List of WiMAX modems whose MAC address can be changed to get FREE Internet
HUAWEI
BM635 (tested)
BM625 (similar to BM635)
BM622 (tested)
BM622i (tested)
and many more....
(almost all Huawei Wimax modems)
==================
ZyXEL
HES-319M (tested)
MAX-318M (tested)
==================
Motorola
CPEi 35775 (tested [needs device certificate])
==================
Most of the ISPs uses MAC address for authentication to allow a modem (with valid/active MAC) to get connected to the Network. So by changing the MAC, it is possible to get Free Internet....
END!
BM635 (tested)
BM625 (similar to BM635)
BM622 (tested)
BM622i (tested)
and many more....
(almost all Huawei Wimax modems)
==================
ZyXEL
HES-319M (tested)
MAX-318M (tested)
==================
Motorola
CPEi 35775 (tested [needs device certificate])
==================
Most of the ISPs uses MAC address for authentication to allow a modem (with valid/active MAC) to get connected to the Network. So by changing the MAC, it is possible to get Free Internet....
143 Comments:
blank wan repair success through hardware and software
bm622.....done via firmware and hardware
bm625.......done via firmare 80% hardware 100%
bm635............ done via firmare 80% hardware 100%
bm652 and bm652w...........done via hardware and software
what is the procedure to copy device certificate for cpei 35775?
need advanced skills
need patience and analyzing
first thing you need to know dumping, serial logs and hexing and analyzing and a cold bottle of beer
can you teach me on bm622i
@jasminzia
Yes I can teach but right now it's confidential.
thanks for the response... i promise to tell no one and keep it in safe that no one will know unless you said so... please... i have a disconnected bm622i right now and want to copy the mac of my sister's bm622i... you can email me in [email protected] or in my facebook with the same email... thanx
pls press the paypal button
to change your mac on bm622i
please dnt post your email address you can email us directly
we are not responsible what happen or u get lot of spams
hi im jly im here at ksa..right now i have a working free 3g access through the kingdom..hope we can exchange ideas
@knytwarrior: i dont have paypal account or even a credit card... how about western union? i just want to copy may sisters mac from her wimax bm622i into mine... pls :*
and by the way, where is the paypal button...
copy your sister mac on your 622i will not a good ideas can cause both of you a connection problem..
are you a real girl? how girls got interested on this matter... in wondering why?
i heard your isp got actions for illegal wimax on the philippines,,, thousands of wimax modems got damage yesterday and today
we will look for this matter .. just wait
for the meantime PLEASE TRY SOME WAYZ TO GOT FREE INTERNET like on 3g using cheap vpn or free wifi
bm622i is privately confidential now..
@jasminzia
I can change the mac remotely. If you can setup your pc accordingly.
@rootshell
I can provice you remote connections through my disconnected 622i.I make a script to avoid firmware corruption send by ISP through remote cwmp/telnet..My hacked 622 is still working as of now but most of the 622 who dont have the script are being destroyed remotely..I can give you the partition layout of 622..im trying to clone it but no luck yet
http://imageshack.us/photo/my-images/263/sirjef.jpg/
@jef
I have already mentioned about the partition and how to write it.
You will need to make a backup of mtd1- mtd5 in order to clone. Then you can write it back to another unit using tftp.
But the WAN mac address will not change by doing so..
@rootshell
can you give me the link on how to clone 622 partition?lan connections through destroyed 622 lan is dead.i think only serial or jtag can be use fot tftp if uboot partition is not corrupted..
@jef
yes you need serial connection for doing it.
If uboot is corrupted then only JTAG will work.
@rootshell
do you have diagram or location for the pins where can i connect my serial connections?and if i had my serial ,,how can i clone it then how can i upload the cloned bin files to a dead wmax622?
there no needs any scripts on protect the firmware destruction
you only need is the patch
your sricpt not 100% to ptotect the firmware destruction
kill all icmwp
kill all wan
kill etc..
edit and disable configs change admin and disable some remote management
will not wok as well if isp phasing out the bm622 we have nothing to do
patch firmware is 80% work i have my friend on phillipine using my patch and catch the logs of destroyer
we will update the blog regarding this issue
we dnt want many people thrash thier hard earned money to waste..
