Hi, guys and girls... Welcome to Huawei jail problem ?
Since i bought my device after Huawei locked our bootloaders forever and i didn't know that fact, Now i need root so badly.. i missing some tweaks from my other devices... Is there any chance to root this phone without unlocking bootloader?
They locked bootloaders? I just bought one yesterday. I may still be able to take it back and if they've locked the bootloader, I'd be very tempted to do just that. GRRR
Not a chance
Took my phone back, have a Moto G6 Plus now.
Hudinited said:
Hi, guys and girls... Welcome to Huawei jail problem
Since i bought my device after Huawei locked our bootloaders forever and i didn't know that fact, Now i need root so badly.. i missing some tweaks from my other devices... Is there any chance to root this phone without unlocking bootloader?
Click to expand...
Click to collapse
i continue this thread because i have some interesting information found on a chinese board:
https://club.huawei.com/thread-4790911-1-1.html
they say it would be possible to root your device (even p20 as long as it doesnt have the mediatek chipset, which many of us apparently wont have since most of us apparently stuck with hisilicon kirin 970). they are going in the direction of using apps like 360root and such. i tried 360root with p20 eml-l29 8.10.128 without success, even tried iroot, kingroot, kingoroot, superroot and root master.
but.. you know guys, i know that rooting means to use security vulnerabilities in android generally and kernel. at the moment i try to use different kind of versions on my phone in order to find one that *does* match to the security vulnerabilities of one of the rootapps try to use. you see, when a newer version gets released many security vulnerabilities are getting patched. but this means at the same time, others are going to appear often (if it wouldnt be this way, we would only need 1 security patch for all times forever and everything is fine voila perfect secure device with all best features - but this will most likely never happen). even if they are fixing more and more security holes, we cant forget the fact that kingroot, iroot, 360root is still continuing their work as well. so as maybe today no root is possible for this devices, you can expect them still trying new ways to achieve this goal, which means that there is still hope for the future (but well, i would only wait 1 year since i would then buy a new phone since is then already 2 yrs old )
Related
I am in Canada and recently bought a refurbished Samsung J7 (SM-J727T1, MetroPCS). It works just fine but Im eager to release the d̶r̶a̶g̶o̶n̶ hardware. I've obviously looked around, it seems that it isn't rootable.
So I guess it really boils down to one question: is it possible to do anything without the OEM Unlock setting?
Edit: This didn't work either
chy_vak said:
I am in Canada and recently bought a refurbished Samsung J7 (SM-J727T1, MetroPCS). It works just fine but Im eager to release the d̶r̶a̶g̶o̶n̶ hardware. I've obviously looked around, it seems that it isn't rootable.
So I guess it really boils down to one question: is it possible to do anything without the OEM Unlock setting?
Edit: This didn't work either
Click to expand...
Click to collapse
If you can't unlock the bootloader then your only chances of rooting the device are to use one of the many universal rooting apps or one of the universal rooting programs on PC and hope that one of them has an exploit that works to root your device model. There are many different programs and there is no way to know if one will work or which one(s) work unless someone has already used one successfully on your device and was nice enough to post how they did it somewhere on the internet.
If you aren't finding any results for your model with google searches, I would say that no one has found a working method for your model. In that case, you'll have to experiment and try as many of the rooting apps and PC programs as you can find, maybe one will work, maybe not.
Sent from my LGL84VL using Tapatalk
Locked bootloaders from samsung can only be rooted if an engineering boot that has a root shell built into it.
I attained root, here is my guide.
https://forum.xda-developers.com/galaxy-j7/how-to/root-guide-samsung-galaxy-j7-prime-t4010939
I am aware that there is already a thread for unlocking Bootloader on Android 8.1.0, but I tried the steps in that article and it unfortunately was unable to unlock my device. I bought my Pixel 2 secondhand, but because the OEM Unlocking toggle in Settings is grayed out and in the off position, I am led to believe that I have a Verizon model. I have an AT&T SIM card however. I also tried looking up how to downgrade my phone to the Google version of Android 8.1.0 but they all require that OEM Unlocking be turned on. Is there any updated guide on how to unlock the Bootloader for my phone so that I can possibly root it?
