Samsung A520F MDM citrix lock? - Security Discussion

Goodday,
I want to remove an lock from my old work phone.
When i reset it to factory it has knox enrollment and citrix security.
I've been looking for combination file and flash this with odin but it always gives me an error at cm.bin is this the right way?
A520FXXUGCTI9
Or should i downgrade and get the good combination file?
Thanks in advance,
Yours,
Stefan
Edit fized it with twrp recovery. There was no knox in the data folder so i deleted conplete data folder and rebootet. It reinstalls itself and knox enrollment was gone

Related

Theoretical question regarding factory reset protection

Hi,
after reading some information about the FRP, a perhaps possible way to bypass it on Samsung devices came into my mind:
After all, the only thing one has to do is somehow managing to open the settings app. From there, one can do a factory reset which will erase the FRP partition. There are already lots of ways to do so, mostly by exploiting "holes" in the UI.
And of course, the FRP is never really secure; as it relies on the inaccessibility of the phone's internal storage. So if one is able to write the flash by some means (for example JTAG), getting rid of the FRP is pretty much straightforward.
This to be said, just to assure you that I don't plan anything malicious. I'm just curious about Samsung's and Android's security measures, and I don't own any recent Samsung device (with FRP) to try it myself.
But now my thoughts: If FRP is active, from what I read one could not boot unsigned binaries flashed by Odin. But Odin seems to flash these images; it appears that it just blocks the boot.
The next point that flashing+booting modified firmware without triggering the Knox flag is possible. From what I read, the kernel and recovery must stay stock. Apps can change. So I assume that it behaves similar with FRP.
This brought me to an idea: Maybe one could modify a stock image so that one could get to a settings screen, flash it via Odin, boot it, open settings, do the factory reset, and do whatever you want form there.
As a modification, I would suggest just deleting the Gapps from the image; then the phone will never ask for a google account. Or put in one of the apps commonly used to bypass FRP by USB OTG.
The key question is: Will the device boot the modified image, or will one get the "Custom binary blocked by FRP" error?

Galaxy s7 (SM-G930V Snapdragon) Bricked - For good?

I'll start by discussing why the phone became unusable, move to what I've tried to fix it, and then move into questions about solutions.
Root Process:
I began by rooting my Galaxy s7 SM-G930V Snapdragon (Chainfire method). Installed the fixed and debloater with no problems. (secureboot was not enabled at this point). KNOX did not trip.
Magisk:
After rooting process. Enabled password protection, which automatically started secureboot. Installed Magisk and allowed root privileges; required reboot. Which is where the problem begins.
KNOX:
Obviously, with root privilege system changes and secureboot enabled, KNOX froze startup processes. I was lazy, and didn't want to lose the work put in to gain SuperSU, and tried to use some exploits to bypass FRP lockout. One of these attempts triggered a factory reset, which I did not want (Like I said.. I was being lazy, and didn't want to have to redo all the settings and logins I'd just redone after root). I forced the phone to shut down, and broke the system. lol..
Attempts to repair:
- After about 4 hours of exploring exploits, I finally gave in, and attempted factory reset. Phone wiped data, but the recovery data seems to be corrupted, cannot be fixed by factory reset, or erased entirely, because the process continued no further than the wipe.
- Tried Samsung SmartSwitch (Replacement for Kies), but device was not recognized, and would not accept IMEI (Serial), nor would it allow any emergency recovery without these.
- Acquired stock firmware, and attempted flash with Odin. (BL, AP, CP, CSC) and received message "FAIL! (Auth)" (PC side), and "SW REV CHECK FAIL: [aboot]Fused 4 > Binary 1 [1]eMMC write fail: aboot" (Device side). Which I assume means that secureboot is blocking flashing from ODIN..
- Attempted to flash firmware from SD - Secureboot will not allow updating from SD or from ADB.
Repair (possible?): So, my question is this: Has anyone experienced this, or is there any kind of advanced solution to this? I am of low to mid-level computer programming expertise. I do not understand the theory behind what I was doing, just the process itself. Is there any way to reset the device to stock functionality, and if so.. How?
Hello! Does
Odin Fails with eMMC write fail error.
Hello everyone. I just purchased a Sprint Note 4 (SM-n910P) that has Android 5.1.1 currently installed. While I know there is no current chainfire autoroot for this version of android, I was planning on downloading to 5.0.1 using the ROM file...
forum.xda-developers.com
help you?

Can't use KNOX after flashing new firmware

i recently tried to root my phone, which it dind't work and broke my phone so i flashed a new firmware on it and my phone worked again but now i wanna use knox but it doesn't work, it keeps saying: Can't install My Knox unautorized software is installed and when i went to samsung's internet app to use secret- mode it dindn't work either.
Can somebody please help me out!
Factory reset, or flash new firmware using CSC instead of HOME_CSC
You've tripped knox, you can't use it ever again, nor can you use s health anymore.