2 ways to recover from firmware destruct
1, flashing from external programmer
2, jtag === under testing
pls wait and donate thank you
bm622.. have 3 wimax lights signal steady and lan not detected ...........done........ solution post soon........
bm622 blank wan.........done........
bm622 firmware destruction............on progress via xxxxxx ....... pls wait and DONATE thank you
note::::::
please use some other method how to get free internet like free wifi or vpn
donate button is from right side on the blog
press it and donate
your donations will help us a lot for a better webhost,tools and many projects to come.....
thank you very much regarding forum we will think about it
Sir please help us in our BM622 devices. It's a great financial loss to us. Maybe it can still be debricked using jtag and your expertise.
@mugiwara
its illegal thing at first u need to suffer the consequences its the D day or easily called judgement day
firmware destruction is on our project progress.....
please wait and donate to keep our projects updated....
@knytwarrior: yes i am.. why did you ask? many of my friends have their unlimited and free internet with the old wimax.. they told me to search in internet because they cant modify my wimax. until one day i got this site from one of my chatmates.
@rootshell: wow... please.... make my wimax unlimited... ill be very glad if you can do that...
@knytwarrior
my temporary protection script is:
killall web
killall cwmp
killall cli
it is working and my modem is still connected..
this way any remote connections from isp to our wimax modem are not possible..
if you have the logs from the destroyer can you tell which service (web,telnet or cli ,cwmp or others) is using to corrupt bm622 firmware remotely??
@rootshell
hi there .. i just want to ask a hint on how to change mac address of bm622i.. in what way ?? via telnet,jtag or other method .. im not asking you sir the exact procedure ,, just asking for the hint
@rootshell
can you please send it on my email.. just a hint ...
Can we back up files then tftp it in the bricked device then boot it?
@all
temporary scripts and disable remote management or etc that posted on some forums
will not protect your modem on destruction...
regarding how they do it isp know whos legal and illegal now so be careful..
@jef they using the backdoor method they can access the modem then they erase it.. that why i said ur command will not totally protect and not recommended
many people also run your command but still thier modems get detroyed
someone tell me that ur isp run scripts by batch on following areas so u get lucky your modem survive
ill do furher test regardings this issue
about the logs it confidential for a moment coz some isp will known about patching we will made if logs is posted
note: donate button is right side of this blog
@knytwarrior ...
globe telecom access our modem thru our wimax mac ... even we disable the access in wan and lan ... they can access it thru wimax Mac address ..
dsl user has same network ip and public ip .. exam is wan ip and public ip is same while in wimax we usually see our @ 10.28.xxx.xxx but our public ip is 128.xxx.xxx.xxx ..
@jeff .. try to figure out how can we know the ip block of globe so that we can restrict their access thru public ip. dun tayo na aacess
I would like to donate, but I still am a student. I just want to learn many things.
A few months ago I was able to access some of our ISP's files and copy some of it. I was able to open some of their logs.
They are using one server to update their modems.
They had one file that they use for their application.
I don't have any idea on how to open it so I use notepad and as I remember, I think they are using huawei's server?
I really can't remember though.
The modems that were destroyed had package dates of 2009. Maybe may had problems using their backdoor on 2010 package dates.
@mugiwara
yes youre right youre isp is making a move now that whys even you got protect on remoting they can access your modems
the backdoor method process during connecting to the wan and trigger thier scripts....
the ip given by your ISP is connected on the 2nd network
all package will be destroy coz they will know if legal mac or illegal mac connecting to the network ...
lastly please type in english so we can understand..
any updates sir?
RP BM622 firMware......60% on progress 3 KINDS
RP BM622I firmware and hardware modification on progress after my BDay bash.......
