yashsingh1/xdaforums huggingface dataset:
[ZTE Z7, Z7 Max, Z7 Mini] Angelbeats91:
There is a seller who gives you an unlock code for ony $1.89 dollars at ebay, guess i can't post that link here so i cant help you with that, but use those words at ebay: ZTE MAVEN Z812 Unlock Code for At&t USA
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
any progress on root?
[ZTE Z7, Z7 Max, Z7 Mini] allenvoss62:
Nothing yet
[ZTE Z7, Z7 Max, Z7 Mini] loner.:
From at&t website:

Solved

lizdance40

Nov 23, 2015 11:09:38 AM

ACE - Master

If you mean carrier unlock, yes, you can do that for use with foreign SIM cards while traveling.

The bootloader is locked by Samsung and they will not unlock it for you.

Carrier versions are also encrypted and can't be altered.

https://forums.att.com/t5/Samsung-Discussion-Support/bootloader-unlock/m-p/4289639#M7204
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
samsung has nothing to do with our phone. the biggest thing we need to create a signed root zip upgrade file or at least a signed custom recovery upgrade file
[ZTE Z7, Z7 Max, Z7 Mini] loner.:
I know Samsung has nothing to do with our phone, DUH. If you can't read the whole thing then maybe you need one.

---------- Post added at 11:30 PM ---------- Previous post was at 11:14 PM ----------

If the carriers are encrypting their bootloaders, then only they can unlock it unless you just want to brick your phone.
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
I don't think it is actually encrypted, i think it is a weird zte bootloader that does not work the same way as the vanilla bootloader
[ZTE Z7, Z7 Max, Z7 Mini] allenvoss62:
Is anybody still working on unlocking bootloader and rooting the Maven?
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
I know there was one guy working on a update package to gain root, he has been quite for about a week now. I tried to reverse engineer it and I could not understand it
[ZTE Z7, Z7 Max, Z7 Mini] delshawnbrown:
cam you try to send the update.zip file through abd shell.

---------- Post added at 05:19 PM ---------- Previous post was at 05:11 PM ----------

I don't know what are the names of them, I might be able to find. kinda of new at this
[ZTE Z7, Z7 Max, Z7 Mini] delshawnbrown:
Try using es file explorer
[ZTE Z7, Z7 Max, Z7 Mini] allenvoss62:
I think we are at a stalemate with this phone!
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
I think so too, I am ready to tap out. I know nothing is unhackable but damn
[ZTE Z7, Z7 Max, Z7 Mini] loner.:
Anyone try this?

http://www.unlockphonetool.com/unlock-bootloader-code-generator/
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
Will not work without fastboot
[ZTE Z7, Z7 Max, Z7 Mini] loner.:
No problem there.
[ZTE Z7, Z7 Max, Z7 Mini] Xorith:
The page makes me very wary of trying it. It looks like your standard malware download site...

So no other progress on rooting the Maven? I might have to junk this phone if not. Hoping to gain some performance, otherwise its just not worth it. I mean not having a removable battery is bad enough. ZTE really frelled up on this one.
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
I thought so too
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
Bump
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
anybody have any luck. I am ready to pull my hair out
[ZTE Z7, Z7 Max, Z7 Mini] mattsmaven:
I'm simultaneously disappointed in it not being rooted yet and assured in its security. But I sure wish I could get the bloatware off it.
[ZTE Z7, Z7 Max, Z7 Mini] notMauriceVega:
I found something, and I don't know what it means. But, I found out that Z812 is a updated version of the Blade Apex 2. And, the Blade Apex 2 has a TWRP recovery img available. I've been looking into the Blade Apex 2 hoping for find some information, but every search comes up in Spanish. But, just thought I would update this thread with that. Could be something to look into further.
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
Good find! This could be useful
[ZTE Z7, Z7 Max, Z7 Mini] notMauriceVega:
I just said what the hell, and tried the TWRP recovery for the Blade Apex 2. But, in my command prompt. I get the same thing with the command "fastboot flash recovery recovery.img" it says waiting for device. It seems like anything dealing with fastboot. It just waits for the device, and does nothing. I also tried the "adb reboot fastboot" command. And, it just restarts the phone normally. This phone really is a head scratcher.
[ZTE Z7, Z7 Max, Z7 Mini] Scrythe:
I'm woefully out of my league here, but does anyone know what this is all about?

