Access windows mobile files

Доступ к файловой системе Windows Phone с помощью Windows Phone Internals

Для многих пользователей является вполне привычным делом прибегнуть к утилитам для осуществления джейлбрейка на iOS, а также получить root права на Android. Стоит отметить, что возможные риски от взлома собственной системы зачастую пользователей не останавливают, так как те возможности, которые они и в результате получают, того стоят.

Но вот, что касается платформы Windows Phone, то о том, чтобы пользователи предпринимали попытки приобретения контроля над системой, сведений практически не поступало. А вот, касаемо мобильных аппаратов на базе Windows Phone 8.1 и Windows 10 Mobile стоит отметить, что для их владельцев появилась такая возможность испытать все преимущества получения доступа к файловой системе.

С помощью утилиты, которая носит название Windows Phone Internals, можно разблокировать загрузчик подавляющего большинства мобильных устройств линейки Lumia. В результате пользователь получает неограниченный доступ к возможностям редактирования того, что содержится в файловой системе мобильной версии платформы Windows.

Что касается пользы от всех этих манипуляций, то стоит отметить, что по утверждениям разработчика Heathcliff74, корневой доступ позволит, как изменить, так и удалить файлы, которые защищены, к тому же, возможна смена настроек и установка кастомных прошивок непосредственно на устройство. Кроме того, с помощью Windows Phone Internals возможно полное бэкапирование устройства, что позволит в случае какого-либо форс-мажора все вернуть на «круги своя».

Необходимо отметить, что все вышеописанные действия официально не поддерживаются производителями и совершаются, по сути, на свой страх и риск. В результате данных манипуляций владелец устройства может потерять гарантию производителя (в случае поломки аппарата), утратить возможность получения «по воздуху» апдейтов, могут отключиться все системы защиты от вредоносных ПО, а также устройство может стать вообще неработоспособным.

access windows 10 mobile root files and folders

I have a Windows 10 universal app that is running on a Windows 10 Mobile device. I noticed from the Windows 10 Mobile device, it does have a file explorer but it limits you to only see certain «Known Folders» such as music, documents, downloads, etc. and that is all.

Furthermore, when I plug the device into my development machine via USB, I can browse the device but again, only the Known Folders above.

In my app, I am writing to a log file and that log file is stored to LocalStorage, under a folder for my app name, for example:

I simply need to browse MY LOG FILE, that MY APP CREATES, in MY APP FOLDER. I read about a ton of, in my opinion hacks, to get access to this file/folder. For example, there are some third party applications that still mainly claim to target Windows Phone 8/8.1 but will still technically work for 10 such as:

Windows Phone Power Tools Isolated storage spy etc.

Then I also read articles on how to use a file in Pictures (or voice recording) and go to file properties to then gain access to the root or to create a root shortcut on the development machine and copy it to the mobile device, however, these are typically a year or more old and no longer work on my device (I suspect MS patched these hacks).

So, all that said, I would like to see a good way to access the root drive for development, or at least my app folder in the LocalFolder so I can access my files (such as logs or the sqlite db file). Maybe there is a way already but my google searches haven’t turned anything up just yet.

[GUIDE] Full FileSystem Access over SFTP / CMD over SSH on Windows 10 Mobile

snickler

Retired Forum Moderator / Inactive Recognized Deve

This guide uses the built-in SSH server on the phone that gets activated once you enable Device Discovery to give us TRUE full file system access. MTP doesn’t truly give full file system access as there are files and folders that aren’t accessible still.

Читайте также:  Folx pro mac os

NOTE: The automation of the steps listed in this whole guide has been incorporated into an easy GUI within @gus33000 ‘s app called Interop Tools. Big thanks to him for taking the time to simplify this whole process.

Many thanks to @gus33000 [For the simplification and guinea pig process ] and @black_blob [ For making me try the UMCIAuditMode trick again]!

Manual Steps for SFTP

  • @djamol’s Root Tool , or even the OEMSetting.reg tweak that @WojtasXda came up with
  • Some SFTP program (Swish Easy SFTP works the BEST, WinSCP works second best, but for some reason it can’t read the root C: drive from SFTP).
  • If you’re using @djamol’s Root Tool, use @vcfan’s Lumia Registry Editor for this
  • The following keys should be set to the following string values under the Path of System\Currentcontrolset\control\ssh\sirepuser

Represented in this guide as key: value

stfp-home-dir : C:\
default-home-dir : C:\
sftp-mkdir-rex : .*
sftp-open-dir-rex : .*
sftp-read-file-rex : .*
sftp-remove-file-rex : .*
sftp-rmdir-rex : .*
sftp-stat-rex : .*
sftp-write-file-rex : .*
auth-method : password
user-pin : 1234

