده بود، همیشه روی این موضوع تأکید داشت که
کاربر باید قبل از هر کاری چند گزینه رو با
هم مقایسه کنه. اگر بخوام خیلی ساده بگم نسبتاً قابل قبول بود.
اگر کسی قصد بررسی داره بهتره هم تجربه بقیه رو بخونه
و هم خودش بررسی کنه. من احتمالاً بعداً دوباره برمیگردم
و بخشهای بیشتری رو نگاه میکنم، چون بعضی قسمتهاش برای
مقایسه با سایتهای دیگه قابل
توجه بود.
Visit my website … قوانین و روند بازی پوکر تگزاس هولدم
Hi, i think that i saw you visited my web site thus i came to “return the favor”.I’m attempting to find things to enhance my site!I suppose its ok to use a few of your ideas!!
Also visit my web site รับ ขายฝาก บ้าน คือ อะไร
That is really interesting, You are a very skilled blogger.
I have joined your rss feed and look forward to in search of extra of your great post.
Additionally, I’ve shared your website in my social networks
My web page iptv portugal
ข้อมูลชุดนี้ น่าสนใจดี ครับ
ดิฉัน ไปเจอรายละเอียดของ เนื้อหาในแนวเดียวกัน
ดูต่อได้ที่ Thorsten
ลองแวะไปดู
มีการยกตัวอย่างที่เข้าใจง่าย
ขอบคุณที่แชร์ ข้อมูลที่มีประโยชน์ นี้
และอยากเห็นบทความดีๆ แบบนี้อีก
I am truly glad to read this website posts which consists of plenty of helpful information, thanks for providing such information.
You should be a part of a contest for one of the finest
sites on the internet. I will recommend this site!
راستش من این کامنت رو بیشتر از زاویه تجربه شخصی مینویسم و نمیخوام چیزی رو قطعی معرفی کنم.
سلام به کاربرای این صفحه، راستش کمتر
پیش میاد جایی نظر بنویسم.
هفته قبل وقتی دنبال مقایسه چند
سایت بودم این سایت رو بررسی کردم.
اولش حس کردم ساختارش بد نیست. راستش برای من مهمه که در موضوعات
مالی و بازیهای پولی باید محتاط بود.
یکی از دوستای نزدیکم چند بار درباره سایتهای شرطی صحبت
کرده بود. به همین خاطر چند بخش رو با حوصلهتر خوندم.
نکتهای که توجهم رو جلب کرد که چند بخشش برای مقایسه مفید بود.
ولی خب این به معنی تأیید کامل نیست.
برای افرادی که قصد دارن قبل از شروع اطلاعات بیشتری داشته باشن میخوان بدونناین فضا چطور کار میکنه، بهتره در کنار چند
گزینه دیگه بررسی بشه. به نظرم
جالبه که پلتفرمهایی مثل پلتفرم nfeјaronline در کنار پلتفرم sibbet نمونههایی هستن که
باعث میشن آدم بیشتر دنبال بررسی و مقایسه بره.
یکی از بچهها که اسمش سامان بود،
میگفت مشکل خیلی از سایتها اینه
که فقط شعار میدن ولی توضیح درست نمیدن؛ برای همین من هم بیشتر
به متنها دقت کردم. در کل حس
بدی ازش نگرفتم. اگر کسی قصد بررسی داره بهتره هم تجربه بقیه رو بخونه و هم
خودش بررسی کنه. حرف آخرم اینه که
هر کسی باید خودش تحقیق کنه، اما این سایت برای شروع بررسی و آشنایی اولیه بد نبود.
My homepаge – بونوسها و جوایز ویژه
TR88 – Link Đăng Ký Nhà Cái Chính Thức Nhận Thưởng Lớn
Thanks for finally talking about > Rooting and Unlocking the T-Mobile T9 (Franklin Wireless R717) – Server Network Tech
< Loved it!
