查看完整版本: 无需证书，安装所有未签名软件！对证书说Bye Bye！

无需证书，安装所有未签名软件！对证书说Bye Bye！

[size=5][font=黑体][color=#ff0000][quote][size=5][font=黑体][color=#ff0000]首先请看本楼：[/color][color=blue]简单的S60 V3系统权限完全软件永久破解方法（不需要刷机）[/color][/font][/size][/quote][/color][/font][/size]
z(K
ts ]yK'P#Lv [font=黑体][size=5][color=#ff0000][/color][/size][/font]
*Sb/u*|T#u ~\ z
S [color=#006400][size=4][font=黑体][quote][color=#006400][size=4][font=黑体]第一步还是按照之前发布的方法[url=http://mbbs.enet.com.cn/thread-6951585-1-1.html][color=red][b]http://mbbs.enet.com.cn/thread-6951585-1-1.html[/b][/color][/url][/font][/size][/color][color=darkgreen][size=4][font=黑体]先破解权限。]U,k3\)A2a2|2X
[/font][/size][/color][color=darkgreen][size=4][font=黑体]第二步:也就是到了重启失效那里，不要重启手机，将附件里的CProfDriver_SISX.ldd这个文件复制到c:\sys\bin\&P"BF{!B1]\t
然后安装CapsOff.sisx和CapsOn.sisx这两个文件。[/font][/size][/color]|9wz z8q
[color=darkgreen][size=4]附件里面有2个这样的文件。FP1_CapsOnOff里的文件是给FP1手机用的，preFP1_CapsOnOff是给除了FP1其他的手机用吧，N95 8GB,5700测试破解成功。[/size][/color][color=blue]
s8m1N N2`;b;b [/color][size=4][color=purple]注意：CapsOnOFF.rar里有两个文件夹FP1_CapsOnOff和preFP1_CapsOnOff。
#r5YR;o1`!D [/color][/size][size=4][color=purple]5700/N95/N82/5700等FP1(OS9.2)机型用FP1_CapsOnOff文件夹里的。z^.w hm:L3Au/E
T
N73/E50/N80等其他MR(OS9.1)手机用preFP1_CapsOnOff文件夹里的。[/color][/size][/font][/size][/color]rC TGy8mb*K-j
[attach]58316[/attach]e N#]{vk7H-z
[color=#006400][size=4][font=黑体][font=黑体][color=#006400][size=4]装好后运行CapsOff表情将系统破解，运行CapsOn文件表示恢复，也就是将破解去掉了。[/size][/color][/font]
b(s'h-Fw^v [color=#006400][size=4]虽然用这个方法破解依然会消失，但是只要运行一下CapsOff这个破解就回来了！其实这样做很方便我，在某些时候我是不需要破解的！&\s/t ?q7n%HR Ir1d

4J ooz7Av [/size][/color]!y f6z&m*t,xnSx T
[size=4][color=#0000ff]如果你需要开机自启动请安装[/color][/size][size=3][color=red]PowerBoot 1.00 [开机启动已设定程序的东东][内置中文版][免费软件][attach]58320[/attach][/color][/size]实现开机自动破解。或者安装Jbak taskman 0.97也可以实现自启动！操作入下图:[/font][/size][/color]9v$g_] WW8h
}R.i7r
[attach]58317[/attach][attach]58318[/attach]L.BUXfk
bS9M Ls N
[font=黑体][size=4][color=#ff0000]下载请点击[/color][/size][/font][size=3][font=黑体][color=blue]强大的任务管理器JbakTaskMan 0.97（自带中文）![attach]58319[/attach][/color][/font][/size]TBl7t)n4X ?)R1J
[color=#006400][size=4][font=黑体][/quote][/font][/size][/color]cu:C7a&dK GQ
[font=宋体][size=4][color=#0000ff][quote][font=宋体][size=4][color=#0000ff]FCA00000[/color][/size][color=#006400]原文：[/color][/font][font=宋体][color=sienna][size=4]Silent Hack
m1E J^ZGC Version 20080331. Should also work for FP1 devices[/size][/color]me3V:yP
[size=4]1) download files from  [/size][/font][url=http://fca00000.googlepages.com/CapsOnOFF.rar][color=sienna][font=宋体][size=4]http://FCA00000.googlepages.com/CapsOnOFF.rar[/size][/font][/color][/url][font=宋体][color=sienna][size=4]  and extract those that apply to you: preFP1 of FP1BL-W1FXN*`g
2) apply the hack using the script (or Profiler aplication)

