Aerix V0.99 - Unlocking Sony Ericsson 2 Access

AerixTeam | Date: 20XX-XX-XX | Section: SE Modding & Flashing

unlockSE2 ❓ FAQ Q: Will this work on my W995? A: No. W995 is DB3210 (CID53/54). We’re working on it. Aerix v0.99 - Unlocking Sony Ericsson 2

We discovered that SEMC’s loader (version 3.2.4.5) has a during GDFS write operations. By sending a malformed WRITE_GDFS command with a specific nonce (derived from phone’s internal RSA modulus), the loader jumps to an insecure RAM routine instead of aborting. AerixTeam | Date: 20XX-XX-XX | Section: SE Modding

P.S. If your phone hard-bricks, short C123 and C124 on the PCB for 2 seconds. That resets the security zone. Not all heroes use testpoints. Aerix v0.99 - Unlocking Sony Ericsson 2