Thanks for finally talking about > Rooting and Unlocking the T-Mobile T9 (Franklin Wireless R717) – Server Network Tech
< Loved it!
NK88 – Nhà Cái Uy Tín Với Kho Gameplay Đỉnh
Cao Năm 2026
이 정보는 가치 있습니다. 더 알아보려면 어디서 할 수 있을까요?
Keep on working, great job!
I’m gone to say to my little brother, that he should also visit
this web site on regular basis to take updated from latest reports.
سلام و عرض ادب، بنده مدتی قبل وسط وبگردی در فضای وب با
این وبسایت رسیدم و بدون اغراق برام جالب بود.
اطلاعاتش جذاب بود و خیلی کم پیش میاد همچین وبسایتی
پیدا کنم. احساس میکنم برای کاربرای زیادی کاربردی باشه.
برای کسایی که دنبال منبع معتبر هستن
بد نیست سر بزنن. در کل تجربه خوبی
بود و احتمالا بازدیدش میکنم
در کل داستان
برای دوستداران
کازینو اینترنتی
علاقه دارن
این سایت
میتونه گزینهجذابی باشه
مناسب کاربران باشه
یه نکته مهم اینه که
سایتهایی مثل
enfеjaronline قوی
و
sibbet حرفهای
در حال رشد هستن
در کل داستان
مناسب بود
و
بیتردید
دوباره نگاهش میکنم
.
Here is my web-sitｅ تحلیل اقتصادی (https://hidrum.lt/)
UU88 ⭐️ Trang Chủ UU88.Com TOP 1 Việt Nam
| ĐK UU 88 +88K
f3x22x
Hey there, You’ve done an excellent job. I will
definitely digg it and personally suggest to my friends.
I’m sure they will be benefited from this website.
My partner and I stumbled over here coming from a different web page and thought I
might as well check things out. I like what I see so
now i’m following you. Look forward to finding out about your web page again.
Честно немало заслуживающих внимания фактов
Pretty great post. I just stumbled upon your blog and
wanted to mention that I have truly loved surfing around your weblog
posts. After all I will be subscribing in your rss feed and
I hope you write again very soon!
Socolive là điểm đến lý tưởng dành cho những người
yêu thích cá cược bóng đá và thể thao. Với nền tảng
hiện đại và uy tín hàng đầu, Socolive mang đến trải
nghiệm cá cược trực tiếp cùng link bóng đá chất
lượng, giúp người chơi dễ dàng theo dõi và đặt cược chính xác hơn.
Cabinet IQ
8305 Statee Hwy 71 #110, Austin,
TX 78735, United Ѕtates
254-275-5536
Space
Why viewers still make use of to read news papers when in this
technological globe everything is existing on web?
It’s really a cool and useful piece of information. I’m happy that you simply shared this helpful info with us.
Please keep us informed like this. Thank you for sharing.
Hurrah! In the end I got a webpage from where I be capable of truly get useful information concerning my
study and knowledge.
Your style is very unique compared to other folks I have read stuff
from. Thanks for posting when you’ve got the opportunity, Guess I will just book mark this site.
https://digi153sa.netlify.app/research/digi153sa-(160)
Today’s mom of the bride collections include figure-flattering frocks which
are designed to accentuate your mum’s finest bits.
Это действительно крутые идеи по поводу модов.
Вы описали важные нюансы здесь.
Короче, продолжайте в том же духе, и заходите
на взломанные игры на андроид
These are really great ideas in about blogging.
You have touched some good things here. Any way keep up wrinting.
Greetings! I know this is kinda off topic but I was wondering which blog platform are you using for this site?
I’m getting tired of WordPress because I’ve had problems with hackers and I’m looking at options for
another platform. I would be awesome if you could point me in the direction of a good platform.
I visited various blogs except the audio quality for audio songs present at this
web page is truly excellent.
