Community port of EFF Rayhunter to the Franklin R717 (T-Mobile T9). Root via config-restore; manual install to /cache/rayhunter.
Find a file
killingerr a6434c8f52 Remove Cursor git hooks and co-author tooling from the repo.
Drop README hooks section, .githooks, and .cursor rule; not needed for the T9 port.
2026-07-03 09:33:33 -06:00
config Add install docs, T9 config, and start script for manual Rayhunter port. 2026-07-02 11:36:01 -06:00
docs Document T9 password pitfalls and ignore local GUARD plan. 2026-07-03 09:32:16 -06:00
scripts Add install docs, T9 config, and start script for manual Rayhunter port. 2026-07-02 11:36:01 -06:00
.gitignore Document T9 password pitfalls and ignore local GUARD plan. 2026-07-03 09:32:16 -06:00
README.md Remove Cursor git hooks and co-author tooling from the repo. 2026-07-03 09:33:33 -06:00

franklin-r717-rayhunter

Community port of EFF Rayhunter to the Franklin Wireless R717 (T-Mobile T9).

Status: Manual install works on rooted 2602-era firmware without downgrading to 1311. Diag init, recording, and web UI on port 8080 confirmed. On-device LCD alerts are not implemented yet.

This is not an official EFF project. Discuss upstream: Rayhunter #708.

Repo Purpose
riptidewave93/franklin-r717-t9-downgrade Root / downgrade config tooling
EFForg/rayhunter Upstream Rayhunter

Quick start

  1. Root with root-only config (install guide)
  2. Download Rayhunter release — use the rayhunter-daemon ARM binary from the installer zip
  3. Copy config/t9-config.toml and the daemon to /cache/rayhunter/ on the hotspot
  4. Run scripts/start-rayhunter.sh or ./rayhunter-daemon config.toml
  5. Open http://192.168.0.1:8080

Repository layout

config/t9-config.toml   # Device config (device=orbic for diag)
docs/INSTALL.md         # Full install steps
docs/DISPLAY.md         # 128x36 1bpp LCD / guimgrd notes
docs/KNOWN-ISSUES.md    # Diag lock, battery spam, etc.
scripts/start-rayhunter.sh

Verified environment (community)

  • Root via root_2602_only_config.bin
  • Rayhunter v0.11.2
  • device = "orbic", ui_level = 0, qmdl_store_path = "/cache/rayhunter/qmdl"
  • /dev/diag present; Qualcomm MDM9607-class stack

License

Documentation and scripts in this repo: MIT (or your choice when publishing).

Rayhunter is CC BY 4.0 / GPL-3.0 — comply with upstream when distributing rayhunter-daemon.