[Droid RAZR M General] ATTACK:
////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

FAQ

////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

MOTOROLA PATCHED THE FAKEID, FUTEX & TRUST ZONE EXPLOITS ON THE 182/183.46.15 RAZR M FIRMWARE & THE .10 MOTO LUGE FIRMWARE.

AS OF NOW, THERE IS

NO

KNOWN BOOTLOADER UNLOCK EXPLOIT FOR THE 182 / 183.46.15 RAZR M FIRMWARE OR THE .10 MOTO LUGE FIRMWARE.

----------------------------------------------------------------------------------

IMPORTANT

----------------------------------------------------------------------------------

If your device is on stock Jelly Bean 4.1.2 firmware, you have the JB Bootloader (JBBL) - If your device is on stock KitKat 4.4.2 firmware, you have the KK Bootloader (KKBL)

Once your bootloader is unlocked, it

can not

be re-locked - Say goodbye to any warranties you may have.

Once your bootloader is unlocked, you can accept any and all firmware updates.

Once your bootloader is unlocked, you can flash any and all Razr M / Moto Luge firmware.

In order to receive and install System Updates you will need to be using 100% stock untouched firmware. (Stock system & recovery)

You

can not

downgrade with a locked bootloader. You can only flash current or updated firmware.

-----------------------------------------------------------------------------------

UNLOCKING THE BOOTLOADER ALLOWS YOU TO

-----------------------------------------------------------------------------------

Use a custom recovery and make NANDroid back-ups.

Root your device by flashing Superuser through a custom recovery. - No exploits needed

Deodexed your system and use custom themes/mods.

Use custom ROMs/Firmware..

Downgrade firmware.

Use custom kernels.

Move updated system apps back to the system partition which saves user space.

Use and modify your device anyway you want.

////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

REQUIREMENTS

////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

Motorola Device Manager installed [DOWNLOAD] - This insures that you have all the proper drivers installed

Stock KitKat firmware

Windows PC or Laptop

OEM USB cable

USB 2.0 port

////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

EXTRAS

////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

----------------------------------------------------------------------------------

MFASTBOOT SETUP

----------------------------------------------------------------------------------

For easy use

Windows Set-Up

Mfastboot does work with both Linux & Mac

Download Mfastboot [MIRROR]

Extract contents into a folder and place it into your Local Disk (C:)

[COLOR="Red"]Example[/COLOR] - [I]C:/ANDROID/Mfastboot[/I]

Open start menu and type CMD

Right click on CMD > select copy

Paste into Mfastboot folder

Finished

----------------------------------------------------------------------------------

BOOTING OPTIONS

----------------------------------------------------------------------------------

Once rooted, you can use a app like Quick Boot to perform these actions.

Reboot

Power + Volume Down

Reboot AP Fastboot

During [COLOR="Blue"]Reboot[/COLOR] > press and hold Volume Down

Reboot Recovery

During [COLOR="blue"]Reboot[/COLOR] > press and hold Volume Up

Bootloader Menu

During [COLOR="blue"]Reboot[/COLOR] > press and hold Volume Up + Down

----------------------------------------------------------------------------------

DEBLOAT LIST

----------------------------------------------------------------------------------

MUST HAVE ROOT

These apps (APK/ODEX) are safe to delete, freeze or rename.

SYSTEM > APP

3c_main.apk
Amazon_Audible.apk
Amazon_IMDb.apk
Amazon_Mobile.apk
Amazon_mp3.apk
Amazon_zappos.apk
Amazon_Zipaligned.apk
atfwd.apk (Wireless Display - Razr M/HD doesn't support wireless display)
BasicDreams.apk
Books.apk
Bug2GoStub.apk
com.gotv.nflgamecenter.us.lite.apk
com.motorola.android.nativedropboxagent.apk
com.motorola.android.settings.diag_mdlog.apk
Facebook.apk
FaceLock.apk
FastDormancy.apk (CDMA, unsure about GSM)
Galaxy4.apk
GoogleEars.apk
GoogleEarth.apk
GooglePinyinIme.apk
HoloSpiralWallpaper.apk
HotspotLauncher.apk
HPLegacyPlugin.apk
Kindle.apk
LiveWallpapers.apk
Magazines.apk
MagicSmokeWallpapers.apk
ModemStatsService.apk
MotionTrigger.apk (SmartActions Requirement)
MotVzwLocationService.apk
PhaseBeam.apk
PlayGames.apk
PlusOne.apk
ProgramMenu.apk
ProgramMenuSystem.apk
Protips.apk
Quickoffice.apk (Abandon by Google)
SlackerRadio.apk
Street.apk
Videos.apk
VisualizationWallpapers.apk
VMwareReady.apk (Corprate Crapware)
VSuiteApp.apk
vznavigator.apk
VZWAPNLib.apk
vzwapnpermission.apk
VZWAPNService.apk
VzwSystemUiExt.apk
YouTube.apk
Zap.apk

