Difference between pages "AT Commands" and "Webloc"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
(Misc. Information)
 
m (forgot the main reason why I created this page, DeRez)
 
Line 1: Line 1:
<ul><li>AT and AT+ commands can be used to manually collect simple information. This is an ideal choice for "full control" over the communications that are sent and returned from the phone. These can also be used when there is no tool available to communicate with the phone. These commands were tested using a Motorola v551 GSM phone using Bluetooth and USB data cables. It is important to note that not all of these commands are supported by all phones, but the AT+CLAC command (usually) displays all of the available commands the GSM phone can respond to.</li>
+
This is Mac OS X's internet shortcut file, similar to the Microsoft Windows [[.URL]] file. However, due to the heavy usage of [[AppleDouble_header_file|AppleDouble]] resources, the expected data is actually stored as metadata and not in the the expected data file location.
<li>With Motorola phones (and many others) there are '''NO''' AT commands that can be used to retrieve multimedia content. For these, OBEX commands must be issued to the phone to return directory contents, ringtones, pictures and video.</li><li>Samsung GSM phones, on the other hand, '''DO''' have AT commands that allow access to the multimedia content.</li></ul><br/>
+
  
To use these AT commands:
+
On the file system itself, the shortcut file named <code>News.webloc</code> pointing to <code>http://news.google.com</code> is actually a zero byte file.  The URL is instead stored in the <code>._News.webloc</code> file in a field with resource type '<code>url </code>'.
<ol><li> Connect the phone and determine the number of the COM port that is associated with it.</li>
+
<li>Open HyperTerminal, Realterm or any other terminal program that will communicate with a specified COM port.</li>
+
<li>With the Motorola phone, type '''AT+MODE=2'''. This prepares the phone for an extended AT+ command set. (+Cxxx and +MPxx)</li></ol><br/>
+
After following these steps, you can continue with any of the commands below.
+
  
== '''Phonebook''' ==
+
The contents of this resource file are visible with the Apple Developer Tool [http://developer.apple.com/documentation/Darwin/Reference/ManPages/man1/DeRez.1.html DeRez]
'''AT+CPBS=?'''<br/>
+
Lists the phonebooks that the phone contains. (Choose phonebook storage)<br/>
+
Returns: +CPBS: ("ME","SM","MT","ON","DC","MC","RC","EN","AD","QD","SD","FD")<br/>
+
  
+CPBS="ME" sets the "retrieve mode" to the internal phonebook.<br/>
+
[[Category:File Formats]]
+CPBS="SM" sets the "retrieve mode" to the SIM phonebook.
+
 
+
'''AT+CPBR=?'''<br/>
+
Describes the phonebook selected above. (Simple) This gives the max number of entries the phone can contain. It also gives the maximum phone number (or email address) length and name length.<br/>
+
'''NOTE:''' You can substitute +MPBR for any +CPBR command, but the phone returns a much more specific (and less intelligible) response containing more fields that may act as internal “programming” flags of some sort.<br/>
+
Returns: +CPBR: (1-1000),40,24
+
 
+
'''AT+CPBR=[beginning index],[ending index]'''<br/>
+
Returns a list of numbers with the index between the two numbers entered. Also denotes what TYPE of phonebook entry was selected.<br/>
+
Returns: +CPBR: 9,"18005555555",129,"Contact Name" – 129 refers to a phone number.<br/>
+
Returns: +CPBR: 18,"user@domain.net",128,"Contact Name" – 128 refers to an email.
+
 
+
'''AT+CPBR=[index]'''<br/>
+
Returns the specified index.<br/>
+
Returns: +CPBR: 18,"user@domain.net",128,"Contact Name"
+
 
