FRANKLIN T10 AKAXHG-RT410 THREAD

[Rich Hathaway]

Someone sent me this device to look at and since I just did the T9 I took a look at it.
It is basically just a t9 with a slightly bigger screen and a slightly diff board layout but almost the same
It is so similar I loaded t9 firmware to it and it runs fine with it.

You can see here my clone of t9 firm running on the t10

t10-t9 firm.png

partitions are all the same for the 2 devices
This is my t10 firmware

t10 firm.PNG

as of now there is no easy way to open the ports on the t10
I have not yet decrypted the backup/restore config to try that way, I will do that next.

anyone else have info on this device?

[Pausedagame]

Ok I have a t10. I want to unlock it or get it to where I can use T-Mobile MVNOs on it. I tried a boost mobile sim and family mobile sim as well as a T-Mobile sim that was already activated to a cell phone. I tried changing the APN to a dozen different things. No internet still. How difficult would it be to flash t9 firmware to it and then unlock? I have no PC and have never flashed anything. I wish I could just unlock it somehow. It has a place to enter an unlock code but everyone says it’s impossible. The why did they include a place where you can put an unlock code? Besides I think there is FCC regs that make it so there has to be a way. I’m sure T-Mobile has a way to generate a code but will only reveal if forced by law.

[giggahost]

Where can i get ahold of the t9 firmware you are using? have you tested it?

[Rich Hathaway]

Where can i get ahold of the t9 firmware you are using?

It is not a public file, I have not posted it anywhere.

have you tested it?

Not really, I made it for the T9 and have tested it on that device fairly well but did not do much if any testing
on the T10 besides loading it and running it for a few min, I do not use this device I just happen to have gotten one and noticed that it is very similar to the T9 and could not find any reason it should not run and being they take the same loader
I ran my T9 firmware tool on it and it ran to completion and booted up ok, there were no boot-loops or anything, that was
the extent of my testing on the T10.
My T9 firm I made is an unlocked firmware, it did appear to unlock the T10 also.

[thehonstman]

A friend gave me a few of these T10 routers a couple of months ago. I've been trying to open ports and make some other changes, but unfortunately, I ended up bricking two of them. I’m thinking of flashing the T9 firmware on the last one to test it out. Any advice or guidance on how to do this would be appreciated!

[Rich Hathaway]

make a raw dump containing the spare and use that for the t10, as long as your nand registers and nand controllers are correct it will should load and run fine, however , be smart and first make a backup of the t10 in case it goes wrong so you can at least get back to a working device.

[jkeiper78]

Are you going to post the files for this project?

[Rich Hathaway]

I had not planned on it, that would lead to about a thousand emails and msg's for support for all the people that mess their devices up fooling with it. cross flashing is very risky and I did not test this at all other than letting it run for a day, I have not even picked up a t10 since that day.

[un1xgirl]

I had not planned on it, that would lead to about a thousand emails and msg's for support for all the people that mess their devices up fooling with it. cross flashing is very risky and I did not test this at all other than letting it run for a day, I have not even picked up a t10 since that day.

I am interested in this. can I be provided the files, I understand the risks involved and I won't email you if I mess it up.

[un1xgirl]

I have managed to gain a console shell on the T10 over its TX and RX pads but I am unaware of the root password. would you happen to know?

[Rich Hathaway]

I gained my root access thru the adb port so I never needed the root pass so I never bothered to decrypt it, try frk9x07
that was it for the t9 and this one has the same chip so it may work. if it doesnt you can decrypt it by brute force use md5crypt to do it.

[un1xgirl]

will try that. also would you be able to provide me a full firmware dump of the T10 itself? I'm unsure about how to go about obtaining it.

[un1xgirl]

the password is sadly incorrect

[un1xgirl]

(I think a better question would be providing me the T10's /etc/shadow file)

[Rich Hathaway]

will try that. also would you be able to provide me a full firmware dump of the T10 itself? I'm unsure about how to go about obtaining it.

Ok for this one I will.
This is a full dump of the firmware broken down to individual partitions for you with the spare and sums removed already.
If you take the file please at least hit the thank you before you take it, it is a small thing to do for all the work it
took to dump this device.
You can pull the shadow file yourself it is in the system part.

T10_firmware.zip

[un1xgirl]

currently trying to get the root passwd using hashcat. hopefully it works.... (brute force using the length of the T9 password with the prefix frk)

[un1xgirl]

Sadly this didn't work (tried several times with different approaches and none of them produced a correct password)
Would you be interested in taking a stab at it?

[Rich Hathaway]

why dont you post it here and let the community try it, have you checked to verify it is md5crypt?

[un1xgirl]

if anyone wishes to try
"root:$5$6GJ98vnBkIYANFyb$eDCRyRUY7q5T89XvV/jdWtIN69VkMlkqrMDqoRcY"

[mcord17]

hey, i know this is kinda random branch of this topic, but you guys seem to be the most knowledgable AND active place on the internet, so bear with me for a second, if you could...

so I just happen to get a really good deal on 300 of these t9's that i couldnt pass up, we're talking pennies for each one lol.

