[GUIDE] Modding your Firmware

[kundancool]

This thread would be the collection of all possible hacks and mods that you can make to your firmware

I will add posts regarding how to mod your Firmware of your Phone and how can you add features to your firmware of your own since many users want to do by themselves but don't know how and where to start so you can start from here

I will update this first post of the thread so that everyone can get what they want in one click

Please use this thread as a GUIDE not as discussion thread for modding firmware if you can't find what you are looking for then ask that question in creating the thread for your question in respective forums I will try to answer you as soon as possible

I hope you will like my contribution

Mod List
>>> Add Telnet option in USB mode
>>> Change the name of the Firmware
>>> Hack Application Manager to allow use of non signed application
>>> Add Custom Wallpapers to firmware
>>> Add Custom Ringtones to your Firmware
>>> Add Telnet, Samba and FTP to your Firmware
>>> Add Startup script feature to firmware
>>> Add Busybox to your firmware
>>> Add Custom font to firmware
>>> Enhance/Loud Audio output of your firmware
>>> Add Custom Startup/Shutdown Animation to firmware
>>> Add/Remove Custom Splash image for Inbuilt Opera browser
>>> Enable SMS delivery report on/off
>>> Add Foxalarm (Advaced alarmclock) to firmware
>>> Add new application to firmware
>>> Add MPKG Hack to firmware
>>> Allow changing of all 4 Home screen shortcuts
>>> Add copy and paste option to Calculator
>>> Add bookmarks to Default Opera browser
>>> Add new MIME types to firmware
>>> change FM minimum frequency separation by prasannars
>>> Add custom PATH values to firmware
>>> Add Email server configuration to Firmware
>>> change system sounds by prasannars
>>> change alret volume in Vibrate alert by prasannars
>>> change search order Priority of media files in Real Player by prasannars
>>> enable signature always on for outgoing sms by prasannars
>>> set MMS Delivery Report & Read report always on by prasannars
>>> change default Bluetooth device name by prasannars
>>> Turn-off The Event on Standby Screen by HendZ
>>> Set Phonebook default view to Thumbnail by Manasa
>>> Custom settings for your firmware
>>> Add custom application to Hardkey or Browser key
>>> Custom Bluetooth settings
>>> Add fingerpad to firmware
>>> Add Multi Java to firmware
>>> Add custom theme to firmware
>>> Add Java apps to your firmware
>>> Enable/Disable RCSMS (Reject Call SMS) in Firmware
>>> Add/Remove Network Profiles



Needed Files
EZXCODEC
Notepad++ (Good editor)

To start Modding a firmware first you decide which firmware you want to mod like if you want to mod Generic firmware or pre-modded monsterpack
start EZXCodec then browse the location where you want to extract the firmware and select the firmware you want to extract and start modding

[kundancool]

Go to cramfs-root-CG37
and edit ezx_security.cfg file
and make changes according to settings shown below.

[SYS_FLEX_TABLE]
0 = 0
1 = 0
2 = 0
3 = 8650752
4 = 0
5 = 536870912
6 = 0
7 = 512
8 = 0

now save the file and compile CG37.smg

[kundancool]

To change the name of the firmware
Go to cramfs-root-CG43/etc
and edit ap_version.txt
and change the name of the firmware to whatever you want for e.g

ROKR Monsterpack

and save it.

[kundancool]

As we know that Stock firmwares like 22P comes with restriction on Applications that can not run which are not signed by Motorola to overcome this problem we need to hack Application Manager of our firmware to do this

Required
A Hexeditor program (which ever program suites your needs)

Go to cramfs-root-CG43/usr/SYSqtapp/am/
and open the am executable binary with the hex editor program and change the HEX values using search option to find them

Find
00 00 50 E3 00 80 A0 E1 72 00 00 BA 40 70 8D E2
Replace with
00 00 50 E3 00 80 A0 E1 72 00 00 EA 40 70 8D E2
Find
D0 4D E2 01 60 A0 E1 01 00 A0 13 28 30 85 15 01 00 00 0A 98 D0 8D E2
Replace with
D0 4D E2 01 60 A0 E1 01 00 A0 13 28 30 85 15 01 60 A0 E1 98 D0 8D E2

Now save the file

[shantanu]

Nice info brother

[kundancool]

Go to cramfs-root-CG34/picture

and remove or add new wallapers to the firmware

For better quality and performance use Wallpapers of resolution 240x320 (Screen resolution of Phone.)