در کل داستان
برای دوستداران
گیمهای پولی
میخوان تست کنن
این سرویس آنلاین
به نظرم میتونه
گزینه خوبی باشه
از این جهت هم
پروژههایی مثل
وبسایت enfejaronlіne
و
sib-bet
باعث رشد این فضا شدن
در پایان کار
کاربردی بود
و
در آینده
دوباره نگاهش میکنم
My wweb page :: روبات های پوکر چگونه عمل میکنند؟ (https://appshartbandi.net/poker-bots-explained/)
Thanks very interesting blog!
Artikel yang sangat menarik dan informatif. Banyak pengguna di
Indonesia mencari informasi terpercaya tentang viagra indonesia dan kesehatan pria.
Konten seperti ini sangat membantu pembaca memahami penggunaan yang aman dan efektif.
Terima kasih atas artikel yang bermanfaat ini.
Topik viagra indonesia memang banyak dicari saat ini, terutama bagi mereka yang ingin mendapatkan informasi kesehatan pria secara
aman dan tepat.
Konten yang bagus dan mudah dipahami. Informasi mengenai viagra indonesia sangat
relevan dan membantu banyak orang mendapatkan edukasi yang
benar tentang kesehatan pria.
Wow, awesome blog layout! How lengthy have you ever been running a blog for?
you make running a blog glance easy. The full glance
of your site is great, as smartly as the content!
به نظرم در موضوعاتی مثل شرط بندی و بازیهای
پولی، اولین اصل احتیاطه و بعد بررسی دقیق.
وقتبخیر، خواستم نظر شخصی خودم رو درباره این موضوع بگم.
دیروز وقتی داشتم درباره کازینو آنلاین
سرچ میکردم به این سایت رسیدم. بعد از چند
دقیقه بررسی متوجه شدم متنها خیلی پیچیده نیستن.
از نظر من کاربر باید خودش با
دقت بررسی کنه. یکی از دوستام به
اسم میلاد میخواست بدونه کدوم سایتها اطلاعات شفافتری دارن.
برای همین به جز ظاهر سایت، متنها و توضیحاتش رو
هم نگاه کردم. برداشت من این بود که متنها
خیلی خشک و تبلیغاتی نبودن.
در عین حال هر کسی باید خودش
تصمیم بگیره. برای آدمهایی که تازه با این فضا آشنا شدن میخوان درباره بازی انفجار بیشتر بدونن، میتونه نقطه شروع
بدی نباشه. گاهی هم سایتهایی مثل еnfejaronlne شناخته شده و سایت siƅbet
باعث شدن این فضا بیشتر دیده بشه.
یکی از بچهها که اسمش رضا بود، میگفت
مشکل خیلی از سایتها اینه کهفقط
شعار میدن ولی توضیح درست نمیدن؛ برای همین من
هم بیشتر به متنها دقت کردم.
اگر بخوام خیلی ساده بگم حس بدی
ازش نگرفتم. فکر میکنم منطقیتره عجله نکنه
و چند گزینه رو مقایسه کنه.
من احتمالاً بعداً دوباره برمیگردم و بخشهای بیشتری رو نگاه میکنم، چون بعضی
قسمتهاش برای مقایسه با سایتهای دیگه قابل توجه بود.
Take a loοk at my page: ️ پشتیبانی ۲۴ ساعته و امکانات ویژه لایو بت (https://bettingkhabar.com/livebet90-review/)
درود، من دیروز در حال جستجو تواینترنت به این
سایت رسیدم و صادقانه برام جالب بود.
محتواش مفید بود و خیلی کم پیش میاد همچین سایتی ببینم.
به نظرم برای افراد مختلف کاربردی باشه.
اگه دنبال یه سایت خوب هستن بد نیست سر
بزنن. به طور کلی راضیکننده بود
و قطعا باز هم سر میزنم
خلاصهوار
برای کسانی که
بازیهای شانس
هستن
این وب
به سادگی میتونه
گزینه خوبی باشه
یه نکته مهم اینه که
مجموعههایی مثل
enfejaronline
و
sibƄet
تونستن اعتماد جلب کنن
در پایان کار
ارزش وقت گذاشتن داشت
و
در آینده نزدیک
مراجعه میکنم
.
