[Q] Exctracting boot partition on LB? - Xperia Z3 Q&A, Help & Troubleshooting

Hi, can someone help me with extracting boot ramdisk from boot partition?
I am on Z3 .690 LB and need to modify init.rc and other files. I can without problems extract the boot partition using dd from /dev/block/mmcblk0p14
however the resulting image fails any extraction tries with abootimg or unmkbootimg, reporting that it is not valid Android boot image...
Is it in any way possible to get the ramdisk from boot partition (and best put it modified back)?
Thanks..

I am not an expert in that, but for clarity you need to know that even you decompile and recompile a boot.img and make NO changes you are unable to flash it back on a Locked Bootloader.

gregbradley said:
I am not an expert in that, but for clarity you need to know that even you decompile and recompile a boot.img and make NO changes you are unable to flash it back on a Locked Bootloader.
Click to expand...
Click to collapse
Thanks. At the end I used ability of Xzdr to invoke init scripts...
Sent from my D6603 using XDA Free mobile app

gregbradley said:
I am not an expert in that, but for clarity you need to know that even you decompile and recompile a boot.img and make NO changes you are unable to flash it back on a Locked Bootloader.
Click to expand...
Click to collapse
Hm, just from pure curiosity, I copied boot partition (dd) into file and then wrote it (dd) back unchanged. dd seemed to work, and phone booted normally after reboot. I have locked bootloader....

Did you actually decompile the boot.img? Or just pull it from the rom and push it back?
Its the act of compiling the ROM that needs Sony's keys in order to ensure it boot on a locked bootloader

gregbradley said:
Did you actually decompile the boot.img? Or just pull it from the rom and push it back?
Its the act of compiling the ROM that needs Sony's keys in order to ensure it boot on a locked bootloader
Click to expand...
Click to collapse
Cool, finally I got the answer I was looking for. It is not easy to get the right answers regarding locked bootloaders. It confirms what I was a bit feared, that boot.img is compiled with such keys so without it you can not actually do anything on locked bootloader. And I guess there is no way to get the corresponding key in order to tamper with boot.img in any way. Of course it would lead to people being able to flash what they want on LB.
Ok, so I will have to think and count benefits vs. annoyances if it pays me off to unlock... Thank you.

Related

What's the purpose of flashing boot.img?

Hey,
Sorry for the noob question - but I wasn't able to find anything on this. Everyone seems to take this as it is, but I simply want to know why boot.img is flashed in order to get root and how it affects the phone.
I followed this tutorial to get my Rogers Magic rooted.
What did the boot.img do in this case and can I use Amon_RA's RAv1.1.2 ION Recovery or do I need to flash another boot image in order to use a different recovery.img.
Basically, I just want to know why I do the steps that I do.
vladkor said:
Hey,
Sorry for the noob question - but I wasn't able to find anything on this. Everyone seems to take this as it is, but I simply want to know why boot.img is flashed in order to get root and how it affects the phone.
I followed this tutorial to get my Rogers Magic rooted.
What did the boot.img do in this case and can I use Amon_RA's RAv1.1.2 ION Recovery or do I need to flash another boot image in order to use a different recovery.img.
Basically, I just want to know why I do the steps that I do.
Click to expand...
Click to collapse
boot.img contains
the actual linux kernel for the phone
small ramdrive to start the system
system.img contains
android os, libraries,system settings and applications
userdata.img contains apps, and user settings
br
jerpelea said:
boot.img contains
the actual linux kernel for the phone
small ramdrive to start the system
system.img contains
android os, libraries,system settings and applications
userdata.img contains apps, and user settings
br
Click to expand...
Click to collapse
Thanks for the reply! I'm still lost though on the whole 'fastboot flash boot boot.img' part.
Is there a specific/best/newest boot.img that I should be using with the Rogers Magic? Are there different ones out there or is it just one standard one?

[WORK-IN-PROGRESS] Lets achieve root for E3-Almost there!!