[kundancool]

Go to cramfs-root-CG34/ringtone

and remove or add new ringtones to the firmware

For better quality and performance use .mid ringtones as they use less space and give good quality sound
you can use .mp3 .wav file as well

[kundancool]

To add TELNET SAMBA FTP

Download the sbin.zip from attachment and extract it

copy in.telnetd inetd smbd tcpd in.ftpd to cramfs-root-CG43/usr/sbin
copy telnetlogin to cramfs-root-CG43/usr/lib

then Go to cramfs-root-CG43/etc
and open inetd.conf with editor and add/change the data as below to add telnet and FTP to service

# See "man 8 inetd" for more information.
#
# If you make changes to this file, either reboot your machine or send the
# inetd a HUP signal with "/sbin/init.d/inetd reload" or by hand:
# Do a "ps x" as root and look up the pid of inetd. Then do a
# "kill -HUP <pid of inetd>".
# The inetd will re-read this file whenever it gets that signal.
#
# <service_name> <sock_type> <proto> <flags> <user> <server_path> <args>
#
# echo stream tcp nowait root internal
# echo dgram udp wait root internal
# discard stream tcp nowait root internal
# discard dgram udp wait root internal
# daytime stream tcp nowait root internal
# daytime dgram udp wait root internal
# chargen stream tcp nowait root internal
# chargen dgram udp wait root internal
# time stream tcp nowait root internal
# time dgram udp wait root internal
#
# These are standard services.
#
# ftp stream tcp nowait root /usr/sbin/tcpd wu.ftpd -a
# ftp stream tcp nowait root /usr/sbin/tcpd proftpd
ftp stream tcp nowait root /usr/sbin/tcpd in.ftpd -4 -8 utf-8 -9 gb18030 -e -M -U 002:002 -z
#
# If you want telnetd not to "keep-alives" (e.g. if it runs over a ISDN
# uplink), add "-n". See 'man telnetd' for more details.
telnet stream tcp nowait root /usr/sbin/tcpd in.telnetd
www stream tcp nowait root /bin/httpd httpd -i -h /

#nfs/2 dgram rpc/udp wait root /usr/sbin/rpc.nfsd rpc.nfsd
#nfs/2 stream rpc/tcp wait root /usr/sbin/rpc.nfsd rpc.nfsd

# smtp stream tcp nowait root /usr/sbin/sendmail sendmail -bs
# printer stream tcp nowait root /usr/sbin/tcpd /usr/bin/lpd -i
#
# Shell, login, exec and talk are BSD protocols.
# The option "-h" permits ``.rhosts'' files for the superuser. Please look at
# man-page of rlogind and rshd to see more configuration possibilities about
# .rhosts files.
# shell stream tcp nowait root /usr/sbin/tcpd in.rshd -L
# shell stream tcp nowait root /usr/sbin/tcpd in.rshd -aL
#
# If you want rlogind not to "keep-alives" (e.g. if it runs over a ISDN
# uplink), add "-n". See 'man rlogind' for more details.
# login stream tcp nowait root /usr/sbin/tcpd in.rlogind
# login stream tcp nowait root /usr/sbin/tcpd in.rlogind -a
# exec stream tcp nowait root /usr/sbin/tcpd in.rexecd
# talk dgram udp wait root /usr/sbin/tcpd in.talkd
# ntalk dgram udp wait root /usr/sbin/tcpd in.talkd
#
#
# Pop et al
#
# pop2 stream tcp nowait root /usr/sbin/tcpd in.pop2d
# pop3 stream tcp nowait root /usr/sbin/tcpd /usr/sbin/popper -s
#
# Imapd - Interactive Mail Access Protocol server
# Attention: This service is very insecure
# imap2 stream tcp nowait root /usr/sbin/tcpd imapd
#
# Comsat - has to do with mail.
#
# comsat dgram udp wait root /usr/sbin/tcpd in.comsat
#
# The Internet UUCP service.
#
# uucp stream tcp nowait uucp /usr/sbin/tcpd /usr/lib/uucp/uucico -l
#
# Tftp service is provided primarily for booting. Most sites
# run this only on machines acting as "boot servers."
#
# tftp dgram udp wait nobody /usr/sbin/tcpd in.tftpd /tftpboot
# bootps dgram udp wait root /usr/sbin/bootpd bootpd -c /tftpboot
#
# Finger, systat and netstat give out user information which may be
# valuable to potential "system crackers." Many sites choose to disable
# some or all of these services to improve security.
# Try "telnet localhost systat" and "telnet localhost netstat" to see that
# information yourself!
#
# finger stream tcp nowait nobody /usr/sbin/tcpd in.fingerd -w
# systat stream tcp nowait nobody /usr/sbin/tcpd /bin/ps -auwwx
# netstat stream tcp nowait root /usr/sbin/tcpd /bin/netstat -a
#
# End.