http://opensource.ztedevice.com/
[ZTE Z7, Z7 Max, Z7 Mini] NiHaoMike:
The following directions to unlock (not root) worked for me:

https://www.reddit.com/r/windowspho..._to_unlock_your_att_lumia_640_gophone_united/

Ignore the part about the Lumia. It appears to also work on some other AT&T phones.
[ZTE Z7, Z7 Max, Z7 Mini] Jack_Rosen:
Anyone know how to get the hotspot to work?

Unlocked it and using on a different carrier, and can't get hotspot to work.

Getting a pop-up to contact AT&T.....

Foxify not working
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
When we get root, you will be able to remove entitile.odex
[ZTE Z7, Z7 Max, Z7 Mini] Jack_Rosen:
No hack for meanwhile?

I gave up on root...
[ZTE Z7, Z7 Max, Z7 Mini] allenvoss62:
There is an app called portable WiFi hotspot it works for me
[ZTE Z7, Z7 Max, Z7 Mini] Trycatchrun:
If it's any help I think there is a new command for unlock bootloader with adb
[ZTE Z7, Z7 Max, Z7 Mini] Jack_Rosen:
Can you explain or at least link?
[ZTE Z7, Z7 Max, Z7 Mini] rgill420:
I unlocked the phone, ZTE MAVEN 812, and have tried multiple sim cards of different carriers. For some reason i keep getting " NO SERVICE"

Everything works fine for a few hours and then randomly it looses signal.
[ZTE Z7, Z7 Max, Z7 Mini] Trycatchrun:
I don't think I read on here that some had tried the command "fastboot oem unlock" from the ftm mode. I'm no expert just tryin to help. Been waiting for a root for this phone for a while
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
In ftm mode the fastboot commands do not work
[ZTE Z7, Z7 Max, Z7 Mini] bazlsl:
ZTE Maven meets iron ZTE Blade Apex 3
[ZTE Z7, Z7 Max, Z7 Mini] bazlsl:
Firmware ZTE Blade Apex 3 Sweden on the official website of ZTE (Sweden) ,but it you want to edit under the ZTE Maven build.prop, recovery.img........
[ZTE Z7, Z7 Max, Z7 Mini] allenvoss62:
Guess we are done with this phone for now!
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
I have tried everything I know so far. I will continue trying to find a way. I believe if we had the right program to flash on dfu mode it could be done. The dfu mode puts the phone on a weird com port
[ZTE Z7, Z7 Max, Z7 Mini] loner.:
Good stuff.

https://sites.google.com/site/zteopenfirmware/fastboot
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
That is only for the zte open.
[ZTE Z7, Z7 Max, Z7 Mini] loner.:
Or unofficial and uses for official firmware, it appears.
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
Problem is that it will also flash the open's modem
[ZTE Z7, Z7 Max, Z7 Mini] loner.:
Unlocked cell phone is not the same as unlocked bootloader.
[ZTE Z7, Z7 Max, Z7 Mini] ymaystru:
I know that.

Here is no fastboot mode.

And firmware as I understood can be flashed only by qpst as well as custom bootloader.
[ZTE Z7, Z7 Max, Z7 Mini] ymaystru:
And also if possible to build something like signed kernel update with root or at least with switched off enforcing.

And to flash it in recovery mode like update.zip . Or flash it in QPST

Here in Ukraine not so many people who can do it. I have read a lot of infos, but myself I have only basic knowledge in Android development.

My opinion that the kernel is modified by att programmers, and only they are know where is the door to get device rooted.