RP DV-250 admin hack and telnet hack on progres.....
RP WIXB-175 WITRIBE MODEM HACK ON PROGRESS
THANKS TO MY FRIEND WHO DONATE THE MODEM AND SENT IT TO ME on HK
for bm622i please press the donate button we can do it through remote
your donations will help us a lot
I had a problem with this two model of modems right now...
My bm622 has no signal at all, only the LAN LED blinking...
My bm622 I cant change the MAC address only serial...
How can I hack it sir? Please help me...
I am willing to send donation to you. How can I do that?..
Here's my email address [email protected]
Thanks and more power.
just email rootshell you need paypal to donate
@all email me
for now i got sick i need one week bed rest thats doctor advised..
pause project now after my recovery ill continue on projects
i wish there were modems in USA that we could edit the MAC address on.. WITHOUT needing certs. :/
if anyone knows any.. please share. only wimax device i know of that allows mac editing/spoofing easily is the samsung epic 4g(android phone; galaxy s device for Sprint).
@zarlwilliams
what isp and what modem youve have
so we can give it a try
the only modems in the USA i can seem to find are motorola modems. and here in the USA the only isp for wimax is Clearwire(Clear). mac address and realm must be set for Clear(clearwire-wmx.net = realm). the only modems we can purchase here are motorola modems: moto cpei25150, MOTOROLA CPEi 25725 etc etc. we do not have the bm635 or mb622/i etc here. i would buy one of those if i could find one.. does anyone know anywhere that ships bm635 to USA?
as for the moto 25150/25725/etc... it is possible to get root and change mac i am sure.. but the certificates do not match. a method to only edit mac address would be welcomed :) please tell me what i can do to get the ball rolling. do you need one of our modems for testing? do you think theres a way to no need certificates on motorolas by any chance?
if you need partition dumps of bm622 just email me jackmcright[at]gmail.com
here are some of the dumps
http://www.mediafire.com/?pnrpx5bbdju5g4g
for some reason i cant upload the full dumps cause its about 8-9 mb and i really have a bad internet connection.
and about the serial console it is pretty useless for a dead bm622 cause the bootloader is dead therefore no output @ serial console pads possible options are jtag and External NOR/NAND flasher
BR.
BR
BTW my FW version is
V100R001PHLC08B015
BR
@zarlwilliam
moto modem is prone to heat better than huawei yes u need to match certs
i know US use P1 dv-230 and p1 others modem
and zykel series..
please confirm it if u can buy those modems
sir any updates regarding on bm622i?
@knytwarrior
i believe the dv230 would not work. Clearwire ISP operates on 2.5-2.7ghz. the DX250 might work.. but i have NOT been able to find them to purchase. craigslist.org and ebay.com seem to be the only places that sell wimax modems in USA. only modems i ever find are Motorola Modems.. 25150/25725. Or small usb laptop modems(sierra 250u etc..).
any update on blank wan?.
the firmware destroyer still continouing here in philippines, :(
@rootshell
i can setup my computer for a remote session in order for you to remotely configure my bm622i.. please *crossed fingers*
TIA..
Here is the firmware that destroyed our wimax modems.
http://www.sendspace.com/file/av5cti
Can you please teach me on how to reconnect 622i?
I desperately need it. Thanks in advance.
@all also the bm622i clone affected on firmware destruction
dnt trust any people on some forum that they are RS and KW and claim it that they are the one who discover the bm622i hack
many people scams regarding the bm622i so beware..
bm622 firmware destuct tested ...solution how to revive and patch posted soon
bm622i firmware and hardware patch solution ... tested confidential for now
note: if you will leech this blog please kindly Give Credits to the blog owner RootShell thanks
note: im not member of any forums on the RP like SB,PD,FHM etc..
