Searching for Huawei P30 Lite MAR-LX1B unlock - Android Q&A, Help & Troubleshooting

Hello.
I'm searching a WORKING method to unlock the 'Huawei P30 Lite MAR-LX1B'.
Emergency-Call Code is not working anymore.
Emergency Backup function is not available at this Model.
Callback or Safemode exploit don't work, too.
ADB is turned off.
Tried very much methods that are on youtube, but i think these all are too old now, nothing is working.
How to bypass Google-Verify and install a custom ROM on this?

exploit_xy said:
How to bypass Google-Verify
Click to expand...
Click to collapse
You can do it by
either
fastboot - what requires device's bootloader gets unlocked before
or
avbctl - what requires ADB runs in root mode

Both scenarios are not given here.
NO ADB
NO ROOT
Just made a factory reset and then google want to ****s me up...
Just recovery and download mode possible.
I have no access to enable ADB or ROOT or whatever, because i haven't the Google account for that phone.
How does Huawei reset it? There must be a way to do it without the account.
Is it possible to generate the unlock code?

As I can see you're confusing things.
DM-VERITY / AVB protects phone's Android OS getting changed, not to get into phone's Android OS what FRP-lock ( which is tied to your Google account ) does.
AFAIK to programmatically remove a FRP-lock phone must be accessible via ADB and Andoid OS must got rooted.

Related

My Redmi Note 4 (MTK) suddenly doesn't accept my password

Hi all,
My Redmi Note 4 (MTK) with stock ROM and MIUI 8 (presumably) had several continuous strange reboots and since then. It doesn't accept My password to unlock the phone. (I assume never changed the password myself)
I have Google and Mi accounts logged in on the phone and the device data encryption is ON. there are valuable data on my phone and don't want to get it unlocked in exchange for losing all the photos and data. I didn't find any way to unlock the device remotely via Google or Mi account which is a frustration.
How could I solve the problem?
P.S: I've seen a password resetter tool on an old topic in Mi forum which also is proposed for a different model (Note 3G). not sure if it could help. Should I try that? the Topic is here
ghandil said:
Hi all,
My Redmi Note 4 (MTK) with stock ROM and MIUI 8 (presumably) had several continuous strange reboots and since then. It doesn't accept My password to unlock the phone. (I assume never changed the password myself)
I have Google and Mi accounts logged in on the phone and the device data encryption is ON. there are valuable data on my phone and don't want to get it unlocked in exchange for losing all the photos and data. I didn't find any way to unlock the device remotely via Google or Mi account which is a frustration.
How could I solve the problem?
P.S: I've seen a password resetter tool on an old topic in Mi forum which also is proposed for a different model (Note 3G). not sure if it could help. Should I try that? the Topic is here
Click to expand...
Click to collapse
If you are rooted and have twrp installed then try this
https://forum.xda-developers.com/android/software-hacking/remove-lockscreen-recovery-t3530008
MyNameIsRage said:
If you are rooted and have twrp installed then try this
https://forum.xda-developers.com/android/software-hacking/remove-lockscreen-recovery-t3530008
Click to expand...
Click to collapse
Thank you. I didn't install any third party recovery tool or root the device myself. However, root checker apps declared the device is rooted. I assume it's the default setting by Xiaomi and they've shipped the Redmi Note 4 device rooted?
Regarding the recovery tool, I'll enter into Mi's default recovery environment by pressing power + volume up. Could I do anything helpful there? like installing twrp
I had this same issue recently (three times in the space of 3 months)
I wish I'd seen this thread earlier as I just factory-reset. The 3rd tone it happened, I reverted to stock miui. I was using the modded aosp Rom at the time.
ghandil said:
Thank you. I didn't install any third party recovery tool or root the device myself. However, root checker apps declared the device is rooted. I assume it's the default setting by Xiaomi and they've shipped the Redmi Note 4 device rooted?
Regarding the recovery tool, I'll enter into Mi's default recovery environment by pressing power + volume up. Could I do anything helpful there? like installing twrp
Click to expand...
Click to collapse
Vendors never ship devices with root access. Is your device second hand? Also did you notice having any app named supersu or magisk installed on your device earlier?
Currently you have miui recovery installed. You can only do a factory reset from there, but it would just wipe everything including data. And regarding all the tools you talked about. They require an unlocked bootloader. So inorder to not lose data and Remove password you need to unlock your bootloader and install twrp recovery. Here's the thread for it
https://forum.xda-developers.com/redmi-note-4/development/how-to-install-twrp-recovery-root-t3717952
Note that getting unlock permission can take from 1 week to 3 weeks.
If you want to get your phone fixed urgently then the best way is to visit a service centre. But then if you can wait for a week or so, you can fix your device yourself.
After twrp is installed then just follow the guide i linked above.
MyNameIsRage said:
Vendors never ship devices with root access. Is your device second hand? Also did you notice having any app named supersu or magisk installed on your device earlier?
Currently you have miui recovery installed. You can only do a factory reset from there, but it would just wipe everything including data. And regarding all the tools you talked about. They require an unlocked bootloader. So inorder to not lose data and Remove password you need to unlock your bootloader and install twrp recovery. Here's the thread for it
https://forum.xda-developers.com/redmi-note-4/development/how-to-install-twrp-recovery-root-t3717952
Note that getting unlock permission can take from 1 week to 3 weeks.
If you want to get your phone fixed urgently then the best way is to visit a service centre. But then if you can wait for a week or so, you can fix your device yourself.
After twrp is installed then just follow the guide i linked above.
Click to expand...
Click to collapse
No my device wasn't second hand, Actually, it was somehow strange because some apps like a mobile bank app were stating that the device is rooted whereas some other apps didn't detect any root sign on the device. There isn't SuperSu or Magisk installed on the phone too.
I just applied for getting unlocking the phone (Although for my HTC phones in the past, just used some tools from here and get the bootloader unlocked. I don't know why it's not the case for the Redmi Note 4 -or Xiaomi phones may be- in general)
I also tried the Method II here (was expressed would work for the phones Without Recovery Installed) but got Permission denied error on adb shell for rm *.key command. (Maybe it's related to the locked bootloader?)
Thanks
ghandil said:
No my device wasn't second hand, Actually, it was somehow strange because some apps like a mobile bank app were stating that the device is rooted whereas some other apps didn't detect any root sign on the device. There isn't SuperSu or Magisk installed on the phone too.
I just applied for getting unlocking the phone (Although for my HTC phones in the past, just used some tools from here and get the bootloader unlocked. I don't know why it's not the case for the Redmi Note 4 -or Xiaomi phones may be- in general)
I also tried the Method II here (was expressed would work for the phones Without Recovery Installed) but got Permission denied error on adb shell for rm *.key command. (Maybe it's related to the locked bootloader?)
Thanks
Click to expand...
Click to collapse
Adb required usb debugging and computer to be authorised, so since your phone is locked you can't allow it. And adb won't be able to perform anything on miui on lockscreen.
MyNameIsRage said:
Adb required usb debugging and computer to be authorised, so since your phone is locked you can't allow it. And adb won't be able to perform anything on miui on lockscreen.
Click to expand...
Click to collapse
Since my phone has the USB debugging enabled already and I've used it with my computer (the computer was authorized). I was able to back up my files on the phones memory via ADB with below command:
Code:
adb pull "sdcard/[Folder Name]" "Path/On/My Computer/To/BackUp"
After that, I've wiped out the phone remotely via Mi account. This way I just lost my SMS and call history, since hadn't synced them with Mi cloud account.
Anyway, I'm looking forward to getting my unlock permission from Xiaomi and install a custom recovery for future possible issues.