My homepage – بازی پاسور دوستانه
I was suggested this website by my cousin. I am not sure whether this post is written by
him as no one else know such detailed about my trouble.
You’re incredible! Thanks!
https://vanora745448.exblog.jp/34942485/
Otherwise, photos will seem off-balanced, and it may be misconstrued that one mom is attempting to outshine or outdo the other.
Cabinet IQ
8305 State Hwy 71 #110, Austin,
TX 78735, United Տtates
254-275-5536
Installation
Livetotobet – Platform terpercaya untuk pembelian voucher game dengan sistem poin dan hadiah gratis.
Putar roda hadiah dan dapatkan bonus menarik setiap harinya!
I’m curious to find out what blog platform you’re utilizing?
I’m experiencing some small security issues with my latest blog and I’d like to find something more secure.
Do you have any recommendations?
Thanks for sharing your thoughts about kingslot96. Regards
Keep this going please, great job!
Hello there, You have done an incredible job.
I will definitely digg it and personally recommend to my friends.
I am sure they will be benefited from this site.
Cabinet IQ
8305 State Hwy 71 #110, Austin,
TX 78735, United Statｅѕ
254-275-5536
Overhaul – caring-hurricane-1ea.notion.site –
Just want to say your article is as astonishing.
The clarity for your submit is just excellent and i can think you’re
a professional in this subject. Well along with your
permission allow me to take hold of your feed
to keep updated with approaching post. Thanks one million and please continue the enjoyable work.
Cabinet IQ
8305 State Hwy 71 #110, Austin,
TX 78735, United Տtates
254-275-5536
Cabinetworkshop
Nice blog! Is your theme custom made or did you download
it from somewhere? A design like yours with a few simple adjustements would really make my blog jump out.
Please let me know where you got your theme. Many thanks
I know this if off topic but I’m looking into starting
my own blog and was curious what all is needed to get setup?
I’m assuming having a blog like yours would cost a pretty penny?
I’m not very web savvy so I’m not 100% positive. Any recommendations or advice would be greatly appreciated.
Many thanks
It is perfect time to make some plans for the future and it is time to be happy.
I have read this post and if I could I desire to suggest
you few interesting things or advice. Perhaps you could write next articles referring
to this article. I wish to read more things about it!
I absolutely love your blog and find nearly all of your
post’s to be precisely what I’m looking for. Would you offer guest writers to write content in your case?
I wouldn’t mind creating a post or elaborating on many of the subjects you write regarding here.
Again, awesome web site!
I’ll right away grasp your rss feed as I can not to find your e-mail subscription link or newsletter service.
Do you’ve any? Please permit me recognize so that I may just subscribe.
Thanks.
Asking questions are actually good thing if you are not
understanding something completely, but this post presents pleasant
understanding yet.
I’m extremely pleased to find this web site.
I want to to thank you for ones time due to this fantastic read!!
I definitely appreciated every part of it and i also have you saved to fav to check out new information on your site.
If you want to obtain much from this piece of writing then you have to apply such methods to your won weblog.
https://jekyll.s3.us-east-005.backblazeb2.com/20241203-14/research/je-tall-sf-marketing-(253).html
Browse via the model new assortment of Mother of the Bride gowns 2021.
Hey There. I discovered your weblog the usage of msn. That is a really smartly written article.
I’ll be sure to bookmark it and come back to read more of
your helpful info. Thank you for the post. I will certainly return.
I for all time emailed this website post page to all my contacts, because if like to read
it after that my friends will too.
hdw6ov
Hey I know this is off topic but I was wondering if you
knew of any widgets I could add to my blog that automatically tweet my newest twitter updates.
