Wireless Joint

This looks authoritative:

https://github.com/0xBAADF0OD/netgear_m ... T-commands

Maybe I've got the solution:

1) remove the SIM card, and reboot
2) send these commands:

AT!OPENLOCK?
AT!OPENLOCK="<response-to-challenge>"

AT!OPENMEP?
AT!OPENMEP="<response-to-challenge>"

AT!NVMEPRST

AT!GRESET

In the M6 QCMAP_CLI is a menu driven text interface. I can't figure out how to exit - except to just close the telnet session. I don't see any options to unlock, or reveal unlock codes. Rich, where can I find a breakdown of how you "unlocked thru the raw filesystem for m1 and m5"?

Oh, that's what you meant,

/usr/bin/QCMAP_CLI

Thanks Rich. I'm definitely not finding any file named "nwcli". There are about 160 files containing "qcmap" though. Where can I find a breakdown of how you "unlocked thru the raw filesystem for m1 and m5"? Maybe that's a valid solution for the M6 too. I've now got a te...

What AT commands are involved in unlocking an MR6400 for which the SIM Lock status is "Locked (PH-SP PIN)"? So far, I've deduced that "sierrakeygen.py -c xxxx -d SDX55" can be used to respond to the challenge generated by AT!OPENCND? //Query "PP" Service Provider Person...