yashsingh1/xdaforums huggingface dataset:
[LG V20 Guides, News, & Discussion] Bread Bucket:
I was able to get back into recovery, and just to clarify, I was able to backup system, but I was not able to backup the "system image" it failed everytime I tried. If I cannot get the backup, stock US996 rom, or the not so stock rom to boot, is there anything I can reflash from the OP to get back up and running? Is there anything I need to push or flash after flashing these roms to complete the process that I am just unaware of?

---------- Post added at 12:20 AM ---------- Previous post was at 12:12 AM ----------

For any curious parties, I was able to boot no problem after restoring my backup that lacked a backup of the system image, but had the system backed up
[LG V20 Guides, News, & Discussion] Nrod0784:
It seems to be working for me fine. Sometimes a single app is not hibernating when I check greenify but most are hibernated fine. I uninstalled L speed and am reinstalling it today.

Beastmode on my LG V20
[LG V20 Guides, News, & Discussion] drbveb88:
Hello All... Long-time flasher with Samsungs..

Very limited with adb and Fastboot.

Any videos out here anywhere?
[LG V20 Guides, News, & Discussion] brewer15650:
Stuck on step 3. Im trying to update my driver for fastboot. If i cant get it update is it possible to abort from this point?
[LG V20 Guides, News, & Discussion] me2151:
Not possible to abort. Have to go all the way. That driver needs to be updated. If you are on a 32bit windows os some one the newer fastboot drivers may not install. Theres a driver pack on xda that works on 32bit and our phones
[LG V20 Guides, News, & Discussion] brewer15650:
I dunno what happened. I finally got the fastboot driver fixed and my phone restarted and the adb box was gone.
[LG V20 Guides, News, & Discussion] me2151:
Normal. keep following the steps.
[LG V20 Guides, News, & Discussion] emdroidle:
Congratulations on getting bootloaders unlocked on some V20 devices and producing a method likely to break them open on the entire V20 line and even the G5 line. There seems to be a good chance this approach with minor modification will even get the G6 (it will take months to close this compromise).

One thing I must advise; it is time to document the locations of all the KDZ files for the V20s came from (as was done on this thread for the V10). Documenting the KDZ files should allow reverting to earlier firmwares using LGUP, this could be invaluable for later purchasers of V20s since new exploits won't be needed to install the debug bootloader onto their devices.
[LG V20 Guides, News, & Discussion] brewer15650:
ok when i reboot into recovery using adb I get a full static screen
[LG V20 Guides, News, & Discussion] me2151:
Problem is as of the v20 KDZ files need to be signed from LG. Cant modify them. Currently there are KDZ files for a lot of the V20s but not all. The sprint and ATT ones are missing. Verizon just got leaked yesterday or today. I have one for sprint but it doesnt work.
[LG V20 Guides, News, & Discussion] me2151:
Flash boot2 in the bootloader then try again
[LG V20 Guides, News, & Discussion] Negan:
Any 915 users try this yet? I see It's not noted in the op yet but was wondering if some brave soul tried it and either had success or failed
[LG V20 Guides, News, & Discussion] me2151:
There is a 915 KDZ that was recently released i believe so you can try it out if you want and let me know. Most likely will need to use the US996 deODEXd rom though.
[LG V20 Guides, News, & Discussion] Negan:
Good to know. I'll have to go find tgr kdz first and see. I'm not certain if the 915 for videotron and wind ir pretty much the same or not. Mine was with wind originally. Historically wind has quite different firmwares but may not be so different this time given the wind 915 works fine on other gsm networks. I guess before i even consider doing anything I'll do some homework.
[LG V20 Guides, News, & Discussion] brewer15650:
thanks for the help me2151 you made my day. Im in, what all should I back up? I know not to back up the data partition
[LG V20 Guides, News, & Discussion] me2151:
No problem. Don't backup data. System image backup will most likely fail but you can backup the system partition.
[LG V20 Guides, News, & Discussion] elliwigy:
considering this uses a v20 debug aboot as well as dirty cow id think itd surely be patched in the G6 unless they for whatever reason dont patch dirty cow by time its released lol