As I mentioned before on ZTE opensource web is z812 kernel source code. And maybe someone here is able to do something with it.
[ZTE Z7, Z7 Max, Z7 Mini] stayboogy:
the kernel source is open--yet, zte has not released a public link to download it, one has to send them an email and ask for it by name so says the open source notice site zte uses to post such things

secondly, even with the kernel source and supposing an actual working kernel could be built from said source there would be no way to install it as there is not a temp root method to gain access to be able to pull the boot and recovery partitions, unpack them, copy the new kernel, and repack; then flash.

i've worked on several zte phones previously, and i honestly feel this one will be rooted. i've personally been able to telnet into the phone a couple of times similar to what was done with the zte valet to gain temp root, but zte has locked telnetd down to avoid the glitch that allowed pseudo root through it previously.

i've also used a previous version of vdc and vold from a similar device to attempt the asec exploit, but adb denies it permission to make the asec image, and there is no way to kill the adbd service and start a new one using the binary from the said similar device without being root.

as soon as i get all these zte apk's fully decompiled and studied, i'll get us root through adb downgrading a system app with a zte signed updated app that hopefully sets the build to "eng" from "user" allowing adb root access.

if anyone would like to help and has some actual development experience, message me here or @ idaboogerman@gmail
[ZTE Z7, Z7 Max, Z7 Mini] mattsmaven:
You're the hero we need. Sorry, I'm of no use here as I have no experience in that field but I'll gladly beta test anything you have.
[ZTE Z7, Z7 Max, Z7 Mini] Rokrfan:
Wish I could help more. I have been waiting for a root
[ZTE Z7, Z7 Max, Z7 Mini] 10252:
the phone has a nand lock even with root you wont be able to do anything. root=pointless
[ZTE Z7, Z7 Max, Z7 Mini] stayboogy:
You're sadly mistaken about this.

There is no NAND lock on the phone. The recovery partition acts as a verifier and locks the system as read only. this is easily bypassed by writing the boot to the recovery partition and then booting into recovery which is actually the boot and then the read only barrier is bypassed.

it would do you some good to do a little research before spreading your misinformation and negativity.

temp root without RW access is needed first to copy the boot and recovery partitions and then do as I've explained above. it's standard procedure for all modern zte devices
[ZTE Z7, Z7 Max, Z7 Mini] 10252:
I emailed you you can reply back and we can chat via email. It does have a nand lock

---------- Post added at 07:02 PM ---------- Previous post was at 06:37 PM ----------

I have been able to root and customize this phone for months now, more like 6 months lol... I do know what I am talking about it. Anyone care to see a video upload a picture you want and I will turn it into a power up animation for you and make you feel goood.
[ZTE Z7, Z7 Max, Z7 Mini] stayboogy:
if you've been able to root it as you say, then why haven't you shared your method???

if and when i gain root in a shell, i'll copy the boot to the recovery partition and show you that the nand read only lock is easily bypassed.

share your root method and i'll have us rw access to system and a custom recovery built within a matter of hours.

and feel free to email me--i don't think your first msg was anything other than a signature with a link to your business. it said "rooting the maven" and nothing else lol. but i'm all about working together on this thing.
[ZTE Z7, Z7 Max, Z7 Mini] Rokrfan:
A random pic. If you really did find a way to root can u help?

Well nvm on the pic. Can't post yet?
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
I call bs.
[ZTE Z7, Z7 Max, Z7 Mini] loner.:
Scam.
[ZTE Z7, Z7 Max, Z7 Mini] stayboogy:
yeah, his video did show a custom boot animation and sound, running after a factory reset.

but,

i highly doubt he had anything to do personally with developing whatever it is that has allowed him to do that. i'd say someone got him pseudo-root and told him not to share.

that's my thoughts on the thing.

that or he has jtag machine which didn't get him far with this phone...
[ZTE Z7, Z7 Max, Z7 Mini] cukoobajube:
Zte maven hotspot
[ZTE Z7, Z7 Max, Z7 Mini] Rokrfan:
Nice thanks!
[ZTE Z7, Z7 Max, Z7 Mini] s2000collins:
Framaroot

It does not work, I tired. I also tried one click root, towelroot, and king root.
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
Any updates? I have been too busy to keep up for the past few weeks
[ZTE Z7, Z7 Max, Z7 Mini] ssenemosewa:
I'm amazed that this is such a hard nut to crack.