UZ"sIx(Q$I_$D0C 3) copy CProfDriver_SISX.ldd from RAR into C:\sys\bin r%@i1n:w$y_1I'~ }
4) install CapsOn.sisx[/size][/color]*z3\/@&[(NS
[size=4]5) install CapsOff.sisx[/size]
W4AU;XK7R3}#s [/font][font=宋体][size=4]To hack the phone, run CapsOff. To revert to normal, run CapsOn'Z ~;Lnp+wy AI.@
Program runs and exits inmediatly.[/size]
m#`?,D8^D [/font][font=宋体][size=4]To test it, run any unprivileged application and see if it gets permissi***.
cppYxs o"K O~ For example, unpatched X-plorer should be able to access c:\sys\bin\[/size]
1Y8dd4G0RP7S A8WB [size=4]This doesn't allow to install unsiged apps. Only gives unrestricted permissi*** to programs.[/size]5](pO ax
[size=4]Remember: CapsOn is normal. CapsOff means hacked.[/size]
)J;N({Z]/l%n~:f f"P [size=4]If you want to uninstall Profile afterwards, you need to copy CProfDriver_SISX.ldd into c:\sys\bin\ again.[/size]
7R&bD$U:RP [size=4]I have been told that a tool called PowerBoot allows to start programs on starting of the phone.[/size]kh"uxx
[/font][font=宋体][size=4]I suggest you NOT to do that. Disable security only when needed, not all the time.-]U5NQ t2p8y
This program has a strange user-license called Blood-ware: if you use this program, please go to the nearest hospital and give some of your blood.ZE
gk3G
Q7ys
There is a high need for blood, and helps many people.[/size]|.M\u5R%O)d)~P
[size=4]I give something to you; you give something to someone else. Sounds fair, right?[/size][/font][/quote][/color][/size][/font] c3qC0Z(eJ
[font=宋体][size=4][color=#0000ff][/color][/size][/font] ]^2C$A)`Cq#W
[size=4][quote][font=黑体][color=#0000ff]属于S60 V3（Sybiam OS 9.1）的机型：[/color][/font]
:nOZ|8O)g(@2V [font=黑体][color=#0000ff]诺基亚3250/5500 Sport/N71/N73/N75/N76/N80/N91/N92 TV/N93/N93i/E50/E60/E61/E61i/E62/E65/E70[/color][/font] W,R4x$HB"G+J
[color=green]属于S60 V3 FP1（Sybiam OS 9.2）的机型：[/color]d3cI`f)`/v:N
[color=green]诺基亚5700 Xpress Music/6110 Navigator/6120 Classic/6121 Classic/6210 Navigator/6290/N77/N81/N82/N95/E51/E71/E90    [/color]
Z IM Kv7P [color=green]三星SGH-i450/SGH-i520/ SGH-i550/SGH-i550W/SGH-i560    [/color]A Ivz8k(g
[color=green]LG JoY[/color]
m
L:h(O7Jrf [color=red]属于S60 V3 FP2（Sybiam OS 9.3）的机型：[/color]
0E7w?n*Ml [color=red]诺基亚6220 Classic/N78/N96[/color][/quote][/size]
HY'Xi/g;Lx'd [size=4][/size]2T#Gpw ]/^u
[size=5][color=red][quote]
:h E`R'I(a&O"|(@\ [size=5][color=red]这是最后一步。[/color][/size]h&?)hx;Z
[/quote]Nhoxl,[5q?`(]Oc4o