and save it.

now Go to cramfs-root-CG43/etc/samba/
and edit smb.conf and add data as below to add extra excess to files using Samba

[global]
# workgroup is either a domain name or a workgroup name
workgroup = WORKGROUP
#
# encrypt passwords is required for Win98, NT and Windows 2000
#
security = share
encrypt passwords = yes
force create mode = 0777
create mask = 0777
create mode = 0777
directory mode = 0777
strict sync = yes
sync always = yes
interfaces = usbl0
null passwords = yes
# guest account = root
[system]
comment = Ezx System Folder
path = /
read only = no
guest account = root
guest ok = yes
force create mode = 0777
create mask = 0777
create mode = 0777
directory mode = 0777
# force user = root
[home]
comment = Ezx User files
path = /home
short preserve case = no
read only = no
guest ok = yes
guest account = root
orce create mode = 0777
create mask = 0777
create mode = 0777
directory mode = 0777
# force user = root
[mmc]
comment = Ezx User files
path = /mmc/mmca1
read only = no
guest account = root
guest ok = yes
force create mode = 0777
create mask = 0777
create mode = 0777
directory mode = 0777
# force user = root
[phone]
comment = Ezx User files
path = /ezxlocal/download/mystuff
read only = no
guest account = root
guest ok = yes
force create mode = 0777
create mask = 0777
create mode = 0777
directory mode = 0777

and save it.

now configure Telnet Go to cramfs-root-CG43/etc/
and edit passwd file and add data as below

root::0:0:root:/:/bin/bash
bin:*:1:1:bin:/bin:
daemon:*:2:2:daemon:/usr/sbin:
sys:*:3:3:sys:/dev:
adm:*:4:4:adm:/var/adm:
lp:*:5:7:lp:/var/spool/lpd:
sync:*:6:8:sync:/bin:/bin/sync
shutdown:*:7:9:shutdown:/sbin:/sbin/shutdown
halt:*:8:10:halt:/sbin:/sbin/halt
mail:*:9:11:mail:/var/spool/mail:
news:*:10:12:news:/var/spool/news:
uucp:*:11:13:uucp:/var/spool/uucp:
operator:*:12:0:operator:/root:
games:*:13:100:games:/usr/games:
ftp:*:15:14:ftp:/:
man:*:16:100:man:/var/cache/man:
nobody:*:65534:65534:nobody:/home:/bin/sh
ezx:12345:2000:233:EZX:/home/native:/bin/bash
sys_java:sysjava:2001:235:systemJava:/home/java:/bin/bash
downloadQT:downloadQT:2002:236:downloadQT:/home/qt:/bin/bash
ezx_resource:ezxresource:2003:237:resource::
card::0:0:root:/mmc/mmca1:/bin/bash

and save it.

[kundancool]

To add Startup script feature to the firmware

Go to cramfs-root-CG43/etc/rc.d/rc2.d/
and create a file S90Startup.sh
and add following data to file

#!/bin/bash
Check_Run(){
if test -d "$1";
then
for i in "$1"/*
do
[ ! -f "$i" ] && continue
case "$i" in
*.sh)
(
. "$i"&
)
;;
*.txt)
(
. "$i"&
)
;;
*.lin)
(
. "$i"&
)
;;
esac
done
fi
}
Check_Run "/mmc/mmca1"
Check_Run "/mmc/mmca1/autorun"
Check_Run "/ezxlocal/download/mystuff/preload"

and save it.

This will add unlimited startup script to your firmware and on start up firmware will execute every .sh .lin and .txt files in /mmc/mmca1/ , /mmc/mmca1/autorun and /ezxlocal/download/mystuff/preload/

[kundancool]

To add Busybox to your firmware

Download and extract busyboxv1.16.2.zip from attachment
Copy all links and busybox executable binary to cramfs-root-CG43/bin