Rebel XTC Clip windows 7 Free Update that needs new Y cable now in stock

Unlock All hTC Android Phones in 1minute, No Need codes, No need logs, No need credit

No need IMEI, Unlock all hTC Android factory Unlock on the GO

Example shows how to unlock HTC Desire (Bravo)

Step A Create a Gold Card with Unlock Feature.

1 Insert a MicroSD/TFlash Card in to yourRebel XTC Clip

2 Plug your clip in the Pc usb cable and wait for the software to auto Load & Start itself.

3 First Step is to Generate a Gold Card.

Please See the Process of   gold Card Creation using Rebel XTC Clip in the Video Demo or

Follow the Steps Below to create the gold Card.

From the System Option select HTC Android

Select the Model of phone you wish to Network Unlock/CID unlock/User code Reset

After Selecting the HTC Desire/Bravo you will see under Version option where you can find the diffrent bootloaders options.

Select HBOOT version of the HTC Desire/Bravo once you Select the Phone Model.

Before unlocking Android HTC Phones please check your Boot Loader version and make sure you use only the gold card created for the phone with corresponding boot Loader.

How to check bootloader version of HTC Desire ?

Switch off the device. Keep Hold of the Volume Down Button & Press Power ON  button.

You should be able to see the text ‘HBOOT’, and a version number besides it.

This number is the bootloader version HBOOT-0.93.0001

Select the Boot loader Version from the List 0.93.001

You can see now all the correct settings.

Make your Micro SD Card is already inserted in to the Rebel XTC Clip.

Now We are ready to make the gold Card for the correct Version of the Boot and Model of Phone

Press Create Goldcard

The Screen will change to show that a goldcard is being Created.

When the Gold card is ready you will see a pop up showing the contents of the folder.

Screen Will show Gold Card is generated succesfully.

Step B Unlock Phone – (SimLock, Super CID, Security Unlock / S-OFF)

1 Insert the flex PCB Virtual Dummy Sim Adapter in to the Sim gate of the HTC Desire/Bravo Android phone

you are Servicing and in to the rebel XTC clip connector you can see protruding from the side of the clip.

2  Insert the Gold Card you Generated from Step A in the HTC Desire/Bravo

3 Attach the battery to the phone.

4 Attach Battery or USB Cable to the PC/Laptop  to power up the Rebel XTC Clip.

5 Keep Hold of the Volume Button & Press Power ON  button to enter Boot Loader Mode

.

6 You will see the Boot loader mode and after 10 seconds the unlock software will start

If you watch the Screen you will see the update in progress message.

Then the screen will go blank for 1 second till Diag Mode Starts.

7 Select Diag by Pressing the Action Button in the Centre as shown in the image.

8 Next Press the Action Button when you see Screen showing options to start “Clear s58 Data”

9 Press Power Button to confirm and you will the Message Below & the Phone Will Be Unlocked

If You Get this Error Message at this Stage AT-CMD Time Out then

Recheck the connection of the virtual dummy sim FPCB adapter and replace battery in phone and power on clip and try again.

Rebel XTC Clip FAQ

USE AT OWN RISK ONLY AND WE TAKE RESPONSIBILITY FOR DAMAGED PHONES AND CANNOT HELP TO RESTORE THEM

How many phones can i unlock with the Rebel XTC Clip ?

Thier is No Limit Set and you can currently unlock any Android based HTC Phones Right now

How Many Gold Cards Can i Generate using using a PC & the Rebel XTC Clip ?

You can make as many as you like and the 100 Counter Limit resets Itself back to once you use all.

Do i need to Generate a Goldcard every time a want to unlock a phone ?

For each phone model and boot version thier is a special Goldcard needed.

You have the option of making a Gold Card each time you need one using the PC

However you can reuse a GoldCard thats been already Generated for a Model/Boot type.

This Way the Rebel XTC Clip can work in Standalone mode and you dont need a PC.

If you have pre stored and generateda Gold Cards created for the supported models & boots

then you dont need to generate a Gold Card on the fly to unlock.

How can i power on the Rebel XTC Clip ?

You can use a Battery with the Supplied Adapter or connect to the PC.

How Can i update the Rebel XTC Clip ?

This is done with the application when you run it in the top left had corner.

Is the Clip Standalone solution and works without a PC ?

Always you need Goldcard so if you have already created then no need to create agian

for the phone/boot model and you dont need to use the PC and can use battery to power the clip.

Do we need to buy Logs or Credits on a Server with this solution ?

No this solution DOES NOT needs servers with credits or logs that need to purchased for each unlock and is unlimited.