Root status: Permission Denied
Lets keep this thread reserved only for discussion related to rooting this phone. We haven't achieved root yet but I know the way to do it.
You need to follow this guide in order to root your device: http://whiteboard.ping.se/Android/Rooting
So till now I have been able to:
-Build a new kernel
-Unpacked the kernel using kernel kitchen by championswimmer and flashtool(for the sin file)
-.Made the changes in ramdisk
But the next step requires packing it back again. And for doing that you need the cmdline from the kernel.
Its located in /proc/cmdline.
I tried to view it via adb but obviously the system denied the permission because of no root.
Usually you can easily obtain cmdline parameters from the boot.img itself, but in this case, Sony has done some shizz so that you cant obtain it directly. Plus this is my first Sony device so I dont have much knowledge regarding this..
I wont get much time to work on it becuz of my exams.. that's why this thread is here
If you can help/contribute in any way then you are surely welcome. But no noob posts here.
@InfinityShooter use archi's kitchen for unpacking boot.img
first convert stock kernel.sin file to boot.img(by just renaming it)
archi's kitchen will give you the cmdline and other parameters to pack the kernel..
k2wl said:
@InfinityShooter use archi's kitchen for unpacking boot.img
first convert stock kernel.sin file to boot.img(by just renaming it)
archi's kitchen will give you the cmdline and other parameters to pack the kernel..
Click to expand...
Click to collapse
It doesn't work. Sony uses a different kind of boot.img. I have tried dsixda kitchen also, it didnt work out.
InfinityShooter said:
It doesn't work. Sony uses a different kind of boot.img. I have tried dsixda kitchen also, it didnt work out.
Click to expand...
Click to collapse
oh !!! my old sony xperia m used have kernel .sin which used to convert to boot.img by renaming....
Hmmm... how about using a dd command to extract boot.img to sdcard and then unpack it in archi's kitchen????
k2wl said:
oh !!! my old sony xperia m used have kernel .sin which used to convert to boot.img by renaming....
Hmmm... how about using a dd command to extract boot.img to sdcard and then unpack it in archi's kitchen????
Click to expand...
Click to collapse
I don't know if this can help at all: http://forum.xda-developers.com/showthread.php?t=1659584.
It's been ages since I gave up on linux, even as an amateur, so my knowledge is quite limited and, to be honest, a lot of hunch is involved. That's why I am so hesitant at trying this myself.
Anyway I hope this helps a bit.
Also you can get the latest firmware for D2203 (18.4.C.2.12) from here: https://mega.co.nz/#!bMBg1Rqa!aqGcTv6ved0ifh867pbnVVsc-4t55lR9OOij1iSiNLA, which means that one can probably try without unlocking the bootloader...
I have already made the kernel but needs testing. Anyone here with unlocked bootloader and d2202 can try hotboot this using flash tool.
http://d-h.st/rx7e
Try at your own risk.
There is 0% chance of bricking if you hotboot it.
DO NOT FLASH IT
I've tried the kernel. But I do not know how to enter CWM, whether the kernel already include CWM?
No it is not cwm you have to use adb to mount /system as read/write then push su to /system/bin and you will get root. All you need is get superuser from playstore.
Sent from my D2212 using XDA Free mobile app
Report!
The boot.img which I had posted has been confirmed working.
We now have the correct command for packing the boot.img thanks to @jerpelea
I'll be looking forward to making a recovery from source.
If it works then root is not far away
InfinityShooter said:
The boot.img which I had posted has been confirmed working.
We now have the correct command for packing the boot.img thanks to @jerpelea
I'll be looking forward to making a recovery from source.
If it works then root is not far away
Click to expand...
Click to collapse
will, it work on xperia e3 d2212
android-vinay said:
will, it work on xperia e3 d2212
Click to expand...
Click to collapse
Not now.. only for d2202.
I don't know if this a noob question: in the tutorial InfinityShooter posted earlier it says that the phone must have an unlocked bootloader. Thing is that I am a bit confused in terms of whether the bootloader must be unlocked to obtain the system image or in order to fastboot the insecure image. If it is just to obtain the image then wouldn't it be possible to cook the insecure image using the ROM image that Sony distributed to developers, leading to a solution that doesn't interfere with the bootloader?
after I try the kernel, no bugs are found, everything works fine, like wifi and the other no problem, just given cwm to facilitate root...
CWM
Ok this is the second build of the cwm kernel
You can get it here: https://www.androidfilehost.com/?fid=95832962473396055 Doesnt work
You have to HOTBOOT this kernel
Tell me if it works or not.
Troubleshooting:
If you are stuck at black screen then dont worry. Just press and hold power+vol up keys together for 20 seconds to reboot it.
On rebooting the system will automatically revert to stock kernel which you were using earlier.
Congrats! Your phone is working again!
i must have unlock bl?
Wysyłane z mojego WT19i za pomocą Tapatalk 2
Unfortunately yes. Bad thing is that when we unlock the bootloader the TA partition is formatted leading to various problems with Sony apps.
Okay I need help here. My testers report this kernel as working but it fails to work on my device. Please let me know what happens with you..
Link: http://d-h.st/NFR
Here are the EXACT things I do to flash it:
1. Open flashtool
2. Connect my phone
3. I click on thunder icon in flashtool and choose fastboot mode.
4.I click on "Reboot into fastboot mode[adb]"
5.I click on "Select kernel to hotboot" and open the boot.img inside it.
I look at my phone,its all dark. The blue light goes away
6.I click on check current device status and it shows adb connected
7.Orange led comes up as my phone is connected to pc
I see no sony logo or anything like that.
The screen is still BLACK! One thing I notice is that whenever I press the power key, the screen backlight turns on little bit enough for me to notice the varaiation.
Please post your intruction set if it works out for u.
I can't test it myself since I have locked bootloader but did you try to get a working adb shell at this state? If shell works then you might be able to push su and supersu to the device.
cnagr said:
I can't test it myself since I have locked bootloader but did you try to get a working adb shell at this state? If shell works then you might be able to push su and supersu to the device.
Click to expand...
Click to collapse
Dude I cant see anything on screen and you are talking about pushing files -.-
Dude you said that the phone appears to be connected to the pc in adb state, regardless of the phone screen state. That's where that big if of my suggestion came from.