I was hoping i could use them for my side hustle, providing otp activations for smshub.org but in order to do that, i would need access to the device via com port to send at commands and unfortunately I cant seem to make that happen. Same deal with the t9 and i got access through ssh and tried damn near every single usb_composition option there was.

Im new to working with networking hardware, especially 4g hotspots... if anyone could help me out, i'd gladly send you as many t10's as you want to toy around with. seriously, ill send you 20 if it can make the rest of them useful for me =]

[Rich Hathaway]

I am the owner of autoverifyme.com the original sms verification service, we used real USA numbers not virtual numbers, it became to difficult to get numbers for us so we took it down. we still have the tool though. virtual numbers would never work to verify most of the services our clients needed them for like google, craigslist, reddit etc. are virtual numbers working to verify those now or something?

[BillA]

I am the owner of autoverifyme.com the original sms verification service, we used real USA numbers not virtual numbers, it became to difficult to get numbers for us so we took it down. we still have the tool though. virtual numbers would never work to verify most of the services our clients needed them for like google, craigslist, reddit etc. are virtual numbers working to verify those now or something?

Looks like that Russian site is using real numbers for certain services like Google etc. and they aren't cheap, around $20 for half an hour.
While they claim not to reuse them, doubt that... lol You might as well buy a cheap prepaid cellphone SIM to get verified. heh

[Rich Hathaway]

I had worked on getting a legit contract from Verizon for a year, we had the details ironed out and they were going to sign in a week we were going to be partners then all the sudden they did a 180 the next week they implemented into their system to only allow 3 MDN changes per cycle and told me to pound sand. it was to bad that tool was doing on a good day half a million sms, we had thousands of lines. it was sad to take it down.

[BillA]

I had worked on getting a legit contract from Verizon for a year, we had the details ironed out and they were going to sign in a week we were going to be partners then all the sudden they did a 180 the next week they implemented into their system to only allow 3 MDN changes per cycle and told me to pound sand. it was to bad that tool was doing on a good day half a million sms, we had thousands of lines. it was sad to take it down.

You may want to test some MVNO lines which are basally wholesale, as you know some actually use the APN "wholesale".
They usually don't have as many restrictions as the main carrier's retail lines for MDN or SIM changes.

Back around 2005, didn't you have some kind of VOIP calling card type product sold on Ebay? Not sure why you came to mind, I might be wrong.
Around that time, I developed a VOIP based unlimited calling system which worked on some carriers (like PagePlus). A customer would call my access number, hang up without connecting, and immediately my system would them back with the customer's own spoofed callerID, which was a free call back then, since mobile-to-mobile calling was free. Then the customer would enter the number they wished to call, and my system would complete the call essentially providing unlimited outbound calls to any US/Canadian number and some international too. Back then unlimited calling wasn't available by carriers, so I made my own, and sold it on eBay as an "Unlimited Cellphone Calling Card". Making a pretty good living for a couple of years till carrier started offering unlimited calling too. Good times back then, it was the wild wild west with very little notwork security. heh

[mcord17]

regarding your question rich, its a bit of a mixture these days, voip and real phone numbers. for the obvious reasons. real mobile phone numbers successfully recieve the OTP at a rate of nearly 10 to 1. but on the other hard, voip numbers are extremely cheap and you dont need to pay for sim cards, or pay for shipping and wait for them to come. you dont have to the unbox each sim card and stick in your modem. you dont have to do anything at all, actually. once setup, it should run smoothly all by it self and only occasionally need something updated if your system stops functioning because the api got updated or something..

anyway, the company i work with has a windows based program that runs on your pc and detects and manages all cellular modems and communicating with their service. BUT the problem for me is that they only support certain cellular models like seirra wireless em7455 doesnt work, neither does the t9 or t10 and although my 64 quectel's work fine with it, i have so many other modems i could be also using and earning daily with each one.
So i mention all that, because im currently tempted to build my own application that simply detects all the modems i have, and update it whenever i have a new modem model i want to use. then its as simple as writing a python script the forwards any and all receieved codes to their server ASAP.
so its funny you mention the software you built but never got to use, because im thinking about doing the same thing. seems like it shouldnt be very difficult or complex.

is there any youtube videos or docs still floating around about your software? or did it never get released? just curious to see it, what kinda of features you included and didnt bother with

[mcord17]

hey, i know this is kinda random branch of this topic, but you guys seem to be the most knowledgable AND active place on the internet, so bear with me for a second, if you could...

so I just happen to get a really good deal on 300 of these t9's that i couldnt pass up, we're talking pennies for each one lol.