SYSTEM > PRIV-APP

3c_checkin.apk
3c_devicemanagement.apk
3c_notification.apk
3c_ota.apk
3c_sso.apk
Amazon_Appstore.apk
android-syncservice-app.apk
cce.apk
CircleWidget3D.apk
Cmas.apk
DemoMode.apk
Favorites.apk
FileManager.apk
GuideMe.apk
HomeConfig.apk ([COLOR="Red"]Need a Home Launcher installed before removing[/COLOR])
Homescreen.apk ([COLOR="Red"]Need a Home Launcher installed before removing[/COLOR])
IlsVzW.apk
LMIRescueSecurity.apk
LocalWipePolicyManager.apk
MotoCare.apk
MotoCareInt.apk
MotoDockHelperService.apk
MotoEmail.apk
NotificationTutorial.apk
QuickView.apk (Homescreen notification badge handler)
Setup.apk
SetupWizard.apk
SmartActionFW.apk
SmartActionMFW.apk
SmartActions.apk
SmartCarDock.apk
SmartDock.apk
VerizonSSOEngine.apk (Needed for MyVerizon data widget)
Vvm.apk
VzwCbsLoader.apk
VzwController.apk
VzwDeviceSetup.apk
VzwEntitlementService.apk
VZWPackageInstaller.apk
vzwPhoneExt.apk
VzwPhoneService.apk
VzwSecureSettings.apk
VzwSettingsExt.apk
Weather.apk (Needed by CircleWidget3D)
WapPushSI.apk

----------------------------------------------------------------------------------

MOTOROLA FIRMWARE LINKS

----------------------------------------------------------------------------------

> http://www.drdevs.com/devs/FXZ-files/

> http://drdevs.com/devs/FXZ-files/XT907 (Droid RAZR M)/

> http://motofirmware.center/files/category/24-scorpionmini-all-variants/

----------------------------------------------------------------------------------

EFS BACK-UP & RESTORE - USE THIS NOW!

----------------------------------------------------------------------------------

- Thanks to [MENTION=550835]rahimali[/MENTION] > http://goo.gl/IJuE9v

> Advanced backup and restore utility of your device's sensitive partition and NV data. - Created by lyriquidperfection

FEATURES:

Automatic detection and termination of SAMSUNG Kies application and ADB server instances on startup.

Backup and restore partition images to and from compressed archives (*.tar.gz format).

Detects backup archives automatically on the device and PC for hassle free restoring.

Device Filter support to help users identify which partitions are the important ones to backup.

Extract and read device's PIT file to ensure efficient and accurate backup and restore operations (Samsung devices only).

Check MD5 hash during backup and restore operations to verify integrity of data written.

Option to Format EFS to wipe all data and recreate partition.

Options to reset Battery Cable, SPen and Earphone Jack counters on supported Samsung devices.

Option to fix Samsung devices that are 'stuck' in Factory Mode with the on screen overlay.

Option to fix Samsung devices that have Lock Screen issues and missing Power Button Menu.

A full featured AT and QCDM Terminal for sending custom commands and/or bytes to the connected device.

Qualcomm device support allowing many new features such as backup and restore of the FULL NV Item range.

Generate ESN / MEID / IMEI in reversed HEX format for Qualcomm repair operations.

Read and write ESN / MEID / IMEI to and from Qualcomm devices and QPST 'QCN Backup' files.

Send Diagnostic Password (16 Digits Hex) to unlock secure operations.

Read / write / send SPC (Service Programming Code) on Qualcomm devices.

Read / write Lock Code on Qualcomm devices.

Skip NV items during backup based on a defined profile list to enable FULL backups.

Ability to backup a custom NV item range based on a user defined list.

Automatic detection and switching of USB settings when launching Qualcomm NV Tools.

Option to display various device, ROM and BusyBox related information at the click of a button.

Option to restore NV data from internal '*.bak' files if they exist to fix corrupt or incorrect IMEI number.