Moto G7 river xt1962-1 firmware 29.114-16-5

Moto G7 river xt1962-1 firmware 29.114-16-5
firmware_moto-g7_river_xt1962-1_29.114-16-5_copyparts
will be needed for custom roms
firmware_moto-g7_river_xt1962-1_29.114-16-5_full
is all partitions, not required for custom roms, just for curious developers
windows users will need to make their own .bat files I don't use windows
two things:
1. working on twrp for river
2. working on lineageos 16 for river based on payton... errors with some vendor files
actually errors all over
please help I have two newborns and only get a few minutes to myself each night
good luck on building lineage, the g6 never had any development so i dont anticipate the g7 will get much either. if i was you id concentrate on twrp so we can at least flash gsi based roms.
Is this the original factory signed rom? (I.e. is it possible to fully flash and relock bootloader?)
Also wondering if anyone has the latest full rom (29.114-16-7).
Thanks in advance!
ptn107 said:
Moto G7 river xt1962-1 firmware 29.114-16-5
firmware_moto-g7_river_xt1962-1_29.114-16-5_copyparts
will be needed for custom roms
firmware_moto-g7_river_xt1962-1_29.114-16-5_full
is all partitions, not required for custom roms, just for curious developers
windows users will need to make their own .bat files I don't use windows
two things:
1. working on twrp for river
2. working on lineageos 16 for river based on payton... errors with some vendor files
actually errors all over
please help I have two newborns and only get a few minutes to myself each night
Click to expand...
Click to collapse
Confirmed that at least boot.img is correctly signed. You rock ptn107!! However I did confirm (from the version number displayed in recovery) that this is 29.114.16 and not 29.114.16-5.
How were you able to extract the partitions? Specifically boot.img. If I can learn that, then it would be easy to unroot, take OTA updates, copy and save boot.img, and patch with Magisk. Thanks in advance!!!
smokinu said:
Confirmed that at least boot.img is correctly signed. You rock ptn107!! However I did confirm (from the version number displayed in recovery) that this is 29.114.16 and not 29.114.16-5.
How were you able to extract the partitions? Specifically boot.img. If I can learn that, then it would be easy to unroot, take OTA updates, copy and save boot.img, and patch with Magisk. Thanks in advance!!!
Click to expand...
Click to collapse
The boot image version does not change with every little update. For every version of 29.114.16-* released it will be the same boot.img. 29.114.16-7 is getting around and most likely uses the exact same boot.img as ours.
As for extracting the .img files I use a linux shell script I wrote here. Makes doing this quick with each new firmware image.
It needs to be placed in /sdcard on your device (root is required to work):
Code:
adb push mkimg.sh /sdcard/
adb shell
cd /sdcard/
su -c sh ./mkimg.sh
I do this in Linux. Not much of a Windows user anymore.
Output files go into /sdcard/firmware-images but you can change that with the 'outfolder' variable if you wish.
Long story short it takes the list of partitions from /dev/block/bootdevice/by-name/ and uses 'dd' to create the .img.
If you are looking to just get a boot.img from our device and nothing else the command would be as follows (needs root):
Code:
su dd if=/dev/block/mmcblk0p41 of=/sdcard/boot.img > /dev/null 2>&1
ptn107,
Thanks for the write-up. I'm familiar with a similar approach using TWRP (booted, but not installed) and dd copying the individual partitions. I will give your script a try. Should save a lot of time!
Is there a way to copy partitions without root? My biggest concern is taking on an OTA update (currently 16-7), without having the original signed images to revert back to stock and relock the bootloader. Motorola has historically been bad at providing factory roms. If there is a clever way to unroot, take an OTA, save original, and re-root....I'd be a happy camper!
/dev is user root and group root so root is necessary.
Is there a clever way to take an OTA update and get a copy of the new boot.img? From what i understand, you have to unroot to take an OTA update.
BTW...good luck with the newborns!! Mine is now 3 and is still as much of a handful as when he was a newborn.
ptn107 said:
The boot image version does not change with every little update. For every version of 29.114.16-* released it will be the same boot.img. 29.114.16-7 is getting around and most likely uses the exact same boot.img as ours.
As for extracting the .img files I use a linux shell script I wrote here. Makes doing this quick with each new firmware image.
It needs to be placed in /sdcard on your device (root is required to work):
Code:
adb push mkimg.sh /sdcard/
adb shell
cd /sdcard/
su -c sh ./mkimg.sh
I do this in Linux. Not much of a Windows user anymore.
Output files go into /sdcard/firmware-images but you can change that with the 'outfolder' variable if you wish.
Long story short it takes the list of partitions from /dev/block/bootdevice/by-name/ and uses 'dd' to create the .img.
If you are looking to just get a boot.img from our device and nothing else the command would be as follows (needs root):
Code:
su dd if=/dev/block/mmcblk0p41 of=/sdcard/boot.img > /dev/null 2>&1
Click to expand...
Click to collapse
Boot img sometimes changes, you never know. I bricked a g6 by flashing a boot img that the last number in the version was 2 instead of 4. Flashed, and got stuck in a bootloop. Had to completely reflash stock firmware, then took an OTA that bricked it.
clcombs262 said:
Boot img sometimes changes, you never know. I bricked a g6 by flashing a boot img that the last number in the version was 2 instead of 4. Flashed, and got stuck in a bootloop. Had to completely reflash stock firmware, then took an OTA that bricked it.
Click to expand...
Click to collapse
I did confirm that the boot.img between 16 and 16-5 is different. The recovery mode displays the correct version for each of the boot.imgs, and MD5 checksums are different, although same file size.
That being said, flashing a 16 boot.img on a 16-5 device will mearly result in bootloop until the correct version is flashed. People should keep track of which slot they loaded the boot.img into (A/B).
smokinu said:
I did confirm that the boot.img between 16 and 16-5 is different. The recovery mode displays the correct version for each of the boot.imgs, and MD5 checksums are different, although same file size.
That being said, flashing a 16 boot.img on a 16-5 device will mearly result in bootloop until the correct version is flashed. People should keep track of which slot they loaded the boot.img into (A/B).
Click to expand...
Click to collapse
Code:
fastboot oem lock
doesn't work with PPO29.114-16-5
says boot.img is not signed
update: same for PPO29.114-16 and PPO29.80-61
ptn107 said:
Code:
fastboot oem lock
doesn't work with PPO29.114-16-5
says boot.img is not signed
update: same for PPO29.114-16 and PPO29.80-61
Click to expand...
Click to collapse
I saw the same thing on my end at first. Found this to work repeatedly....
fastboot oem lock (enter this a few times until i says something to the effect of...."you still need to flash a signed boot.img")
fastboot flash boot boot.img (this will now flash fine without saying the image is not signed)
fastboot oem lock (if you prefer to re-lock. You'll need the unlock key again if you plan to unlock).
smokinu said:
I saw the same thing on my end at first. Found this to work repeatedly....
fastboot oem lock (enter this a few times until i says something to the effect of...."you still need to flash a signed boot.img")
fastboot flash boot boot.img (this will now flash fine without saying the image is not signed)
fastboot oem lock (if you prefer to re-lock. You'll need the unlock key again if you plan to unlock).
Click to expand...
Click to collapse
Wow. That actually worked. I had to do both commands like 6 times one after the other but it worked.
Thank you!
No problem! Glad I could help. Found that one by accident.
smokinu said:
No problem! Glad I could help. Found that one by accident.
Click to expand...
Click to collapse
I would have never found that out.
fastboot without root
I have been foolish and used twrp to wipe my G7. I am trying to use twrp to flash or fastboot update provided in this thread but neither approach works.
error is invalid zip file.
I was running -7 not -5
as in my title, there is no root. and because of my stupidity, no OS either! I am happy to give any details
Any help would be amazing. Thanks in advance!
Mr_navillus said:
I have been foolish and used twrp to wipe my G7. I am trying to use twrp to flash or fastboot update provided in this thread but neither approach works.
error is invalid zip file.
I was running -7 not -5
as in my title, there is no root. and because of my stupidity, no OS either! I am happy to give any details
Any help would be amazing. Thanks in advance!
Click to expand...
Click to collapse
The zip file itself cannot be flashed as it's not in proper update format. You'll have to extract and flash the contents via fastboot. To get to fastboot, power off the device then hold power and volume down until you see the bootloader screen, and then connect it via USB to a pc
Follow the instructions here to get back to stock
Mr_navillus said:
I have been foolish and used twrp to wipe my G7. I am trying to use twrp to flash or fastboot update provided in this thread but neither approach works.
error is invalid zip file.
I was running -7 not -5
as in my title, there is no root. and because of my stupidity, no OS either! I am happy to give any details
Any help would be amazing. Thanks in advance!
Click to expand...
Click to collapse
Sounds like you wiped the system partition then tried to flash the unflashable zip file (hence, no system)
First, always make backups.
Second, you can still get into fastboot and manually update/restore
You can also use the moto software to recover the device.
Get it into fastboot, start from there. It is 100% an easy recovery process
warBeard_actual said:
You can also use the moto software to recover the device.
Click to expand...
Click to collapse
This fixed it in a jiffy. Making backups from now on!
Question to the experts:
Unlocking the bootloader and rooting a phone is stressful times for those of us who (like me) only do this once every few years when we buy a new phone. On some phones, after attempts at routing, I've been stuck for days without a phone till some distant helpful person helped me back to a working rooted phone. Other times it was very simple. But the experience leaves you scared.
Yes I know it's my own (and similar other uneducated) fault because we did something wrong that would be obvious to any expert. But it happens to the rest of us no matter how many threads we read.
So my question is, if the phone becomes non functional following erroneous commands or files (my own unintentional error), will this same 'moto recovery' restore things?
Where do I find out more 'how' to use this Moto software and where this 'Moto software recovery' is to be found?
Thank you.
Edit
Just to clarify things, this is my first Moto phone which is why I don't know what the Moto software recovery is. Is it what you get by pressing Power-volume down?