@mugiwara bm622 firmware is around 8mb not kb
@knytwarrior
I tried updating my defective BM622 with that firmware then after resetting it I had the LAN prob.
sir can u send me tut on BM6225...
hi..
i also want to learn how to change mac for bm622i.. here is my email [email protected] for personal use only..
thanks to RootShell and knytwarrior
Hi all can some one here remotely change the mac addr of my modem
ive already working on this b.m.6.2.2.i for quite long but still no good.
ive tried the UART both on LAN module and WImax Module
the logs at the LAn module
http://pastebin.com/FJAEjE3m
and at the WiMax Module
http://pastebin.com/8FGHzfUT
i cant dump the rootFS on this 622i forsome reason the modem just hangs up in the process of dumping(telnet).
and yeah i dont have a NOR / NAND flasher to completely dump the entire FW,
i also dun know the JTAG pins on this Device .
hi im also waiting for the release on how to revive our 622... after that we be sure to donate on your site..
thanks
more power ^_^
hi
I'm using the Bm622 but it's really cap at 512kbps, so you have tricks to uncapp it please help me!!!!I have many mac adrs from another people who have 4mbps but when I use the same mac adrs the connections get stuck!!! please help
thanks
im using bm622i but for now its disconnected so im waiting for you master for the tutorial hope it will release soon ........so i can have a connection....pls...
i hope you could send a tut for BM622 and BM625...
im having a lan problem........
I need tutorial changing MAC address of BM622i
willing to donate via PAYPAL for the tutorial
Email: [email protected]
I had a problem with this two model of modems right now..
my problem is bm622 lan problem. pls send me in my email the link of the solution of the problem.
solution pls?
my email: [email protected]
I will donate promise!!!
can you give a firmwre of bm622 pls give a link!
my is [email protected]
sir could help me for my bm622, bm622i and bm625..
im willing to donate also. it can be via g-cash or via paypal....
please pm me.. [email protected]
hi.. i am glad to donate any amount, i beg you please teach me how to clone/hack my bm622i... i will make sure that no one will know and keep it a secret unless you permitted me to do so... @ks, kw
i will donate any amount, once my bm22i has been cloned/hacked, i will donate right away.. please email me.. [email protected] im not able to email you since you deleted your email, maybe you got spammed?? XD dont worry about the email i posted, thats my niece's email and not that important.. it's just an email for her fb account to get verified.. thanks, i will wait for your reply...
sir .. when you want to post the tutorial about bm622i ?? thanks in advance :))
I have started wimax hacking for the last few days. Have done quite some useful stuff. Please have a look at
https://groups.google.com/group/wimax-hacking/browse_thread/thread/33b52984d0837320
https://groups.google.com/group/wimax-hacking/browse_thread/thread/89f171b0b574a861
It's a Sagem gigaset SX682. Any help would be greatly appreciated!
sir .. how to recover blank wan wimax ??
HOW TO CHANGE ZTE AX226 WIMAX USB MODEM MAC Address.
@Blu3 D3v1L
Sagem gigaset SX682 looks interesting. I don't have this modem, it's not available here.
@Root Shell
Can you teach me how to change the mac add of my bm622i.
@GSC4u
There are concerns not to reveal or release the bm622i mac change method to public as it will affect many users. Also there's concern that the ISP might remotely destroy the BM622i modem like they did with BM622. Lastly there's chance of bricking the modem if something goes wrong during the procedure.
I am keeping the method confidential.
hey..changing Mac on a BM622i its kewl men.. Im interested to learn it
busy for some other project keep it up guyz!!!
can you give us the jtag points for bm622 and bm622i thanks
hi sir, can you give me the tuts how to recover blank wan for BM622?
sir..any updates?
do we need to donate first before you will give the tut? when you will post it. im willing to donate on my paypal.
I need this thing right now, then I'm going to terminate my subscription.
@rootshell Yes i understand that.. i know these guys doesnt want bm622i will be crashed by the ISP incase the tutorial released.