  • After you’ve verified that at least one of these keys have been set, exit the app
    [*] Go to the phone settings app and put your Windows 10 Mobile phone in Developer Mode, activate Device Discovery then turn on Pair mode
    [*] Pair to your phone using WConnect, either from usb connect mode («wconnect usb«) or IP (wconnect youripaddress) using the pin on your device
    [*] When this is complete, go to %USERPROFILE%\appdata\local\Microsoft\WConnectSrv. In this directory, you should see a privkey.pem file. Hold on to this
    [*] Open up PuttyGen, click on the Conversions menu and then click Import key. Point to the path that contains the privkey.pem file, then press Okay
    [*] Back in PuttyGen, click on the Save private key button and then save the .ppk file off somewhere that you’ll remember.
    [*] Open Pagent, click Add key and point to the .ppk file you generated before. You’ll want to make sure this is ALWAYS running.
  • If using Swish

    • Go to Windows Explorer, dbl-click on the Swish icon under Devices and Drives. Click on Add SFTP Connection at the top
    • Enter in a label that you wish to save the connection present as .
    • Under host your phone’s IP as Host.
    • Enter in Sirepuser as the User.
    • Enter / as the Path.
    • Press Create
    • Go back to the Swish folder then click on the connection that you just created (YOU MUST HAVE PAGENT RUNNING FOR THIS TO WORK).
    • When prompted, enter «1234» as the password.

    If using WinSCP:

    • Open WinSCP. Underneath of the Password box, click on Advanced.
      • Click on the SFTP menu item and set the Preferred SFTP protocol version to 2
      • Click on the SSH -> Authentication menu item. Click Allow agent forwarding, click on the ellipsis next to Private key file and choose the .ppk file you saved from PuttyGen
    • Press Ok to save the settings
    • Back on the WinSCP main screen, enter in your phone’s Wi-Fi IP into host name and for the User name, type in Sirepuser. Press save and then save this session as a «Site» in WinSCP
    • Login. When prompted, enter «1234» as the password.
    • You’ll receive an error initially about not being able to browse /C/ and blah blah. You can right-click and click on Goto Folder. /C/Data will be a nice folder to start at since that’s where most of the goodies are.

    Voila, you should know be able to have full file system access.

    Now there are a FEW caveats to this..

    • If you’re looking to modify/download any of the important files in the AOW folder, you won’t be able to. For SOME REASON, it’s returning «No such file or directory» if you try to download/modify some certain files. It will also return this if you try to do the same for the registry hives.
    • If you happen to remove all paired pins on your phone, you must add pin from the phone and use the pin as the password to your SFTP session

    I’m tired of my SFTP access cutting out because the WiFi disappears when the screen goes to lock >_ 2

    For some reason the service that keeps wifi running even while the screen is under lock is disabled on 10512. This enables it. Reboot and you’ll have WiFi working under lock screen on 10512.

    Manual Steps for running CMD over SSH (assuming you’ve done the SFTP steps above) Redstone builds required. 10586.XXX builds will NOT work

    • IoT Insider Preview ISO
    • Interop Tools — Download the latest arm package and all packages from the Dependencies directory. Install the dependencies first, THEN install the app.
    • Pageant
    • Putty

    Steps:

    First, you’ll need to download the Windows IoT Core Insider Preview ISO. Mount it and then install the MSI. Next, you’ll need to go into Disk Management (diskmgmt.msc) and create a new 4GB VHD by clicking Action-> Create VHD. Set the location to any place you wish for it to be, set the size to 4GB and keep the rest the same. Pay attention to the disk number shown in the Disk Management screen after you create and mount that VHD (They have a blue drive icon to the left of them).

    When this is complete, open up an elevated command prompt. Go to C:\Program Files (x86\Microsoft IoT\FFU.
    Run the following command:

    Where N is the disk number. At this point, you should start seeing a bunch of volumes created. The MainOS volume is the one we’ll care about.
    Go to that drive and copy the Windows\System32\cmd.exe and Windows\system32\en-us\cmd.exe.mui to your phone’s Document’s folder.

    Next step is to open up the Interop Tools app, and tap on the Interop Unlock menu item from the hamburger menu. Select the option to restore NDTKSvc, reboot.
    When the device comes back up, re-open Interop Tools and this time click on the Registry Editor from the hamburger menu.

    Enter the following values, then press Write Data:

    Registry Hive : HKEY_LOCAL_MACHINE
    Registry Type: String
    Registry Key Path: SYSTEM\Controlset001\Control\SSH\Sirepuser
    Registry Value Name: default-shell
    Registry Value Data: C:\Data\Users\Public\Documents\cmd.exe

    Write this key tap on the hamburger menu and go to the Registry Browser. Travel to HKEY_LOCAL_MACHINE -> SYSTEM -> ControlSet001 -> Control -> Ci.

    Tap the + button on the application bar and make sure the values are set to the following and then press Write:

    Registry Hive: HKEY_LOCAL_MACHINE
    Registry Type: Integer
    Registry Key Path: SYSTEM\ControlSet001\Control\CI
    Registry Value Name: UMCIAuditMode
    Registry Value Data: 1

    This actually enables the execution of unsigned executables. This is how we end up making CMD and the other programs work ^_^.