Did anyone try to relock bootloader with patched Magisk boot image?

I am wondering if I should root my new device, but I'd like to keep the security benefits too (and SafetyNet might need locked bootloader in the near future), so I would only do it if relocking is possible. Has anyone tried to relock the bootloader after patching with Magisk and signing the boot.img?
geiszla said:
I am wondering if I should root my new device, but I'd like to keep the security benefits too (and SafetyNet might need locked bootloader in the near future), so I would only do it if relocking is possible. Has anyone tried to relock the bootloader after patching with Magisk and signing the boot.img?
Click to expand...
Click to collapse
Don't ever do that u loose fingerprint or u end up in a bootloop because of the persist partition and the bootloader whats getting corrupt. Only when you are on a normal or stock firmware u can lock your bootloader without issues.
mastersjef said:
Don't ever do that u loose fingerprint or u end up in a bootloop because of the persist partition and the bootloader whats getting corrupt. Only when you are on a normal or stock firmware u can lock your bootloader without issues.
Click to expand...
Click to collapse
I wouldn't change any other partition except replace the boot.img, but I would sign that one too. What do you mean by bootloader getting corrupt?
geiszla said:
I wouldn't change any other partition except replace the boot.img, but I would sign that one too. What do you mean by bootloader getting corrupt?
Click to expand...
Click to collapse
Because the relock locks the bootloader and the bootloader is patched how you wanna do that?
mastersjef said:
Because the relock locks the bootloader and the bootloader is patched how you wanna do that?
Click to expand...
Click to collapse
The bootloader is not patched, it's just unlocked than locked. When it's unlocked, it doesn't check the signatures of the loaded components, when it's locked, it does. It won't boot if any of the system components is not signed, but I can sign the changed boot image and then it should boot just fine. At least in theory... I've seen a few people who's done it even with custom ROM and recovery, but I haven't done it before and don't know if it would work with the OP8.
I know it also depends on the signature verification method used by the bootloader and I think OnePlus devices use AVB, but not sure about that either and don't want to brick my brand new device
geiszla said:
I wouldn't change any other partition except replace the boot.img, but I would sign that one too. What do you mean by bootloader getting corrupt?
Click to expand...
Click to collapse
How do you sign the boot.img?
rossrosh007 said:
How do you sign the boot.img?
Click to expand...
Click to collapse
I too would like to know more about this.
It would be nice to be able to run your own boot image and re-lock the bootloader.