f\zb0U6GQi+m|3v [size=4][font=黑体][color=darkgreen][quote]下载[/color][color=#006400]安装leftup的手机端signsis程序1.03版（[/color][color=blue]必须是最后一个附件[/color][color=#006400]）[/color][/font][/size][/color][/size]
C4d]Fu3Yn2Es,B/v [size=5][color=red][font=黑体][size=4][color=#006400][/color][/size][/font][size=3][attach]58321[/attach][attach]58322[/attach][/size]
9z`}o5by [font=黑体][size=4][color=#006400]下载附件keycert.rar (2.65 KB) [attach]58323[/attach]
P A|$D1rC.ou [/color][/size][/font][font=黑体][size=4][color=darkgreen]把压缩包里的key.key和cert复制到!:\private\EC696702 -Z:}w;g&eD
全球最专业的诺基亚手机专业技术交流与资源下载论坛如果你的signsis装在C盘，就复制到c:\private\EC696702
8_am&kd 装在E盘，就复制到E:\private\EC696702 [/color][/size][/font][/color][/size]
S_ P2^5FBx| [size=5][color=red][size=4][size=3][color=black][attach]58326[/attach][/color][/size]0E#Fq_2HE n
[/size][font=黑体][size=4][color=#006400][color=#006400][size=4][font=黑体]下载附件 00000001.rar (3.62 KB) [/font][/size][/color][color=#006400][size=4][font=黑体]解压附件的文件得到00000001
m9w8t/Y/?QQ!jn A 复制到c:\resource\swicertstore\dat\ E{^@3n6Qf)B5bS
如果没有这个文件夹，请自行新建一个即可。[/font][/size][/color][/color][/size][/font][/color][/size]
;~D-Z;Vo} [size=5][color=red][size=3][color=black][attach]58327[/attach][/color][/size]|b)c/PH4l
[font=黑体][size=4][color=#006400][/color][/size][/font]
-\^a2{
y&r[9R [size=4][color=#ff0000][font=黑体]2008.04.02增加说明：
.h!b^hf'X [/font][/color][/size][size=4][font=黑体]上面的安装unsign软件的方法重启后会失效
&I\!yYxm4ua l3F [/font][/size][url=http://www.cnpda.com.cn/space-uid-628558.html][color=#000000][/color][/url]]\Y{-ObU,HS
[size=4]破解成功后在重启前用文件管理器将[color=red]00000001修改为只读属性[/color]即可。已经重启了的手机需要运行CapsOff表情将系统破解，再[color=red]重新复制一份00000001去c:\resource\swicertstore\dat\ 再将其修改为只读属性[/color]。[/size][/color][/size]
V#XUss)tjY I2p8bk [size=5][color=#ff0000][/color][/size][/quote]
hdE1w+s,Ut4S9V5S(Z [quote]步骤就是这样的！l
\Ac$x+U Q
[size=4][color=darkgreen]现在使用signsis，选择一个unsign的sis文件，选项-自签名[/color][/size]即可！O6[l
u!p
i,Q-B
[size=4][color=darkgreen] Y!^P S!\7oX
[/color][/size]天哪，不需要证书就能安装unsign软件了！N%H;zvDS/L w
[color=#006400][size=4]下面是我破解手机后直接安装[/size][/color][url=http://nokia.it168.com/thread-636542-1-1.html][size=4][color=blue]CallCheater.v1.00 来电骗子汉化版(来电背景音软件)[/color][/size][/url][size=4]和[color=#333333] [/color][/size][size=4][color=blue][/color][/size][url=http://nokia.it168.com/viewthread.php?tid=632204&extra=page%3D1%26amp%3Bfilter%3D0%26amp%3Borderby%3Ddateline][size=4][color=blue]超强文件管理器ActiveFile v1.27.19 [/color][/size][/url][size=4][color=darkgreen]（自签名版有Allfile权限版）[/color][/size]成功后截图，
*X+D3dX Oy [color=#006400][size=4],]3gW`a E9xj
[/size][/color][attach]58325[/attach]
mBi [ ?4J [color=#006400][size=4]如果你破解后能成功安装这2个软件的话，（可以用ActiveFile 查看c:\sys\bin\下的文件[/size][/color]）就代表你的手机已经具备高权限了，祝贺你破解成功！[/quote]!Gt8qfU,\O)G

&R}}B[9P
\(e;Q%? [[i] 本帖最后由 kjyy218 于 2008-4-9 13:52 编辑 [/i]]

:L :@ :o :P :D :D :'( :D :(

;P :@ :@ :@ :o :o :P

LZ辛苦啦!!:D

:Q :L :Q :P :$ :Q

:Q :Q :Q :Q :Q

:@ :@ :@ :@ :@

额。。。看不打懂。。。