Hi! I'm here with a XT1635-01, the Verizon variant, and as we all know the bootloader is locked to all hell. I'm really looking to flash LOS on here and I was hoping we had some sort of progress.
Here is an article I read today on a supposed bootloader exploit (possibly including the Moto Z 1st-gen series) that allows for a custom boot image to be uploaded into the device RAM without modifying the original boot image. Now, I don't know if this is equal to booting unsigned boot images such as custom recoveries and such, but this may lead us a step closer to at least getting a custom recovery on this device WITHOUT unlocking the bootloader. This can also quite easily allow us to root, although I don't think custom firmware will be supported using this method, as the locked bootloader and FRP will still prevent that from happening.
I'm hoping to do some testing tonight on this theory, but if I'm right, this can open a wide range of possibilities for us. I'm also working on cracking the bootloader at the moment, but that will take much longer. If I could figure out what that third line means in the unlock data (see this post), maybe we can finally have an unlocked bootloader. Until then, shoot me any ideas you guys may have!
If you want to help, please PM me the output of the commands
Code:
fastboot oem get_unlock_data
and
Code:
fastboot getvar all
(P.S. I also had another idea although I'm more skeptical about it. If we could change the CID from 0x0002 to 0x0001 or another supported CID, we could theoretically request the unlock code from Moto assuming that this modifies the output of
Code:
fastboot oem get_unlock_data
to accommodate this change. This is only theoretical, and while it has been previously mentioned by other users, I don't think this method is realistic. As far as my knowledge extends in this plane of Android development, the CID has nothing to do with the bootloader or unlocking it at all, nor do I think it has any effect on the output of that command. Unless the command uses the CID as some sort of keyhash for the third line (also a possibility?), I don't think we will get anywhere with this. Just a thought, though!)
Cool! I hope we find a way. Sounds interesting
---------- Post added at 09:47 PM ---------- Previous post was at 09:43 PM ----------
https://www.google.nl/amp/s/forum.x...d-to-flash-twrp-recovery-unlock-t3473294/amp/
Are you referring to this?
SupahCookie said:
https://www.google.nl/amp/s/forum.x...d-to-flash-twrp-recovery-unlock-t3473294/amp/
Are you referring to this?
Click to expand...
Click to collapse
I actually looked into this method before I tried anything else, but unless we can find a way to resign a TWRP image with the stock recovery image signature, flashing an entire ROM with the recovery.img replaced with an untouched TWRP image will work but will fail only at the recovery stage, as this bootloader checks not only the signature of the ROM, but it's components as well. I'm doing my best to try and find a bootloader exploit that will allow us to boot into TWRP temporarily, effectively allowing us to permanently flash the TWRP image.
I'm on the December 1st security patch. Try looking for any vulnerability possible with this bootloader and I'll keep working at it. The link in the OP (the article linked at the top of the post) feels like a step in the right direction, but as for how to use this vulnerability for our own devious uses, I am unsure.
Regards,
James
I know how to do it but it costs about $200 per phone. Chances are, developing an exploit will be more costly in time than my solution.
Sounds promising. Hope to hear more about this.
Sell the Verizon version on Swappa for $174, pitch in $56 and buy the Moto version for $230. Problem solved for even less than $200 now.
larsdennert said:
Sell the Verizon version on Swappa for $174, pitch in $56 and buy the Moto version for $230. Problem solved for even less than $200 now.
Click to expand...
Click to collapse
Yea I am going to get ~$200 out of mine as it is in Mint condition and I did a little customizing to the UI. When i come around to finding another one of these cheap I will def get non Verizon.
I got mine for only $50 !! The pawn shop thought that the phone's home button didnt work and what they didn't realize is that it is a fingerprint scanner not a home button. Muahahaa.. For once the working guy gets the upperhand with pawnshops. Usually they are screwing you! :good:
---------- Post added at 08:02 AM ---------- Previous post was at 07:58 AM ----------
larsdennert said:
Sell the Verizon version on Swappa for $174, pitch in $56 and buy the Moto version for $230. Problem solved for even less than $200 now.
Click to expand...
Click to collapse
Hmm post didnt go through.
