Database Info

[GUIDE] How to root zenfone 3 (ZE552KL / ZE520KL)

Original Article : https://www.asus.com/zentalk/tw/thread-177291-1-1.html
[email protected] post the root guild for zenfone 3.
I translate his article to English version.
I didn't try this method yet, but I think it should work.
If you want to root your zenfone 3, you can following this guide to root your device.
============================
[Update] All-in-one zip (unlock App+driver+adb+fastboot+twrp+SuperSU.zip) :
https://github.com/snowwolf725/RootZenfone3/archive/master.zip
Firstly, you should use the following official unlock tool to unlock Boot-loader.
[Update] If you want to receive OTA notify, you should use Un-official bootloader unlock method.
Un-official bootloader unlock method
ZE552KL
http://dlcdnet.asus.com/pub/ASUS/ZenFone/ZE552KL/ZE552KL_SIGNED_Android_M_UnlockTool_2016_0715.zip
ZE520KL
http://dlcdnet.asus.com/pub/ASUS/ZenFone/ZE520KL/ZE520KL_SIGNED_Android_M_UnlockTool_2016_0715.zip
After you unlock your device, you can download the TWRP recovery image, and follow the guide to root your device.
TWRP recovery img ：https://mega.nz/#F!kl8lmKRL!ZbLvz1b4YgLMr_n09vRrTA
twrp-3.0.2-Z012D.img (TWRP for ZE552KL)
twrp-3.0.2-Z017D.img (TWRP for ZE520KL)
dot.supersu (.supersu)
If your device is ZE552KL, then you should download twrp-3.0.2-Z012D.img + dot.supersu
If your device is ZE520KL, then you should download twrp-3.0.2-Z017D.img + dot.supersu
If you want to build recovery image by yourself, you can clone the git source tree, and compile by yourself.
https://github.com/shakalaca/android_device_asus_ze520kl
https://github.com/shakalaca/android_device_asus_ze552kl
How to root your device:
1. Boot your zenfone 3 to boot-loader mode (you should firstly turn the phone off, then press and hold the volume up and power buttons )
2. Install android tools on your pc. (http://forum.xda-developers.com/showthread.php?t=2588979)
3. Connect your mobile to PC, then use following command to flash TWRP image to your zenfone.
Code:
fastboot flash recovery twrp-3.0.2-xxx.img
4a. Hold the volume down button, and use following command to boot into recovery mode. (if menu appears, please select recovery mode)
Code:
fastboot reboot
4b. Boot your zenfone 3 to recovery mode (you should firstly turn the phone off, then press and hold the volume down and power buttons )
5. After boot into TWRP recovery, select "keep system read only" in TWRP recovery menu.
6. Use following command to push .supersu file into /data .
Code:
adb push dot.supersu /data/.supersu
7. Select "ADB Sideload" in TWRP menu, then use following command to push root files.
(SuperSu.zip http://forum.xda-developers.com/apps/supersu/stable-2016-09-01supersu-v2-78-release-t3452703)
Code:
adb sideload SuperSU.zip
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
8. reboot and enjoy your rooted device.
PS. If you got OTA notify, you can flash the stock image to un-root your device.
Stock boot.img and recovery.img files can be find in following URL:
https://mega.nz/#F!ok0V0RIA!5WKtHe98opzjVI3NPbM7Ww

Who can test ?

superuser.pm said:
Who can test ?
Click to expand...
Click to collapse
its 100% working bro

Does the unlock tool really wipe the data on the device??

aelzki said:
Does the unlock tool really wipe the data on the device??
Click to expand...
Click to collapse
yes its wiping entire phone.

can i root the phone without uncloking the bootloader ?

BentotKulangot said:
its 100% working bro
Click to expand...
Click to collapse
Are u trying? 7up screenshot for everybody . ..

superuser.pm said:
Are u trying? 7up screenshot for everybody . ..
Click to expand...
Click to collapse
This is work.. now i have rooted phone and installed xposed

after rooted? we can get OTA? or no? if not how to get the OTA?

i must unlock bootloader before flash twrp ?
on phone turn on or off USB debugging mode ?