I was hoping i could use them for my side hustle, providing otp activations for smshub.org but in order to do that, i would need access to the device via com port to send at commands and unfortunately I cant seem to make that happen. Same deal with the t9 and i got access through ssh and tried damn near every single usb_composition option there was.

Im new to working with networking hardware, especially 4g hotspots... if anyone could help me out, i'd gladly send you as many t10's as you want to toy around with. seriously, ill send you 20 if it can make the rest of them useful for me =]

UPDATE: I have got 1 of the 50 t9's COM port visible on windows....
still 0 out of 330 T10's working

lol still hoping someone can shed some light on this for me, would be much appreciated =]

[Rich Hathaway]

autoverifyme worked for several years and besides my iphone tool it made more income than any tool I made, it had about a million lines of code, we used cdma phones and had about a thousand of them, the client would buy x amount of lines from us we used pageplus mostly but some vzw direct also, anyways they buy the lines then log into avm and select which of their lines they want to use then avm would ota a cdma phone to that carrier and number then they can have the service they are trying to verify send the number/sms and avm would be listening on that line and when the sms came in it would forward it back to them via api, forwarded sms, email or really any way they chose then when finished avm would log back into the lines account and change the lines phone number and do it again, it would keep track of everything even down to when the line needs to be paid and all numbers and sms and timestamp everything, it was a very complex and fully automated process, my partner and I both had autoprogram tools, he had wirelessworkshop.com and I had cdmaiphonetool.com so we already had alot of what we used for avm, the hardware was in his attic and man the heat up there and the electric bills lol. we were paying out 50k + for lines, most of our clients were indian they used to buy 1500 lines at a time to use with the tool, so eventually we made a tool that we just had to press run and it would call verizon or PP and create lines without us having to do anything, I could set it to make 200 lines and come back in an hour from lunch and it would be done. my wife and the girls that worked for us did so many of them we made a victoria secret looking tool for them to use so they wouldnt get so sick of looking at it lol

mifi tool.PNG

Those were the good ole days it was easy to make $ in this biz back then, not so much now.
anyway now that this thread is completely hijacked, I made a custom firmware for T9 that has hard coded ports enabled.
the t10 I did not spend much time with other than load t9 firm on it and verify it would run, it was not a funded project so I put it down and have not messed with it since then, but im sure you can enable the ports on that one also or it would not have them at all written into it.
BTW that pic is not autoveryme its just one of the first versions of our ota tool and one of the first mifi auto one click flasher tools we made.

[mcord17]

that part about the victorias secret custom skin cracked me up lol

damn, it seems like you're an OG in the otp verification industry. I'm glad I mentioned what I was doing, otherwise I might never have known that about you.

your whole setup sounds really impressive. I wish I could build automations with that level of complexity. I've always been fascinated with the idea of automation, so even though i didn't get into coding professionally, i've always been a tinkerer and hoped to one day learn to code well enough to build some serious automation processes, as oppesed to like, you know, very narrow and targeted automations. I call them (jokingly) one step automations. lol Luckily I've found the time to teach myself to code in the last couple of years and have started making some cool automations here and there, using a few different tools. Nothing as complex and reliable as yours, but cool things nonetheless.

sounds like you had a very profitible setup, and the industry was still very young, i'm curious to know what happened, why did it shut down?

Feel free to respond in a private message if you prefer not to talk about it quite so publically. I totally understand.

In fact, I hope you do PM me, I'd love to pick your brain, you must have some great insights into the business, having gotten into it so long ago. I actually wish I knew more about you, so i could offer you something I knew you were interested in. I hate asking for someones time without at the very least bringing something to the table. Maybe I can pay you to do some consulting for me =]

Just a thought, let me know what you think.

you can also email me at admin@audioplexdesigns.com

[Rich Hathaway]

I had worked on getting a legit contract from Verizon for a year, we had the details ironed out and they were going to sign in a week we were going to be partners then all the sudden they did a 180 the next week they implemented into their system to only allow 3 MDN changes per cycle and told me to pound sand. it was to bad that tool was doing on a good day half a million sms, we had thousands of lines. it was sad to take it down.

Thats why we took it down, only being able to change numbers 3 times a month was a dagger for avm, I would put it back it bk up in a second if I had a way to do more number changes on lines.

[mcord17]

I just insert new sim cards every 3 or 4 days, thats how I get a new number as often as I need them. Then again, having a master-agent deal with each of the big 3 cariers and a lot a MVNO's does allow me to activate service in bulk and at a better price than most others..

so, mr hathaway, what are the odds that I could take a look at your software? maybe we can work out a licensing agreement or a sale or something

[Rich Hathaway]

We could talk about it but as is it will not work now it is coded for use with a cdma network like vzw used to be, now having said that we did make a hack that allowed gsm lines to be programmed to cdma devices I am not sure if it still works its been like 3 years since I have tried it, you can msg me away from here to discuss it, my contact info is readily available here and all over the web