I guess I am going to sell mine for $200 and then when i come across a non verizon variant for cheap I will buy it and customize it all. I got lucky with mine. I only paid $50!! from a pawnshop who thought that the home button was stuck. What they didn't realize is that wasn't a home button... It was the fingerprint reader. Muahaha. For once the working guy gets the upperhand at a pawn shop and doesn't get screwed like usual. :good:
Great
Finally at least someone with good knowledge and will to work on these phones, seems other have lost hope already, so it's like bootloader's are encrypted? And digging in deep, breaking it seems impossible, I m trying to learn this stuff as I want my device rooted no matter what! These devices have great specs but without root it's not like I m in control of it, I can't test amazing light weight custom ROMs, I hope its not forgotten
Any news about this dudes?
news?
Related
The question was originally going to ask if simunlocking my phone would also unlock fastboot; however the similar threads shown after typing my title in clearly showed it does not.
So, I was wondering, is there ANY way to enable fastboot? Or alternatively, is there any way I can install something like FreeXperia on it without being able to fastboot? My phone is rooted, but my investigations suggest this is not enough.
I'm just wondering, else I'll just sell this phone and get an unlocked one.
There is a way, for which you well have to pay some cash. In my signature you will find the first link quite informative about your query.
Gazbook said:
The question was originally going to ask if simunlocking my phone would also unlock fastboot; however the similar threads shown after typing my title in clearly showed it does not.
So, I was wondering, is there ANY way to enable fastboot? Or alternatively, is there any way I can install something like FreeXperia on it without being able to fastboot? My phone is rooted, but my investigations suggest this is not enough.
I'm just wondering, else I'll just sell this phone and get an unlocked one.
Click to expand...
Click to collapse
If you want FreeXperia, enabling fastboot and unlocking your bootloader is an absolute must. Send a PM to either alejandrissimo or jinx13 as they are the only ones who can help you enable fastboot and unlock your bootloader. They have the unlock boxes, they have the ability to let you borrow their necessary USB dongles over network, they have access to cheap credits needed to get the job done, they have the professionalism and, most of all, they seem to be the only people who can get the job done.
It'll cost you 16 British Pounds / 24 US Dollars and, again, there is no way not to pay. It's well worth the cost though. Refer to the links in the signature in the post above this one. Logseman's threads have taught me well and should be able to do the same for you.
Good luck!
Like the title says. Why?
I used to root/ROM all my devices but as Android grew up I have found less reasons to. I haven't had my 6P rooted for the last 3 months at all and my Pixel isn't rooted currently. I may decide to later for the dual speaker mod though.
So why do you root? For a feature? a tweak? habbit? just because you can/feel you should as a power user?
System wide ad away, custom kernels, Xposed when it comes out, AppRadioUnchained and root Tasker. The power of root! (Can fix unforseen issues)
Ad away, Xposed and AppRadioUnchained are game changers for me, well worth the trouble of root.
Twrp is another really root, but usually has the same negative effect, aka warranty issues, but system backups are great too.
PS: Pixel has no Knox and can be unrooted 100% via flash a stock image or locking bootloader (causes factory reset) so why not?
Rooting is my way of saying "**** you" to the "man". I want full control of my phone, not just what the "man" thinks is adequate or best for me.
Adaway
Call recording.
Substratum, Swift Black theme, Titanium Backup plus all of the above.
Sent from my Pixel XL
to put the clock in the center and get rid of the brightness slider in notification pull down. more seriously, adaway, EX kernel manager, and font change.
---------- Post added at 01:59 PM ---------- Previous post was at 01:16 PM ----------
FreeSoftwareServers said:
PS: Pixel has no Knox and can be unrooted 100% via flash a stock image or locking bootloader (causes factory reset) so why not?
Click to expand...
Click to collapse
I would go with unrooting by flashing a stock image but I would warn against locking the bootloader of a modified device. Put the stock image on and then lock the bootloader if you want but don't lock it while it's rooted, if you get into a bootloop, you won't be able to rescue if the bootloader is locked.
Not trying to pick a fuss, I just wouldn't want anyone to have a soft brick situation with a locked bootloader.
Maybe a Google store Pixel, you could re-unlock and restore from a soft brick with a locked bootloader but if it's Verizon and on 7.1.1, better not lock it while it's rooted.