Does the Rebel XTC Clip have a Smart Card in the Clip ?

No you cant find a smartcard on the clip.

Can the Rebel XTC clip Emulate functions of HTC Factory Cards also known as Whitecard or Mega Card ?

Yes this is the exact function of the Rebel XTC Clip with added Bonus features

Create Gold Cards in Seconds With correct files needed.

Fully Remotely Upgradeable Automatically.

Much more Econimical Price

Is the Rebel XTC clip going to Support other model from HTC ?

Yes more info coming soon

List of Models supported.

HTC (Android Phones)

HTC Dream (A71XX)

HTC Sapphire (A61XX, Magic)

HTC Hero (A62XX)

HTC Hero (Droid Eris)

HTC Click (A3232, Tattoo)

HTC Bravo (A8181, Desire)

HTC Glacier (myTouch 4G, myTouch HD)

HTC Legend (A6363)

HTC Incredible (Droid Incredible)

HTC Espresso (MyTouch 3G Slide)

HTC Supersonic (A9292, Evo 4G)

HTC Buzz (A3333, Wildfire)

HTC Liberty (A6366, Aria)

HTC Ace (Desire HD)

HTC Desire Z (Desire Z)

HTC Gratia (A6380, Gratia)

G1 Google

Notes to remember

Always Check your bootloader version

Power off the Rebel XTC clip and re power on after each unlock

Video Demo of how to Use Rebel XTC Clip

How to Make a Gold Card with the Supplied Software with the Rebel XTC Clip

http://www.youtube.com/watch?v=RCEq3SZVbQw

http://www.youtube.com/watch?v=ofeQgRoopRI&feature=player_embedded

http://www.youtube.com/watch?v=qhqzjGFW6Y8&feature=player_embedded

http://rebel-xtc-clip.com/rebel-xtc-clip.html

Rebel_xtc_clip User Manual Download

What is it and how does it work?

What this device essentially allows you to do is have outgoing calls that start with either 00 (international), 1, or just 0 be automatically dialed through a calling card or VoIP access number instead of direct.   This paper thin device actually fits between your SIM card and your phone in order to “capture” what you are dialing, then dials the access number first when necessary:

Usually, when dialing internationally direct from your mobile phone, you will be charged fairly high rates per minute from your carrier such as £1.45/min calling from Tesco UK to US or $1.49/min calling from AT&T US to UK.  Then, of course, you have local calls which will either be part your monthly minute plan or generally a much cheaper per minute rate.

With international calls, you can traditionally get around these higher rates by using a calling card with a local access number that you can call as a “local number” from your cell phone (UK landline numbers if you live in the UK or any US number if you live in the US).  Then, dial the international number through your calling card and get charged “local minute rates” from your cell carrier plus whatever international rates you get from your calling card.

For example, say I wanted to call home to the states from my mobile phone in the UK.  Normally I would dial 001 999 999 9999, with the “00″ meaning international, “1″ meaning the states, followed by the number.  With my particular cell carrier (Tesco), this would cost me £1.45 per minute, but with my calling card, it would cost me £0.01 per minute – quite a big difference! Using the Rebel Sim Call through SIM, it will see that the number starts with 00 and it will instead dial the access number for my calling card when I press send to dial that international number.  Once the phone has dialed my card’s access number, it is then able to automatically send the digits (via DTMF*) of the number I actually dialed thus completing the international call via my calling card as opposed to directly from my mobile carrier.  My call will now cost £0.01 per minute plus minutes from my monthly minute plan as opposed to £1.45p per minute.

(* less technical explanation:  Think about how you normally use a calling card. You call the calling card number, it prompts you for the number you want to call, and then it connects the call.  The RebelSim Call through SIM automates this process by “seeing” that you dialed 00, then dialing the calling card number, pauses, and then dials the original out going number)

How to setup:

• First off, this won’t work if you are using a micro SIM – sorry iPhone 4 users – because the RebelSim is of “normal” SIM size, but it will work for anyphone that uses a normal size SIM.  Also, the latest (v2) firmware also does not support entering an ID or pin number, so you’ll need a provider that works by caller ID (you call the access number, and it recognizes your caller ID for authentication for your account); that being said, v2.1 will be released soon which will allow the use of an ID/pin, as well as additional configuration options than the ones discussed later on below.
• What you have to do first is punch a “hole puncher” size hole in the top plastic part of your SIM card. This is for the chip on the Rebel Sim Call through SIM to fit in between your phone and your normal SIM (you can either buy a RebelSim cutter, or use your own hole puncher).  Don’t worry, it’s just plastic on the top of your SIM card – it won’t damage anything and you can still use it even if you are not using the RebelSim.

