Database Users

Bounty) root + twrp.

I figured we needed a bounty thread to kick start development. Lets keep it clean and on topic. This device is killer for the price point and has an unlockable bootloader. We desire root and twrp for mods and custom roms which im positive will come in time.
Edit: i no longer have this device so im withdrawing my donation. Will keep the thread open for other members. I see root is here so i encourage the members to donate to the appropriate devs.

In for $20

Count me in for $20.

Count me in for 20 bucks too!

In for $20

$10.00

here is the root

DallasCZ said:
here is the root
Click to expand...
Click to collapse
@DallasCZ
Should create a root thread in the general section. With procedure and all the extras you posted in the other ”any root" thread. Just to get all the info together for someone to make a custom recovery and next ROMs hopefully.
Give some props to @frankee207 for finding the original root script also.

Romman0 said:
Give some props to @frankee207 for finding the original root script also.
Click to expand...
Click to collapse
Thanks, I'm happy to contribute ! Hoping the best for our phones !

will create the root thread.. tomorrow

Where do we send our money?

dennygreen said:
Where do we send our money?
Click to expand...
Click to collapse
I don't know at all. Maybe you should contact @fix-this!
I don't know how bounty threads on XDA usually work

dennygreen said:
Where do we send our money?
Click to expand...
Click to collapse
I would think you send it to the person that completes the task. Probably their PayPal email. If its split between 2 or more people, split the donation pledged.

Romman0 said:
I would think you send it to the person that completes the task. Probably their PayPal email. If its split between 2 or more people, split the donation pledged.
Click to expand...
Click to collapse
Will probably be a 2 or 3 person split if you consider 1 person found the info used to get root, another took that info and changed it to fit our device and a 3rd mystery person will provide TWRP (eventually).

DallasCZ said:
here is the root
Click to expand...
Click to collapse
Anyone try this yet? Is it a temp root or a perm root?

izzy001 said:
Anyone try this yet? Is it a temp root or a perm root?
Click to expand...
Click to collapse
Quite a few people have tried it with success, myself included. Check out this page and onward.
http://forum.xda-developers.com/idol-3/help/root-ability-phone-t3116179/page26
It is perma-root. Until you unroot via SuperSU, that is. Or factory reset.

It works. Adb booted the boot.img from bootloader like the windows commands in the root.bat from linux. No problems at all.

First complete guide with working TWRP and root on Idol 3 4.7" (6039Y) was written by me. See post #172 in [Q] Any root ability on this phone yet? topic.
In the matter of Idol 3 5.5" (6045Y) i think frankee207 deserved reward for finding TCL 3S M3G rooting method (see post). In TCL3S M3G root-20150524.exe, that he find, there is a boot.img with CF-Auto-Root from Chainfire and rec.bat file. DallasCZ only rewrited this .bat in english (in original it's chineese) and was write a guide. Without TCL3S M3G root-20150524.exe founded by frankee207 all of this would be impossible.

Decker.Kaluga said:
First complete guide with working TWRP and root on Idol 3 4.7" (6039Y) was written by me. See post #172 in [Q] Any root ability on this phone yet? topic.
In the matter of Idol 3 5.5" (6045Y) i think frankee207 deserved reward for finding TCL 3S M3G rooting method (see post). In TCL3S M3G root-20150524.exe, that he find, there is a boot.img with CF-Auto-Root from Chainfire and rec.bat file. DallasCZ only rewrited this .bat in english (in original it's chineese) and was write a guide. Without TCL3S M3G root-20150524.exe founded by frankee207 all of this would be impossible.
Click to expand...
Click to collapse
Agreed. Now that @Unjustified Dev compiled a working twrp for the 5.5" idol and we have root, unlocked bootloader and twrp now. Bounty should be spread around amongst them all. Have everything for development now. Nice.
http://forum.xda-developers.com/idol-3/development/twrp-custom-recovery-idol3-6045-t3162608
My idol is the wife's so I'm not going to to be flashing anything as of yet as it is running great out of box. I would like to see this phone on CM12.1 (or other 5.1 ROM) to see how 5.1 and the heating and battery do.

I'm still good to drop $20....