Not right now but there is an interesting vulnerability out right now.... I'd turn off updates for a little while incase something arises
Unlocking the bootloader is a totally different prospect than gaining root. Root can be obtained with an exploit, the recent one being a good example, but it will only be temporary. To make it permanent you need to unlock the bootloader. To unlock the bootloader you need yet another exploit for the bootloader since all the refurbished models appear to be unable to use the factory unlock process. Combine that with low demand for a two year old device and odds are it will never happen unless Google itself provides a solution. In short, I wouldn't hold my breath or leave a giant security hole on your device in hopes that it can be bootloader unlocked in the future. If you need a device that can be bootloader unlocked, go to Google and buy one.
***Unlocking the bootloader is a totally different prospect than gaining root.
Agreed
***Root can be obtained with an exploit, the recent one being a good example, but it will only be temporary.
Not always true, there have been many roots that didn't require bootloader unlock. Towel root comes to mind also many sunshine roots and countless others.
***To make it permanent you need to unlock the bootloader.
It helps a lot but see above....
*** To unlock the bootloader you need yet another exploit for the bootloader since all the refurbished models appear to be unable to use the factory unlock process. Combine that with low demand for a two year old device and odds are it will never happen unless Google itself provides a solution. In short, I wouldn't hold my breath or leave a giant security hole on your device in hopes that it can be bootloader unlocked in the future. If you need a device that can be bootloader unlocked, go to Google and buy one.
I don't want to buy a other phone..... The first one I bought was supposed to be unlockable. I'll deal or hope. The security hole really doesn't worry me at the moment. I won't leave it open permanent.
After thinking about it, the a/b partition may throw a serious monkey wrench in the full root issue.
Is there a way then to root my Android without turning on OEM Unlocking? My limited research on this makes me conclude that there's no such method for the Google Pixel 2.
Right now there is a temp root.
mrkhigh said:
Right now there is a temp root.
Click to expand...
Click to collapse
Would you be able to provide a link on how to do a temporary root on the Pixel 2?
I believe if you read the whole thread one person said it worked on the p2.
Careful though, change system they say it bricks the phone.
https://forum.xda-developers.com/pi...-magisk-root-vzw-pixel-2-xl-xl-t3981423/page5
Hello Huawei P20 Mates,
i read about it shortly, that there would be an exploit that allows root access. i read about it on this website httpx://helpnetsecurity.com/2019/10/17/android-root-cve-2019-2215/ (need to change it since new users arent allowed to use links in this forum <.<). the code for accessing root would be even available on github (i wonder why, wait - isn't this illegal?). but anyway, i read from another site that the huawei p20 with october 2019 update would be vulnerable for this one. so basically, its an now open door for us huawei p20 users to root our phones, isnt it?
i just wonder how to use this. i understand the process of compiling it, but what did he mean with "change with device code"? maybe i just didnt get it right. does anyone know what he is talking about in his github project?
p0w3r_off said:
Hello Huawei P20 Mates,
i read about it shortly, that there would be an exploit that allows root access. i read about it on this website httpx://helpnetsecurity.com/2019/10/17/android-root-cve-2019-2215/ (need to change it since new users arent allowed to use links in this forum <.<). the code for accessing root would be even available on github (i wonder why, wait - isn't this illegal?). but anyway, i read from another site that the huawei p20 with october 2019 update would be vulnerable for this one. so basically, its an now open door for us huawei p20 users to root our phones, isnt it?
i just wonder how to use this. i understand the process of compiling it, but what did he mean with "change with device code"? maybe i just didnt get it right. does anyone know what he is talking about in his github project?
Click to expand...