Question Is it possible to unlock the bootloader of the Oppo Find X3?

Wonder if anyone knows how to unlock the bootloader and root the Oppo Find X3 (not Pro)? This is the device that sits just below the Pro-Model - essentially same hardware with a slightly less capable CPU (Snapdragon 870 instead of 888). The device runs a version of ColorOs intended for the Chinese market only (at this stage). Easy to enable developer options, allow OEM unlocking and enable USB debugging. But so far I have not found a way to access fastboot mode and proceed to unlock the bootloader. Any ideas?
Waited 4 yrs to upgrade from a OnePlus5 and these Chinese system apps are such a downer. Glad to see you two on to the right questions.
tigerfelix said:
... The device runs a version of ColorOs intended for the Chinese market only (at this stage). Easy to enable developer options, allow OEM unlocking and enable USB debugging. But so far I have not found a way to access fastboot mode and proceed to unlock the bootloader. Any ideas?
Click to expand...
Click to collapse
remind me of the steps?
tigerfelix said:
Wonder if anyone knows how to unlock the bootloader and root the Oppo Find X3 (not Pro)? This is the device that sits just below the Pro-Model - essentially same hardware with a slightly less capable CPU (Snapdragon 870 instead of 888). The device runs a version of ColorOs intended for the Chinese market only (at this stage). Easy to enable developer options, allow OEM unlocking and enable USB debugging. But so far I have not found a way to access fastboot mode and proceed to unlock the bootloader. Any ideas?
Click to expand...
Click to collapse
I'm facing the same issue. Have activated USB debugging on my X3 Pro, but when I shut down and restart whilst also holding volume up button, it doesn't go in to fast boot. Is there a way of activating fast boot by plugging phone into computer?
p1gnone said:
remind me of the steps?
Click to expand...
Click to collapse
The steps to enable developer mode? Go to About Phone, there you will see a screen with lots of info about the phone, including the OS. Tap on *Baseband & kernel", then you see three infos. There you click multiple times on "Build number", which will unlock developer mode. This you then find under "Additional settings" in the main settings. Then you can enable "OEM unlock" (which doesn't help unless you can access the bootloader and actually unlock it...) and "USB debugging". I'll survive without root for now, hoping some clever XDA devs will figure this device out eventually. It's an amazing phone, and I hope they will release a true international version of the firmware at some point, so I won't see the Chinese core-apps anymore...
Global phones have purposely has the fastboot command blocked, so even if there was a twrp there is no way to flash it, no matter what you do, holding volume down on boot, commands or any other method won't work. Chinese models I believe can have it done but need to download an app, then apply to have permission to unlock.
gaztom78 said:
Global phones have purposely has the fastboot command blocked, so even if there was a twrp there is no way to flash it, no matter what you do, holding volume down on boot, commands or any other method won't work. Chinese models I believe can have it done but need to download an app, then apply to have permission to unlock.
Click to expand...
Click to collapse
My phone IS a Chinese model; the regular FX3 (non-pro). With Oppo (cr)App Store and all sorts of China-centric rubbish. What is the name of the app that might let me access the bootloader?
tigerfelix said:
My phone IS a Chinese model; the regular FX3 (non-pro). With Oppo (cr)App Store and all sorts of China-centric rubbish. What is the name of the app that might let me access the bootloader?
Click to expand...
Click to collapse
Deeptest. Apk or in depth test.apk Google them a new version 1.1 was released three days ago but no info on what model phone it is for
Thanks for the tip. Among other things, I came across this:
OPPO Community
Talk, share, and learn everything about the beautiful possibilities of technology together with other OPPO fans.
community.coloros.com