3aucla1r3 said:
I would go with unrooting by flashing a stock image but I would warn against locking the bootloader of a modified device. Put the stock image on and then lock the bootloader if you want but don't lock it while it's rooted, if you get into a bootloop, you won't be able to rescue if the bootloader is locked.
Not trying to pick a fuss, I just wouldn't want anyone to have a soft brick situation with a locked bootloader.
Maybe a Google store Pixel, you could re-unlock and restore from a soft brick with a locked bootloader but if it's Verizon and on 7.1.1, better not lock it while it's rooted.
Click to expand...
Click to collapse
There is absolutely no reason to re-lock the bootloader. Even if you're sending back to Google (unlocked bootloader does not void warranty).
Ad away and titanium.
Sent from my Pixel XL using Tapatalk
Roms. Kernels. Debloat further. Greenify. Theming
3aucla1r3 said:
to put the clock in the center and get rid of the brightness slider in notification pull down. more seriously, adaway, EX kernel manager, and font change.
---------- Post added at 01:59 PM ---------- Previous post was at 01:16 PM ----------
I would go with unrooting by flashing a stock image but I would warn against locking the bootloader of a modified device. Put the stock image on and then lock the bootloader if you want but don't lock it while it's rooted, if you get into a bootloop, you won't be able to rescue if the bootloader is locked.
Not trying to pick a fuss, I just wouldn't want anyone to have a soft brick situation with a locked bootloader.
Maybe a Google store Pixel, you could re-unlock and restore from a soft brick with a locked bootloader but if it's Verizon and on 7.1.1, better not lock it while it's rooted.
Click to expand...
Click to collapse
I completely agree, personally, the only reason I'd do this is to return/sell the device, in which case, flashing a stock image via ADB is the way to go to totally wipe everything back to stock.
Why did I root
I had Samsung S5. Still on Alltell UDP. Used to use FoxFi for Wi-Fi on the go. I used to pay around $100 for comcast internet and basic cable. I came home one day and realized I am just stacking Wi-Fi on top of my comcast Wi-Fi. I figured why am I paying to Wi-Fi while I Wi-Fi. Then I had a decision, do I keep the comcast or the verizon. Well the verizon was mobile so that made it easy. Plus I don't watch TV other than some golf and college football. Go Spartans!! Then an OS updated caused FoxFi to stop working. My wife works from home and needs Wi-Fi. I had to figure something out fast.
I came here.
I couldn't get Samsung S5 to root, and since we needed new phones anyways, I bought 2 Nexus 6's. Best phone ever IMO. I read and studied for weeks. Only had time on weekends to figure out root. Finally I figured it out. Basically TWRP at that time. Anyways, it worked. Native hotspot and faster than comcast was.
Recently comcast threatened to kick anyone with UDP off "again". I was on Reddit trying to figure out how to stay on my plan via r/verizonUDP. There were all these crazy names for shady ways to keep your plan. Someone mentioned that they spoke to a Verizon rep and they stated they only way to be truly unlimited was to be under contract. He put up the legacy Verizon website. I went on there and was able to get mine and my wifes phones back under 2 years UDP.
By this time I was now a Nexus and soon to be Pixel guy. No way was I ever going back to any bloatware or non-stock type of phone. I realize root fixes a lot of this but with my love of the Nexus 6, I was sold on going with the Pixel XL. Let me tell you I had buyers remorse for a few months. 2k for 2 phones that were all getting pretty negative reviews. Glad I stuck with it thought. I love the Pixel XL.
I hook a bunch of people I work with up with my Wi-Fi. Network refresher was wokring for a bit. The 7.1.1 update nuked network refresher. I gave it a week or so then decided to root this phone.
Now with some experience under my belt I was able to root with CMD prompts and no TWRP. So proud of myself!!! Thank you to everyone here who has taken time to write down and explain the steps as well. Its not easy for someone who is not familar with the process and just started rooting within the past year. I realize this is a developer platform filled with experts well above my novice skill but those who care and explain things like they would to a golden retreiver really helps. I now encourage others I know to root and am even able to show them how. I don't think they would if they had to spend the time and effort I did by coming here and reading thread after thread.
Finally, I love TWRP and will go back. Just giving it some more time as Pixel is pretty good as is. I used to love some of the themes and kernels. I can't wait to get back to them but, work, 3 kids under 10, and a wife... Well all I can say is thank you to everyone here.