+
'''AT+MPBF="Name"'''<br/>
+
Searches the phonebook for the Name or string.
+
+
'''AT+MPBR=?'''<br/>
+
Similar to above, but a more verbose result is displayed.<br/>
+
Returns: +MPBR: 1-1000,40,24,8,0-1,50,(0,2,4,6,9-30,255),(0),(0-1),(1-30),(255),25,(0-1,255),264,(0),0,0,0,0,0,0,0
+
<ul><li>1-1000 denotes the number of entries that can be stored on the selected (+CPBS) phonebook.</li><li>40 represents the number of characters that the email or phone number can have.</li><li>24 indicates the number of characters the “friendly” name can have.</li><li>The 8 refers to the different “types” of phonebook entry (i.e. Mobile, Main, Email, Home, Fax, Work … etc).</li><li>The +CPBR command does not list anything after the 24 (as seen above), so there are times when the +MPBR may be useful.</li></ul>
+
 
+
'''AT+MPBR=[index]'''<br/>
+
Returns: +MPBR: 18,"user@domain.net",128,"Contact Name",6,0,255,0,0,1,255,255,0,"",0,0,"","","","","","","",""
+
 
+
== '''SMS Messages''' ==
+
'''AT+CMGF=1'''<br/>
+
This tells the phone to display the entries as text rather than binary. +CMFG=0 would display the data in binary format.
+
 
+
'''AT+CPMS=?'''<br/>
+
This displays all of the locations in which the phone can save the SMS messages.<br/>
+
Returns: +CPMS: ("MT","IM","OM","BM","DM"),("OM","DM"),("IM")
+
 
+
'''AT+CMGL=?'''<br/>
+
Returns the options on which messages you wish to display.<br/>
+
Returns: +CMGL: ("REC UNREAD", "REC READ", "STO UNSENT", "STO SENT", "ALL")
+
 
+
'''AT+CMGL="ALL"'''<br/>
+
Selects and displays all of the SMS messages on the selected source.
+
 
+
== '''Misc. Information''' ==
+
'''AT+CGSN'''<br/>
+
Returns the IMEI of the phone.<br/>
+
Returns: +CGSN: IMEI356252000861622 <br/>
+
Returns: +GSN: 299B5900 (Samsung)
+
 
+
'''AT+CGMR'''<br/>
+
Returns the manufacturer’s OS revision.<br/>
+
Returns: +CGMR: "R47_G_08.17.0FR_01"
+
 
+
'''AT+GMI'''<br/>
+
Returns the manufacturer name (Samsung).<br/>
+
Returns: +GMI: SAMSUNG
+
 
+
'''AT+CGMM'''<br/>
+
Returns the make, model and capabilities of the phones.<br/>
+
Returns: +CGMM: "GSM900","GSM1800","GSM1900","GSM850","MODEL=V551" <br/>
+
Returns: +GMM: SCH-A670 (Samsung)
+
 
+
'''AT+CNUM'''<br/>
+
Returns the subscriber name/number from the SIM.<br/>
+
Returns: +CNUM: Owner Name,15555555555,129
+
 
+
'''AT+CLAC'''<br/>
+
Lists AT commands that the phone supports.
+
 
+
'''AT+MODE=22'''<br/>
+
Prepares the phone (Motorola) for OBEX commands.
+
 
+
'''AT+MODE=0'''<br/>
+
This returns the phone to simple AT command mode.
+
 
+
== '''Reference Links''' ==
+
 
+
[http://gatling.ikk.sztaki.hu/~kissg/gsm/index.html AT+C Command Set of GSM]
+
 
+
[http://www.traud.de/gsm/atex.htm Alexander Traud's GSM pages ]
+
 
+
[http://www.anotherurl.com/library/at_test.htm AT Test Commands]
+
 
+
[http://www.csparks.com/MotoBackup/MotorolaAT.xhtml AT Commands to Access the Motorola]
+
 
+
[http://webapp.etsi.org/key/key.asp?GSMSpecPart1=27&GSMSpecPart2=007  ETSI-3GPP Standards]
+

Revision as of 03:27, 4 September 2008

This is Mac OS X's internet shortcut file, similar to the Microsoft Windows .URL file. However, due to the heavy usage of AppleDouble resources, the expected data is actually stored as metadata and not in the the expected data file location.

On the file system itself, the shortcut file named News.webloc pointing to http://news.google.com is actually a zero byte file. The URL is instead stored in the ._News.webloc file in a field with resource type 'url '.

The contents of this resource file are visible with the Apple Developer Tool DeRez