Sounds like this is for devs only, and not yet for the FX3. So for now, I'll keep my hands off it - don't think I'm at the required skill level yet. But still - a good tip, and it gives me some hope that root access might be possible in the near future.
I have what I'm pretty sure is the global variant and I am able to enter fastbootd
Oh wow. Great! May I ask you to please share how you manged to pull that off? And once you accessed fastboot, did you e.g. manage to root the device? Please, also here, a "how" would be preferred over a "yes"?
Or is there a way to root the phone with apps like KingoRoot etc?
I'm not pro in this area, but i find this:
Spoiler: link
How To Unlock OPPO Find X3 Pro Bootloader - NaldoTech
Follow this guide to learn how to unlock the bootloader on your OPPO Find X3 Pro. Most modern Android phones come with locked bootloaders, which make it
www.naldotech.com
Has anybody managed to root or install magisk on the find x3 pro?
Thinking about buying this phone but only under this premise.
Speaka said:
Has anybody managed to root or install magisk on the find x3 pro?
Thinking about buying this phone but only under this premise.
Click to expand...
Click to collapse
So buy oneplus or xiaomi. Dont buy oppo.
Can someone try it? I do not have experience.
OPPO FindX3/X3Pro深度测试解锁BL刷ROOT首发指导教程-ROM乐园官网
目前OPPO FindX3系列机 型ROOT门槛偏高,不那么友好,本教程为ROM乐园首发,其他网站禁止私自转载发布
www.romleyuan.com
georgiy8428 said:
Can someone try it? I do not have experience.
OPPO FindX3/X3Pro深度测试解锁BL刷ROOT首发指导教程-ROM乐园官网
目前OPPO FindX3系列机 型ROOT门槛偏高,不那么友好,本教程为ROM乐园首发,其他网站禁止私自转载发布
www.romleyuan.com
Click to expand...
Click to collapse
This is what this website tells you when trying to download the app you listed:
1. This service is a one-time payment, the order can be displayed in the personal center after purchase, and it can be used unlimitedly within the validity period
2. The phone comes with a BootLoader model at the factory, please unlock the BL by yourself in advance, and then make a paid purchase
3. The flashing package information belongs to the payment for flashing the data, and not for other services such as paid assistance. Please be aware
4. Relevant introductions and pictures are for reference only, different models may have differences, the address will be automatically obtained after purchase 5. For problems such as resource failure or error, you can contact online customer service QQ or WeChat in the personal center after successful purchase
You have to unlock your bootloader before you can use this app, that is supposed to unlock the bootloader.....
OPPO Phone unlock is not paid service, OPPO Offical release unlook app here: https://www.oppo.cn/thread-397164526-1
Unlock app for find x3 direct download link: https://img-oppo-cn-test.oss-cn-shenzhen.aliyuncs.com/uploads/common/2021/02/10/15554642501.apk
This app only work on ColorOS 11, If you're using Coloros 12, you must downgrade to Coloros11.
If you're using china version, you can download a downgrade rom here (Do not change the zip name): https://561234.xyz/设备/Find X3/C11降级包
Update:
Not china version findx3 please use OplusDowngradeTool to download the downgrade rom.
https://561234.xyz/d/设备/Find X3/C11降级包/OplusDowngradeTool.zip
This tool maybe chinese only, there is a video for how to use it:
https://561234.xyz/设备/Find X3/C11降级包/OplusDowngradeTool-OperationDemo.mp4
exg0zz said:
OPPO Phone unlock is not paid service, OPPO Offical release unlook app here: https://www.oppo.cn/thread-397164526-1
Unlock app for find x3 direct download link: https://img-oppo-cn-test.oss-cn-shenzhen.aliyuncs.com/uploads/common/2021/02/10/15554642501.apk
This app only work on ColorOS 11, If you're using Coloros 12, you must downgrade to Coloros11.
If you're using china version, you can download a downgrade rom here (Do not change the zip name): https://561234.xyz/设备/Find X3/C11降级包
Click to expand...
Click to collapse
Hello. I now have Android 12 c.31. And I can not roll back to A11. What other options?
georgiy8428 said:
Hello. I now have Android 12 c.31. And I can not roll back to A11. What other options?
Click to expand...
Click to collapse
Currently there's no method to unlock oppo phone on android 12.