Option to repair NV data file ownership to fix 'Unknown baseband' and 'No signal' issues.

Supports backup and restore of 'fsg', 'fsc', 'backup' and other partitions that do not have a corresponding filename defined in the PIT file.

Enable / Disable 'HiddenMenu' on newer devices.

Launch PhoneUtil, UltraCfg and other built in hidden device menus straight from the application UI.

THREAD / DOWNLOAD:

> http://xdaforums.com/galaxy-s2/orig-development/tool-updated-09-06-14-efs-professional-t1308546

////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

GUIDES

////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

----------------------------------------------------------------------------------

1a. ROOT - Locked Bootloaders

----------------------------------------------------------------------------------

-------------------------------------------------------------

HYDROGEN PEROXIDE ROOT:

-------------------------------------------------------------

For locked bootloaders with a kernel build date after June 3, 2014

[B][I]Settings > About phone > Kernel version[/I][/B]

Created by HydrogenXS & SERG_GANGUBAS

Based on Giefroot by zxz0O0 / Team Keen

Video Tutorial and Instructions by [MENTION=4267571]sd_shadow[/MENTION] > http://xdaforums.com/droid-razr-m/general/root-droid-razr-m-xt907-183-46-15-t3137351

EXPLOIT SOURCES > http://xdaforums.com/showpost.php?p=58916587&postcount=

ROOT THREAD > http://xdaforums.com/droid-razr-m/general/root-droid-razr-m-xt907-183-46-15-t3137351 - sd_shadow's root thread.

-------------------------------------------------------------

TOWEL ROOT:

-------------------------------------------------------------

For locked bootloaders with a kernel build date before June 3, 2014

[B][I]Settings > About phone > Kernel version[/I][/B]

Download Towel Root [XDA] [WEBSITE]

Place on external SDcard

Install and run Towel Root

Follow any in-app prompts

Reboot

PROFIT!

----------------------------------------------------------------------------------

1b. ROOT - Unlocked Bootloaders

----------------------------------------------------------------------------------

Download and install a custom recovery (Instructions listed below - #3)

Download a Superuser flashable zip [SuperSU] [CWM Superuser]

Place on external SDcard

Enter Recovery

Flash Superuser.zip

Reboot

PROFIT!

----------------------------------------------------------------------------------

2. BOOTLOADER UNLOCKING

----------------------------------------------------------------------------------

KITKAT 182/183.46.

10

FIRMWARE ONLY.

WILL NOT WORK ON THE 182/183.46.

15

RAZR M FIRMWARE OR THE MOTO LUGE.

> Unlockable Firmware - xdaforums.com/showpost.php?p=57339009&postcount=2

--------------------------------------------

APK

--------------------------------------------

Download Towel Root [XDA] [WEBSITE] - Disregard if you have previously rooted using Towel Root

Download Motopocalypse [WEBSITE] [DOWNLOAD]

Place both on external SDcard

Install and run Towel Root

Follow any in-app prompts

Reboot

Install and run Motopocalypse

Follow any in-app prompts

Reboot

PROFIT!

--------------------------------------------

DESKTOP / PC

--------------------------------------------

Head to djrbliss' (Dan Rosenburg) website to read the instructions and download.

> http://vulnfactory.org/blog/2013/04/08/motorola-bootloader-unlocking/

If successful, you will see the Unlocked Bootloader Warning when you reboot your device

After unlocking your bootloader, you may want to remove the "Unlocked BootLoader Warning" screen (Image above).

You can do this by flashing a boot logo. Head to the link below to choose and flash either the stock or a custom boot logo.

Custom Boot Logos > http://xdaforums.com/droid-razr-m/themes-apps/themes-custom-boot-logos-t2824690

----------------------------------------------------------------------------------

3. CUSTOM RECOVERY

----------------------------------------------------------------------------------

MUST HAVE A UNLOCKED BOOTLOADER

Custom recoveries built and provided by dhacker29 & nobe1976

Download your choice of custom recovery, then proceed to installation.