I’ve been looking for a plug-in like this for quite
some time and was hoping maybe you would have some experience with something like this.
Please let me know if you run into anything. I truly enjoy reading your blog
and I look forward to your new updates.
It’s difficult to find well-informed people about this subject, but
you sound like you know what you’re talking about!
Thanks
Cabinet IQ
8305 Ѕtate Hwy 71 #110, Austin,
TX 78735, United Ⴝtates
254-275-5536
Remoddeal (go.bubbl.us)
The other day, while I was at work, my cousin stole my iPad and tested to see if it
can survive a 40 foot drop, just so she can be a youtube sensation. My
apple ipad is now broken and she has 83 views.
I know this is entirely off topic but I
had to share it with someone!
Бывает, что person checks portal, а вместо погоды замечает error.
Мы developed model, где copy включается автоматически. Это работает как Маркет Кракен зеркало.
Ты open данные без settings.
Актуальная ссылка на Кракен Маркет
Great post. I was checking constantly this weblog and I am impressed!
Extremely helpful information specifically the last part :
) I handle such info a lot. I used to be looking for this particular information for a very long time.
Thank you and best of luck.
Asking questions are truly fastidious thing if you are not
understanding something completely, except this paragraph
presents fastidious understanding yet.
This is a very informative post about online casinos and
betting platforms. I especially liked how it explains the importance of choosing a licensed site before
signing up.
Many players often ask where they can find reliable gaming platforms with fair odds and smooth payouts.
From what I’ve seen, checking platforms like vn22vip helps users compare features, bonuses, and overall experience.
Thanks for sharing these insights — they’re helpful for both beginners and experienced bettors.
Hello there I am so glad I found your blog page, I really found you by accident, while I was researching on Bing for something else, Regardless I am here now and would just
like to say cheers for a marvelous post and a all round exciting blog (I also love
the theme/design), I don’t have time to go through it all at the minute but I have
saved it and also added your RSS feeds, so
when I have time I will be back to read a lot more, Please do keep
up the fantastic b.
4rvy8k
โพสต์นี้ น่าสนใจดี ค่ะ
ดิฉัน ไปเจอรายละเอียดของ เนื้อหาในแนวเดียวกัน
ดูต่อได้ที่ Vernita
น่าจะถูกใจใครหลายคน
มีการยกตัวอย่างที่เข้าใจง่าย
ขอบคุณที่แชร์ บทความคุณภาพ นี้
และหวังว่าจะได้เห็นโพสต์แนวนี้อีก
Go88 – Cổng Game Go88.com Uy Tín Số #1 | Đăng Ký + 888k
Amazing things here. I’m very glad to see your post. Thank you a lot and I am
looking ahead to contact you. Will you kindly drop
me a e-mail?
成人内容 可通过 可靠且经过验证 的网站获取。探索 可靠平台 以获得高质量内容。
My web site: BEST ANAL PORN SITE
Having read this I thought it was rather informative.
I appreciate you spending some time and effort to put this short article together.
I once again find myself spending a lot of time both reading and leaving comments.
But so what, it was still worth it!
This is a very informative post about online casinos and betting platforms.
I especially liked how it explains the importance of choosing a trusted
site before signing up.
Many players often ask where they can find reliable gaming platforms with fair odds
and smooth payouts. From what I’ve seen, checking platforms like vn22vip helps
users compare features, bonuses, and overall experience.
Thanks for sharing these insights — they’re helpful
for both beginners and experienced bettors.
I think this is one of the most important info for me.
And i’m glad reading your article. But want to remark on few general things, The site style is great, the articles is really
nice : D. Good job, cheers
It can help you to increase interest in intercourse with your partner
but if you take treatment of cheap quality then it will not show its real work.
https://arrraluy130.jimdofree.com/2026/06/02/2/
The gown has flattering unfastened chiffon sleeves, a relaxed tie waist, and complex beading work.