100% working
I have been waiting and waiting for this post. worked instantly, with no headaches. Well just remember to back up your stuff first.
Thanks to OP for the translation!
Won't allow me to post the image or link being so new. Just try it out.
drive.google.com/open?id=0B08xanlQWY50UHhEZlBfM1BncWs
sorry mods if this is bypassing the spam guards.

i cant get OTA UPDATES after unlock the bootloader LOL

They do warn you specifically that pushed updates will no longer happen.
I think the solution is to find the updates from ASUS and use an app like FlashFire

There is a request for a Rom on the cyanogen forums.
Xposed worked like a charm.
It also appears that the kernel source is available although I'm not sure from where.
Still not sure where to find the ASUS updates

Thank you very much it works perfect, but how do you flash the recovery.img and boot.img to un-root?

TWRP Decrypted and Couldnt Mount Storage
Thanks for the guide, its 100% worked!
But I have a problem. I couldnt mount storage to instal ZIP file. Also my TWRP said its encrypted, and i dont what password to decrypt is.
Anybody know how to solve this?

Is there any CN stock recovery to download?

i got error device 'null' not found when trying to sideload the supersu. help me please

Chandro-ID said:
i got error device 'null' not found when trying to sideload the supersu. help me please
Click to expand...
Click to collapse
I got this problem too, just install the super su from twrp solved my problem

Will it work for ZS570KL?

[X553] recowvery, unlock, root Infinix HOT 3 LTE potential - with TWRP

Team Win Recovery Project 3.0.2-0
How it looks :
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Notice : I don't own the device my self, so i need some one to test this method.
This will allow you to install TWRP and flash SuperSU!
Step 1 : Unlocking your bootloader
You need unlock bootloader first before installing twrp.
You will also need adb and fastboot. You can download them in a portable small form factor here :
[ADB FASTBOOT][LINUX&WINDOWS]
Start by turning on developer options in Settings -> About device -> Software info -> Build number. (tap 7 times until it's enabled)
Now navigate to Settings -> Developer options -> OEM unlock. (turn it on)
Don't ever turn OEM unlock or Developer options off when using a custom ROM or recovery. This could lose to loss of all your data.
Enable usb debugging on developer option, and extract adb and fastboot to a folder on your PC.
Type adb start-server and make sure to check the notification on your phone to accept debugging authorization.
You can reboot into fastboot mode with adb reboot bootloader once authorized.
If it fails to authorize or show the notification on your phone, you may need to try other USB ports.
You can check the status of your bootloader lock with the fastboot getvar all command.
ex. (bootloader) unlocked:yes
Step 2 : Running recowvery
You can find the recowvery binaries (you need to download all of these) at :
Here
You're now ready to follow the recowvery installation instructions.
See here (running section)
Bonus: There's also a full write up on that page on how recowvery works if you're into that kind of stuff.
Step 3 : Flashing TWRP & Rooting
Once you've got your permissive shell in adb, you will have access to your partitions via dd.
You should transfer TWRP to your internal storage (name in twrp.img) using MTP, or you can also just use adb push. (mentioned here)
Download TWRP build here.
This step requires that you've used dirtycow to replace /system/bin/run-as with recowvery-run-as. If you've rebooted since doing that, you will need to go back and do that again.
Code:
adb push twrp-3.0.2-x-xxxx.img /sdcard/twrp.img
adb shell
$ run-as exec dd if=/sdcard/twrp.img of=/dev/block/bootdevice/by-name/recovery
"<wait for it to complete>"
$ reboot recovery
You should be inside TWRP now. It will ask you if you want to enable system modifications. You should swipe yes, otherwise your OS will replace TWRP on next boot.
Flash the latest zip from here to turn off forced encryption at boot and allow you to boot a modified system. If you're flashing SuperSU.zip, it will also do this for you so this won't be necessary.
Warning: If you don't flash either no-verity-opt-encrypt or SuperSU, you will probably end up in a horrifying never-ending boot loop of "corruption"!
Latest SuperSU : here
To disable encryption after flashing SuperSU or the no-verity-opt-encrypt zip, you must use the [Format Data] button on the Wipe page in TWRP. No other options will work.
Back up all your internal storage and apps data that you can to your PC. You can use Titanium Backup with SuperSU before doing this step if you like.
Warning: Using [Format Data] will wipe all your apps and data (including internal storage) off the phone, giving you the out-of-the-box experience of a new phone!
Once this is done, you should be able to backup/restore/use any function of TWRP without any issues.
Flashed SuperSU? You're done! Boot up (it will reboot a few times) and set up your SuperSU Manager to your liking and give this post a thanks!
Step 4 : Have fun!