[TWRP - XDA] [TWRP - DHACKER29][TWRP - DROIDRZR] [CWM - XDA]

[DOWNLOAD (MIRROR)]

XT907 KitKat compatible recoveries

TWRP

- TWRP - 2.7.1.0.img
- TWRP - 2.8.0.0.img
- TWRP - 2.8.1.0.img
- TWRP - 2.8.2.0.img
- TWRP - 2.8.3.0.img

CWM

- CWM - 6.0.4.9.img

-------------------------------------------------------------------------------------

INSTALLATION

-------------------------------------------------------------------------------------

-------------------------------

OPTION 1

-------------------------------

MUST HAVE A UNLOCKED BOOTLOADER

Download Mfastboot [MIRROR] - Refer to Mfastboot setup

Place recovery.img into mfastboot folder

Open CMD and [TYPE]

Replace >recovery-name< with the name of the recovery you downloaded. You my re-name the recovery.img to whatever you prefer. I re-named it to TWRPKK.img

mfastboot flash recovery [COLOR="Red"]>recovery-name<[/COLOR].img

Tap [ENTER]

When finished [TYPE]

mfastboot reboot

When you tap [ENTER] press and hold Volume Up (+) on your device until the phone boots into recovery to verify installation was successful

DONE!

-------------------------------

OPTION 2

-------------------------------

MUST HAVE A UNLOCKED BOOTLOADER

MUST HAVE ROOT

Download recovery

Place on external SD card

Download and install [Flashify] or [Rashr]

Follow in-app prompts

PROFIT!

----------------------------------------------------------------------------------

RECOVERY NOT WORKING?

----------------------------------------------------------------------------------

MUST HAVE ROOT

If the custom recovery isn't sticking, you will need to re-name recovery-from-boot.p

-------------------------------

OPTION 1

-------------------------------

Using a root explorer navigate to

/system/recovery-from-boot.p

Rename it to

recovery-from-boot.p[COLOR="RoyalBlue"].bak[/COLOR]

Reboot

Re-flash custom recovery

PROFIT!

-------------------------------

OPTION 2

-------------------------------

Manually in adb shell or Terminal Emulator

Open command prompt and [TYPE]

su

Tap [ENTER] then [TYPE]

mv /system/recovery-from-boot.p /system/recovery-from-boot.p.bak

Reboot

Re-flash custom recovery

PROFIT!

----------------------------------------------------------------------------------

4. RESTORING / UPGRADING STOCK FIRMWARE

----------------------------------------------------------------------------------

If you are having difficulties with RSD Lite, Please try one of these two programs.

Both are alternatives to RSD Lite.

House of Moto

http://www.droidrzr.com/index.php/topic/28162-house-of-moto-32/

RSD Flasher

http://www.droidrzr.com/index.php/topic/48904-rsd-flasher-beta-windows-only/

> If upgrading - be sure to flash the KDA20.62-10.1 firmware, so you could unlock your bootloader.

-------------------------------

OPTION 1

-------------------------------

Restoring/Upgrading with RSD Lite

Download current or updated firmware

[Moto Firmware Link #1]

[Moto Firmware Link #2]

[Alternative Download (4.4.2 KDA20.62-10.1)] - Thanks to [MENTION=550835]rahimali[/MENTION]

Download RSD Lite [MIRROR] [GOOGLE]

Install and run RSD Lite

Boot Device into AP Fastboot - Refer to Booting Options

Connect your device via OEM USB cable in a USB 2.0 port

Select the [3 dot button] [...]

Navigate and select the downloaded firmware zip and click [OPEN].

Select [Decompress And Start Flashing].

When finished, reboot.

DONE!

-------------------------------

OPTION 2

-------------------------------

DO NOT UPGRADE WITH MFASTBOOT

Restoring with Mfastboot

Download current firmware [DOWNLOAD]

Download Mfastboot [MIRROR] - Refer to Mfastboot setup

Open the zip and extract these files to your Mfastboot folder

NON-HLOS.bin
system.img
boot.img
recovery.img [COLOR="Red"](OPTIONAL)[/COLOR]

Boot your device into AP Fastboot - Refer to Boot Options

Connect your device with the OEM USB cable in a USB 2.0 port

Open CMD and [TYPE]

mfastboot flash modem NON-HLOS.bin

Tap [ENTER]

When finished [TYPE]

mfastboot erase modemst1

Tap [ENTER]

When finished [TYPE]

mfastboot erase modemst2

Tap [ENTER]

When finished [TYPE]

mfastboot flash system system.img

Tap [ENTER]

When finished [TYPE]

mfastboot flash boot boot.img

Tap [ENTER]

When finished [TYPE] (OPTIONAL)

mfastboot flash recovery recovery.img

Tap [ENTER]

When finished [TYPE]

fastboot erase cache

Tap [ENTER]

When finished [TYPE] (OPTIONAL)

fastboot erase userdata

Tap [ENTER]

When finished [TYPE]

mfastboot reboot

Tap [ENTER]

PROFIT!

