Hi everyone
I have htc one"M7"
so
How can I get s-off?
تم الإرسال من جهازي HTC One بواسطة تاباتوك 2
anyone please
تم الإرسال من جهازي HTC One بواسطة تاباتوك 2
Step #1: Download Revone tool for HTC One and push it to your device: adb push revone /data/local/tmp/.
Step #2: Launch the command prompt / terminal on your computer.
Step #3: Navigate to folder where Revone tool is located.
Step #4: Issue following commands to command prompt:
adb push revone /data/local/tmp/
adb shell
Step #5: If you’re unlocked and rooted user, issue “su” to switch to root.
Step #6: Issue following commands at this time:
cd /data/local/tmp
chmod 755 revone
./revone –P
Step #7: If you get success message, reboot the phone but if you get message saying reboot phone and try again, reboot phone wait for at least two minutes and repeat the process. If you’re successful continue the procedure:
Step #8: Launch another command prompt / terminal.
Step #9: Issue following commands:
adb shell
cd /data/local/tmp
./revone -s 0 –u
You have option to us ‘-l’, ‘-r’ and ‘-t’ attributes later on for locking, relocking and resetting the device’s tamper flag respectively, you may check following examples:
* -u – Unlock
* -l – Lock
* -r – Relock
* -t – Reset the device’s tamper flag.
Step #10: If you got success message, reboot phone in bootloader mode that you can do by issuing following command to check S-off:
adb reboot bootloader
Step #11: You’re done. i found this on the web i hope it helps is your phone rooted are not
Related
hiya everyone, im new on here and really need some help.
im trying to downgrade my android software so im able to root it. only problem being ive never used command prompt lol!!
the guide im using says:
Launch a Command Prompt window and browse to the location of the files extracted in Step 1.
Enter the following commands:
adb push psneuter /data/local/tmp
adb push misc_version /data/local/tmp
adb shell chmod 777 /data/local/tmp/psneuter
adb shell chmod 777 /data/local/tmp/misc_version
adb shell /data/local/tmp/psneuter
adb shell
You should now get the # prompt, indicating temporary root.
Enter these commands:
cd /data/local/tmp
./misc_version -s 1.31.405.6
but how do i browse for the files if ive stored them in my documents and in a folder called downgrade android.
many thanks
What device are you trying to downgrade and what version of Android are you currently on? If it's Gingerbread there is a oneclick root called gingerbreak that works for a lot of people.
More info needed really.
S-Off + Perm root is required to use this tools!
there are 3 batch files inside:
_Radio.bat
_Recovery.bat
_EngBootloader.bat
how to use:
_EngBootloader - run and follow instructions
_Radio.bat - download radio image, rename it to radio.img and put it into the directory, run _Radio.bat
_Recovery.bat - download recovery image, rename it to recovery.img and put it into directory, run _Recovery.bat
don't know if all of you think that those tools are useful, but for some people it may be useful cause they aren't familar with cmd & adb
code for the batch files are included in the 2nd post, executables (no drivers) for adb and fastboot are included in the attachment
_EngBootloader.bat
Code:
@echo off
cls
adb devices
echo If your device is not listed exit this program now, enable usb debugging and try again.
pause
cls
adb push hboot.img /data/local/tmp
adb shell chmod 777 /data/local/tmp/hboot.img
echo Please accept superuser request on your phone
adb shell su
pause
adb shell dd if=/dev/block/mmcblk0p18 of=/sdcard/backup.img
adb shell dd if=/data/local/tmp/hboot.img of=/dev/block/mmcblk0p18
echo Bootloader should be flashed to your device now, backup from old bootloader is saved at /sdcard/backup.img
pause
adb reboot bootloader
_Radio.bat
Code:
@echo off
cls
adb devices
echo If your device is not listed exit this program now, enable usb debugging and try again.
pause
cls
echo Please accept superuser request on your phone
adb shell su
pause
echo Phone should reboot now to bootloader, please wait for it to boot
adb reboot bootloader
pause
echo Wait for flash to finish
fastboot flash radio radio.img
pause
fastboot reboot
_Recovery.bat
Code:
@echo off
cls
adb devices
echo If your device is not listed exit this program now, enable usb debugging and try again.
pause
cls
echo Please accept superuser request on your phone
adb shell su
pause
echo Phone should reboot now to bootloader, please wait for it to boot
adb reboot bootloader
pause
echo Wait for flash to finish
fastboot flash recovery recovery.img
pause
fastboot reboot
is this method for s off DS without xtc clip?
jalal.arkat said:
is this method for s off DS without xtc clip?
Click to expand...
Click to collapse
No, unfortunately these are a group off tools that can only be used once you are S-OFF.
So S-ON need not apply
@Blezz : thanks these will be useful
i don't know if they will be useful, they are still simply work.. it's more for... lazy people
Mod Edit.
