Legacy Software: Tools like Sliver or various "Ramdisk" methods allow users to delete the setup.app file. This skips the activation process entirely.
This is not a complete unlock; the phone remains locked behind the DNS portal. Cellular functions do not work.