----------------------------------------------------------------------------------

5. DEODEXING

----------------------------------------------------------------------------------

MUST HAVE A UNLOCKED BOOTLOADER

MUST HAVE CUSTOM RECOVERY

Deodexing is basically repackaging of these APKs in a certain way, such that they are reassembled into classes.dex files. By doing that, all pieces of an application package are put together back in one place, thus eliminating the worry of a modified APK conflicting with some separate odexed parts.

So, Deodexed ROMs (or APKs) have all their application packages put back together in one place, allowing for easy modification such as theming. Since no pieces of code are coming from any external location, custom ROMs or APKs are always deodexed to ensure integrity. - R_a_z_v_a_n

--------------------------------------------------

DOWNLOAD - KitKat_Deodexer

--------------------------------------------------

Extract the contents of the Kitkat_Deodexer.rar to your PC

Plug in your device

Ensure that USB debugging is enabled

Settings > Developer options > USB debugging

Dont see developer options?

Settings > About phone > Tap "Build number" 7 times

Run main.bat

[TYPE 1] and tap [ENTER] - to create a working directory

[TYPE 2] and tap [ENTER] - to pull the System files for deodexing

When finished, [TYPE 3] and tap [ENTER] - to start deodexing

When finished, [TYPE 4] and tap [ENTER] - to create a flashable zip

Move [deodex_install.zip] to your external SD card

Unplug your device

Enter Recovery

Flash [deodex_install.zip]

Reboot

PROFIT!

----------------------------------------------------------------------------------

6. VZW HOTSPOT / WIRELESS TETHER HACK

----------------------------------------------------------------------------------

MUST HAVE ROOT

Thanks to Topsnake for the Mod [THREAD]

-----------------------------

STEP 1

-----------------------------

Using any [ROOT EXPLORER]

Navigate to

/ system / priv-app

Look for and delete (or rename)

VzwEntitlementService.apk
VZWEntitlementService.odex

Continue to step 2

-----------------------------

STEP 2

-----------------------------

Using a Root Explorer or Build.Prop editor

Navigate to

/ system / Build.Prop

Open in text editor and add to the bottom

ro.mot.tether_dun_required=0
ro.tether.denied=false
net.tethering.noprovisioning=true

Save and close

Reboot

PROFIT!

----------------------------------------------------------------------------------

7. DISABLING THE OTA POP-UP

----------------------------------------------------------------------------------

MUST HAVE ROOT

Using any [ROOT EXPLORER]

Navigate to

/ system / priv-app

Delete or rename

3c_ota.apk

Reboot

PROFIT!

----------------------------------------------------------------------------------

8. STUCK IN AP FASTBOOT

----------------------------------------------------------------------------------

Motorola uses the command fb_mode_set to insure that your device will reboot into AP fastboot to avoid any problems while flashing firmware.

To clear this we need to do the following:

While in AP fastboot, connect your device to your PC

Open mfastboot then [TYPE]

fastboot oem fb_mode_clear

Tap [ENTER]

When finished [TYPE]

mfastboot reboot

Tap [ENTER]

PROFIT!

////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

LINKS

////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

[INDEX] Motorola Droid Razr M (2015)

[HELP THREAD][Motorola Droid Razr M] Ask ANY Question. Noob Friendly

Motorola Official Change Log

[How-To][Tutorial] Downgrade Kit Kat 4.4.2 to JB 4.1.2

[KK] Add external SD Card writing for all apps

[DUMP][DEV][xt907] 4.4.2 OTA Partition Dump

[WORKAROUND] Access hidden settings menus

[MOD][4.4.2] Native Tether Exploit for XT907 Build 183.46.10/ Build 182.46.10

[HowTo] [VZW XT907/926 RAZR M/HD] Unlock US GSM Carriers Using RadioComm

[THEMES] Custom Boot Logos

[INDEX] Motorola USB Drivers, RSD Lite, Firmware Links & More

Universal ADB Drivers

--------------------------------------------------------------------------------------------------------------------------------------------

Did I miss something? Do you want me to add something? Let me know so I can add it to the guide/FAQ.

[*]This thread has been designed to be viewed on a Desktop and in XDA's 2015 layout. (looks terrible in Tapatalk)

[*]Being a Recognized Themer here at XDA, I have a ad-free template. So the thread layout may look different to me then for you. So, if you need me to adjust something, please let me know.