What is needed to port / build TWRP?

I'm not a Dev. (I wish i was one) but what to we need to build or port TWRP to our devices?
I manage to capture this screen while trying to figure out why i wasn't able to flash the boot_OTA from @jkuczera thread and i don't know if this can help. It has the " RECOVERY FileSystem Table ".

How to compile / Port TWRP
DrakenFX said:
I'm not a Dev. (I wish i was one) but what to we need to build or port TWRP to our devices?
I manage to capture this screen while trying to figure out why i wasn't able to flash the boot_OTA from @jkuczera thread and i don't know if this can help. It has the " RECOVERY FileSystem Table ".
Click to expand...
Click to collapse
The TWRP team cannot afford to buy every device made. However, TWRP is fully open source, so you may begin the porting process by using the compile guide at: http://forum.xda-developers.com/showthread.php?p=32965365
Although you may be able to compile it, testing is another matter. You will need a stock recovery image to revert to when your TWRP doesn't work properly.

I have received a request and will begin porting it today, I'll need someone with an unlocked bootloader to join #twrp between 1 pm and 2 am EST for testing.
I'm still having trouble finding stock firmware, however. I may be able to get around this, I'll also see about making a full factory firmware fastboot flashable.

jcadduono said:
I have received a request and will begin porting it today, I'll need someone with an unlocked bootloader to join #twrp between 1 pm and 2 am EST for testing.
I'm still having trouble finding stock firmware, however. I may be able to get around this, I'll also see about making a full factory firmware fastboot flashable.
Click to expand...
Click to collapse
Thank you!!!!

jcadduono said:
I have received a request and will begin porting it today, I'll need someone with an unlocked bootloader to join #twrp between 1 pm and 2 am EST for testing.
I'm still having trouble finding stock firmware, however. I may be able to get around this, I'll also see about making a full factory firmware fastboot flashable.
Click to expand...
Click to collapse
Thank you!
Hopefully someone with an unlocked bootloader can be available; some of us (myself included) won't receive our phones until this week.

Thank you

jcadduono said:
I have received a request and will begin porting it today, I'll need someone with an unlocked bootloader to join #twrp between 1 pm and 2 am EST for testing..
Click to expand...
Click to collapse
If it helps, the kernel source is available.
http://download.ztedevice.com/device/global/support/opensource/2/20160801_1/P996A01_B18_kernel.tar.gz
And just in case that link doesn't work for some reason, it's at: http://opensource.ztedevice.com/ under Smart Phones -> ZTE A2017U Marshmallow Kernel(3.18.x)

Also, the Chinese stock rom is available, this thread has more info: http://forum.xda-developers.com/axon-7/development/axon-7-chinese-stock-roms-t3436817
Be warned, takes forever to download... Took me almost 2 hours to complete it.

I have an unlocked Axon 7. Let me know if there's anything I can do to help, so long as it won't ruin the phone. I'm reasonably comfortable flashing software and such.

daneoleary said:
I have an unlocked Axon 7. Let me know if there's anything I can do to help, so long as it won't ruin the phone. I'm reasonably comfortable flashing software and such.
Click to expand...
Click to collapse
Thanks to a friend/old pal @Unjustified Dev we are going to have a early xmas. check link below
http://forum.xda-developers.com/showpost.php?p=68191213&postcount=122

jcadduono said:
I have received a request and will begin porting it today, I'll need someone with an unlocked bootloader to join #twrp between 1 pm and 2 am EST for testing.
I'm still having trouble finding stock firmware, however. I may be able to get around this, I'll also see about making a full factory firmware fastboot flashable.
Click to expand...
Click to collapse
If you still need a tester I can set my alarm

daneoleary said:
I have an unlocked Axon 7. Let me know if there's anything I can do to help, so long as it won't ruin the phone. I'm reasonably comfortable flashing software and such.
Click to expand...
Click to collapse
jkuczera said:
If you still need a tester I can set my alarm
Click to expand...
Click to collapse
Well, if no one joins #twrp it's effectively not volunteering - so far no one has.
(it could go weeks without anyone joining, so please, step up if you can)
goalkeepr said:
If it helps, the kernel source is available.
http://download.ztedevice.com/device/global/support/opensource/2/20160801_1/P996A01_B18_kernel.tar.gz
And just in case that link doesn't work for some reason, it's at: http://opensource.ztedevice.com/ under Smart Phones -> ZTE A2017U Marshmallow Kernel(3.18.x)
Click to expand...
Click to collapse
Already got that, merged it into the CAF branch and updated it as well!
https://github.com/jcadduono/android_kernel_zte_msm8996/commits/stock-6.0
I think ZTE deserves an award here, as they used almost pure CAF and very up to date! (I only had to merge like 8 commits to be current)