Thank for giude but i can find RUU for my HTC Ds
hoanglamtong said:
thank for giude but i can find ruu for my htc ds
Click to expand...
Click to collapse
RUU's on 1st post now mate loads 2 pick from
anyone sucessfully used my guide?
Can anyone who has successfuly used my guide to downgrade please post why u think if my guide an how u think it could be made better. And say if u think its better than the other guides and why thanks very much. Have a good evening all.
ok, here is a success story with a minor modification...
i unlocked my device via htcdev, and rooted it also so i just did:
downloaded http://rapidshare.com/files/6806934...0805U_38.03.02.11_M_release_177977_signed.rar
- adb push misc_version /data/local/tmp
- adb shell chmod 777 /data/local/tmp/misc_version
- adb shell /data/local/tmp/misc_version -s 1.27.405.6
then rebooted to bootloader (power off, power+vol down) and
- fastboot oem lock
this reported error, but device was relocked
right click / run as administrator ruu (still in bootloader)
ruu installation went smoothly and now device is:
SAGA PVT SHIP S-ON RL
HBOOT-0.98.0000
RADIO-38.03.02.11_M
eMMC-boot
Just to save my fellow noobs trouble:
-bootloader must be locked before installing ruu!
-i have read somewhere that if you use custom rom when re-locked your device WILL NOT BOOT, so do this only if you know what you are doing
-when using Win7 you can start CMD in specific folder (avoid 5-10 cd's or long/path/to/folder) by holding shift+right click/open command window here)
paul.robo, thanks again, especially for trouble of gathering all those ruus!
No problem mate good to see my guides helping people can u confirm that the **re locked** at the top of the screen has gone ?
yes! no "re-locked", "locked" or "unlocked", i copied text in bootloader "as is" from top of the screen to time and date.
Htcdev.com guide aded now guys :d
The guides up now and for htcdev.com unlocked bootloaders please use the attatchment in the 1st post. If u unlocked with htcdev.ciom i assumed u got root access there for u dont need to use the zergrush method you can just push the misc_version to your saga and change it. If u need anymore help jjust pm me .
Thanks Paul, your guide worked perfect where the others failed
Dear paul.robo,
HBOOT-0.98.0000 is not supported by htcdev unlocker and therefore we can not see re-locked or whatever in bootloader but even after you get back to stock your phone is officialy out off warranty.
I can add one think for those who get in to a trouble with RUU installer.
You can use rom.zip en flash it like described below:
Start your phone after all the steps with misc_version and hboot in bootloader "Fastboot USB" mode.
Step 1: On you computer in "cmd" run fastboot oem rebootRUU you will be presented with black screen on your phone.
Step 2: On your computer in cmd run fastboot flash zip rom.zip.
It is possible that after first reboot it will not go further then bootloader and stay in "Fastboot USB" mode then follow Step 1 and 2 again then it will install the whole rom and reboot your phone into normaal mode.
Help,hboot 2.00.0002
I am on mac , can u help me please ? I am new to all these
I downgraded my Phone successfully using this. My Phone if from FET TW region.
While the downgrade works & you return to S-ON & Locked as default settings, the moment you upgrade to 2.3.5 FOTA Update Your bootloader becomes Relocked..
Just some thing to note before you use this..
Great Guide and restored my phone to stock back..
Giorgio89 said:
I am on mac , can u help me please ? I am new to all these
Click to expand...
Click to collapse
its the exact same use all the same commands as you would on a windows pc. i have done this on my hackintosh and my windows 8 pc both works, also on ubuntu is same
Huh
Thanks man , I guess I gotta try harder ...
Giorgio89 said:
Thanks man , I guess I gotta try harder ...
Click to expand...
Click to collapse
how are you stuck mate ?
paul.robo said:
how are you stuck mate ?
Click to expand...
Click to collapse
I don't really know to tell the truth ...
Consider me as a small child learning the alphabet right now
I open the terminal , then I drag the folder with the name "downgrade".
after that I type the commands you write and I get this :
Last login: Sun May 6 01:32:21 on ttys000
G.H.-iMac:~ goneis$ /Users/goneis/Desktop/DOWNGRADE.SAGA.AND.GUIDE adb push misc_version /data/local/tmp
-bash: /Users/goneis/Desktop/DOWNGRADE.SAGA.AND.GUIDE: is a directory
G.H.-iMac:~ goneis$ adb shell chmod 777 /data/local/tmp/misc_version
-bash: adb: command not found
G.H.-iMac:~ goneis$ adb shell /data/local/tmp/misc_version -s 1.27.405.6
-bash: adb: command not found
G.H.-iMac:~ goneis$
thanks again for your time ...
Also would you mind making a more analytical guide for osx ?