but hey, if they goof and relevant debug files are released for each device then great!
[LG V20 Guides, News, & Discussion] me2151:
So guys. I believe i am betraying you all by saying this. Since my brick I've been thinking a lot. and.... Im switching to the Axon 7. I am somehow going to convince sprint to add it :D
[LG V20 Guides, News, & Discussion] freeza:
Awww yeaaa
[LG V20 Guides, News, & Discussion] me2151:
Fix yo siggy.
[LG V20 Guides, News, & Discussion] elliwigy:
terrible lol
[LG V20 Guides, News, & Discussion] emdroidle:
It has been demonstrated the same debug bootloader also works for the G5. In order to stop this debug bootloader from functioning, LG must make changes to the hardware, at a minimum the motherboard, but very likely to the silicon itself (they need to remove/expire the key used to verify the debug bootloader). If this in fact requires changes to the silicon, then it is already too late to make those changes with the release window they're aiming for (February).

Now, they're certain to have the dirty cow exploit fixed on the release firmware for the G6, but this means all that is needed is one root shell via other means and this debug bootloader will most likely still function. This is not a certainty, but the odds are very good.

The easiest method to get the KDZ files is to use `LG Bridge` to download them. Simply need a sniffer program on your system and you can find the URL and share it with everyone.

Even if modified KDZ files are difficult to create, they have an additional purpose, you can unpack the stock firmware and use that to create modified images. For the people who incorrectly wiped /system, this is where you can get a stock image. KDZ Tools can unpack them (alas the repack doesn't work and there are hints the V20 KDZ files may differ enough to break this tool which was aiming for the V10).
[LG V20 Guides, News, & Discussion] shadow6600:
I'm stuck on step on the step where you fastboot into recovery. it shows a static screen for a second then it boots normally without showing TWRP. I redid step 3 and it seems that it's not installing TWRP. I tried to do it manually from the bootloader using fastboot, but it seems like it can't load boot1.img or the recovery.

I'm using the AT&T variant
[LG V20 Guides, News, & Discussion] me2151:
LG Bridge doesnt find my KDZ. So that method doesnt work :)
[LG V20 Guides, News, & Discussion] me2151:
You are not in the correct directory then. or the files arnt.
[LG V20 Guides, News, & Discussion] elliwigy:
do they have a bootable rom and unlocked BL using dirty santa? i thought it caused a bootloop/soft brick?

if it works however hopefully any bounties goes towards [MENTION=4591212]me2151[/MENTION] for creating the necessary method using dirty cow
[LG V20 Guides, News, & Discussion] emdroidle:
If the V20 is like the V10 (quite likely) then it is very likely the strategy from this post will work. The main steps are, download and install CDMATool. Then on your phone run:

su
echo 1 > /sys/devices/platform/lg_diag_cmd/diag_enable

If that works, then there is a good chance of enabling additional bands, but this isn't certain... Issue here is what the qualities of the radio on your V20 are, if you're lucky and have a V20 with an over-specification radio chip then you'll get extra bands; if not, you'll get nothing.

You can give me thanks for knowing about this trick, but please also give thanks to the author of that post for telling everyone else. That post also has longer, better instructions.

---------- Post added at 05:59 PM ---------- Previous post was at 05:23 PM ----------

Oh. That would certainly be a problem. I suspect folks who hadn't yet used this method might be able to find a stock one. Even one with fixed dirty cow a KDZ should get you a system image which could be the basis of replacing /system on your device. Guess I can't help here.

A fair bit more automation of the scripts can also be done. Ugh, trying to decide whether to stick with V10 in the hope LG unlocks all the bootloaders, versus upgrading to the V20...
[LG V20 Guides, News, & Discussion] elliwigy:
i can tell you LG will never allow unlock of all bootloaders on all the variants.. they let the carriers decide.

might as well move to the v20..

and theres no way to pull any files necessary unless they root.. his brick is beyond repair itd seem without a 100% stock sprint kdz being only thing left to try. he cant get into fastboot or recovery i dont think so having a system img will not help as thats already available.
[LG V20 Guides, News, & Discussion] emdroidle:
I was thinking someone with an unmodified V20 would be able to get the KDZ, but if they're completely unavailable, erk. Even then if a KDZ does become available, even one which has dirty cow fixed that should get you a clean system which can be modified (now that you've got an unlocked bootloader).