But my only concern is.. many of them making this trick as a business here in the philippines.. lets all share the blessings though..
pm me anybody wants active mac with serial of bm622 wimax globe
any body want 2 know tutorial of bm622 change mac and serial to get access internet post a comment
txt me who r interested 09223543336
@knytwarrior can you help me sir? I managed to reconnect my Globe Wimax BM622 modem but for some reason my internet connection is not stable it keeps on DC'ing every 30 to 45 minutes...
pls send me tutorial for bm622i thanks!
what about the motorola cpei35775?
please send me the code for BM652w
Can you teach me how to change the mac add of my BM652w.
hi there author..
i have here Wimax Bm622, has power,lan, and signal indicator all active.. ive tried some software on the net about changing mac address and i found out working(of changing mac add) the only thing is...STILL there is no connectivity..still cannot browse internet.Is this a MAC address issue or connecting frequency of the modem? Is BM622 is still alive? by the way im from Philippines..
if you can spare time reading and answering on my questions sir author, please do.
thanks a lot..
[email protected]
oh 1 thing, if this is Mac address issue, can i have 1 working mac address for i can test it and make my modem connected again? ty
Trade my PS2 for a Tut of Wimax bm622i email me [email protected]
hello how to donate it this for i need the tut of bm622i to change the mac..
Thanks
sir ,,, gud day.. i have a HUAWEI BM622i modem that has been locked and cannot changed the MAC address.. due to the issue's happening in our country lot's of BM622 are not working anymore due to the said "FIRMWARE DESTROYER". our only hope is the BM622i.. and you said in your blog that you can easily changed it..sir please share to us the knowledge you have how to changed the mac address of the BM622i..hoping for you reply... waiting and thanking you more....
hi.i have bm632w and wana to change mac address.
setallmacaddrs command is not work in this model.
what do i it?
i found an update for this model... can every one to change this update to changing mac address.
plz help me.
thanks
http://wimax.irancell.ir/Webfiles/Files/download/config_install/BM632w_V100R001IRNC20B017.exe
@all sorry for no update were are very busy right now ...
regarding the bm622 firmware destroyed yes you can read it and flash it by willem programer
i use my trusted ezo flash and it worked but you need little patience coz willem SW is not supported 64mb
just use google how to do it
many people asking me this? is it possible to break the 2011 firmware of bm622 ?
my anwer: Yes you can write the old firmware or partition to your new bm622 2011 firmware no need a programmer just rs232
why you dont release the hack of bm622i???
ans.. its for security purpose you can explore all you want if you have progrmmer
the hassle is you need to desolder and resolder the flash chips
got to go guys im going to work my thesis projects on microcontrollers im a little bit busy...
goodluck....
suck my dick. confidential my ass.
as the well known saying goes.
WORD TO YOUR MOTHER!!!!!!!!!!!!!!!!!
oohhh...
knyt. if i donate on paypal will you give me the tut on bm622i. or remote control my pc?
sir,
i have motorola CPEi 35600. and want to change MAC address. please help me. i can pay u.
sir can you tech me in bm622i?
pls help me share the bm622 firmware.. TIA
i have little hint regarding 22i, hoping it will work..
Wishing that you'll release the bm622i mac change, been waiting for ages.. (sigh)
how to hack wimax 622??
i need tutorial for bm622i..please help
too many leecher heres
watch your word weepiz....
@knytwarrior watch my word? or what?
what are you gonna do if i dont watch my word?
dumbass u cant watch words! what kind of eyes do u have that u can watch words! hahahahahahha
as the famous saying goes!