Question on the unrooting, I am one of 7 or 8 people in the US who want to use AndroidPay. If I unlock and root and then relock and unroot any idea if it will work again? I know it is a tough question, hoped someone would have an idea about it.
FreeSoftwareServers said:
System wide ad away, custom kernels, Xposed when it comes out, AppRadioUnchained and root Tasker. The power of root! (Can fix unforseen issues)
Ad away, Xposed and AppRadioUnchained are game changers for me, well worth the trouble of root.
Twrp is another really root, but usually has the same negative effect, aka warranty issues, but system backups are great too.
PS: Pixel has no Knox and can be unrooted 100% via flash a stock image or locking bootloader (causes factory reset) so why not?
Click to expand...
Click to collapse
Okmed said:
Question on the unrooting, I am one of 7 or 8 people in the US who want to use AndroidPay. If I unlock and root and then relock and unroot any idea if it will work again? I know it is a tough question, hoped someone would have an idea about it.
Click to expand...
Click to collapse
Right now someone made a modified kernel and put in a safety net patch. I was able to use Android pay and play Pokémon Go with an unlocked bootloader. I am in rooted but have twrp installed......
I personally have not needed root yet, tibu isn't something I need anymore. The battery life is so great compared to my n6 that I haven't even have greenify installed yet.
xocomaox said:
There is absolutely no reason to re-lock the bootloader. Even if you're sending back to Google (unlocked bootloader does not void warranty).
Click to expand...
Click to collapse
There is. Android pay doesn't work. So that's just one
---------- Post added at 12:20 PM ---------- Previous post was at 12:19 PM ----------
chapelfreak said:
Right now someone made a modified kernel and put in a safety net patch. I was able to use Android pay and play Pokémon Go with an unlocked bootloader. I am in rooted but have twrp installed......
I personally have not needed root yet, tibu isn't something I need anymore. The battery life is so great compared to my n6 that I haven't even have greenify installed yet.
Click to expand...
Click to collapse
Which kernel was that?
boober78 said:
There is. Android pay doesn't work. So that's just one
---------- Post added at 12:20 PM ---------- Previous post was at 12:19 PM ----------
Which kernel was that?
Click to expand...
Click to collapse
Since they have safteynet patch kernels available, that bypasses bootloader check with android pay.
So please don't re-lock your bootloader. It's very dangerous.
xocomaox said:
Since they have safteynet patch kernels available, that bypasses bootloader check with android pay.
So please don't re-lock your bootloader. It's very dangerous.
Click to expand...
Click to collapse
Yo can only re-lock it if you're fully stock, that's pretty obvious.
boober78 said:
Yo can only re-lock it if you're fully stock, that's pretty obvious.
Click to expand...
Click to collapse
Yet people do it anyways..
boober78 said:
There is. Android pay doesn't work. So that's just one
---------- Post added at 12:20 PM ---------- Previous post was at 12:19 PM ----------
Which kernel was that?
Click to expand...
Click to collapse
http://forum.xda-developers.com/pixel-xl/development/kernel-stock-kernel-safetynet-patch-t3516596
Questions:
Where are (or are there) mods for:
1 Call Recording (figured it out)
2 Battery Percentage in status bar (figured it out)
3 Screenshot in power menu (that shortcut with vol+power does not work for me...I can never get it)
4 Switching multiwindow and back button on bottom (like Samsung)
funkydude101 said:
Questions:
Where are (or are there) mods for:
1 Call Recording (figured it out)
2 Battery Percentage in status bar (figured it out)
3 Screenshot in power menu (that shortcut with vol+power does not work for me...I can never get it)
4 Switching multiwindow and back button on bottom (like Samsung)
Click to expand...
Click to collapse
How did you get battery percentage in status bar? I can only get it inside the battery icon..
while the g6 alone is a fantastic device we at&t users want to play to. as of now i know you cannot boot into fastboot on the variant as ive tried. I also know the chances are slim considering the g5 still is locked. but nothings impossible on xda. look at the H910 V20 model for at&t. its unlocked with dirty santa exploit.
this is a donate thread for bootloader unlock, root and twrp.
im not taking a tally so if someone wants to do that then feel free. only rules are you pay what you pledge upon project completion.
this thread is for discussion and pledges. :good:
updated :
i no longer have the device. i couldn't live without root, got a op3t. but feel free to keep this open for others.