[MENTION=7479791]Honestly Annoying[/MENTION] apparently got it working. Might need to remind [MENTION=7479791]Honestly Annoying[/MENTION] to share bounties, but it does sound like it took some work to get it mostly ironed out. [MENTION=7479791]Honestly Annoying[/MENTION] has made sure to mention [MENTION=4591212]me2151[/MENTION].

Now I'm wondering whether to stick with the V10 or jump to the V20... Got a pre-December KDZ for the device I'm interested in, now need to know whether to jump.

---------- Post added at 06:22 PM ---------- Previous post was at 06:12 PM ----------

In my case it is an unbranded, non-carrier V10. Didn't LG unlock the bootloader for all G4s when Bump was created? This situation is pretty similar to bump since it breaks the bootloaders of all V20s and G5s, likely breaks the G6. The question is whether LG will insult the owners of V10s by ignoring them in the same circumstance.

In that case, someone on a rooted Sprint V20 should run `dd if=/dev/sd?? of=/data/local/tmp/system.img`, where "sd??" is the device for /system and then you've got an image of /system. This of course needs someone with a minimally modified /system (yeah, that might be a bit tricky). Still, given how much [MENTION=4591212]me2151[/MENTION] has pushed things forward, someone should be up for helping.
[LG V20 Guides, News, & Discussion] shadow6600:
sorry to post again but I've flashed supersu, format data, did the wipe exactly how it was in the directions but when I reboot, it gives the error message with the red warning triangle, then the lg logo then it boots into TWRP. I've made sure I formatted the data and did this step several times but I keep booting into TWRP.
[LG V20 Guides, News, & Discussion] elliwigy:
bro, you should do more reading lol.. honestly annoying didnt utilize the debug aboot from the v20... they have their own debug boot/kernel only.. therefore they do not have an unlocked BL and only root shell due to the kernel they have that isnt at all from the v20.

unlocking or allowing unlock is up to the carriers on carrier branded devices, not LG.. this is why you have tmo and us996 unlockable but no other variant is without exploits.

and bro, we already have stock images for various devices including sprint and vzw... i was commenting because you said "someone who hadnt rooted yet..." should pull thefiles and i said its not possible as you need root to do this..

honestly only utilized the part of dirty cow that allowed him to push the boot to their device.. they are still on a locked BL and stock recovery because they do not have an unlocked BL. It is a start for them but theyre not quite there yet.. i do not believe the v20 debug aboot will work for them, in fact it might brick them for good
[LG V20 Guides, News, & Discussion] Honestly Annoying:
Hello everyone! Saw I got mentioned a couple times, just thought I would clear up a couple things :)

1. I did NOT use the debug aboot from the V20. I used a debug ZV4 Sprint kernel (boot) from [MENTION=4965298]tungkick[/MENTION] and used a modified version of dirtysanta to flash it. [MENTION=4591212]me2151[/MENTION] sent me the source code and I gave everyone here credit for their work as they were the ones who created dirtysanta.

2. I do NOT have an unlocked bootloader as of now. I have successfully flashed the H850 (international, unlockable) aboot to my device, but because the G5 has a modular bottom I need the H850 bottom to boot the device now. The interesting thing is that I did NOT brick my device, which is what everyone in the G5 forums has been telling me would happen. I am going to order the H850 bottom and will update once it gets here.