Either that, or there simply isn't any interest in rooting a phone that can be purchased for $30 at any Walmart.
[ZTE Z7, Z7 Max, Z7 Mini] stayboogy:
all the more reason to find a way to root it since it is so accessible.

it's actually pretty damn great device for $30.
[ZTE Z7, Z7 Max, Z7 Mini] ssenemosewa:
Absolutely. And it could be even greater once rooted so we could open up its true potential.

The first thing I'd do would be to install Titanium Backup on it, do a proper backup, and then start eliminating the bloatware like crazy.
[ZTE Z7, Z7 Max, Z7 Mini] saintbump:
Source available

file is here download.ztedevicedotcom/uploadfiles/copyright/smartphones/source/P816A06_ZTE_Z812_Lollipop_Kernel(3.10.x).tar.gz. I am no good with coding, and am not up to date with the kitchen, any help getting this device rooted would be great. Hoping this source will help
[ZTE Z7, Z7 Max, Z7 Mini] cameroncr95:
I am also still awaiting this root.

This is a fantastic device for $30. I love it! Its just sad there is no way to root yet, because the device is preloaded with a ton of junk I want to remove. Would also be nice to hack a later version of Android on it since it appears 5.0 is the latest it will allow.
[ZTE Z7, Z7 Max, Z7 Mini] stayboogy:
this has nothing to do with gaining root...

this is only the kernel source which is useless because we can't flash a new boot.img even if a kernel was built.

why no one understands this is beyond me
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
Any luck?
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
The biggest hurdle is the signature verification
[ZTE Z7, Z7 Max, Z7 Mini] jasoncrouch32:
totally false

Anyone on the ZTE Maven his quote is totally wrong and false. srs does not do it!!!
[ZTE Z7, Z7 Max, Z7 Mini] Pjz:
Hi everyone,

I have been looking for a way to root this for the past week and haven't found anything. Is there still no solution?
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
So far no luck. If we could bypass the signature verification in the update process it would be a piece of cake
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
king root desktop app can do a temp root, but it last only a few mins, but that at least is closer
[ZTE Z7, Z7 Max, Z7 Mini] 10252:
Root wont matter....Phone is write protected...
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
If we can get root, then you can make it remount system as rw

---------- Post added at 05:13 PM ---------- Previous post was at 05:10 PM ----------

It is only read-only because it mounts it as read-only. That was the same with the at&t fusion 2
[ZTE Z7, Z7 Max, Z7 Mini] magicdarklight:
Any luck on figuring anything out so far? I've been following threads on this phone for about a year now and still haven't found out anything on being able to successfully root it. Any progress is better than nothing so please give us updates as soon as anyone finds something out about this phone.
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
Kingo root on the desktop seems to root for a few mins but goes away
[ZTE Z7, Z7 Max, Z7 Mini] flablitz:
Zte zmax was same and we used switchers.
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
Switchers?
[ZTE Z7, Z7 Max, Z7 Mini] flablitz:
They are used to switch between r/w and not. Zmax had these same issues as the ZTE Maven, but seems like root appeared a little quicker than the Maven. Root is what I really want bad, and everything else would be a bonus. I'm curious if the ZTEROOT would work for these phones or if it was just for the ZTE ZMAX. I'd try, but can't ruin business phone.
[ZTE Z7, Z7 Max, Z7 Mini] yuhas92:
im gonna mess around with zte flasher while the maven in in download mode to see what i can do, i had no luck with the update yet, but might be able to flash a custom recovery if im lucky
[ZTE Z7, Z7 Max, Z7 Mini] 10252:
Again for someone that has rooted this phone and removed the NAND write protection, It's useless! Unless you can remove the NAND lock your root will work. Rooting a phone these days is a small part of being able to customize the handset. Phones also now have write protection enabled.
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
Normally I would ignore trolls, but I his time I am making an exception. You don't know how Linux works. Your "nand lock" is only that the kernel mounts the system is read-only at boot, once rooted you can change this. I have done this on my old phones in the past one of them running lollipop as well.
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
I know Linux inside and out. If you have really have it rooted you would have shared how. You are a fraud and a troll. Eat **** and die