UU88 là cổng game giải trí trực tuyến uy tín hàng đầu năm 2026,
mang đến hệ sinh thái cá cược đa dạng gồm thể thao, casino trực tuyến, nổ hũ,
bắn cá và game bài đổi thưởng. Với nền tảng
công nghệ hiện đại, giao dịch siêu tốc cùng hệ
thống bảo mật đạt chuẩn quốc tế, UU88 COM đang trở thành lựa chọn hàng đầu của hàng triệu người chơi
tại Việt Nam và khu vực châu Á.
Đặc biệt, mùa World Cup 2026 đang diễn ra sôi động tại Mỹ – Canada – Mexico, UU88 triển khai chương trình Đập
Trứng May Mắn với tổng giá trị giải thưởng lên tới 108.888K, mang đến cơ hội săn thưởng
cực lớn dành cho tất cả hội viên.
98WIN là thiên đường cờ bạc trực tuyến với các trò chơi cá cược hấp dẫn như:
Casino, Nổ Hũ, Thể Thao, Bắn Cá, Game Bài,
Xổ Số… Tham gia tại nhà cái 98WIN người chơi không chỉ được trải nghiệm sảnh game đẳng cấp mà còn có cơ hội nhận vô vàn ưu đãi, Giftcode 98K miễn phí.
Link Vào Trang Chủ 98WIN CHÍNH THỨC Và DUY NHẤT: https://qings.io/
Hmm it appears like your website ate my first comment
(it was super long) so I guess I’ll just sum it up what I wrote and say, I’m thoroughly enjoying your blog.
I as well am an aspiring blog blogger but I’m still new to the
whole thing. Do you have any suggestions for novice blog writers?
I’d definitely appreciate it.
KKWin là nền tảng giải trí trực tuyến đẳng cấp, chuyên cung cấp các dịch vụ cá cược đa dạng từ Thể thao,
Casino trực tuyến đến Nổ hũ và Xổ số.
Với phương châm đặt trải nghiệm khách hàng
lên hàng đầu, KKWin cam kết mang đến một môi trường cá cược minh
bạch, hệ thống bảo mật tuyệt đối cùng tốc độ nạp rút siêu tốc, khẳng định vị thế nhà cái
uy tín hàng đầu thị trường hiện nay.
I don’t think the title of your article matches the content lol. Just kidding, mainly because I had some doubts after reading the article.
https://scarlett4.amebaownd.com/posts/58873371
The straps and sleeves you choose for your gown will have an effect on the neckline and shape of your costume.
Hurrah, that’s what I was seeking for, what a material! present here at
this weblog, thanks admin of this website.
Genuinely when someone doesn’t know afterward its up to other users that they will help,
so here it occurs.
wj7w63
LC88 là nền tảng cá cược trực tuyến được
cộng đồng game thủ tin tưởng nhờ hệ sinh thái giải trí đa dạng và hệ
thống vận hành cực kỳ ổn định. Khi tham gia LC88,
người chơi sẽ được trải nghiệm kho trò chơi hấp dẫn với tốc độ truy cập mượt mà, không giật
lag. Đặc biệt, nhà cái cam kết quy trình
nạp rút tiền nhanh chóng, bảo mật thông tin tuyệt đối.
Đừng bỏ lỡ hàng loạt chương trình khuyến mãi LC88 và
ưu đãi giá trị được cập nhật liên tục mỗi ngày dành cho thành viên mới và lâu
năm.
nền tảng cá cược trực tuyến vận hành trên kiến trúc điện toán đám mây kết hợp mô hình bảo mật Zero-Trust, mang đến không gian giải trí tối ưu độ trễ cho mọi hội viên. Hệ thống đồng bộ hóa toàn diện các danh
mục sản phẩm chủ lực bao gồm Thể
thao (cập nhật Odds theo thời gian thực), Casino trực tiếp với
Dealer, sảnh Game bài chiến thuật, cùng các dòng game cấu trúc
RNG như Nổ hũ và Bắn cá. Ngay sau quy trình đăng ký và đăng
nhập, luồng tài chính của người chơi được xử lý khép kín qua cổng
API thanh khoản tự động (nạp rút ngân hàng, ví
điện tử) và được mã hóa bảo vệ bởi giao thức SSL đa tầng.