Baby steps -guy here
Giorgio89 said:
I don't really know to tell the truth ...
Consider me as a small child learning the alphabet right now
I open the terminal , then I drag the folder with the name "downgrade".
after that I type the commands you write and I get this :
Last login: Sun May 6 01:32:21 on ttys000
G.H.-iMac:~ goneis$ /Users/goneis/Desktop/DOWNGRADE.SAGA.AND.GUIDE adb push misc_version /data/local/tmp
-bash: /Users/goneis/Desktop/DOWNGRADE.SAGA.AND.GUIDE: is a directory
G.H.-iMac:~ goneis$ adb shell chmod 777 /data/local/tmp/misc_version
-bash: adb: command not found
G.H.-iMac:~ goneis$ adb shell /data/local/tmp/misc_version -s 1.27.405.6
-bash: adb: command not found
G.H.-iMac:~ goneis$
thanks again for your time ...
Also would you mind making a more analytical guide for osx ?
Baby steps -guy here
Click to expand...
Click to collapse
lol right open terminal ( go into applications then at the bottom there will be app called terminal open it and type cd then make sure u put a space after u type cd then after you type that drag my folder into the terminal then press ENTER once you done that type all commands 1 by 1 okay
my other downgrade threads here http://forum.xda-developers.com/showthread.php?p=25717156#post25717156
paul.robo said:
lol right open terminal ( go into applications then at the bottom there will be app called terminal open it and type cd then make sure u put a space after u type cd then after you type that drag my folder into the terminal then press ENTER once you done that type all commands 1 by 1 okay
my other downgrade threads here http://forum.xda-developers.com/showthread.php?p=25717156#post25717156
Click to expand...
Click to collapse
this time I get this :
Last login: Sun May 6 01:13:35 on ttys000
G.H.-iMac:~ G.H.$ cd
G.H.-iMac:~ G.H.$ cd /Users/G.H./DOWNGRADE.SAGA.AND.GUIDE
G.H.-iMacOWNGRADE.SAGA.AND.GUIDE G.H.$ adb push misc_version /data/local/tmp
-bash: adb: command not found
G.H.-iMacOWNGRADE.SAGA.AND.GUIDE G.H.$ adb shell chmod 777 /data/local/tmp/misc_version
-bash: adb: command not found
G.H.-iMacOWNGRADE.SAGA.AND.GUIDE G.H.$ adb shell /data/local/tmp/misc_version -s 1.27.405.6
-bash: adb: command not found
G.H.-iMacOWNGRADE.SAGA.AND.GUIDE G.H.$
:/
Giorgio89 said:
this time I get this :
Last login: Sun May 6 01:13:35 on ttys000
G.H.-iMac:~ G.H.$ cd
G.H.-iMac:~ G.H.$ cd /Users/G.H./DOWNGRADE.SAGA.AND.GUIDE
G.H.-iMacOWNGRADE.SAGA.AND.GUIDE G.H.$ adb push misc_version /data/local/tmp
-bash: adb: command not found
G.H.-iMacOWNGRADE.SAGA.AND.GUIDE G.H.$ adb shell chmod 777 /data/local/tmp/misc_version
-bash: adb: command not found
G.H.-iMacOWNGRADE.SAGA.AND.GUIDE G.H.$ adb shell /data/local/tmp/misc_version -s 1.27.405.6
-bash: adb: command not found
G.H.-iMacOWNGRADE.SAGA.AND.GUIDE G.H.$
:/
Click to expand...
Click to collapse
right im going to go onto my mac and ill make a file that will do it for you. ill PM u when ive done it mate okay did u try my other guide ???? its here http://forum.xda-developers.com/showthread.php?p=25717945#post25717945
when u download it unzip it drag the folder onto your desktop open up terminal and drag the Desire Downgrade Kit.bat file into your terminal and press enter
paul.robo said:
right im going to go onto my mac and ill make a file that will do it for you. ill PM u when ive done it mate okay did u try my other guide ???? its here http://forum.xda-developers.com/showthread.php?p=25717945#post25717945
when u download it unzip it drag the folder onto your desktop open up terminal and drag the Desire Downgrade Kit.bat file into your terminal and press enter
Click to expand...
Click to collapse
I connected the phone with the mac , entered it on debug mode . Used your other guide , entered the .bat file on the terminal and all I got was command not found ... ( I guess I have to wait for the file )
sorry for the noob question, but i am new to android and new to rooting. is there a way to do this on a mac that isnt running a windows partition? if so is there an explanation?
jasonr803 said:
sorry for the noob question, but i am new to android and new to rooting. is there a way to do this on a mac that isnt running a windows partition? if so is there an explanation?
Click to expand...