J330F Knox Enterprise Enrollment Remove

Hello! I have Knox Enterprise Enrollment service active on my J330F (J3 2017 - android 7) and I want to remove it but I don't know how. I tried with TWRP installed, but no luck. Is possible to permanently remove Knox Enterprise Entrollment service from Samsung J330F ?
Knox is a PIA
The only thing I hve been able to do with knox is reset the phone back to factory then use All in one toolbox to cancel it's startup entry. Basically keeps it from booting when you restart your phone. other than that i have no other options. If anyone else has the solution, please let us know.
diavas2007 said:
Hello! I have Knox Enterprise Enrollment service active on my J330F (J3 2017 - android 7) and I want to remove it but I don't know how. I tried with TWRP installed, but no luck. Is possible to permanently remove Knox Enterprise Entrollment service from Samsung J330F ?
Click to expand...
Click to collapse
huckfinn9 said:
The only thing I hve been able to do with knox is reset the phone back to factory then use All in one toolbox to cancel it's startup entry. Basically keeps it from booting when you restart your phone. other than that i have no other options. If anyone else has the solution, please let us know.
Click to expand...
Click to collapse
Can you please provide how to use the all in one toolbox thing to do what you did ?
ion my case, A520F, the knox thing enables FRP Lock, so, it is a bit hard...
I can use Combination file to access Adb mode, then can Remove FRP, and gain partial access to system, but after knox runs, it enables its security policy and enable FRP again and disable ADB access
yurais said:
Can you please provide how to use the all in one toolbox thing to do what you did ?
ion my case, A520F, the knox thing enables FRP Lock, so, it is a bit hard...
I can use Combination file to access Adb mode, then can Remove FRP, and gain partial access to system, but after knox runs, it enables its security policy and enable FRP again and disable ADB access
Click to expand...
Click to collapse
You have to stop the start up entry with thew Boot Speedup option in All in one Toolbox. You will see "User Apps" on the left and "System Apps" on the right. Choose System apps and then scroll till you find the Knox apps. You have to disable all of them I think. They are the Knox Folder container, Knox Apps Update, Knox Setup Wizzard, Knox Enrollment Service and the Knox app itself. And this only stops it from starting up when you reboot the phone. Whatever triggers it to start after the phone boots is a mystery to me, I sure as hell dont try to open it myself, LOL! That is why you have to disable all of it and immediately try to root the phone as soon as it boots up. Don't give it time to wake up!

Costum binary blocked by FRP lock

Hi All
I have an S7 Exynos with latest Magisk installed and everything has been working flawlessly till I decided this early morning, for not any particular reason(except my increasing amount of grey hair ), to lock the "developer options". I think I have done the same maybe a couple of years ago though cannot remember how I had solved it.
Obviously my phone was instantly locked.
Would someone be able to link a good working solution with being able to keep data and apps? I am a bit desperate as my work is starting again tomorrow.
Thanks a lot.
look at frp bypass
Costum binary blocked by FRP lock is a protection, whene you do a factory reset from recovery. the only way you get this message is with odin.
this one works for me on s7, s7 edge and s6 tab
Thanks @Dagobert
I will have a look at it now and see if it is not too scary. See my S7 FRP
kiwigi said:
deleted as repeated post
Click to expand...
Click to collapse
Do you have acces to the phone?
kiwigi said:
deleted as repeated post
Click to expand...
Click to collapse
If you have acces to the phone then backup your data do a factory reset. Then you can flash whatever you want. Frp lock is a google protection with a google account. Whene you do a factory reset from settings you wipe the frp.
What is Google FRP?
FAQ for Samsung Mobile Device. Find more about 'What is Google FRP?' with Samsung Support.
www.samsung.com
I have access to the phone via PC/Odin only. No booting as per image above. I wand to keep Data and Apps
I assume I have to flash stock with home csc to be able to enter the phone again? Then root again, if I so wish?
Yup. Maybee a long shot but try Flashing your former firmware with Odin, using HOME_CSC. I think thats the solution
More info on that in this topic
Help! How to flash without losing data?
Good day! My phone got stuck on breathing Samsung logo after my phone updates. Now the only option I have in mind is to restore factory data. But I have some important files in my phone that is very essential in my work. I know I have read that...
forum.xda-developers.com
hmm., done the flashing with the files plus home csc and it asks for password, which I have entered without success. I know the password and it justs does not accept it.
See the factory reset warning and the FRP lock still being on now.
I'm desperately trying to avoid wipping data and apps.
edit: unfortunately I had to format/reinstall as I could not find a workable option.

Categories

Resources