Help rooting phone received from beta testing.

I signed up for a beta test on centernode and received a smartphone to test. The phone is so new that I cannot find any information about it on the internet. The bootloader is unlocked on it. I was reading that you can use magisk to root any device with an unlocked bootloader and system image. Since the phone is so new I cannot find a system image. Is it still possible to root the device? Is there a way I can backup the stock ROM and create a system image that way? Is there something else that will work? I really want to root the device because it came with a preinstalled app which is a system booster type app. It will not let me uninstall it, disable it, or force stop it. When I install my app for my alarm clock it keeps killing the app and the alarm will not go off. I have went through all of the app settings and cannot get it to stop. It also keeps interfering with my VPN. I would also like to root th device to remove some of the bloatware and to have access to the HOST file. Could someone please help me this? I would greatly appreciate it. Thanks guys!
I'm not known for giving good advice but if I was in your situation I would try to install the lastest version of Magisk and hope for the best. Knowing how I am it would be driving me nuts wondering if it would work.
That booster app, have you tried uninstalling it with adb?
Gregbmil1 said:
I'm not known for giving good advice but if I was in your situation I would try to install the lastest version of Magisk and hope for the best. Knowing how I am it would be driving me nuts wondering if it would work.
That booster app, have you tried uninstalling it with adb?
Click to expand...
Click to collapse
Hey, thanks for your reply. I am really eager to root it. I almost just went for it. However, then I thought about it. If something went wrong I would not have any way to recover the phone since there is not a system image available yet. I have not given adb removal a try yet as I figure it would just be easier to go with rooting since it will help me with everything I am trying to achieve. If I cannot root it then I will go the adb route. Hopefully someone will come along and help me out. Fingers crossed
Let us know what you end up doing. Are you expected to send the phone back after the beta testing? If you are responsible for any damages done to it, I would not try it.
You could send it back bricked and say you have no idea what happened to it, lol. That or say you were "testing" the security of the device and that it passes
bigroc2223 said:
I signed up for a beta test on centernode and received a smartphone to test. The phone is so new that I cannot find any information about it on the internet. The bootloader is unlocked on it. I was reading that you can use magisk to root any device with an unlocked bootloader and system image. Since the phone is so new I cannot find a system image. Is it still possible to root the device? Is there a way I can backup the stock ROM and create a system image that way? Is there something else that will work? I really want to root the device because it came with a preinstalled app which is a system booster type app. It will not let me uninstall it, disable it, or force stop it. When I install my app for my alarm clock it keeps killing the app and the alarm will not go off. I have went through all of the app settings and cannot get it to stop. It also keeps interfering with my VPN. I would also like to root th device to remove some of the bloatware and to have access to the HOST file. Could someone please help me this? I would greatly appreciate it. Thanks guys!
Click to expand...
Click to collapse
If you have the firmware then you're in luck (especially if it's the full one)
Download a program for windows called "Payload Dumper"
Open the zip (firmware) and copy out the payload.bin file.
Copy this to the input folder from payload dumper.
Run the exe for payload dumper
It'll output a bunch of files to output folder
You'll see a boot.img file this is essentially the file you use to boot your phone and also where magisk would reside too.
Copy this to your phone.
Install the latest Magisk then open it
Click install and then patch a file, navigate to the boot.img
Click the boot.img and it'll output a file to "SDcard\Downloads" usually called magisk_patched.img
Copy this to your fastboot folder on your computer and open a CMD / Powershell command to that location.
Then boot to fastboot / bootloader mode
Then type:
fastboot boot "name of patched boot.img"
eg:
fastboot boot magisk_patched.img
The phone will boot
From this point you are rooted but you need to make it permanent as you haven't flashed the boot sector at this point, you're only booting an image, if you were to reboot you'd lose it.
Open Magisk again then click install again.
Now instead of just seeing patch a file you'll see "Install Directly" + "Install after an OTA"
Click Install directly, allow it to finish, then reboot.
You're now fully rooted.
Heres my guides for the oneplus 8 pro, don't use the images there as they're for the 8 pro, you also can download payload dumper from there too.
(ROOT) Android 11 / Latest stock and patched img's / payload dumper / magisk_patched guides
Hi all, Have seen a lot of requests for patched boot images on these threads so thought i'd share a guide on how to get it yourself as well as all the files required, plus the patched boot.img if you just want to go ahead and boot/flash it...