Click to collapse
As far as I know, at the moment No. Huawei stopped releasing boot lock codes.
On the positive side, and thing May change on Android 10
I confirmed this with one click root and some other dev database which I should be able to post her as I believe it doesn't breach the rules since its a developer sits that should imo be linked here but I don't want to post it here but I can pm you the link.
Fundermentaly speaking, I China is rumoured to merge and work hand in hand with Google after trump stepped up the game. It was posted on AC, and a feed I received from the app MEDIUM.
tldr no boot unlock, but no root.
2ISAB said:
As far as I know, at the moment No. Huawei stopped releasing boot lock codes.
On the positive side, and thing May change on Android 10
I confirmed this with one click root and some other dev database which I should be able to post her as I believe it doesn't breach the rules since its a developer sits that should imo be linked here but I don't want to post it here but I can pm you the link.
Fundermentaly speaking, I China is rumoured to merge and work hand in hand with Google after trump stepped up the game. It was posted on AC, and a feed I received from the app MEDIUM.
tldr no boot unlock, but no root.
Click to expand...
Click to collapse
did you even read what i wrote or used the link i told here? i told, that there is a 0-Day Exploit. Its *not* about boot lock codes or fastboot. its about a exploit, using to obtain root rights. then, you could easily read out the nvme file. but i dont understand how to use this relatively new exploit.
p0w3r_off said:
Hello Huawei P20 Mates,
i read about it shortly, that there would be an exploit that allows root access. i read about it on this website httpx://helpnetsecurity.com/2019/10/17/android-root-cve-2019-2215/ (need to change it since new users arent allowed to use links in this forum <.<). the code for accessing root would be even available on github (i wonder why, wait - isn't this illegal?). but anyway, i read from another site that the huawei p20 with october 2019 update would be vulnerable for this one. so basically, its an now open door for us huawei p20 users to root our phones, isnt it?
i just wonder how to use this. i understand the process of compiling it, but what did he mean with "change with device code"? maybe i just didnt get it right. does anyone know what he is talking about in his github project?
Click to expand...
Click to collapse
Yeah it might work, but if you try to modify something using root it would Brick cause of SecBoot.
madoxx77 said:
Yeah it might work, but if you try to modify something using root it would Brick cause of SecBoot.
Click to expand...
Click to collapse
you too, didnt fully read what i wrote, or did you? why are the answers always short like "no wont work because xy - but we ignore z, w and v"?
the thing is, you should *not* change the phone with this exploit. i wouldnt have any interest in changing it with this method. i have more interest in getting the nvme bootloader unlock code which most certainly is stored there since it was with the old huawei phones before that way. like you know, obtaining root rights, saving nvme partition, then open nvme partition with hex editor and then search for BL Code. then, i would unlock the phone the regular way. do you understand what im trying to do?
p0w3r_off said:
you too, didnt fully read what i wrote, or did you? why are the answers always short like "no wont work because xy - but we ignore z, w and v"?
the thing is, you should *not* change the phone with this exploit. i wouldnt have any interest in changing it with this method. i have more interest in getting the nvme bootloader unlock code which most certainly is stored there since it was with the old huawei phones before that way. like you know, obtaining root rights, saving nvme partition, then open nvme partition with hex editor and then search for BL Code. then, i would unlock the phone the regular way. do you understand what im trying to do?
Click to expand...
Click to collapse
Calm down you haven't said anything about bootloader code in original post, simply you cannot obtain BL code cause it's encrypted(not in NVME partition) ? In EMUI 8 it was possible to unlock bootloader using modified NVME but in EMUI 9 you cannot do it. There is one way to obtain BL code but you need to disassemble your phone and it costs like 30 euro, you can find it in mate 20 forum, it's called BLK-RSA
madoxx77 said:
Calm down you haven't said anything about bootloader code in original post, simply you cannot obtain BL code cause it's encrypted(not in NVME partition) In EMUI 8 it was possible to unlock bootloader using modified NVME but in EMUI 9 you cannot do it. There is one way to obtain BL code but you need to disassemble your phone and it costs like 30 euro, you can find it in mate 20 forum, it's called BLK-RSA
Click to expand...