[GUIDE] Xiaomi Redmi 9 Pro EEA (joyeuse) [Global] FRP Bypass and Reset [Android 10] [Miui 12] [Android 11] [Miui 12.5] [Software Testpoint]

Hello Fellows,
I've got a Redmi 9 Pro for Linux purposes, but the phone came with FRP triggered and of course, I couldn't get access to the sellers
account. I spare you the details, because I am sure, every one knows a story like that.
I checked xda and the web about guides for quite some time, and actually found a lot of them, but none of them worked. At the end I could combine
some of these guides to actually make it happened. I've created a little screen recording to show all the steps that worked for my device.
Yes you can actually install and open almost every apk even with a triggered FRP. Almost means, you can even enable the developer options, but
they don't show anything for that user.
Initial situation:
Xiaomi Redmi 9 Pro EEA (joyeuse)
Bootloader Locked
triggered FRP Lock
find my device - OFF
No MI-Account
Software Variant 1:
Firmware: MIUI V12.0.2.0.QJZEUXM Stable Official Update for Redmi Note 9 Pro EEA (joyeuse)
Android 10 - Miui 12
Android Security Patch Date: 2021-01-21
Software Variant 2:
Firmware: MIUI V12.5.8.0.RJZEUXM Stable Official Update for Redmi Note 9 Pro EEA (joyeuse)
Android 11 - Miui 12.5
Android Security Patch Date: 2022-03-01
FRP Bypass start conditions:
Wifi is connected
The basic idea and steps:
Get into System Settings via the Help & Feedback from Gmail to disable and stop certain apps.
Only for this is the wifi needed, if you type delete, the right help topic will show up
2x Android Setup
Carrier Dafault App
Google Play Services (must be disabled at the very last)
enable the Accessibility Suite to re-enable Google Play Services at the right moment
Continue the actually process to setup the phone, the procedure will stuck at "Just a sec..." "Checking for updates..."
now try to re-enable the Google Play Services, once this is done, the FRP Bypass will take place the next step
One important note, after enabling Google Play Services, its Storage and Cache must be deleted!
This is one of the main reasons why it didn't worked for me the first 100 times i tried.
It does go through though, but right at the moment the setup is finished, the FRP Lock gets triggered and
we are back at the beginning.
Enabling the Google Play Services can be annoying, because the screen is flashing/changing so fast, that the touch
will not be accepted right away. But there is plenty of time to try until it hits.
Finish the setup process until you see the home screen
Execute the factory reset over the settings menu and the FRP is gone for good
Optional, you can enable oem unlock before you factory reset the phone
With oem unlock enabled, the phone can't get FRP Lock on.
Spoiler: FRP Bypass and Reset Android 10 - Miui 12
Spoiler: FRP Bypass and Reset Android 11 - Miui 12.5
Regarding Bootloader Unlock, which es mandatory to install Linux (Ubuntu Touch) on this phone.
I couldn't found any free way to either unlock the bootloader without Mi-Account, or reboot the phone into EDL.
They are some Apps I tried so far:
Xiaomi Sideload Tool and ROM2box from Romprovider.com
But they need MIUI Recovery 5.0, and I only have MIUI Recovery 3.0
And don't want to upgrade, because Ubuntu Touch need Android 10
Does anybody have more information about that exploit these Sideload Apps are using?
I don't get how you can read data from and adb sideload connection, where you just can upload zip files
for updates
EDL from the famous Bjoern Kerler "bkerler" (MTK-Client)
For this tool the phone must be in EDL Mode, which I can't get into it
Does anybody know a way how to do that without Test Point? I tried so many ways, but none worked.
I even compiled fastboot and adb from AOSP, but the "old" ways like reboot-edl don't work.
My last hope is a USB-C V2 Cable/Dongle from Team Hydra.
Updates will follow...
[Update 1: 2023-04-25]
The FRP Bypass Procedure also works on Android 11 MIUI 12.5
[Update 2: 2023-04-25]
I've built the EDL Cable/Dongle, but it didn't work. I've bought the official
Hydra EDL Cable V2, exact same result, it also didn't work. Hydra refuses to give me a straight answer to this issue, even as a customer. The shop I've bought it
from, asked Hydra as well, with the feedback, this could be a SPD issue.
But still, they refuse to tell me, which SPD I need to get it working. At this
time I was on SPD 2021-01-21, and they published the EDL Cable Pinouts in Dec. 2022 [Latest Security]. So this was a very false promise from Hydra or rather mobilerdx, not sure who's to blame here, perhaps myself.
[Update 3: 2023-04-25]
I've wrote an ADB and Fastboot Sniffer for Windows. Which worked
pretty well, and I was able to get the ADB commands from the Xiaomi Sideload Tool. So the Exploit is basically, that you can perform ADB PULL and ADB PUSH while your in SIDELOAD Mode, that's it. And that it uses a built-in command to gather the partition structure while you are in the
normal ADB Mode.
With that knowledge now, I've also wrote a Bash pendant from the Xiaomi Sideload Tool -> Xiaomi SideLoad Terminal Tool (xsltt). Which inherits all its functions plus a bit more user comfort.
With this tool, I was able to delete my xloader, and the device now boots
straight into EDL Mode. Which is great, you can call this a Software Testpoint.