Thanks for this great work brother
But sorry i can't try any thing right now because I have exams nowadays
I want to tell you also that I just rooted successfully my hot 3 lte now using kingoroot apk with out using pc 😄😄😄

ModaAli said:
Thanks for this great work brother
But sorry i can't try any thing right now because I have exams nowadays
I want to tell you also that I just rooted successfully my hot 3 lte now using kingoroot apk with out using pc 😄😄😄
Click to expand...
Click to collapse
so root is done, then time to try twrp just if u not busy

And then for custom rom ??
But later, I'm so busy sorry ? ?

ModaAli said:
And then for custom rom ??
But later, I'm so busy sorry ? ?
Click to expand...
Click to collapse
Don't hope too much this is still for testing but probably soon will have a custom rom, well good luck for your exam bro :good:

It will be sure
Thanks bro ?

Thread closed per OP request.

[AIO][ROOT][MODS] All-in-one thread for the Starmobile Up Prime

Starmobile Up Prime
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
SOME INFO:
MT6737/M (they seem to be the same thing)
Antutu Score: 30052 [source]
As of Jan 6 2018, latest official firmware is v13 06292017.
A. Root
Disclaimer: YOU ARE DOING THIS AT YOUR OWN RISK. I will not assume any responsibility for your own actions on your phone. Follow the instructions carefully, and ask questions if you're unsure.
Tested way: Magisk Manager patched boot method
Other option: SRS Root reports to root the v12 firmware, though I didn't use this method so I don't know if it works.
Magisk Manager Patched Boot Method
1. Unlock your bootloader (Note: this will factory reset your phone and you will lose all your personal data) To do this:
Enable bootloader unlock inside developer options, accessed by pressing build number 7 times in settings. Thanks @Nao Tomori !
Install adb and fastboot on a computer (Search it, it's available)
Reboot to fastboot mode (Switch off phone, press power and volume up simultaneously. Choose fastboot mode from the menu that appears)
Connect to computer by USB Cable provided
Open a command prompt or terminal and check if fastboot detects your device by typing
Code:
fastboot devices
A device number should appear. If nothing appears, it's a most likely driver problem. Click this button to know more.
Linux doesn't need drivers so try using fastboot in linux. If you really want to do it in windows, try PDANET drivers while connected in fastboot mode. No guarantees. I'm using a linux machine to specifically avoid this hassle
​
We're now gonna unlock your bootloader. Type
Code:
fastboot oem unlock
and confirm unlock by clicking volume up on your phone.
Reboot and go through all the necessary set-up.​2. Download Magisk Manager from here and install the APK.
Make sure you download the latest apk version provided.
Note it says that Magisk itself is not yet installed.
We've only installed the helper app.
3. Flash Patched Boot Image
At this point you have two options: extract and patch your own boot image, or just use my patched boot image. I will assume you pick the second but this REQUIRES that you are on the same v13 06292017 official firmware. PM me if you want to do the first one. Download my patched boot image.
Download​
Move the file to a known location that's easy to type (home directory or C Drive)
Reboot to fastboot mode, same as before
Flash with fastboot then reboot
Code:
fastboot flash boot /path/to/patched_boot.img
Code:
fastboot reboot
​CONGRATS! Magisk should now be installed and along with it, Magisk's Superuser
Press thanks if it helped you! And/or leave feedback if it worked for you, and if your setup differed from mine. Thanks

MODS
B. Mods
1. Xposed Framework (systemless)
Install Xposed framework from within Magisk. Install API24.
Then reboot. This first boot takes really long. I pulled out my battery once, then the next time it successfully booted after a while.
Install topjohnwu's Xposed apk from his systemless Xposed thread.
It will tell you that Xposed is installed but not active yet.
Reboot one last time
2. Dolby Atmos (systemless)
Install from within Magisk. Confirmed working!

RECOVERY
Reserved

If you get fail operation
If you get
Code:
FAILED (remote:
Unlock operation is not allowed
)
Just go to Developer Settings > OEM Unlocking and enable it.
I used PDAnet for Windows and it worked

Nao Tomori said:
If you get
Code:
FAILED (remote:
Unlock operation is not allowed
)
Just go to Developer Settings > OEM Unlocking and enable it.
I used PDAnet for Windows and it worked
Click to expand...
Click to collapse
Oh yes, I forgot about that! Thanks. Will add and credit you

hi there bro. i just want to know, is there a custom rom that we can use for this phone? i have the same exact phone but i cannot find any articles about any other custom roms that has been used on this phone. hoping to hear from you. thanks.
And another thing, can we use TWRP for this phone?