DrakenFX said:
Thanks to a friend/old pal @Unjustified Dev we are going to have a early xmas. check link below
http://forum.xda-developers.com/showpost.php?p=68191213&postcount=122
Click to expand...
Click to collapse
Nice can't wait.

How do I join #TWRP? The hashtag doesn't really tell me much.

Axon 7 sub-reddit has a guy with a pic of TWRP on his Axon 7

daneoleary said:
I have an unlocked Axon 7. Let me know if there's anything I can do to help, so long as it won't ruin the phone. I'm reasonably comfortable flashing software and such.
Click to expand...
Click to collapse
budderocks said:
Axon 7 sub-reddit has a guy with a pic of TWRP on his Axon 7
Click to expand...
Click to collapse
that's me holding it,
http://forum.xda-developers.com/showpost.php?p=68191213&postcount=122

here go play with this for a while <link removed until further testing is done, yes i still need someone to join #twrp>
USE WITH CAUTION
probably got a few bugs, been trying to figure out the crypto so you guys can have working encrypted data, but ahhhhhhh well
mr. jkuczera was nice enough to swing by and flash it and let me know it boots, as well as provide me with some dd's so...
heres some STOCK fastboot flashables 4 funsies: https://idlekernel.com/flash-tools/firmware/ailsa_ii_A2017U/B20/
have fun
sources: https://github.com/jcadduono/android_device_zte_ailsa_ii
kernel: https://github.com/jcadduono/android_kernel_zte_msm8996/commits/twrp-6.0

I salute all the brave soul beta testing without a USA stock image available.

jcadduono said:
here go play with this for a while https://idlekernel.com/twrp/a2017/twrp-3.0.2-0-b3-ailsa_ii.img
USE WITH CAUTION
probably got a few bugs, been trying to figure out the crypto so you guys can have working encrypted data, but ahhhhhhh well
mr. jkuczera was nice enough to swing by and flash it and let me know it boots, as well as provide me with some dd's so...
heres some STOCK fastboot flashables 4 funsies: https://idlekernel.com/flash-tools/firmware/ailsa_ii_A2017U/B20/
have fun
sources: https://github.com/jcadduono/android_device_zte_ailsa_ii
kernel: https://github.com/jcadduono/android_kernel_zte_msm8996/commits/twrp-6.0
Click to expand...
Click to collapse
Thank you for all of your help!

anks329 said:
Also, the Chinese stock rom is available, this thread has more info: http://forum.xda-developers.com/axon-7/development/axon-7-chinese-stock-roms-t3436817
Be warned, takes forever to download... Took me almost 2 hours to complete it.
Click to expand...
Click to collapse
I uploaded all of them to MEGA now so that people don't have to endure the horror that is Baidu.

How About Root?

I know it is still early, but any ideas how to get root?
I just tried the following method without success (check details in the original thread: http://forum.xda-developers.com/android/development/intel-android-devices-root-temp-cwm-t2975096)
maybe someone else might try it, to double check.
furthermore, I'm hoping to get an answer from the author / developer if it might be possible in the future.

ok, seems like the method above is outdated!