But, there is always a but, it seems that there is still no proper firehose file out there, that bypasses this annoying EDL authentication. And no, I will not even try to bypass that myself, this is way over my head.
So I would very much appriciate it, if someone can point me to a working firehose file that bypasses the EDL authentication for the Redmi Note 9 Pro (joyeuse).
I am facing the same problem, can not find the right firehose tool.
And all the apps that claim they have proper firehose file are all paid service.
since you have hydra tool, did they work for the edl? since they said they have the right firehose file.
ccaye said:
I am facing the same problem, can not find the right firehose tool.
And all the apps that claim they have proper firehose file are all paid service.
since you have hydra tool, did they work for the edl? since they said they have the right firehose file.
Click to expand...
Click to collapse
Haha, no they don't. They even recommended me the hydra dongle in their own telegram support channel. Now i have this dongle since a day, they say it is not supported in EDL Mode, only Sideload mode. And now i have to find someone who can fix the phone remotely with a auth service account. Isn't it great?
I'
newbit said:
Hello Fellows,
I've got a Redmi 9 Pro for Linux purposes, but the phone came with FRP triggered and of course, I couldn't get access to the sellers
account. I spare you the details, because I am sure, every one knows a story like that.
I checked xda and the web about guides for quite some time, and actually found a lot of them, but none of them worked. At the end I could combine
some of these guides to actually make it happened. I've created a little screen recording to show all the steps that worked for my device.
Yes you can actually install and open almost every apk even with a triggered FRP. Almost means, you can even enable the developer options, but
they don't show anything for that user.
Initial situation:
Xiaomi Redmi 9 Pro EEA (joyeuse)
Bootloader Locked
triggered FRP Lock
find my device - OFF
No MI-Account
Software Variant 1:
Firmware: MIUI V12.0.2.0.QJZEUXM Stable Official Update for Redmi Note 9 Pro EEA (joyeuse)
Android 10 - Miui 12
Android Security Patch Date: 2021-01-21
Software Variant 2:
Firmware: MIUI V12.5.8.0.RJZEUXM Stable Official Update for Redmi Note 9 Pro EEA (joyeuse)
Android 11 - Miui 12.5
Android Security Patch Date: 2022-03-01
FRP Bypass start conditions:
Wifi is connected
The basic idea and steps:
Get into System Settings via the Help & Feedback from Gmail to disable and stop certain apps.
Only for this is the wifi needed, if you type delete, the right help topic will show up
2x Android Setup
Carrier Dafault App
Google Play Services (must be disabled at the very last)
enable the Accessibility Suite to re-enable Google Play Services at the right moment
Continue the actually process to setup the phone, the procedure will stuck at "Just a sec..." "Checking for updates..."
now try to re-enable the Google Play Services, once this is done, the FRP Bypass will take place the next step
One important note, after enabling Google Play Services, its Storage and Cache must be deleted!
This is one of the main reasons why it didn't worked for me the first 100 times i tried.
It does go through though, but right at the moment the setup is finished, the FRP Lock gets triggered and
we are back at the beginning.
Enabling the Google Play Services can be annoying, because the screen is flashing/changing so fast, that the touch
will not be accepted right away. But there is plenty of time to try until it hits.
Finish the setup process until you see the home screen
Execute the factory reset over the settings menu and the FRP is gone for good
Optional, you can enable oem unlock before you factory reset the phone
With oem unlock enabled, the phone can't get FRP Lock on.
Spoiler: FRP Bypass and Reset Android 10 - Miui 12
Spoiler: FRP Bypass and Reset Android 11 - Miui 12.5
Regarding Bootloader Unlock, which es mandatory to install Linux (Ubuntu Touch) on this phone.
I couldn't found any free way to either unlock the bootloader without Mi-Account, or reboot the phone into EDL.
They are some Apps I tried so far:
Xiaomi Sideload Tool and ROM2box from Romprovider.com
But they need MIUI Recovery 5.0, and I only have MIUI Recovery 3.0
And don't want to upgrade, because Ubuntu Touch need Android 10
Does anybody have more information about that exploit these Sideload Apps are using?
I don't get how you can read data from and adb sideload connection, where you just can upload zip files
for updates
EDL from the famous Bjoern Kerler "bkerler" (MTK-Client)
For this tool the phone must be in EDL Mode, which I can't get into it
Does anybody know a way how to do that without Test Point? I tried so many ways, but none worked.
I even compiled fastboot and adb from AOSP, but the "old" ways like reboot-edl don't work.
My last hope is a USB-C V2 Cable/Dongle from Team Hydra.
Updates will follow...
[Update 1: 2023-04-25]
The FRP Bypass Procedure also works on Android 11 MIUI 12.5
[Update 2: 2023-04-25]
I've built the EDL Cable/Dongle, but it didn't work. I've bought the official
Hydra EDL Cable V2, exact same result, it also didn't work. Hydra refuses to give me a straight answer to this issue, even as a customer. The shop I've bought it
from, asked Hydra as well, with the feedback, this could be a SPD issue.