Hello. Is there anyone here who has a clean stock rom for Starmobile UP Prime? The phone keeps popping up ads and redirecting to chrome/google play. Contact names sometimes disappear too. I ran the malwarebytes app and it said that "Settings" app is the malware. I downloaded and flashed another rom before (I forgot from what website), but same experience. Hoping for helpful response.

[ROOT] Install Magisk on ZC551KL Guide "FINALLY"

This is a messy post, do as you please with it. I am not responisble for ang damage to your device. Additionally, I dont take any credits for any of this, I just put everything together here.
Tags zc551kl Asus Zenfone 3 Laser z01bdc
Tools Needed:
Asus Bootloacker Unlock Tool - http://dlcdnet.asus.com/pub/ASUS/ZenFone/ZC551KL/UnlockTool_Android_M_0706_signed1.apk
You current boot.img version which can be downloaded from here [Its packaged in the update file]- https://www.asus.com/us/Phone/ZenFone-3-Laser-ZC551KL/HelpDesk_BIOS/
ADB and Fastboot from here [Credits to Snoop05] - https://www.dropbox.com/s/mcxw0yy3jvydupd/adb-setup-1.4.3.exe?dl=0
Magisk Manager - https://tiny.cc/latestmanager
Prep:
Install the Asus Unlocker on your phone and unlock it.
Install Magisk Manager on your phone but dont run it yet.
Enable USB Degugging on your phone.
Install ABD and Fastboot on your PC. It will be installed to c:/adb/
Download the update that matches your phone version to your pc. [Mine was version "WW-32.40.106.41"]
Open the update file on your pc with your favorite zip manager and extract the boot.img .
Put the boot.img onto your phones internal storage.
Follow this guide [Credits to Dhananjay @ thecustomandroid.com]
» Non-rooted devices
Magisk 14.0 introduces a new and neat method to install on non-rooted Android devices. This new process doesn’t require your device to be rooted, nor does it require a custom recovery like TWRP. But for this method to work, your device must have the stock boot.
But for this method to work, your device must have the stock boot.img dump placed in the internal storage.
Make sure that you enable USB debugging and setup ADB access first, you will need it later in the guide.
Download Magisk Manager 5.3.0: Link
When the APK has been downloaded, use a file manager to install it. Now run the app from the app drawer.
Go to the app settings and tap on “Patched Boot Output Format”. You can select “.img.tar” if you will be using ODIN to flash the file or else simply select “.img” for the rest of the devices.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Go back to the app main screen and tap on the “Install” button. Go to INSTALL > PATCH BOOT IMAGE FILE.
Navigate through the storage and select the stock boot.img file. As soon as you select the stock boot.img file, the app will download the installer to patch the image.
Once the process is complete, you can tap on the “CLOSE” button.
Your new and patched boot image now include root and support for modules. So the last step is to grab this boot file and flash it your device via fastboot or ODIN (Depending on the output format you chose in step #4).
Connect your device to the PC via USB cable and navigate to the Magisk Manager folder inside the storage. Your “patched_boot.img” file will be present right there. So copy it to your PC.
Move the “patched_boot.img” file to C:/adb folder. And type in the following command to boot your phone into bootloader/fastboot mode:
adb reboot bootloader
Once your phone enters the bootloader/fastboot mode, enter the command to flash the file:
fastboot flash boot patched_boot.img
Finally, reboot your device:
fastboot reboot
That’s all, you have just installed one of the most trending mod out there and especially on your non-rooted device without any need of a custom recovery. Isn’t it great? Tinker around with the app and see what all things you could do.

I can confirm this is working! Thank you!

Reporting working on Android O (8.0), I download update from Asus and patch boot image. Thanks

kamo84 said:
Reporting working on Android O (8.0), I download update from Asus and patch boot image. Thanks
Click to expand...
Click to collapse
I know it's been some time since this was discussed, but I am trying to go through this process. Can you confirm that you unlocked the bootloader on 8.0 with the Asus tool? Or did you install magisk without unlocking the bootloader (if that's possible)?
thanks

I don't think the unlocker tool works anymore.