Anyone want to get this BOUNTY up and going with me?
Count me in for $20
I'll give $50
I1l also give $80.
Unlock, Root, TWRP, and don't kill anything along the way... $100.
Root? Any progress? this device deserves some love. Bounty anyone?
I'd happily pitch in $50 for an unlock. Itching to try out some oreo roms
The G5 remaining locked doesn't make it seem all that likely though
Though I'd love to be proven wrong! (please, before I give in to the 5T announcement tomorrow)
Guys I dont wanna be that guy, But look back in history now with G4 G5 and now G6 More than likely bootloader unlock will never be achieved AS any device now on noug and above check system verity root is not possible without unlocked bootloader...
The biggest thing here is my self included If you want a rooted device Research before purchases...
Dont buy devices on hope that root and bl unlock will be achieved As LGs "newer" Bootloader signing is impenetrable as of now.
TheMadScientist said:
Guys I dont wanna be that guy, But look back in history now with G4 G5 and now G6 More than likely bootloader unlock will never be achieved AS any device now on noug and above check system verity root is not possible without unlocked bootloader...
The biggest thing here is my self included If you want a rooted device Research before purchases...
Dont buy devices on hope that root and bl unlock will be achieved As LGs "newer" Bootloader signing is impenetrable as of now.
Click to expand...
Click to collapse
I admit, I did NOT do my research. I got a good deal on it, so I picked it up. Coming from the last 2 devices having bootloader unlocked, I suppose I got used to it. It's not the worst thing in the world, but I love to tinker. Guess I'll pick up another device, if I feel like bricking it with some dude's crazy kernels or ROMs
hangtenboy said:
I admit, I did NOT do my research. I got a good deal on it, so I picked it up. Coming from the last 2 devices having bootloader unlocked, I suppose I got used to it. It's not the worst thing in the world, but I love to tinker. Guess I'll pick up another device, if I feel like bricking it with some dude's crazy kernels or ROMs
Click to expand...
Click to collapse
I studdied the encryption on the g4s bootloader quite a bit and there was no hope at that time. And still dont look good....
By the way I am a oldskool hoosier myself born and raised in gary and merrillville
i will kick in 50bux towards a bounty
Such a nice phone, so many bloatware :S
guys my lg g6 h870 is burned motherboard...so i buy from ebay a used motherboard at&t..work well also with my italian career, it is possible to install h870 firmware inside h871 smartphone? because without at&t sim i cannot update firmware it's always say that is updated but is no true..in at&t without sim card will not update...is the root the way to doit?
Just curious since I have heard about a unlocked bootloader and root being successful...is it true?
https://forum.xda-developers.com/lg-g6/how-to/fundraiser-to-unlock-bootloader-t3959036
interesting information here
if anyone can provide me with a US997 unlocked version imei number i might have something for yall
UPDATE : i need more time and research
Hey guys i preordered my s9 and was super excited because my s8 was not able to be rooted due to knox and so was looking forward to trying out some xposed mods and roms..unfortunately ive yet to see anything on how to root the sm-G960U1 variant? Seems odd because its the u.s unlocked which i thought would be more common than carrier locked ones in xda community
The odds are nearly zero. Unless there's an engineering firmware that leaks out. The Snapdragon is locked up tight.
waylo said:
The odds are nearly zero. Unless there's an engineering firmware that leaks out. The Snapdragon is locked up tight.
Click to expand...
Click to collapse
True
The engineering firmware for sm-g960u has been leaked... should work on ur or be easy to tweak...
jflow36 said:
The engineering firmware for sm-g960u has been leaked... should work on ur or be easy to tweak...
Click to expand...
Click to collapse
I know this is old, but I've been trying today to get root on a new sm-g960u1, with no luck at all.
I couldn't even get twrp installed... Would you be able to help me or point me in the right direction?
[
I couldn't even get twrp installed... Would you be able to help me or point me in the right direction?[/QUOTE]
PrashannaGP said:
There is no twrp your bootloader is locked. And cannot be unlocked. If you look in the snap dragon dev section you can obtain a system mode root only.