---------- Post added at 11:10 PM ---------- Previous post was at 10:59 PM ----------

It is obvious you jtagged it
[ZTE Z7, Z7 Max, Z7 Mini] stayboogy:
pm me a link to the .exe you used and i'll verify.

if temp root works even for a few minutes i can dump the recovery and boot and flash the boot over the recovery and remove the rw protection. all i've been needing is a temp root to verify this works.
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
I will when I can tomorrow
[ZTE Z7, Z7 Max, Z7 Mini] ssenemosewa:
Did he ever send you the link?

Any progress to report?
[ZTE Z7, Z7 Max, Z7 Mini] frostbyte71901:
yes I did and for sanity's sake here is the file
[ZTE Z7, Z7 Max, Z7 Mini] southsider2009:
It does not connect to phone
[ZTE Z7, Z7 Max, Z7 Mini] jorgealejandromora:
Why i can not update my maven z812

hi why i dont receive yet the last update for th zte maven z812 via OTA version: Z812V1.0.0B19

i have is the version Z812V1.0.0B15

somebody have the OTA archive to update manually???

im from venezuela.
[ZTE Z7, Z7 Max, Z7 Mini] yuhas92:
https://xdmd.sl.attcompute.com/agent...O_B19_FOTA.zip ill have to upload att put a password on it
[ZTE Z7, Z7 Max, Z7 Mini] bombo_b:
I need to reset the unlock counter of this phone Maven z812.do you think reflashing fota would help?
[ZTE Z7, Z7 Max, Z7 Mini] Angelbeats91:
"KingoRoot" gives me temporary root access for seconds/minutes, check that, but it install the mediocre supersu and bloatware apps, but i was able to check root.
[ZTE Z7, Z7 Max, Z7 Mini] raven1090:
the problem is not unlocked bootloader that can gain root access to the KingoRoot application but did not last long root binaries because it says that the bootloader is locked
[ZTE Z7, Z7 Max, Z7 Mini] 209pcs:
Same here. I was able to get temp root using the KingoRoot Windows(tm) app, but that also installed the KingoRoot SuperUser app as well. What these SuperUser apps do is check for the existence of /system/bin/su or /system/xbin/su, and since mounting the /system partition R/W is not allowed under any circumstance, the su binary never makes it home. When i uninstalled the SuperUser app and went into ConnectBot to get a local shell, i popped in 'su' and hit 'Enter', just for ****s and giggles.

I got a root prompt.

So then i installed Root Checker, and sure enough it said i was rooted.

So now just need to make it stick, because I lost root upon reboot.
[ZTE Z7, Z7 Max, Z7 Mini] Hurrian:
+1 for the Kingoroot desktop version - I was able to get a root shell via ADB and dump partitions.

One problem though - I tried dd'ing the boot partition to recovery, and when I rebooted the bootloader presumably freaked out, and was stuck at QHSUSB_DLOAD.

Rebooting lets the phone write back the original recovery from /system though.

I've attached the B15 boot.img and recovery.img - hoping one of you guys would find it useful.
[ZTE Z7, Z7 Max, Z7 Mini] Rotpot09:
So who locked down /system and blocked remounting r/w, zte or att? Cause other zte phones are rootable same for att. Any chance of interesting the towelroot or chainfire devs in our problems? Thanks for all you guys trying to crack this phone!