[TWRP 3.4.0-0] [OFFICIAL] BQ Aquaris M8 (aquaris_m8) (MT8163)

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
TWRP FOR BQ AQUARIS M8​Reliable root and recovery method for bq m8. Thanks to @diplomatic for compiling TWRP for this tablet and thanks to the TWRP team. I have tested this recovery and it has no errors.
DISCLAIMER
As usual, you do anything described in this post at your own risk. No one but you is responsible for any data loss, bricking or damage of your device.
INSTALLATION
- Go to developer settings and turn on OEM unlock
- Power off the tablet and boot to fastboot mode (power and volume -)
- Open a comand prompt and type:
Code:
fastboot oem-unlock
All the data will be loss
- Confirm the oem unlock by pressing the volume + button
- And now type:
Code:
fastboot continue
- When the tablet is turned on, and you complete the setup wizard, type:
Code:
adb reboot bootloader
- When fastboot mode appears in a corner of the tablet, type the following command:
Code:
fastboot boot twrp-3.X.X-X_aquaris_m8.img
- Now the TeamWin logo will appear. Go to install and select install image. Search for the twrp img in the internal memory and select it.
- When ask where you want to install it, choose recovery and slide to install
- And now reboot system
ROOTING WITH SUPERSU OR MAGISK
- Download this boot.img
- Copy the boot.img to the internal storage
- Reboot to recovery
- Go to install and select install image
- Select the boot.img, select boot partition and swipe to install
- Now you can install the magisk or supersu zip
DOWNLOADS:
- TWRP 3.3.1-0 IMG: https://github.com/R0rt1z2/android_device_bq_aquaris_m8/releases/tag/twrp
- TWRP 3.2.3-0 IMG: https://www.androidfilehost.com/?fid=11410963190603877900
- SUPERSU ZIP: https://www.androidfilehost.com/?fid=11410963190603867786
- MAGISK ZIP: https://github.com/topjohnwu/Magisk/releases/download/v18.0/Magisk-v18.0.zip
- XPOSED ZIP: http://dl-xda.xposed.info/framework/sdk23/arm64/xposed-v89-sdk23-arm64.zip
- XPOSED APK: https://forum.xda-developers.com/attachment.php?attachmentid=4393082&d=1516301692
SOURCE CODE:
Download
THANKS TO:
@diplomatic for compile TWRP.

Rortiz2 said:
Once the exploit finishes, flash the seccfg unlocked partition:
Code:
dd if=/sdcard/seccfg of=/dev/block/platform/mtk-msdc.0/11230000.MSDC0/by-name/seccfg
Click to expand...
Click to collapse
How can this work? The data in that file is encrypted with a device-specific key. It will not unlock any other device but the one it came from. If that does what you say it does, I will eat my sock.

diplomatic said:
How can this work? The data in that file is encrypted with a device-specific key. It will not unlock any other device but the one it came from. If that does what you say it does, I will eat my sock.
Click to expand...
Click to collapse
I pulled that file of my BQ when it had the unlocked BL. I pm'ed some people in a Spanish forum for test if it works, and it worked...

@Rortiz2, are you sure it actually unlocked their BL, and it wasn't just placebo? What I mean is did it show "Orange State" or did it end up in a bootable "Red State" in which the seccfg step did not make any difference? Because I've tried to decrypt the seccfg data from my own Zenpad on another unit, same model, and it failed. That confirms that the embedded keys are different. If it was all the same key, then unlocking a BL would be as simple as flashing some data with SP Flash Tool.

diplomatic said:
@Rortiz2, are you sure it actually unlocked their BL, and it wasn't just placebo? What I mean is did it show "Orange State" or did it end up in a bootable "Red State" in which the seccfg step did not make any difference? Because I've tried to decrypt the seccfg data from my own Zenpad on another unit, same model, and it failed. That confirms that the embedded keys are different. If it was all the same key, then unlocking a BL would be as simple as flashing some data with SP Flash Tool.
Click to expand...
Click to collapse
I've misunderstood you. You're right, it seems that this partition contains device specific codes. It casues red state.
Sorry!

OK, that makes more sense. There won't be any sock-eating yet. But either way, if you can boot it with Red (or yellow) State, it means you don't have to unlock and can still keep your data....

Released 3.3.1-0.

Official support is up!
https://twrp.me/bq/bqaquarism8.html