No custom ROMs.
And what is your problem??
I just helped him to install TWRP in custom rom. He was saying that he counldn't install TWRP in his rom.
Don't disturb me without reading the whole problem.
Click to expand...
Click to collapse
Well the thread clearly states for g960u1 which is the US model so and your answering with twrp and custom ROMs so if this thread is for g960u1 I'd like to know how you helped him install twrp and or custom rom.
Read the whole problem
I couldn't even get twrp installed... Would you be able to help me or point me in the right direction?
Pretty self explanatory. Unless he thread jacked and has another model
So your telling em your flashing twrp on g960u1 models? That are locked bootloader. No oem unlock. And must only boot signed imgs. Ok I want proof
If this is the case your rich mate.
Ok so I can flash twrp but the device still only boots signed images. WTH. What device are you doing this to
---------- Post added at 08:36 AM ---------- Previous post was at 08:34 AM ----------
Again we need pics of this it didn't happen. After the community reads your posts on claims of twrp on g960u1 their gonna be all over you
What model do you have
---------- Post added at 08:50 AM ---------- Previous post was at 08:46 AM ----------
You use sp flash tool mate? I thought sp flash tool was for media tek. Lol. Some one got a knock off s9 off wish
You must be stuck in 2012. It's not so simple anymore. Bootloader lock means it's locked regardless of twrp or SuperSU.
Did you truthfully use this method to flash my twrp to your locked bootloader device that is an s9 or s9+?
I'm gonna need some real proof before I believe that from a guy that just created his account 2 days ago and calls himself an Android app developer without a link to his github or gitlab.
I have very serious doubts about your so called method. If it really works as you claim them proof shouldn't be an issue at all to present to everyone.
Sent from my Pixel 2 XL using Tapatalk
Again sp flash tool is for mediatek devices samsung does not have media tek but the crappy clones or knockoffs do. So again where's the proof mate. So your saying you've managed to do what every developer has been trying to do since the s6 maybe further. The u u1 and w devices are fully bootloader locked. There is no flashing twrp. No safe strap you are completely full of crap and Im sure I can speak for many people on xda not wanting your mis information thrown about. You would be a millionaire if you did what you claim as in bypassing a 256 bit encryption signed device.
You need to just quit before some one without knowledge attempts what you claim and bricks their device. It isn't fair to the community that you don't know what your doing making false claims on obviously a device you most definitely do not own. I have all my devices listed in my profile. Why don't you?
You know 45% of android lol.
Just a couple days ago your asking if you can extract a file with 7zip and how many files where in it. Now your a bootloader unlock expert . My hat is off to you good sir
TheMadScientist said:
Again sp flash tool is for mediatek devices samsung does not have media tek but the crappy clones or knockoffs do. So again where's the proof mate. So your saying you've managed to do what every developer has been trying to do since the s6 maybe further. The u u1 and w devices are fully bootloader locked. There is no flashing twrp. No safe strap you are completely full of crap and Im sure I can speak for many people on xda not wanting your mis information thrown about. You would be a millionaire if you did what you claim as in bypassing a 256 bit encryption signed device.
You need to just quit before some one without knowledge attempts what you claim and bricks their device. It isn't fair to the community that you don't know what your doing making false claims on obviously a device you most definitely do not own. I have all my devices listed in my profile. Why don't you?
You know 45% of android lol.
Just a couple days ago your asking if you can extract a file with 7zip and how many files where in it. Now your a bootloader unlock expert . My hat is off to you good sir
Click to expand...
Click to collapse
He's just a quick study and hasn't updated his profile to knowing 100% of Android yet.
Sent from my Pixel 2 XL using Tapatalk
Thread Cleaned
Hey folks, Just wanted to remind everyone that always ensure you do your research for what you choose to do to your device and also make sure as best you can that whatever modifications you attempt to make are backed up by evidence of success or proof of concept and there is some type of documentation. The last thing we want to see is a new help thread because someone flashed something and damaged their device. Always do your homework and always check for credibility too of said files and members.
If you see anything that looks off, please report it and avoid any conflict or confrontations out here. Good job folks and stay safe and stay home if you can!