Hey guys.
And what's about this?
http://arstechnica.com/security/201...ed-by-most-serious-linux-escalation-bug-ever/
Where do we get this tool. Great and easy!

arohrmann said:
Hey guys.
And what's about this?
http://arstechnica.com/security/201...ed-by-most-serious-linux-escalation-bug-ever/
Where do we get this tool. Great and easy!
Click to expand...
Click to collapse
looks promising, but don't think it is so easy. take a look here:
http://forum.xda-developers.com/general/security/dirty-cow-t3484879
people there are already working on it, but run into problems

Dirty c0w and INTEL
danjac said:
looks promising, but don't think it is so easy. take a look here:
http://forum.xda-developers.com/general/security/dirty-cow-t3484879
people there are already working on it, but run into problems
Click to expand...
Click to collapse
To whom it may concern (my English is not so good you should just try to get the meaning from the context )
I don't think this is a valid way for the Yoga Book. I compiled the dirty cow Exploit for the Yoga Book but it does not work. I used this code to execute it on the Yoga Book : https://github.com/timwr/CVE-2016-5195/blob/master/dirtycow.c .However this does not work on the Yoga Book : It will either not trigger the expected result to be able to overwrite an RO file or the yoga book just reboots.
There are a couple of developers also confirming that the existing android dirty c0w exploit code does not work on their intel tablets.
So we need somebody with more skills to modify the exploit c code for the intel tablets or another exploit. .....
If somebody has a link to an intel exploit I will test that.

reiter123 said:
To whom it may concern (my English is not so good you should just try to get the meaning from the context )
I don't think this is a valid way for the Yoga Book. I compiled the dirty cow Exploit for the Yoga Book but it does not work. I used this code to execute it on the Yoga Book : https://github.com/timwr/CVE-2016-5195/blob/master/dirtycow.c .However this does not work on the Yoga Book : It will either not trigger the expected result to be able to overwrite an RO file or the yoga book just reboots.
There are a couple of developers also confirming that the existing android dirty c0w exploit code does not work on their intel tablets.
So we need somebody with more skills to modify the exploit c code for the intel tablets or another exploit. .....
If somebody has a link to an intel exploit I will test that.
Click to expand...
Click to collapse
does anyone know if it is possible to dump the bootloader and or recovery without root access?
it would greatly help to build a custom rom.
i was searching a lot but couldn't find an answer or a way how to do it.
or is there any other source out there, where we could get a full stock rom???

Ok, now that I got hands on a flashable stock rom update with the images of recovery and boot partition I 'dare' to port cwm. Honestly, I've never done sth like that and my experiences are litte, so my hopes are actually low.
If anyone can and/or would like to help, this would be highly appreciated.
If it works, it will definitely take its time.
Hope for the the best and plan for the worst.
Cheers

danjac said:
Ok, now that I got hands on a flashable stock rom update with the images of recovery and boot partition I 'dare' to port cwm. Honestly, I've never done sth like that and my experiences are litte, so my hopes are actually low.
If anyone can and/or would like to help, this would be highly appreciated.
If it works, it will definitely take its time.
Hope for the the best and plan for the worst.
Cheers
Click to expand...
Click to collapse
Good Luck and Thanks!

... is there anyone rooted this Tablet?
Sent from my XT1580 using XDA-Developers mobile app

arohrmann said:
... is there anyone rooted this Tablet?
Sent from my XT1580 using XDA-Developers mobile app
Click to expand...
Click to collapse
Not yet that I've seen....

hey there,
looks like I got TWRP working. It's definitely an amateur's work and I'm still not sure if everything works as expected, but so far it looks quite promising.
By now I was able to to backup and restore.
At the moment I'm trying to flash su - but without luck so far, it either hangs with a black screen when booting or root isn't installed properly.
So, I will play around with it for a while and report back soon.
Keep your fingers crossed.

danjac said:
hey there,
looks like I got TWRP working. It's definitely an amateur's work and I'm still not sure if everything works as expected, but so far it looks quite promising.
By now I was able to to backup and restore.
At the moment I'm trying to flash su - but without luck so far, it either hangs with a black screen when booting or root isn't installed properly.
So, I will play around with it for a while and report back soon.
Keep your fingers crossed.
Click to expand...
Click to collapse
Waiting for the good news ~
---------- Post added at 07:06 PM ---------- Previous post was at 06:24 PM ----------
danjac said:
Ok, now that I got hands on a flashable stock rom update with the images of recovery and boot partition I 'dare' to port cwm. Honestly, I've never done sth like that and my experiences are litte, so my hopes are actually low.
If anyone can and/or would like to help, this would be highly appreciated.
If it works, it will definitely take its time.
Hope for the the best and plan for the worst.
Cheers
Click to expand...
Click to collapse
Can you share the stock rom to me ? Plz