    Reboot your phone. Wait a good 3-5 minutes before you try doing anything because your phone will be acting very unstable (Some apps crashing, and others working).
    While you have pageant open and the private key added, open up a putty SSH session to your phone using the username of Sirepuser. You should be delighted at this point (If you did everything correctly) to see a Command Prompt. You should be getting random resource string errors when you try typing DIR, etc and this is due to the fact that we don’t have the mui string in the correct place. Let’s fix that.

    ONE BIG THING TO NOTE: running CMD in SSH is very sensitive to keystrokes. If you are typing a command and press backspace even once, then the command won’t send at all. It will state that it doesn’t recognize what you’re doing, so be sure to type these things in FLAWLESSLY (yeah it’s annoying)

    What we want to do now is then copy the cmd.exe to C:\Windows\System32 and the cmd.exe.mui to C:\Windows\System32\en-US. Run the following commands:

    copy c:\Data\Users\Public\cmd.exe c:\Windows\System32
    copy c:\Data\Users\Public\cmd.exe.mui c:\Windows\System32\en-US

    Back on your phone, go back to Interop Tools and click on the Registry Editor. Follow the same exact steps as you did for changing the default-shell key, but make one change:

    Registry Value Data: C:\Windows\system32\cmd.exe

    At this point, restart your putty session and then you’ll be good to go with CMD running over SSH as SYSTEM!

    There was a reason I said to copy off the system32 folder somewhere. If you follow the same process to get the files to your Documents folder and move them over to system32, you can have quite a bit of exes to run from the command line. The easiest thing to do is to use xcopy to get everything there.

    Extra #2:
    You can run .NET Console apps in CMD if they are named the following 3 names: TailoredDeploy.exe, WConnectAgent.exe or WConnectAgentLauncher.exe.

    Make a directory on your SD Card named «test» or put it in the test directory on your phone’s C: drive and it should go. Beware that the runtime is weird on the phone and not ALL things are possible to do with a .NET Console app

    PLEASE. For the love of god DO NOT add DefApps to the Administrators group if you don’t want all of your apps to stop working

    USE THIS AT YOUR OWN RISK! I AM NOT RESPONSIBLE IF YOU BLOW UP YOUR PHONE ON PURPOSE OR BY ACCIDENT

    Full file system access discovered in Windows 10 Mobile

    Microsoft’s Windows 10 Mobile is a very different OS from previous versions of Windows Phone in one respect: it is a more full-featured OS. This feature should not surprise anyone as Windows 10 Mobile share the same kernel, some APIs, and other coding similarities with Windows 10 for PC, Windows 10 on Xbox One and even IoT. Logically, this should mean that Windows 10 Mobile can be pried open to reveal its internal file structure like a true OS. Think of Windows Mobile and Android, for instance.

    Now, over at XDA, instructions have been posted on how a user can gain full file system access to Windows 10 Mobile. Posted by snickler, who is well known at XDA, the details are not for the faint of heart. However, those wanting to do this are likely already developers and those with more advanced coding skills. For regular consumers, on the face of it this does not do much except let you damage the OS.

    Snickler notes in the forum thread:

    «This guide uses the built-in SSH server on the phone that gets activated once you enable Device Discovery to give us TRUE full file system access. MTP doesn’t truly give full file system access as there are files and folders that aren’t accessible still.»

    To pull off the hack, you will need Astoria Tools/WConnect, djamol’s Root Tool, PuttyGen, Pagent, and an SFTP program.

    Besides the full instructions, some limitations were also posted. For the most part, however, this opens the doors for some real advanced hacking on Windows 10 Mobile as some of the system files can now be replaced or added to through this method. For a long time now, Android has enjoyed the hacker/tinkerer base at XDA, but Windows 10 Mobile may bring that forum back to its roots just yet.

    We should caution, if you do not know any of those tools listed above, this is not something you should pursue. However, if you are a developer or tinkerer who likes to play, now is your chance.

    Source: XDA Forums; Thanks, Jeremy Sinclair, for the info and screenshots

    The Dell XPS 15 is our choice for best 15-inch laptop

    For a lot of people, a 15-inch laptop is a perfect size that offers enough screen for multitasking, and in a lot of cases, some extra performance from powerful hardware. We’ve rounded up the best of the best at this size.

    Halo: MCC’s live service elements make it better, not worse

    Halo: The Master Chief Collection is more popular than ever, but some fans don’t agree with the live service approach 343 Industries has taken with it. Here’s why those elements are, at the end of the day, great for the game and for Halo overall.

    Microsoft’s Surface Duo is not ‘failing up’

    Microsoft announced this week that it was expanding Surface Duo availability to nine new commercial markets. While Surface Duo is undoubtedly a work in progress, this is not a sign of a disaster. It’s also doesn’t mean that Surface Duo is selling a ton either. Instead, the reason for the expansion is a lot more straightforward.

    The best pre-built desktop gaming PCs for playing Valheim

    We’ve rounded up some of the best pre-built gaming desktop PCs you can buy for playing Valheim. Because it’s not a demanding PC game, you don’t need to go all-out with crazy specifications and can bag a solid deal if you’re on a tighter budget.

    Читайте также:  Синий экран смерти windows 10 kernel security check failure windows 10
    Оцените статью