But still, they refuse to tell me, which SPD I need to get it working. At this
time I was on SPD 2021-01-21, and they published the EDL Cable Pinouts in Dec. 2022 [Latest Security]. So this was a very false promise from Hydra or rather mobilerdx, not sure who's to blame here, perhaps myself.
[Update 3: 2023-04-25]
I've wrote an ADB and Fastboot Sniffer for Windows. Which worked
pretty well, and I was able to get the ADB commands from the Xiaomi Sideload Tool. So the Exploit is basically, that you can perform ADB PULL and ADB PUSH while your in SIDELOAD Mode, that's it. And that it uses a built-in command to gather the partition structure while you are in the
normal ADB Mode.
With that knowledge now, I've also wrote a Bash pendant from the Xiaomi Sideload Tool -> Xiaomi SideLoad Terminal Tool (xsltt). Which inherits all its functions plus a bit more user comfort.
With this tool, I was able to delete my xloader, and the device now boots
straight into EDL Mode. Which is great, you can call this a Software Testpoint.
But, there is always a but, it seems that there is still no proper firehose file out there, that bypasses this annoying EDL authentication. And no, I will not even try to bypass that myself, this is way over my head.
So I would very much appriciate it, if someone can point me to a working firehose file that bypasses the EDL authentication for the Redmi Note 9 Pro (joyeuse).
Click to expand...
Click to collapse
I'm ready to fund for research cause. I will invest in the tool that I know which allows EDL authentication so that we can verify if it works with your device.
Please let me know so that together we can succed in fixing your phone.
mvikrant97 said:
I'
I'm ready to fund for research cause. I will invest in the tool that I know which allows EDL authentication so that we can verify if it works with your device.
Please let me know so that together we can succed in fixing your phone.
Click to expand...
Click to collapse
Thank you for your generous offer, I am not sure If I understand you right, plus I don't have the need
for charity. To be honest, I don't even have a clue, what to believe now. They all promise you honey
flowing in rivers, but can't really deliver.
They are tools called EMT and UAT Pro. Never heard about them before. But they claim they have
auth support for this model in EDL mode. UAT even offers a pure software solution for an affordable price.
If you are willing to fund your self, please try it out, and report back.
newbit said:
Thank you for your generous offer, I am not sure If I understand you right, plus I don't have the need
for charity. To be honest, I don't even have a clue, what to believe now. They all promise you honey
flowing in rivers, but can't really deliver.
They are tools called EMT and UAT Pro. Never heard about them before. But they claim they have
auth support for this model in EDL mode. UAT even offers a pure software solution for an affordable price.
If you are willing to fund your self, please try it out, and report back.
Click to expand...
Click to collapse
I won't be investing in those tools. Both EMT and UAT allow auth flashing however I know a tool called Xiaomi Pro tool which supports auth flashing and it works and the investment is pretty low so I can invest in that tool to help you out with auth flashing.
I cannot discuss any further as XDA does not allow that.
mvikrant97 said:
I won't be investing in those tools. Both EMT and UAT allow auth flashing however I know a tool called Xiaomi Pro tool which supports auth flashing and it works and the investment is pretty low so I can invest in that tool to help you out with auth flashing.
I cannot discuss any further as XDA does not allow that.
Click to expand...
Click to collapse
Yeah that's weird, I've read this a lot, never had any issues with XDA about that.
Anyways, I can't find any manufacture website to the Xiaomi Pro Tool, so I cannot compare.
I think 15 bucks for are 3 Months time period is much cheaper compared to the 110 I've paid
for this Hydra Dongle, which brings me zero yet. So please, write me a PM with a link to a shop.
Just a little Update.
Thank your @mvikrant97, Xiaomi Fire Tool did the trick. They don't unlock bootloader,
but flash firmware with EDL auth. And now my phone is back to life. Support was very good, in fact,
they were the only ones who responded at all. Very patience and polite as well. Plus, very affordable.
Once my phone is fully charged, battery was totally drained since it was in EDL Mode for weeks, I will see
what Hydra has to offer. Btw: They've banned me from their Support Channel, without any explanation.
I guess I asked the wrong questions, pitty.
newbit said:
Just a little Update.
Thank your @mvikrant97, Xiaomi Fire Tool did the trick. They don't unlock bootloader,
but flash firmware with EDL auth. And now my phone is back to life. Support was very good, in fact,
they were the only ones who responded at all. Very patience and polite as well. Plus, very affordable.
Once my phone is fully charged, battery was totally drained since it was in EDL Mode for weeks, I will see
what Hydra has to offer. Btw: They've banned me from their Support Channel, without any explanation.
I guess I asked the wrong questions, pitty.
Click to expand...
Click to collapse
I'm very happy to learn that your phone is fixed.
While the rest we can discuss in PM!