forum.xda-developers.com
IT's easy.
Good luck
dladz said:
If you have the firmware then you're in luck (especially if it's the full one)
Download a program for windows called "Payload Dumper"
Open the zip (firmware) and copy out the payload.bin file.
Copy this to the input folder from payload dumper.
Run the exe for payload dumper
It'll output a bunch of files to output folder
You'll see a boot.img file this is essentially the file you use to boot your phone and also where magisk would reside too.
Copy this to your phone.
Install the latest Magisk then open it
Click install and then patch a file, navigate to the boot.img
Click the boot.img and it'll output a file to "SDcard\Downloads" usually called magisk_patched.img
Copy this to your fastboot folder on your computer and open a CMD / Powershell command to that location.
Then boot to fastboot / bootloader mode
Then type:
fastboot boot "name of patched boot.img"
eg:
fastboot boot magisk_patched.img
The phone will boot
From this point you are rooted but you need to make it permanent as you haven't flashed the boot sector at this point, you're only booting an image, if you were to reboot you'd lose it.
Open Magisk again then click install again.
Now instead of just seeing patch a file you'll see "Install Directly" + "Install after an OTA"
Click Install directly, allow it to finish, then reboot.
You're now fully rooted.
Heres my guides for the oneplus 8 pro, don't use the images there as they're for the 8 pro, you also can download payload dumper from there too.
(ROOT) Android 11 / Latest stock and patched img's / payload dumper / magisk_patched guides
Hi all, Have seen a lot of requests for patched boot images on these threads so thought i'd share a guide on how to get it yourself as well as all the files required, plus the patched boot.img if you just want to go ahead and boot/flash it...
forum.xda-developers.com
IT's easy.
Good luck
Click to expand...
Click to collapse
So it sounds like since this is a beta device and I cannot find a firmware image in out of luck?
I guess the only other option I have is finding someone who can port twrp for my device. Then I can just root via TWRP. However, from what I have read that might not even be an option as Android 11 mostly has to be rooted the hard way which you have gave instructions on above.
Can anyone think of anything else I can try?
bigroc2223 said:
So it sounds like since this is a beta device and I cannot find a firmware image in out of luck?
I guess the only other option I have is finding someone who can port twrp for my device. Then I can just root via TWRP. However, from what I have read that might not even be an option as Android 11 mostly has to be rooted the hard way which you have gave instructions on above.
Can anyone think of anything else I can try?
Click to expand...
Click to collapse
You can also extract the boot image... Can't remember the commands for this via ADB, Google ADB extract boot.img
dladz said:
You can also extract the boot image... Can't remember the commands for this via ADB, Google ADB extract boot.img
Click to expand...
Click to collapse
Awesome this is exactly what I was trying to figure out in my original post. Since there is no stock firmware available yet (beta unit) what is the best way to backup the device so I do not get a brick in the process? Thanks again for your help.
bigroc2223 said:
Awesome this is exactly what I was trying to figure out in my original post. Since there is no stock firmware available yet (beta unit) what is the best way to backup the device so I do not get a brick in the process? Thanks again for your help.
Click to expand...
Click to collapse
An actual back up? Probably twrp if available.
If not then you'd need a recovery method.
So providing you have a recovery solution you should be fine.
dladz said:
An actual back up? Probably twrp if available.
If not then you'd need a recovery method.
So providing you have a recovery solution you should be fine.
Click to expand...
Click to collapse
Ahhh okay since it is a beta device no one has made TWRP for it yet. What do you think the risk is of manually pulling the boot img, patching, and flashing is? If I can get that to work I will try to port twrp to the device. Thanks again for the help.
bigroc2223 said:
Ahhh okay since it is a beta device no one has made TWRP for it yet. What do you think the risk is of manually pulling the boot img, patching, and flashing is? If I can get that to work I will try to port twrp to the device. Thanks again for the help.
Click to expand...
Click to collapse
You're very welcome.
Chances of it not booting after doing that? Absolutely zero.
It's a copy not a cut, so you're fine.
The only problem you may encounter is the ability to access the device on that level.
Just turn on usb debugging and make sure ADB works as it should be checking on ADB devices.
Then go ahead with the pull.
You'll be fine.
Also once you have the boot.img if the patched one doesn't work then just reboot and you're back to normal.
I would advise against flashing it, just boot it.
dladz said:
Just turn on usb debugging and make sure ADB works as it should be checking on ADB devices.
Then go ahead with the pull.
You'll be fine.
Also once you have the boot.img if the patched one doesn't work then just reboot and you're back to normal.