-Negan
Okay guys apparently I'm too much of the little guy to post this in the dev part. However, I did a search and came accross an eng bootloader or what claims to be for the galaxy s10+. I'm not sure as to the legitimacy of this file, but figured it was worth putting out there. I helped or tried to help when the S8 came out as well. Anyway once I get it uploaded somewhere, I will post the file.
Okay just an FYI this is said to be the eng bootloader from PakFirmware and said to be for G975U
Bootloader filehttps://drive.google.com/file/d/1c3gDQ6vi99NsRS3cZzVkR2C_vzNIPL-s/view?usp=drivesdk
Bootloader RAR filehttps://drive.google.com/file/d/1wG1d0eK6hBnL6-N1SimEIwvKiC2G8YcY/view?usp=drivesdk
If anyone is curious as to where the file came from it was from herehttps://www.google.com/amp/s/pakfirmware.com/2019/02/samsung-s10-sm-g975u-eng-boot-file/amp/
Here is the link to the combination from file with supposed eng bootloader included https://drive.google.com/file/d/1XeL8KfP255QJD0Txv5B79Edneb4SEaY-/view?usp=drivesdk
First of all, I bet you $20 right now it's not, it's just the same combination boot file that comes in every single combination rom.
Second of all, even if it is and I am wrong, it won't help as you won't be able to boot it. Samsung phones require special certificates to allow them to boot eng firmware, and those certificates essentially oem unlock the device anyway. I know this because I have an s8+ that happens to possess one. But before you ask, the certificates are tied cryptographically to the imei and did numbers of the device they are issued for, so finding one for another device won't help you
As has been stated ad nauseum, the USA Samsung devices aren't rootable anymore. People who want rooted Samsungs should purchase the exynos (SM-G975F/D), or international snapdragon (SM-G9750) models
While the above may be true, I was merely trying to help and by no means am I a developer. I, however do not believe that US variant SD Samsung phones are not rootable. There have been countless times before where people have made that statement and yet root has come to fruition, albeit may take a considerable amount of time and effort. Many US customers are unable to buy international variants and are stuck with what we can get. So with that being said, I hope that I am not being too pushy with regards to your statement, I just refuse to be pessimistic when it comes to development and root efforts. The galaxy s8 had root even though it took some time, yet it was suppose to be unrootable. I just like to think that regardless of people saying it "can't " is a motivator to challenge development and experiment.
You two should work with @elliwigy and his root project! He could use some assistance & expertise & team! Cheers
ait1071 said:
While the above may be true, I was merely trying to help and by no means am I a developer. I, however do not believe that US variant SD Samsung phones are not rootable. There have been countless times before where people have made that statement and yet root has come to fruition, albeit may take a considerable amount of time and effort. Many US customers are unable to buy international variants and are stuck with what we can get. So with that being said, I hope that I am not being too pushy with regards to your statement, I just refuse to be pessimistic when it comes to development and root efforts. The galaxy s8 had root even though it took some time, yet it was suppose to be unrootable. I just like to think that regardless of people saying it "can't " is a motivator to challenge development and experiment.
Click to expand...
Click to collapse
S10 COMBINATION file Restrictions flash
Unless get token
steady.bin flash!
Game over!
ait1071 said:
While the above may be true, I was merely trying to help and by no means am I a developer. I, however do not believe that US variant SD Samsung phones are not rootable. There have been countless times before where people have made that statement and yet root has come to fruition, albeit may take a considerable amount of time and effort. Many US customers are unable to buy international variants and are stuck with what we can get. So with that being said, I hope that I am not being too pushy with regards to your statement, I just refuse to be pessimistic when it comes to development and root efforts. The galaxy s8 had root even though it took some time, yet it was suppose to be unrootable. I just like to think that regardless of people saying it "can't " is a motivator to challenge development and experiment.
Click to expand...
Click to collapse
I am aware, as I was the last person to root one. Changes came with the s9 family that closed the last remaining doors. As you can see by looking the s9 or s9+ were never rooted. The s10 won't be either
Found something
Ok so i found something that might be of some use it says its an eng boot file but idk if its legit or not so if someone can check it out it would be very much appreciated heres the link: https://support.halabtech.com/index.php?a=downloads&b=folder&id=42678
Chibisuke1219 said:
Ok so i found something that might be of some use it says its an eng boot file but idk if its legit or not so if someone can check it out it would be very much appreciated heres the link: https://support.halabtech.com/index.php?a=downloads&b=folder&id=42678
Click to expand...