• Then, of course, you need to put them in your phone.  The manual suggests putting the Rebel SIM in first, then sliding your normal SIM in on top of it – I’ve found it easier at times to just put them in together at the same time, but I suppose it’s just a matter of how easy/hard it is to access your SIM slot
  
• Next, you’ll need to have a calling card or VoIP service that has an access number.  Any calling card has an access number, as that’s how they’re setup to work, but not all VoIP providers have one.  Personally, I use a VoIP provider as they usually don’t charge connection fees, their rates are easy to understand, and they can be used with a SIP/Soft phone as well.   I personally use VoipFone (rates and access numbers) as they allow pin-less usage but there are plenty of others such as Call Centric (rates andaccess numbers) if you are in the States and  VoipTalk (rates and access numbers) in the UK (once v2.1 comes out for the RebelSim Callthrough).

  Note:  which ever calling card or VoIP provider you use must have an access number that doesn’t require you to use a pin since the current firmware of Call Through only supports dialing the access number.

• And last, you need to add the access number and configure the options on the Rebel Sim.  When you turn on your phone with the RebelSim, you should see a new menu option.  On my Pirelli DP-L10 wifi phone, you can see this on the main menu, with other phones it will probably show up in different locations but either way a new option will appear somewhere and will have the same configuration options/steps: 
  

  Select the new RebelSim option and you will be brought to the configuration page with the following options: 
  – Disable (don’t use the RebelSim) 
  – *Enable (use the RebelSim) 
  – Editing Number (edit the access number) 
  – Dialing Rules (4 options on when to use the RebelSim: when there is a 00, 1, or 0 in the beginning of the dialed call, or use it always) 
  – Dialing Speed (this is basically how fast the number is dialed once the access number is called – I haven’t had an issue using it on “Fast”) 
  – Dialing Mode (two options, don’t really know what it means, but ICC2 is said to be needed for the iPhone, and ICC1 works on my Pirelli phone)

  All you should have to mess with here is the Editing Number and Dialing Rules.  Select Editing Number to change the access number and Dialing Rules to determine when the RebelSim should be used.  For my particular usage, I use Dialing Rule “00” to use for international calls and Editing Number “02070990707” as the access number for VoipFone.co.uk.

  Then, dial out!  In the picture below, you can see that I dialed a random international US number (001 770 123 4567), and when I pressed send, you can see that the phone automatically called the access number instead (02070990707): 
  Once the call is connected, you hear a dial tone from the speaker (which is VoipFone saying it’s ready for a number to connect to).  After a couple of seconds, the dial tone goes away which is when the RebelSim dials the number I actually entered (you don’t actually hear anything until you hear ringing which means the number you dialed is ringing) – and that’s it, you just made a cheaper international call from your mobile phone.

Final thoughts:

Using the Rebel Sim Callthrough SIM is a great way to make dialing international numbers from your cell phone cheap and easy.  Could you simply remember to dial the access number and skip the use and purchase of the RebelSim?  Yep!  Could you opt to just use a smartphone app to use a data connection and use Voip?  Yep!  That being said, I like the idea of this “working in the background” because I could then give it to a friend, family member, etc and not have to explain to them how to make international calls or have to worry about someone, or myself, accidentally making an expensive £1.45/min call.

Another useful aspect about this particular Rebel Sim (“Rebel Sim II”) is that you can load 3 different types of firmware on it (providing you have one of their programmers):  the Call Through (v2), Call Back (v3), or their HTC unlocking firmware (v1).  Plus for £7 + shipping (worldwide), it’s not too bad of a deal!

Pros:

• Set it up and forget it approach for cheap international calls from mobile phones
• Cheap
• Will work with any phone that uses regular size SIM cards (the phone can be locked or unlocked, from anywhere in the world, on any carrier, etc)
• Can be repurposed with 3 different firmwares ( one for call through, one for unlocking HTC phones, and the other a different approach for cheap mobile calls)
• Simple to configure

Cons:

• Latest firmware does not allow to use access numbers that require you to enter a PIN or ID number to use (though it can with firmware v2.1, which is to be released soon)
• Can be a bit tricky to sandwich it with your existing SIM card and push into the SIM slot on some phones
• Doesn’t work with micro SIM cards (won’t work with iPhone 4)

Solutions Point Limited Specialise in Sim Overlay technology which consists of a FPCB (Flexible Printed Circuit Board) thats 0.1 mm thick and has a Micro controller mounted and fits underneath network simcards in mobile phone sim gates.