Click to collapse
1. Make sure you have installed ADB and FASTBOOT command line tools first. You can install them from here: http://code.google.com/p/adb-fastboot-install/
2. Download djrbliss's exploit files. You can find it here: http://forum.xda-developers.com/showthread.php?t=1952038
3. Extract the entire zip file.
4. Connect your device via USB, ensure USB debugging mode is enabled.
5. Open Terminal and enter into the folder that you extract that zip file.
6. Just type the following command lines step by step:
1. adb wait-for-device
May be you will see this information in your terminal
=======================================
* daemon not running. starting it now on port 5037 *
* daemon started successfully *
=======================================
2. adb restore backup1.ab
3. adb shell "rm /data/data/com.android.providers.telephony/databases/a/b 2>/dev/null"
4. adb shell "ln -s /dev/diag /data/data/com.android.providers.telephony/databases/a/b 2>/dev/null"
5. adb restore backup2.ab
6. adb push pwn /data/local/tmp
After this you can see some information in your terminal like this:
========================================
1180 KB/s (64526 bytes in 0.053s)
========================================
7. adb shell "chmod 755 /data/local/tmp/pwn"
8. adb shell "/data/local/tmp/pwn"
After this if you see this in your terminal that means you are close to success:
========================================
[+] Set CID!
========================================
9. adb reboot bootloader
In this step, just keep waiting until your phone enter into fastboot mode, then excute step 10.
10. adb kill-server
11. fastboot oem readcid
If you see the cid like this you are success!!!
========================================
...
(bootloader) cid: 11111111
OKAY [ 0.010s]
finished. total time: 0.010s
========================================
12. fastboot oem get_identifier_token
Finally you can get your own identifier token.
For some reason the adb commands dont work for me. Is there something I'm missing?
Edit: Figured it out but now I get a "Failed." error when I type adb shell "/data/local/tmp/pwn"
jasonr803 said:
sorry for the noob question, but i am new to android and new to rooting. is there a way to do this on a mac that isnt running a windows partition? if so is there an explanation?
Click to expand...
Click to collapse
instructions have been updated and there is now a script for mac you can execute in terminal
http://forum.xda-developers.com/showpost.php?p=33178597&postcount=1
h1m said:
For some reason the adb commands dont work for me. Is there something I'm missing?
Edit: Figured it out but now I get a "Failed." error when I type adb shell "/data/local/tmp/pwn"
Click to expand...
Click to collapse
I also encounter this problem. Try to factory reset your phone first. I do this then it works fine.
For this to work, you must be rooted and have superCID (unlock/custom recovery is optional), see the threads below for help and information regarding obtaining superCID, unlock, root, etc. Note these threads are provided for convenience only. Please look for support for them in each respective thread if you need it, do NOT clutter this thread with support requests regarding obtaining superCID and/or root! If you try this process without superCID, it will not work, and you may have issues!:
HTC One XL: http://forum.xda-developers.com/show....php?t=1952038 (2.2)
Once you have confirmed you have SuperCID, get started (read it through first so you understand it all):
1.) Download patcher and unzip it in your working directory:
soffbin3.zip soffbin3.zip Mirror
2.) Download the zip below
OneX.zip = MD5: 99a8eced1010543e12cbd4e4e8f9638f, Mirror
3.)
Code:
adb reboot bootloader
(wait for bootloader)
4.)
Code:
fastboot oem rebootRUU
(wait for black HTC Screen)
5.)
Code:
fastboot flash zip PJ8312000-OneX.zip
After a while, You should see the following error “FAILED (remote: 92 supercid! please flush image again immediately)”
6.) Immediately issue the following command:
Code:
fastboot oem boot
You may see some errors, just wait for the device to boot into Android (only now, you should be booted into Android with no eMMC write protection of any kind active).
7.) Issue the following 3 commands to update the security partition with S-off flags (one command at a time!):
Code:
adb push soffbin3 /data/local/tmp/
adb shell chmod 744 /data/local/tmp/soffbin3
adb shell su -c "/data/local/tmp/soffbin3"
(wait for a few seconds)
8.)
Code:
adb reboot bootloader
9.) You should see what you are looking for!
If you need help or just care to say thanks, join us on IRC: #FacePalm http://chat.andirc.net:8080/?channels=facepalm
Enjoy.
At step 7...command adb shell su -c "/data/local/tmp/soffbin3"
not found ...
Tempered
Unlocked
Evita pvt ship s-on
HBOOT-2.14.0000
Wht should i do now?
Did you extract the file into your fastboot folder after downloading it as per the instructions?
Sent from my Evita
timmaaa said:
Did you extract the file into your fastboot folder after downloading it as per the instructions?
Sent from my Evita
Click to expand...
Click to collapse
yes i have extracted the files but option 7 part 3 not works
The "not found" message suggests that you haven't extracted/unzipped the soffbin archive to your fastboot folder.
Sent from my Evita