Click to collapse
okaaay this is news to me that this changed in EMUI 9. but, if that is the case, then maybe we should really check if the exploit is maybe working for older versions than android 9? especially the version before the may/june patch 2018 may be different. so the roadmap may be:
- downgrade to EMUI 8.1 version *before* security patch May 2018
- try to use exploit to get root rights in order to read (non-encrypted? - i need more information on this) bootloader code?
two questions are rising here: is the exploit only working for android 9, or is this exploit existing for longer time and versions before? i dunno how it is here. and second thing, is the BL Code already encrypted in EMUI 8.1?
the reason why im asking all of this is, that it may be better to get these informations before i try to do something and even brick my phone in the worst case. or doing hours of work without any result (which would be simply a waste). writing a few lines takes only a few minutes - at all.
p0w3r_off said:
okaaay this is news to me that this changed in EMUI 9. but, if that is the case, then maybe we should really check if the exploit is maybe working for older versions than android 9? especially the version before the may/june patch 2018 may be different. so the roadmap may be:
- downgrade to EMUI 8.1 version *before* security patch May 2018
- try to use exploit to get root rights in order to read (non-encrypted? - i need more information on this) bootloader code?
two questions are rising here: is the exploit only working for android 9, or is this exploit existing for longer time and versions before? i dunno how it is here. and second thing, is the BL Code already encrypted in EMUI 8.1?
the reason why im asking all of this is, that it may be better to get these informations before i try to do something and even brick my phone in the worst case. or doing hours of work without any result (which would be simply a waste). writing a few lines takes only a few minutes - at all.
Click to expand...
Click to collapse
You cannot downgrade to EMUI 8.1 before May 2018cause of xloader, only way is to open your phone and flash old firmware through test points. Also it can maybe work on EMUI 8 but BL code is still encrypted in there, yeah you can unlock bootloader through NVME but you cannot obtain BL code. The only way is as I said before the BLK RSA method.
madoxx77 said:
You cannot downgrade to EMUI 8.1 before may cause of xloader, only way is to open your phone and flash old firmware through test points. Also it can maybe work on EMUI 8 but BL code is still encrypted in there, yeah you can unlock bootloader through NVME but you cannot obtain BL code. The only way is as I said before the BLK RSA method.
Click to expand...
Click to collapse
that is absolutely wrong? i did in the past via the tool from huawei and yeah that was w/o *any* problem? and that was only a few months ago "where i already had EMUI9"? are you even *want* to root/unlock it, or do you just want to say what is not possible but in reality it is?
p0w3r_off said:
that is absolutely wrong? i did in the past via the tool from huawei and yeah that was w/o *any* problem? and that was only a few months ago "where i already had EMUI9"? are you even *want* to root/unlock it, or do you just want to say what is not possible but in reality it is?
Click to expand...
Click to collapse
Why you have to be so offensive ?I just wanted to help you not to brick your phone if you try to do some **** with it. I forgot to say that you can't downgrade from EMUI 9.1 to EMUI 8.1,in past if you had EMUI 9 it was possible to downgrade to EMUI 8.1 via Hisuite
p0w3r_off said:
Hello Huawei P20 Mates,
i read about it shortly, that there would be an exploit that allows root access. i read about it on this website httpx://helpnetsecurity.com/2019/10/17/android-root-cve-2019-2215/ (need to change it since new users arent allowed to use links in this forum <.<). the code for accessing root would be even available on github (i wonder why, wait - isn't this illegal?). but anyway, i read from another site that the huawei p20 with october 2019 update would be vulnerable for this one. so basically, its an now open door for us huawei p20 users to root our phones, isnt it?
i just wonder how to use this. i understand the process of compiling it, but what did he mean with "change with device code"? maybe i just didnt get it right. does anyone know what he is talking about in his github project?