Edit: also has anyone tried all the towelroot modstrings or even understand what they mean?i know somebody tried towelroot but say how extensively they tried it. hanks again for any help.
[ZTE Z7, Z7 Max, Z7 Mini] Hurrian:
ZTE locked down the device for carriers - looks like this platform (MSM8916-xuantan) was pretty much built _for_ carriers as the ZTE Overture 2 (for Cricket), ZTE Maven (for AT&T) and the ZTE Blade Apex3 (for some French carrier)

towelroot will _not_ work on this device - it's already patched against it. What _would_ work though is iovyroot... but there's not much point to porting that, since we've already got a root exploit courtesy of Kingoroot (even if their exhaustion bug takes forever to run...)

And oh, one more thing - the device seems to use dm-verity. Which would normally be defeatable with a custom boot.img, but since we can't (yet) unlock the bootloader to accept unsigned images, we're completely, utterly boned until someone comes out with a tzbsp bug for MSM8916.
[ZTE Z7, Z7 Max, Z7 Mini] stayboogy:
when you flash the boot over the recovery you have to boot the phone like you are booting into recovery to get the phone to boot because now the boot.img is the recovery.img

do it again and power off the device. then hold volume up and power on, this should boot with the boot.img without verifying through recovery then temp root again, and you should be able to gain rw access to system. then you must delete the script that rewrites the recovery partition else you will have to do this over and over again before each boot

that is how permanent root is obtained for devices like this
[ZTE Z7, Z7 Max, Z7 Mini] stayboogy:
well, this doesn't work. the phone just stalls and then reboots like normal.

so, it's safe to say that there is a second boot partition on this phone that handles the initialization process
[ZTE Z7, Z7 Max, Z7 Mini] stayboogy:
does anyone know the actual exploit that provides temp root access??? if we could figure that out, that would help us in figuring out a more complete solution
[ZTE Z7, Z7 Max, Z7 Mini] raven1090:
how you managed to get the boot and recovery that terminal commands or program used
[ZTE Z7, Z7 Max, Z7 Mini] LgnVcell:
I got this phone a few days ago from my parents. Please find a root that WILL work. If I brick this phone, my parents will KILL ME! :( :crying:
[ZTE Z7, Z7 Max, Z7 Mini] bombo_b:
Really helpful comment :highfive:
[ZTE Z7, Z7 Max, Z7 Mini] LgnVcell:
Hey, my knowledge of Android is good, but I have no clue about rooting. Just how to install it properly.

Sorry if I don't know anything.. I'll try to catch up to help. :D
[ZTE Z7, Z7 Max, Z7 Mini] cavalcanti.uy:
I'm willing to pay for this ROOT, i can pay by PayPal. Send a email for me, cavalcanti.uy@gmail.com

Enviado desde mi Z812 mediante Tapatalk
[ZTE Z7, Z7 Max, Z7 Mini] bombo_b:
Everybody here is not a developer but we try our best to support those who work on something.asking to find it will not help. Dnt worry I am as impatient as you to root the Maven :)
[ZTE Z7, Z7 Max, Z7 Mini] LgnVcell:
Here's an idea..

Hey, just a stupid idea, but look at other tutorials on how to do what's needed. Yeah, might not work, but you might run into something that could help out.. :)
[ZTE Z7, Z7 Max, Z7 Mini] stayboogy:
i'm beginning to think there is a memory-lock like ric on sony devices present--although i could be wrong. zte is known for delivering devices with an already unlocked bootloader just without proper fastboot flashing capabilities. if we can find the process that is memory locking /system then we can disable and gain r/w access. using temp root for this will be the only way as of right now

---------- Post added at 05:16 PM ---------- Previous post was at 04:33 PM ----------

i'm going to work on building a custom recovery for the device this next week or so and we will see what happens.