Click to collapse
It's not. In 100 out of 100 times you find these online they are just the combination bootloader repackaged with this incorrect name, because they can be used to bypass frp in some cases.
I don't know why you are looking for the eng bootloader anyway. Even in the incredibly unlikely scenario you found the real one, it won't help you because devices past the s7 won't boot them anyway without a special certificate that your phone doesn't have (because it effectively unlocks your bootloader anyway)
GSM CHEN said:
S10 COMBINATION file Restrictions flash
Unless get token
steady.bin flash!
Game over!
Click to expand...
Click to collapse
Man, if only we were able to find and use the ENG firmware! Even if anyone is able to find ENG firmware, they will not be able to use it as @partcyborg already pointed out.. You would need some sort of ENG Token to convert your device into an ENG device which as he also stated would in itself be like unlocking the bootloader.. If you know anyone or any company that is able to convert devices to eng devices (I highly doubt it) then please let us know.
Last I heard if you could even find anyone that is able to sell you an ENG cert/token that they are very expensive...
partcyborg said:
It's not. In 100 out of 100 times you find these online they are just the combination bootloader repackaged with this incorrect name, because they can be used to bypass frp in some cases.
I don't know why you are looking for the eng bootloader anyway. Even in the incredibly unlikely scenario you found the real one, it won't help you because devices past the s7 won't boot them anyway without a special certificate that your phone doesn't have (because it effectively unlocks your bootloader anyway)
Click to expand...
Click to collapse
haha yes, that irritates the CRAP out of me... its like the entire internet doesn't know the difference between "ENG" and "FACTORY" sometimes..
to add, factory firmware will not allow you to root your device. It is only typically "debuggable" (no it isn't a userdebug and if you don't know what this means then it probably won't help you either), permissive and verity disabled.
ENG firmware typically will have "eng" in its name and 5th letter from right to left will typically be an E (for ENG.)
To top it off, most of the world can't even flash factory firmware onto g975u.... I think people should focus on figuring that out before anything.. if not, the world is doooooomed
On a side note: The S8/S8+ SamPWND root did use some ENG firmware (this was of course released after the S7).. Mainly we used the ENG system which has SU binaries by default.. but I can 100% tell you even if we did come across ENG firmware, we can no longer flash the system without ENG token/cert...
elliwigy said:
Man, if only we were able to find and use the ENG firmware! Even if anyone is able to find ENG firmware, they will not be able to use it as @partcyborg already pointed out.. You would need some sort of ENG Token to convert your device into an ENG device which as he also stated would in itself be like unlocking the bootloader.. If you know anyone or any company that is able to convert devices to eng devices (I highly doubt it) then please let us know.
Last I heard if you could even find anyone that is able to sell you an ENG cert/token that they are very expensive...
Click to expand...
Click to collapse
$600 USD per device for the s8/s8+. That is after the company plops down $25k up front just to set everything up.
It's likely priced this way specifically to make it virtually impossible to do things like give them out on XDA
I think elliwigy has rooted the S9. S10 will be very very hard to do if not impossible.
kalexander7 said:
*cough* Just figured I'd leak some protected Samsung AT commands here for you guys to crack that 'cryptography'
AT+ENGMODES=0,
AT+ENGMODES=1,
AT+ENGMODES=2,2,
AT+ENGMODES=8,0,0
AT+ENGMODES=8,0,1
AT+ENGMODES=8,0,2
AT+ENGMODES=8,0,3
AT+DEVROOTK=
AT+DEVROOTK=1,0,0
AT+DEVROOTK=1,1,0
AT+DEVROOTK=2,0,
AT+DEVROOTK=2,1,
AT+DEVROOTK=2,2,
AT+DEVROOTK=2,3,
AT+DEVROOTK=2,4,
AT+DEVROOTK=2,5,
AT+DEVROOTK=2,6,
AT+DEVROOTK=2,7,
Both of these commands have something to do with the eng bootloader being switched.
AT+REACTIVE may also be part of it
Click to expand...
Click to collapse
these arent secret or helpful
Seems at this rate we would need a Samsung phone tech to get root.