This allows the provision of new applications through the use of the sim over lay technology. The Default STK provided by the network sim operator is ignored and its possible to Provide custom applications that use the Sim Application Toolkit.

This has already been successfully demonstrated with Solutions Point Limited’s Flag ship Sim overlay Product www.RebelSimCard.com

Current Applications Created so far include
1 Mobile Phone Unlocking
2 Least Cost international Call Routing using Call Though
3 Least Cost international Call Routing using Call Back

www.Solutions-Point.co.uk
www.RebelSimcard.com

Lets Take for example the new iphone 3G 3.0 OS and the iphone 3GS model due for release very soon this month. This will be a real challenge and we shall see which company can produce the World First Solution for unlocking.

The Rebel simcard Team invest very heavilty in R&D and is the reason behind the success of Rebel Simcard. Back in January the Rebel Simcard Launched the Worlds First Reverse Engineering Tool for Scanning Hex Data used to Create unlock Solutions for Rebel Simcard for all the Beta Testers/Resellers and for Students of Smart Card Technology worldwide.

The Tool comes with 4 FPCB (flexible Printed Curcuit Board) connections that can fit in to virtually any mobile phone in the world. This way once the setup has been made its possible to then plug the network simcard in the hex scanner and thus capture all data communications that are exchanged by the mobile phone and simcard.

This is a tool kit to help scan network simcards so we can add support to the rebel sim for new network simcards and new iphone firmwares and models that come out and continue to dominate the mobile phone simcard unlocking technology Industry.

This shows how serious we take our leadership of the simcard unlocking Field.

Also this toolkit can be used by the enginners of tomorrow to learn about APDU’s and scanning methods.

As the rebel sim card Team has distributed over 800 Hex scanners worldwide. This is the only reason rebel simcard is and will always have Worldwide Compatiblity as Rebel simcard is tested on mobile networks all over the world and data is collected and new improvemnts are made all the time as we can obtian realtime data and feedback from our beta testig Team.

The Other Real Benefit of being a Rebel simcard user is the ability for users to apply the updates in the comfort of thier home and when new updates and releases are created by us then simply users need to use a PC and the Update Software we provide with the Rebel Simcard Programmers.

This is of great benefit as rebel simcard users do not need to keep on purchasing new rebel simcards with new firmwares and then have to wait for delivery of the products each time apple release a new firmware. As the Rebel simcard Clients are Based worldwide this can save alot of money on Postage fees and avoid additional delays in using the Latest Technology from us.

The Rebel Simcard Team have always Delivered World First Solutions and we are very committed and focussed at the  moment on bringing  the world the First unlock solution for the iphone 3.0 OS and iphone 3G model.

IF  you have a mobile phone where no unlock is possible and you would like to work with us to make the solutions possible then kit is the way forward and by sending us hex scans made using the scanner we can look in to this without having to send the phone to us.

If you are interested in scanning new phone models and firmwares of phones and wish to provide the scan data to the rebel simcard team then this Kit is Designed Especially for you. At the same time you can learn more about smarcards and how they communicate with the mobile phones and extend your knowledge and have chance to Win a Trip to to the UK HQ of rebel simcard and recieve extra training on Creating new Unlock Solutions using smartcard technology.

Kit Includes

1 Hex Scanner Kit

1 Rebel Compact Programmer

1 Usb Cable

1 Dummy Sim Adapter

1 Rebel Sim No Cut sim

2 Rebel Cut sims

1 Rebel sim cutter

Price per Unit (piece): £40.00
US $65.80

H

These Integrated Circuit Cards come in two forms when we categorize them based on the way we use tem, contact and contact-less. The former is easily identified due to its characteristic gold connector plate.

Originally the ISO Standard (7816-2) defined eight contacts, but only 6 are actually used to communicate with the outside world and rest two are marked as RFU (Reserved for future use). The contact-less cards optionally may contain its own power source, however mostly the operating power is provided to the contact-less card by means of an inductive loop that uses low frequency electronic magnetic radiation. The signals needed for communication with the reader devices may be transmitted in a similar way or can use capacitive coupling or even an optical connection (IR).

The Contact card is the most widely used ICC to date largely because of its use as telephone prepayment card. Yes! The SIM card that we you use in our cell phones is just a Smart card without the plastic base. Most contact cards contain only a simple integrated circuit although some also use two chips; the other one is used to perform complex cryptographic computations (which I’ll explain shortly). The chip itself varies considerably between vendors and each takes it own way of programming application for it, but the Java Card™ initiative by Sun has made it a breeze to write Smart Card applications that can be downloaded onto the memory of these cards and can execute on any type of chip which supports the Java Card runtime environment. I’ll come to programming the Smart cards in next article of this series.