WORD TO YOUR MOTHER!!!!!!!!!!!!!!!!!
can you send me firmware of bm622
any package date would do..
email [email protected]
tnx..more power.
i need firmware to continue studying about blank wan and lan led only problems.
any package date would do..
but it's better if 2009 or 2010.
tnx a lot.. :)
sir can you teach me how to change mac addr bm 622i ty email [email protected] ty
sir can you send me the tutorial of bm622i need it for my unit to work thanx ....heres my email [email protected]
pa share din po.. [email protected]
Hey this is interesting, is there any method to change Intel(R) Centrino(R) WiMAX 6250 Mac Address ?
sir can you teach or send me the tutorial of bm622i need it for my unit to work thanx ....heres my emai [email protected]. thanx again
HELLO SIR CAN YOU TEACH ME HOW TO SET TLS mode ON ZTE AX226 to be connected only with the mac address. thanks
hello, can anyone help me setup my ZyXEL MAX-200M1? i need to make it work with globe wimax here in the Philippines. thank you.
meron pa ako pang change mac ng bm622 bm621 bm625..
swap po sa pang change or firmware sa bm622i email me [email protected]
MGA IGAN HELP NMAN JAN FOR BM622i.... pls
im using bm622i but for now its disconnected so im waiting for you master for the tutorial hope it will release soon ........so i can have a connection....pls... or email me at [email protected] im still waiting.. more power root shell.
can you please help change mac on my 622i. it'sbeen "connecting" since last month and this is already hacked but i can't see anymore the hacker so i am in deep trouble connecting it. please help me...
[email protected] is my email please help me i will donate promise
Hi,
I got a wimax bm622 package date 2011. how can i downgrade it to 2009. already got the firmware for 2009 the problem is i dont know how to upload the firmware.
check this blog http://blogmytuts.blogspot.com/2012/11/how-to-change-bm622i-wimax-mac-via-spi.html
Hello,
Do anyone have bm622 2009 firmware? as i know how to upload it i really need it.... email me at [email protected]
teach me how to downgrade wimax bm226i 2011 to 2010.. please.. this is my email [email protected]
i need the default certificates for the Huawei BM652w
rootcacert.pem
cpecert.pem
cpekey.pem
i have a greenpacket dx230 i want to use on the same network as the above and i need to match the certs
thanks
pm me [email protected] ym&fb same account i will help you in wimax change mac and lanled display and for blankwan i will give u a tip to repair that
:)
for bm622(2008-2011) bm625 bm622i(2010-2011) i will help u how to change mac&auto generating adminpass, i will give i software.. :) pm me @[email protected] ym&fb same account :)
after changing my mac address... i cant see my wimax status... why is that so??? please help me...
im using wimax bm622i(2011)
To R00T$H3LL I have attached link here the Huawei Echolife BM622 JTAG Serial pinout hope you can reply on my comment if this is the right pins. And also to the other silent hackers out there who wanted to share their knowledge. Thank you more power.
Sigh... I guess I wasted my time reading all these posts here...
All I see is:
bm622 hack is under progress and will be released soon blahblah blah...
please donate blahblahblah..
Then later on...
This hack is confidential for security reasons blahblahblah..
can you hack bm622m 2013 please help
zyxel max 306mr2 wimax cpe mac repair pls help??
Can you help, i got bm652w with tel Led and signal Led always on, and when i plug in the lan cable i got no ip on my PC (sometimes ip 169.x.x.x) is something wrong with it?
Thank you
i hav a BM622i 2010 gmagana cya 4G location pro sa 3G location hndi..sabi frnd ko sa MAC addr may deperincya, palitan ng MAC addrs pang 3G pra gumana sa 3G network????????
Please help me find mac address for bm6221i 2011 ..
Please if there is someone who is online at this moment and read my message please reply immediately , , i really appreciate the help of someone who will respond as soon as possible thank you ,, Godbless
Please help me. I want to change my bm652w mac address. I tried the command setallmacaddr but I get the following message :command failed. Can someone explain to me how to proceed to change bm652w mac address? Thank.
brother from Bahrain what about bm632w (it has backdoor exploit) can you help me with that a little
Please help me. i want to root my green packet dx250 to internet
Good day to everyone here.
I use huawei bm632w in Nigeria and i have updated it to BM632w_IRAN_V100R001IRNC15B015 but now i want to change mac address and breconnet to network. i have tried setallmacaddr command and it was failed (not work in this model).
what can i do to reconnected ,
thanks
Post a Comment