Question Sm-t227u mdm lock/rooting help

Hello! So I am on a journey to attempt to root a Samsung tab a7 lite sm-t227u. So I want to be extremely transparent as to my reason for rooting:
I was given this tablet by my father whom got it from a previous job. When he left the job they never asked for it back, a long with a good bit of supplies he had that he got to keep.
So, I have this tablet, I can get into it as it doesn't have a passcode. I have wiped it by factory reset as well. However, it has IBM's MAAS360 installed and after factory reset AND a firmware flash using odin I still cannot get rid of this maas360 mdm. It is not Knox locked. I can activate developer mode and change all those settings, but I cannot download any apps through the app store at all or enable unknown source app install as those are under an IT block. I also do not have the OEM unlock option in dev options. I've tried the whole changing the date and connecting to wifi, with and without sim card but I cannot get this option to show, nor can I unlock the bootload through fastboot.
I have read that most of the new samsung phones do not have a bootloader unlock option, but from what I can tell that is specific to the snapdragon phones, and this tablet is running a mediatek chip.
Now, if I can remove mdm restrictions without rooting that's great, but I have a feeling that is the only way to properly flash this thing to completely remove the mdm.
I have tried the recovery tar that is posted in this forum but I cannot get it to flash, likely because I still don't have an unlocked bootloader
Have any of you all faced something similar or know of a solution? I may call the company the mdm is managed by and just see if they will remove it from their system, but I find it highly unlikely.
SM-T227U is an American model wich doesn't have the OEM unlocking option, you could unlock using unofficial ways but those are not pretty "stable".
coocooguy246 said:
Hello! So I am on a journey to attempt to root a Samsung tab a7 lite sm-t227u. So I want to be extremely transparent as to my reason for rooting:
I was given this tablet by my father whom got it from a previous job. When he left the job they never asked for it back, a long with a good bit of supplies he had that he got to keep.
So, I have this tablet, I can get into it as it doesn't have a passcode. I have wiped it by factory reset as well. However, it has IBM's MAAS360 installed and after factory reset AND a firmware flash using odin I still cannot get rid of this maas360 mdm. It is not Knox locked. I can activate developer mode and change all those settings, but I cannot download any apps through the app store at all or enable unknown source app install as those are under an IT block. I also do not have the OEM unlock option in dev options. I've tried the whole changing the date and connecting to wifi, with and without sim card but I cannot get this option to show, nor can I unlock the bootload through fastboot.
I have read that most of the new samsung phones do not have a bootloader unlock option, but from what I can tell that is specific to the snapdragon phones, and this tablet is running a mediatek chip.
Now, if I can remove mdm restrictions without rooting that's great, but I have a feeling that is the only way to properly flash this thing to completely remove the mdm.
I have tried the recovery tar that is posted in this forum but I cannot get it to flash, likely because I still don't have an unlocked bootloader
Have any of you all faced something similar or know of a solution? I may call the company the mdm is managed by and just see if they will remove it from their system, but I find it highly unlikely.
Click to expand...
Click to collapse
Hey man! Still got your tab 7? I also have a SM-T227U and have oem unlocked! After doing the usual stuff, you will want to turn off automatically update in developer settings. After that, go to settings>General management>Date and time and select manual time and date, and set it for exactly 10 days before the day you attempt this. OEM unlock will appear in dev settings!!!
Then turn off device and while holding power up + power down, plug into PC. It will show the pre-download mode screen where it asks if you want to continue. Just follow the on screen instructions to unlock bootloader!
*note that the bootloader unlocking results in an unavoidable factory reset**
evan5935 said:
Hey man! Still got your tab 7? I also have a SM-T227U and have oem unlocked! After doing the usual stuff, you will want to turn off automatically update in developer settings. After that, go to settings>General management>Date and time and select manual time and date, and set it for exactly 10 days before the day you attempt this. OEM unlock will appear in dev settings!!!
Then turn off device and while holding power up + power down, plug into PC. It will show the pre-download mode screen where it asks if you want to continue. Just follow the on screen instructions to unlock bootloader!
*note that the bootloader unlocking results in an unavoidable factory reset**
Click to expand...
Click to collapse
Sweet! I will absolutely try this when I get home this afternoon, will report back with results!
But just for clarity. Let's say I start with a freshly wiped tablet. Go through set up and connect to wifi, do I need to add a Google and Samsung account? Then in dev settings, enable USB debugging, also enable wifi debugging? Then change the date. Is there any step I am missing?
coocooguy246 said:
Hello! So I am on a journey to attempt to root a Samsung tab a7 lite sm-t227u. So I want to be extremely transparent as to my reason for rooting:
I was given this tablet by my father whom got it from a previous job. When he left the job they never asked for it back, a long with a good bit of supplies he had that he got to keep.
So, I have this tablet, I can get into it as it doesn't have a passcode. I have wiped it by factory reset as well. However, it has IBM's MAAS360 installed and after factory reset AND a firmware flash using odin I still cannot get rid of this maas360 mdm. It is not Knox locked. I can activate developer mode and change all those settings, but I cannot download any apps through the app store at all or enable unknown source app install as those are under an IT block. I also do not have the OEM unlock option in dev options. I've tried the whole changing the date and connecting to wifi, with and without sim card but I cannot get this option to show, nor can I unlock the bootload through fastboot.
I have read that most of the new samsung phones do not have a bootloader unlock option, but from what I can tell that is specific to the snapdragon phones, and this tablet is running a mediatek chip.
Now, if I can remove mdm restrictions without rooting that's great, but I have a feeling that is the only way to properly flash this thing to completely remove the mdm.
I have tried the recovery tar that is posted in this forum but I cannot get it to flash, likely because I still don't have an unlocked bootloader
Have any of you all faced something similar or know of a solution? I may call the company the mdm is managed by and just see if they will remove it from their system, but I find it highly unlikely.
Click to expand...
Click to collapse
If it has Mediatek chipset then you can use SP flash tool to format the tablet firmware and reflash it.
I would strongly recommend you to backup the NV DATA and NVRAM files before you format the tablet.
coocooguy246 said:
Sweet! I will absolutely try this when I get home this afternoon, will report back with results!
But just for clarity. Let's say I start with a freshly wiped tablet. Go through set up and connect to wifi, do I need to add a Google and Samsung account? Then in dev settings, enable USB debugging, also enable wifi debugging? Then change the date. Is there any step I am missing?
Click to expand...
Click to collapse
You can follow this guide actually! ( https://forum.xda-developers.com/t/...220-t225-install-lsposed-magisk-mods.4406933/) it recommends just skipping the setup junk
I have found that many times, rooting methods work across different models of the same device unless there are some sort of major differences in chipsets or some sort of random change lol
The only thing that doesn't seem to work for our model is section V of the guide which is for the removal of the "bootloader is unlocked" screen at startup. so you will still need to press the power button on that screen to boot up. It's a tiny hassle, but otherwise no big deal in my personal opinion
Make sure to read all the way to the end of the root section (section 4) and especially remember step 7. I retried probably 4 times and even patched the entire AP file of the firmware for use in odin (doing this gives a second warning on Knox screen that it isn't samsung official fw then boots normally into the bootlogo screen) before realizing everything was going fine.. I recommend just using the patched Magisk boot.img first just because I find it unsightly
Just flash the boot.tar in the AP slot. Don't download any of the boot imgs from the guide because they are for the t220's and t225's. I'll link the one I made according to the guide below. It'll save you some time and you won't need to install zarchiver and Magick just to have it factory reset again lol. Just download the latest Magisk apk (26.1) from the official github (https://github.com/topjohnwu/Magisk/releases) and install it when you have completed the 2nd factory reset/the patched boot img install.