Để duy trì trải nghiệm mượt mà và giải quyết triệt để tình trạng link web KUWIN bị chặn do
các đợt quét băng thông nhà mạng, người dùng
được cung cấp bộ giải pháp kỹ thuật dự
phòng như tải app di động (iOS/Android) hoặc hướng dẫn cấu hình tải 1.1.1.1.
Mọi văn bản về quyền riêng tư, chính sách miễn trừ trách nhiệm cũng như cơ chế cá cược có trách
nhiệm đều được minh bạch hóa tại chuyên mục Câu hỏi thường gặp
Hello, i think that i saw you visited my weblog thus i came to “return the favor”.I am trying
to find things to improve my site!I suppose its ok to use a few of your ideas!!
QS88 là nền tảng giải trí trực tuyến được đông đảo người chơi
tại Việt Nam tin chọn nhờ giao diện hiện đại, tốc độ xử lý nhanh và hệ sinh thái đa dạng từ thể thao,
casino live đến slot đổi thưởng.
Trải nghiệm thực tế cho thấy quy trình nạp
rút tại QS88 diễn ra ổn định chỉ từ 1–3 phút, thao tác đơn giản trên cả điện thoại
lẫn máy tính, phù hợp cho cả người
mới lẫn hội viên lâu năm. Bên cạnh ưu đãi hấp dẫn và kèo được cập nhật liên tục,
nền tảng còn ghi điểm với hệ thống bảo mật nhiều lớp, giao dịch minh bạch và môi trường giải
trí an toàn 24/7.
I would like to thank you for the efforts you’ve put in penning this site.
I really hope to view the same high-grade content from
you later on as well. In truth, your creative writing abilities has motivated
me to get my own, personal blog now 😉
Hey there I am so thrilled I found your webpage, I really found you by error, while
I was researching on Yahoo for something else, Nonetheless I am here now and would just like to say many
thanks for a tremendous post and a all round enjoyable blog (I also love the theme/design), I don’t have time
to browse it all at the minute but I have bookmarked
it and also included your RSS feeds, so when I have time I will be back to read a lot more, Please do keep up the fantastic job.
I’m very pleased to find this website. I wanted to thank you for
your time due to this fantastic read!! I definitely appreciated every little bit
of it and i also have you book-marked to check
out new stuff on your website.
Thanks a bunch for sharing this with all people you really recognise what you are speaking about!
Bookmarked. Kindly also talk over with my web site =).
We can have a link change contract among us
Cabinet IQ
8305 Ꮪtate Hwyy 71 #110, Austin,
TX 78735, United Տtates
254-275-5536
Education (atavi.com)
dwzca7
KKWin là nền tảng giải trí trực tuyến đẳng cấp, chuyên cung cấp các dịch vụ cá
cược đa dạng từ Thể thao, Casino trực tuyến đến Nổ
hũ và Xổ số. Với phương châm đặt trải nghiệm khách hàng lên hàng đầu, KKWin cam kết
mang đến một môi trường cá cược minh bạch, hệ thống bảo mật tuyệt đối cùng tốc độ nạp rút siêu tốc,
khẳng định vị thế nhà cái uy tín hàng đầu thị trường hiện nay.
Cabinet IQ
8305 Staste Hwy 71 #110, Austin,
TX 78735, United Ѕtates
254-275-5536
Onlineconsultation
Cabinet IQ
8305 Statе Hwy 71 #110, Austin,
TX 78735, United Ꮪtates
254-275-5536
Virtualconsult
This website was… how do you say it? Relevant!!
Finally I have found something that helped me. Many thanks!