Click to expand...
Click to collapse
You can't simply run
Code:
adb devices
adb pull boot.img > C:\boot.img
to clone phone's boot.img to PC.
The correct way is described here
Extract Boot.img Directly from Device Without Downloading Firmware
In this tutorial, we will show you the steps to extract the boot.img file directly from your device without downloading the firmware.
www.droidwin.com
jwoegerbauer said:
You can't simply run
Code:
adb devices
adb pull boot.img > C:\boot.img
to clone phone's boot.img to PC.
The correct way is described here
Extract Boot.img Directly from Device Without Downloading Firmware
In this tutorial, we will show you the steps to extract the boot.img file directly from your device without downloading the firmware.
www.droidwin.com
Click to expand...
Click to collapse
I did not say that you could?? I said pull it.
Before that I said look it up / Google it
Thanks for your help guys I appreciate it greatly. I am going to give this a try today. I will report back and let you guys know how it goes.
One last question. Since this beta unit I got is a tracfone branded unit with an unlocked bootloader is it possible that they could push a firmware which will lock the bootloader at some point? If so is there any way to prevent that from happening? Thanks again for all your help.
bigroc2223 said:
Thanks for your help guys I appreciate it greatly. I am going to give this a try today. I will report back and let you guys know how it goes.
One last question. Since this beta unit I got is a tracfone branded unit with an unlocked bootloader is it possible that they could push a firmware which will lock the bootloader at some point? If so is there any way to prevent that from happening? Thanks again for all your help.
Click to expand...
Click to collapse
Possible yes, but I doubt they would do that.
Is it an ambassador phone? Or for testing?
Locking the bootloader wipes the phone so I wouldn't imagine they'd do that without forewarning.
Plus locking a bootloader comes with its risks too, so you could say that it broke from the update.
But it won't come to that, I've had several ambassador phones myself and honestly they're fire and forget for the most part, I wouldn't worry about it
dladz said:
Possible yes, but I doubt they would do that.
Is it an ambassador phone? Or for testing?
Locking the bootloader wipes the phone so I wouldn't imagine they'd do that without forewarning.
Plus locking a bootloader comes with its risks too, so you could say that it broke from the update.
But it won't come to that, I've had several ambassador phones myself and honestly they're fire and forget for the most part, I wouldn't worry about it
Click to expand...
Click to collapse
It's a phone for testing which I am allowed to keep.
dladz said:
Possible yes, but I doubt they would do that.
Is it an ambassador phone? Or for testing?
Locking the bootloader wipes the phone so I wouldn't imagine they'd do that without forewarning.
Plus locking a bootloader comes with its risks too, so you could say that it broke from the update.
But it won't come to that, I've had several ambassador phones myself and honestly they're fire and forget for the most part, I wouldn't worry about it
Click to expand...
Click to collapse
It is a phone for testing which I am allowed to keep. Specs are Snapdragon 750g, Adreno 619, and 4gb of ram. Not too shabby for a free phone. It is a lot snappier than the moto e6 I was previously using.
dladz said:
I did not say that you could?? I said pull it.
Before that I said look it up / Google it
Click to expand...
Click to collapse
This method requires TWRP. So this will not work.
bigroc2223 said:
Nvm
Click to expand...
Click to collapse
dladz said:
Again!!!? What's your problem??
You're just trying to (for whatever reason) prove me wrong and yet again I wasn't being descriptive of an ADB pull!!!
You're pulling the boot.img off the device by whatever means.
To be clear for the final time, I'm not stating to use twrp, a script or anything else I said look it up / Google it!
Now if you've helped the chap then that's great, looking at what I said and attempting to put me straight when you clearly don't have to, is no help to you or the chap needing help it's just making you look like you're on a power trip.
Click to expand...
Click to collapse
I'm just trying to get some help here guys that's it. I appreciate everyone's efforts and opinions. Let's all try to work together and try to find a solution peacefully please.
So far I have adb installed and working. I have tried to use the commands I was able to locate via google. So far nothing works. I have also tried uninstalling some programs using adb which did not work. I think I am going to have to find someone who could port twrp for me
bigroc2223 said:
I'm just trying to get some help here guys that's it. I appreciate everyone's efforts and opinions. Let's all try to work together and try to find a solution peacefully please.
So far I have adb installed and working. I have tried to use the commands I was able to locate via google. So far nothing works. I have also tried uninstalling some programs using adb which did not work. I think I am going to have to find someone who could port twrp for me
Click to expand...
Click to collapse
Sorry I got the wrong end of the stick, I thought you was a second person posting..
Forget what I said

Categories

Resources