Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
ZTE-MF904Q-Reverse-Engineering — Open research documentation and source review for ZTE MF904Q bootloader, firmware extraction, and reverse engineering. | Kitploit
Tools/GitHubGitHub/faicalom/zte-mf904q-reverse-engineering
Android SecurityEmbedded Systems SecurityExploitationReverse EngineeringHardware & IoT SecurityBinary AnalysisPapers & ResearchFirmware Analysis

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
GitHub
faicalom/zte-mf904q-reverse-engineering

ZTE-MF904Q-Reverse-Engineering

Open research documentation and source review for ZTE MF904Q bootloader, firmware extraction, and reverse engineering.

View Repository
141 day agoNot yet reviewed

ZTE MF904Q / M19-E Reverse Engineering

Detailed evidence-led research on one WF904_V6.0 Android6 modem: verified readable firmware extraction, an original LK unlock flow and persistent unlocked state under restored factory LK. Arabic WebUI/LCD appeared, but permanent modified systems powered off; cause remains unresolved.

Read the full technical history

  1. Complete firmware extraction guide: Windows identity/transport, actual DA stages, all23 partitions, Boot1/Boot2, full User and independent verification.
  2. Android, OEM permission and native Fastboot entry: the actual original service calls, separate permission checks, detached broadcast and FASTBOOT/TOOBTSAF path.
  3. Complete unlock guide:13 full stages, each with purpose, recovered action, files, prerequisites, expected/actual responses, verification, failures, safe stop and recovery reference.
  4. Exact-build LK analysis, success verification, and unresolved modified-ROM analysis.
  5. Latest restoration evidence and owner correction, status, safety, rights gate.

Distribution scope — reviewed source research release

50 reviewed historical source/build files are included across the two tool folders:24 GPL-scoped DA components and26 independently authored/factual files. Original contributor notices and the complete GPLv3 text are preserved. The per-file rights report distinguishes adaptation from original integration and remaining uncertainty.

One assembly file, probe_v3.S, is withheld because its manufacturer-reader re-emission provenance remains unresolved. The successful unlock coordinator and extraction source are included; full LK regeneration and live-runtime portability are not claimed. Manufacturer firmware/DA/LK binaries and private inputs are excluded. See runtime limits.

No blanket repository license is imposed. Independent code has no newly selected general reuse license, so this is not advertised as a uniformly open-source or complete integrated executable product. No executable/firmware release is included.

The full extraction guide,13-stage unlock guide, prerequisite chapter, failed experiments and original-LK persistence evidence remain intact. The latest saved factory-system restore and the owner's Ooredoo slowdown clarification are documented separately from the unresolved Arabic-system shutdown.

Published repository: https://github.com/Faicalom/ZTE-MF904Q-Reverse-Engineering. The reviewed source release is public; Releases and community posts remain separate actions.

Download Tool