danjac said:
Ok, now that I got hands on a flashable stock rom update with the images of recovery and boot partition I 'dare' to port cwm. Honestly, I've never done sth like that and my experiences are litte, so my hopes are actually low.
If anyone can and/or would like to help, this would be highly appreciated.
If it works, it will definitely take its time.
Hope for the the best and plan for the worst.
Cheers
Click to expand...
Click to collapse
it's not cwm but twrp instead...see new thread

Latest Guide on Rooting ZTE AXON 7

I really need help with rooting my ZTE Axon 7. I am on the latest software update and on Android 7.1.1. I would like to root my phone but I don't know where to get started or what to do exactly. Can someone please help me and send links or downloads to help me root my device? Thank you

You can't be serious? There are so many guides here on XDA and you ask such a question?

marcus.linkenbach said:
You can't be serious? There are so many guides here on XDA and you ask such a question?
Click to expand...
Click to collapse
Could you please just help i'm kind of a noob at this and i just don't know how to follow the latest method to root it.

RMSmoorenburg said:
Could you please just help i'm kind of a noob at this and i just don't know how to follow the latest method to root it.
Click to expand...
Click to collapse
Actually it's not that simple...
You don't get to come here and ask for all of the work to be done for you. Otherwise it happens like with the Galaxy Grand 2, where the phone had a very good dev community but noobs with no interest on spending some time just ruined it to the point that literally only a couple of devs stayed and released CM14.
Also if you ask for someone to send you the exact guides that you need, you'll probably not read anything, and you'll get a beautiful DFU brick...
Do this: First do your homework. Memorize the model on the back of your phone, see if the software model matches the one on the back. As a tip, there are 3 models, the A2017, the A2017G and the A2017U. If you use a file that's not for your model you can start saying goodbye to your brick, or else you'll probably be days trying to fix it (or months like some people). Look at the problems that may come up when rooting and see the way to avoid those. Then look for a guide that suits your model. Download all the files, ensure that all of them work (you'll need Windows on a 64-bit PC), and THEN proceed.
If you have any doubts you can PM me or maybe the maker of the guide, but at least try to do something for yourself! I read more than 10 pages on the guide that I used just to see the problems that may arise and stuff like that. You also should be able to do that. And if you aren't, it's best that you don't try. This is not a Nexus device for you to write 'fastboot oem unlock' and basically finish unlocking the bootloader, this is MUCH more serious...

Use my toolkit: https://forum.xda-developers.com/axon-7/development/tool-axon7toolkit-t3573108
No need for any guides
Just make sure you read all the main posts as there a couple snags

getting bootloader code hash?

Hi,
Since Huawei closed giving away bootloader codes,
and I've blowed 60 USD on dc unlocker,
is there a way to get the bootloader code hash to decrypt it with hashcat, for example?
Best Regards,
Aleksander

Don't know about that but do you want to unlock your bootloader?

BeachCabana said:
Don't know about that but do you want to unlock your bootloader?
Click to expand...
Click to collapse
Yes but don't know how to get the bootloader code

Downgrade as low as possible and give it a try.
haexhub/huaweiBootloaderHack: Huawei-unlock-bootloader (github.com)
Edit:
First Download This -> SkyEmie/huawei-honor-unlock-bootloader: A simple tool for managing Huawei/Honor devices to unlock bootloader (github.com)
then grab unlock.py from haexhub and replace it. Then its a 'All-in-One Package' - no need to install anything.

aLcaTr4z said:
Downgrade as low as possible and give it a try.
haexhub/huaweiBootloaderHack: Huawei-unlock-bootloader (github.com)
Edit:
First Download This -> SkyEmie/huawei-honor-unlock-bootloader: A simple tool for managing Huawei/Honor devices to unlock bootloader (github.com)
then grab unlock.py from haexhub and replace it. Then its a 'All-in-One Package' - no need to install anything.
Click to expand...
Click to collapse
THANKS A LOT M8!!!!!!!!!!!
I've started the program but i am just curious how many different codes/how many attempts can there be in total?