Click to expand...
Click to collapse
I tried running both the original PoC code and quickroot on my P20 Pro (EMUI 9.1.0.328, last patched 1/8/2019) but this EMUI version doesn't seem vulnerable, neither PoC yielded elevated permissions. I'm digging some more into this.
cptnfrd said:
I tried running both the original PoC code and quickroot on my P20 Pro (EMUI 9.1.0.328, last patched 1/8/2019) but this EMUI version doesn't seem vulnerable, neither PoC yielded elevated permissions. I'm digging some more into this.
Click to expand...
Click to collapse
Okay glad to hear you try that. Maybe going back to EMUI 9 would help. The dload method still should work, right?
p0w3r_off said:
Okay glad to hear you try that. Maybe going back to EMUI 9 would help. The dload method still should work, right?
Click to expand...
Click to collapse
I'm not sure, the descriptions of the vulnerability mention that the P20 is affected - one site says only on Android 8 so it's unclear. I'm not familiar with the dload method, can you post a link?
The thing is, as maddoxx77 posted earlier, even if this worked as a way to gain root we'd still have no way to obtain the BL code and possibly only brick the device while trying. Perhaps some hardware based method could work but I don't really have the knowledge or time to dig into it deeper.
F.C.K YOU HUAWEI.
Hello there
I just ordered my V50 European model to replace my V30, which suddenly had a modem problem it seems cause it stoped reading any sim card without any damage, humidity or obvious short circuit it seems even after meticulously checking the insides abd trials and errors.
Ok I just wanted to ask because I am kind of confused. In the unlocked bootloader versions, isn't it possible to install a custom recovery and get root that way just like with any phone that I unlocked in the past? Meaning I always thought that if you have an unlocked bootloader you can always get root access easily. But is it not this way for now and so we have to wait for a root or custom recovery exploit even if we have an unlocked bootloader from lg?
Just wanted to clarify that and thank you for your time.
Greetings from Greece
skydogis said:
Hello there
I just ordered my V50 European model to replace my V30, which suddenly had a modem problem it seems cause it stoped reading any sim card without any damage, humidity or obvious short circuit it seems even after meticulously checking the insides abd trials and errors.
Ok I just wanted to ask because I am kind of confused. In the unlocked bootloader versions, isn't it possible to install a custom recovery and get root that way just like with any phone that I unlocked in the past? Meaning I always thought that if you have an unlocked bootloader you can always get root access easily. But is it not this way for now and so we have to wait for a root or custom recovery exploit even if we have an unlocked bootloader from lg?
Just wanted to clarify that and thank you for your time.
Greetings from Greece
Click to expand...
Click to collapse
There is no custom recovery yet, but rooting with fastboot and some other stuff is not a very device specific task in general. The guide to root the g8s should be exactly what you need.
Any progress with the root?
G0bl1n said:
Any progress with the root?
Click to expand...
Click to collapse
Dude the g8s people have already managed to root it just look at their guide and use kdztools to get the boot img to patch with magisk
I was wondering if the original poster succeeded with the root. I was also considering to buy the European version but it's nowhere to find here in US.
Hello Guys,
long i searched for a method of unlocking the bootloader of eml-l29 Huawei P20. No i didnt find any, and qu1ckr00t didnt prove to be useful either.
it is not relevant anymore. since i did use testpoint too often in research of what is possible and what not, the device died just a few minutes ago. it always enters now only the usb huawei com mode. probably i used to much pressure on the testpoints or what or i accidentally short circuited other points with the screwdrivers.. but as a matter of fact, it is hardware bricked and the board is done for i think. so i dont search for a solution anymore.