Are there custom roms for Galaxy A14 that you can flash through ODIN?

Tale as old as time. Have a phone given, factory reset with a Google account that wasn't properly removed.
So FRP lock is in play.
Seems like all the old tricks & tips I knew years ago don't seem to work on this device. Seems like the A14 on Android 13 is lock tight.
What I can do is use ODIN to flash back to stock rom, but that didn't really help.
And what I can also do is go through User License agreements, and somehow fumble my way through Learn More links that I can eventually lead to Google Search
But this method doesn't have Java Script enabled, so I can't login to Google account and add my own account that way.
I'm looking towards roms for the previous model since they're so similar but this feels like a dead end before I even think of a download since incompatible roms can't be flashed.
All I really need is Bootable Android 11 or 12 regardless of how functional or broken it is so I can try exploits for those versions. Just enough to activate OEM unlocking and USB debugging is the end goal
Any tips y'all have?
According to this list
LineageOS 20 Supported Phones: All Models For 2023 [UPDATED]
Here's a quick breakdown of ALL the Android phones that can run LineageOS 20...
www.knowyourmobile.com
the popular Lineage OS isn't available for the Galaxy A14
Rottytops said:
Tale as old as time. Have a phone given, factory reset with a Google account that wasn't properly removed.
So FRP lock is in play.
Seems like all the old tricks & tips I knew years ago don't seem to work on this device. Seems like the A14 on Android 13 is lock tight.
What I can do is use ODIN to flash back to stock rom, but that didn't really help.
And what I can also do is go through User License agreements, and somehow fumble my way through Learn More links that I can eventually lead to Google Search
But this method doesn't have Java Script enabled, so I can't login to Google account and add my own account that way.
I'm looking towards roms for the previous model since they're so similar but this feels like a dead end before I even think of a download since incompatible roms can't be flashed.
All I really need is Bootable Android 11 or 12 regardless of how functional or broken it is so I can try exploits for those versions. Just enough to activate OEM unlocking and USB debugging is the end goal
Any tips y'all have?
Click to expand...
Click to collapse
You can't do anything because the bootloader lock is on.
I bypassed frp with sp flash tool but a14 has exynos processor so sp flash tool will not work.
There is no offical previous android, So downgrade will not work too.
Was able to bypass FRP unlock using one of those paid tools, but it may have been unnecessary to pay. (SamFW to be specific)
I'll explain for future googlers dealing with the same issue.
So I had the ATT model of the device. Specifically model SM-A146U. It comes with an Exynos or Mediatek SoC.
Mine was specifically the MT variant.
I used Odin3 to revert to the stock build. Build dated November 29/Dec 1 2022; despite the official release date of the device being Jan 2023.
The emergency code *#0*# does not work, but *#*#88#*#* does.
Obviously you needed Samsung USB, ADB, drivers installed. Additional troubleshooting has me download Microsoft Visual C++ 2015 ; and MT65XX Preload Drivers.
The SamFW tool claims it's free to remove the FRP lock on security patches pre-dating December 2022.
The SamFW tool only suggests you needed Samsung driver's and Visual C++. So I tried several times using the SamFW tool to push it's exploit, and it kept failing.
So in a moment of weakness, I bought the $15 credit pack because it promised "All models", ran the tool again, and still it failed. It required a credit card number for a service called coffee break or something, which is exactly the shady **** I have a cash app card for. I was not going to use my real bank account.
Because it runs a ADB exploit, I reboot into Recovery. Then in recovery menu, I select to Reboot into Bootloader, which puts the device into fastboot.
This is where I discover that I had no ADB drivers.
So I install ADB, and open Terminal/shell, whatever you call it. (Hold Shift and right click in ADB folder to shortcut ADB terminal)
I type:
Fastboot Devices
Didn't get a serial. I reboot Fastboot again, this time with Device Manager open on Windows, and notice for 5 seconds, a device called MT65xx preloader was lacking driver, and unloaded to reload ADB drivers. This is where I find out I'm using a MediaTek SoC
So I finally googled and install MT65xx Preload. Reboot to Fastboot 1 more time. I type
Fastboot Devices
I get a serial.
So not I reboot to system, then on phone in emergency dial type *#*#88#*#* then do another device check. Looks good.
Because I already paid $15 for the premium unlock, that's the first option I pick it finally unlocks. But because all this time I was missing critical mediatek drivers, the free option still could have worked. So I can't confirm if being free would have sufficed, or if I needed that paid service.
But what's done was done, and I was able to get into the phone.
So to recap I used:
SM-A146U ATT stock Rom (5.5GB), earliest build Nov-Dec 2022 (Google it)
Odin v3 Flash Tool (Hold Vol+ Vol- & Power to access)
Samsung USB Drivers (Latest and official)
Google ADB Drivers (Mini installer)
Microsoft Visual C++ 2015
MT65xx preloader Drivers (Google it)
And SamFW 4.6 FRP Tool
Emergency Dial code : *#*#88#*#*
To bypass FRP Lock on Galaxy A14 ATT version, Model SM-A146U ; MediaTek variant.
and to reiterate, Recovery and Fast Boot are not necessary in any part of the process.
I use Recovery to boot into Fastboot, and I only use FastBoot + ADB to personally confirm that my computer recognizes the device connected in several boot modes

Categories

Resources