Figure 2

Let us now consider the use of the 6 contacts used by the ICC:

Vcc is the supply voltage that drives the chips and is generally 3 to 5 volts with 10% deviation allowed. It used to be in 5-volt range prior to the recent move towards low power devices to make these cards.

Vss/GND pin is used to provide the substrate or ground reference voltage against which the Vcc potential is measured. It is usually 0 volts.

Reset is the signal line that is used to send the signal to the integrated circuit in order to reset it. This is a complex process that we shall describe later in more detail. There are two ways a card is reset:

• Warm Reset: When a Signal is sent through this pin to reset the ICC.
• Cold Reset: When the supply voltage is turned off and on again. Ejecting the card out and inserting again will have the same effect.

Clock pin is used to drive the logic of the embedded IC and is also used as the reference for the serial communications synchronization. This pin is provided because the ICC doesn’t have any clock generator onboard and needs this as external input. The card reader device provides this clock. The clock frequency is 5MHz generally but many high end ICCs use frequency multipliers to operate at higher frequencies up to 40 MHz.

Vpp pin is now optional and used only in old cards. Previously it was used for the high voltage signal that is necessary to program the EPROM memory. It was provided with two voltage levels. The lower one (or the idle state) is held down by the Card Reader device, until the higher level (or the active state) is required.

I/O pin is the serial input/output (SIO) connector. This is the signal line by which the underlying circuit receives commands and interchanges data with the outside world. This process will be explained in more detail when we talk about programming applications that receive these commands.

There are two categories of APDUs: command APDUs and response APDUs. As the name implies, the former is sent by the reader to the card: it contains a mandatory 5-byte header and from 0 to up to 255 bytes of data. The latter is sent by the card to the reader: it contains a mandatory 2-byte status word and from 0 to up to 256 bytes of data.

The APDU is an application level protocol as specified in the ISO 7816-4, which takes place between a smart card and a host application for the communication purpose.

APDU consist of two structures, as defined below:

1. Command APDU (C-APDU: this command is used by the host application to send command to the card.
   1. Header: it consist of 4 bytes:-
      1. Class of instruction (CLA)
      2. Instruction code (INS)
      3. Parameters: P1 and 2
   2. Optional body: varies in length.
      1. Lc = specifies the length of the optional body or the data field (Bytes).
      2. Le = specifies the length of the data or the number of bytes that the host is expecting in response to the command sent.
      3. Data field contains the data that are sent to the card for executing the instruction specified in the header.
2. Response APDU (R-APDU): this command is used by the card in order to respond to the command send by the host application.
   1. Optional body: it consist of data field whose length is specified by the Le
   2. Trailer: it consist of two words SW1 and SW2 called as status word, which denotes the processing state in the card after the execution of the command APDU.

Structure of the APDU is given below:

1. Command APDU

2. Response APDU

Note:

• A command is always paired with response APDU
• The data field is optional in both command APDU and response APDU.

The second case further divides the command and response APDU in four categories.

1. There is no transfer of data to or from the card
   1. C- APDU: contains header only.
   2. R- APDU: contains only the trailer status word.
2. There is no transfer of data to the card but data are returned from the card
   1. C- APDU: contains Le only, which specifies the number of data bytes in the corresponding response APDU.
3. There is transfer of data to the card but no data is returned from the card
   1. C- APDU: contains Lc and data field, Lc which specifies the length of the data field.
   2. R-APDU: contains the trailer status word SW1 and SW2.
4. There is transfer of data to the card and data is returned from the card
   1. C- APDU: contains Lc and data field and Le.
   2. R-APDU: contains both the optional body and the trailer status word SW1 and SW2.

Command APDU format.

There are five fields in an APDU command. The class of instruction (CLA) is always A0 for GSM. The instruction code (INS) indicates the particular command to be performed. P1, P2, and P3 are parameters for the command, with P3 containing the length of the Data segment, if any.

Response APDU format.

The response to a command is returned in three fields. The Data portion, if any, contains information requested in the command. SW1 and SW2 are status words indicating the success or failure of the command.

A number of commands are defined for GSM SIM cards, including functions to read and write data, confirm security features, and run the GSM authentication algorithm. Completing an entire GSM procedure may require a series of APDU command/response pairs.

SIM command coding.