people, see this thread as a resource what is possible without unlocking the bootloader and what not. i figured out following things are fact without unlocking the bootloader, so that you all doesn't have to try instead of me:
- you can flash with the testpoint short circuited and the software dc-phoenix and the right chipset/cpu bootloader chosen in temporary bootloader the twrp to erecovery_ramdisk and recovery_ramdisk, it will be permanently available after the process
- you cannot install magisk on it, since xloader seems to block the bootup and always sends you to recovery-mode (which means twrp if you flashed this)
- you cannot install a custom rom like OpenKirin with the testpoint recovery mode, as it - like with magisk, always will send you to recovery mode - i tried it exactly how it is explained on openkirin.net and it always turned out the same
- there is no bootloader unlock code in the nvme partition, i checked it - it seems there is encryption going on there
- the exploit qu1ckr00t is not usable, since the kernel is compiled with spinlock_debug
- and i forgot first: if you have the idea of soldering a cable for testpoint short circuit - no, letit be. you will only hang forever in huawei usb com 1.0 mode - it wont boot normally as long as you're in tp mode
so basically, there is way to get root, it is a way to get to direct data from the partitions. but at the end, the question that arises is - how much profit are you gaining from root or custom roms on this device at the end? in my case, the many tries costed my time, my nerves and now the device itself. it is gone for good. maybe this is for the best, as i never treated it right since i bought it (it had to be repaired two times in 2 years, which is a lot for a normal device at this amount of time) and i only have bad memories in my life with it (lots of things happened, but this is not the right place for such tellings).
my final message for this part of this board (not the board i damaged thou) - leave it alone, don't waste your time anymore on this. move on, there are cheap devices that are better, faster and unlockable too at this day and time. i moved on to my new Nokia 7.2, which is awesome.
so stay healthy guyz.
my journey of exploring the depths of huaweis device huawei p20 eml-l29 ends here. its sad, but at the same time i'm happy that the "horror" of an unlockable bootloader is finally over.
Thanks for your effort and sharing the info. Good luck with new phone
Note: my next phone won't be Huawei, for sure, due to bootloader locking, I am fed up with them
Yes,
I even have no sorry with them if they go down because of the Google lockout. Their strategy is to pull people away from Google PlayStore? Yes, sure. Good luck.
Unlock bootloader and promise to keep it open for P10 upwards and we are happy. Otherwise... byebye and fcku.
FearFac said:
Thanks for your effort and sharing the info. Good luck with new phone
Note: my next phone won't be Huawei, for sure, due to bootloader locking, I am fed up with them
Click to expand...
Click to collapse
What if I have my unlock code? Can I still unlock it or it's impossible now? I requested my code before they stop the bootloader unlocking, but never did anything with it.
ElChe said:
What if I have my unlock code? Can I still unlock it or it's impossible now? I requested my code before they stop the bootloader unlocking, but never did anything with it.
Click to expand...
Click to collapse
You are the lucky one who can root your phone.
FearFac said:
You are the lucky one who can root your phone.
Click to expand...
Click to collapse
Yeah I guess haha. I haven't got around doing it yet. But now I know it's a possibility! So I'll eventually do it!
FearFac said:
You are the lucky one who can root your phone.
Click to expand...
Click to collapse
How do you root it? AFAIK anything newer than EMUI8 is no longer rootable.
I'm on EMUI 10, with an unlocked bootloader, please tell me how to root.
zgomot said:
How do you root it? AFAIK anything newer than EMUI8 is no longer rootable.
I'm on EMUI 10, with an unlocked bootloader, please tell me how to root.
Click to expand...
Click to collapse
I do a query you have emui 10 with bootloader open?how did you do it ?it was not the problem that emui 10 closed the bootloader?can't root with magisk?
zgomot said:
How do you root it? AFAIK anything newer than EMUI8 is no longer rootable.
I'm on EMUI 10, with an unlocked bootloader, please tell me how to root.
Click to expand...
Click to collapse
Where did you get this info from?
I was just thinking of rooting my CLT L09 Emui 9.1.0