Thats a good question, im sure u can find the answer in one of the 2 repos. One is endless (pure bruteforce) vs IMEI + HASH.
I'm still too lazy to Downgrade my Phone to give it a try (with out rebooting every 4 attempts), because no clue if its worth all the effort, as Huawei modding / hacking seems like almost dead.

aLcaTr4z said:
Thats a good question, im sure u can find the answer in one of the 2 repos. One is endless (pure bruteforce) vs IMEI + HASH.
I'm still too lazy to Downgrade my Phone to give it a try (with out rebooting every 4 attempts), because no clue if its worth all the effort, as Huawei modding / hacking seems like almost dead.
Click to expand...
Click to collapse
Ok thanks I've started the brute force the day same as u shared the github links and it's still on attempt around 97k so I'am still trying...
But do u know if it's possible to copy the WHOLE boot partition without unlocking bootloader?

Oh wow! Didnt expect that it might take this long.
And no, sorry. But i doubt that its possible, otherwise some sneaky hackers would found that gloryhole already.

aLcaTr4z said:
Oh wow! Didnt expect that it might take this long.
And no, sorry. But i doubt that its possible, otherwise some sneaky hackers would found that gloryhole already.
Click to expand...
Click to collapse
but do u know if there's another way to unlock my bootloader for free and not bruce forcing?

Only Paid atm, and only P20(Pro).

There is free method, your devices are on the list and can be unlocked. See my post.

hardcorehenry said:
There is free method, your devices are on the list and can be unlocked. See my post.
Click to expand...
Click to collapse
But is ur method not the same to the another suggested from?
aLcaTr4z said:
Downgrade as low as possible and give it a try.
haexhub/huaweiBootloaderHack: Huawei-unlock-bootloader (github.com)
Edit:
First Download This -> SkyEmie/huawei-honor-unlock-bootloader: A simple tool for managing Huawei/Honor devices to unlock bootloader (github.com)
then grab unlock.py from haexhub and replace it. Then its a 'All-in-One Package' - no need to install anything.
Click to expand...
Click to collapse

Pinguudroid said:
But is ur method not the same to the another suggested from?
Click to expand...
Click to collapse
This is something completely different, I guess you didn’t check links to helpful topics, so I’m attaching them again: first and second.

but I am running linux
kinda rip

Pinguudroid said:
but I am running linux
kinda rip
Click to expand...
Click to collapse
hardcorehenry said:
This is something completely different, I guess you didn’t check links to helpful topics, so I’m attaching them again: first and second.
Click to expand...
Click to collapse

I have just successfully unlocked the bootloader lock by the Taobao service CNY30. It is done by PC remote control. My P10 phone (VTR-AL00) was firstly downgraded from my EMUI 9.1 to EMUI 5. Then the operation was very fast (ROM firmware loading time was long) & I can't see clearly. At last it was successfully unlocked & the guy gave me the unlock code also. If you guys want to do this, you need to ask a friend who know Chinese writing to chat on the net. Then I upgraded the phone using Huawei official upgrade from the phone to EMUI 9.0. Then I flashed the openkirin ROMs successfully. I've tried all four ROMs (RR, OMNI, AOSP, AEX). All of them have some bugs. One important one is the phone can't be charged when powered off. It will go to bootloader mode when plugged with the charging cable. You need to charge when the phone is on.

Install testpoint drivers ( https://files.dc-unlocker.com/share.html?v=share/18B15B9D02C945A79B1967234CECB423 - these worked for my p10 lite), enter download mode via testpoints then use PotatoNV - https://github.com/mashed-potatoes/PotatoNV , i just did this two days ago then installed twrp and rooted with magisk, fairly simple and insanely useful, only drawback is you need to open up your phone back cover to do it. Works without downgrading on Emui 8

THANKS GUYS FOR ALL YOUR HELP AND SUPPORT <3
I've succesfully opened my phone with dc unlocker

You may want to try the testpoint method. Worked like charm for me. Check potatonv git and YouTube..

Once we find the code, bootlocker unlocking factory reset it?