3. I have not gotten ANY of the bounty as I sort of expected. I have not been doing this for the bounty, I have been doing because I truly enjoy doing this and have learned more than I ever thought I would know about Android. If I do get any of the bounty, I will be PMing [MENTION=3812611]elliwigy[/MENTION] and [MENTION=4591212]me2151[/MENTION] so we can figure out how to share the funds :)

4. IF YOU ARE READING THIS AND THINK YOU WANT TO TEST THIS OUT ON AN LG G5 YOU WILL BRICK YOUR DEVICE IN WAYS THAT ARE UNIMAGINABLE. Please do NOT use this guide on the G5, as it is not meant for it and is not what I did at all. Just making that clear, that is not how I got root on my device.

Okay! So I believe that clears things up, now let's get this thread back to the V20 talk. If you have further questions/are interested in the G5 progress you can check that out here
[LG V20 Guides, News, & Discussion] emdroidle:
Ah, I hadn't realized that. I thought they had a full bootloader unlock, but I guess I misunderstood that.

Well, you're going to need to join me in that reading room. I was suggesting obtaining a KDZ via a non-rooted device and LG Bridge (I'm surprised this won't work, did for the V10). I was suggesting grabbing all of /system from a rooted device to get [MENTION=4591212]me2151[/MENTION]'s device functioning again (simply an alternate method toward the same end).

I agree the V20 debug bootloader has a good chance for bricking a G5, but I believe there is cause for optimism. Both the G5 and V20 share the same Qualcomm 820 processor (according to what I've read). Since the main processor silicon is the same, it is quite likely a bootloader which verifies on one will verify on the other. The reason this may differ is they could have differing ROMs (possible if the ROM is off-processor, but I believe this is unlikely), or the motherboard hardware was sufficiently distinct to prevent one from booting code for the other. The latter is quite possible, but not really all that likely, reusing hardware designs means much lower engineering cost.

This is the same reason I cite for why this may work for the G6. If the G6 gets the Qualcomm 830, then this isn't too likely, but if the G6 gets the Qualcomm 820 then this is fairly likely. With the timeframe for production ramp-up of the G6 being now (according to the XDA article they're very near), they have almost no time to patch this. I wouldn't care to bet on it working, but I wouldn't care to bet against it either.
[LG V20 Guides, News, & Discussion] nahepler90:
so does this mean that I get part of mt bounty back? Because I pledged a hefty amount for root with a bootloader unlock. Not gonna lie. Kinda irritated about this...
[LG V20 Guides, News, & Discussion] Nrod0784:
Are you talking about v20 or g5?

V20, ie this thread, has root and unlocked bootloader. No idea about g5.

Beastmode on my LG V20
[LG V20 Guides, News, & Discussion] nahepler90:
V20

---------- Post added at 09:19 AM ---------- Previous post was at 09:18 AM ----------

V20

Unless I am misreading that wrong and that the partial unlock is for the g5, just tired and confused lol. Kinda jumped into this reading the last post.
[LG V20 Guides, News, & Discussion] Nrod0784:
Then you're good. Those up above are talking about g5 not having unlocked bootloader.

Beastmode on my LG V20
[LG V20 Guides, News, & Discussion] nahepler90:
Alright sorry for the irritable-ness. I need a nap.
[LG V20 Guides, News, & Discussion] KedarWolf:
Anyone get a Freedom Mobile H915 rooted? I have a bounty for it, but I don't think peeps are gonna jump too many hoops for my $20. :rolleyes:
[LG V20 Guides, News, & Discussion] me2151:
I already have the /system iwould need for your method. im not sure you understand what my situation is. I literally have only download mode and LG. No recovery no fastboot. nothing. System images will not help me. I need a flashable KDZ to get back up and running.

Lol im not sure why but they are talking about the G5 root method using part of dirtysanta. You are unlocked bootloader.
[LG V20 Guides, News, & Discussion] nahepler90:
I know now haha, just came in late in the convo seeing mention of partial unlock with v20 in it. Been up late the last few days and didnt read further back enough to see that it was for the G5. No issues here lol.
[LG V20 Guides, News, & Discussion] nahepler90:
So I am having a small issue with my device. I tried doing the DAC modification earlier (yesterday now) and ended up having to restore from a backup so I could get my audio back. But since the restore, I have not been able to get any root explorer app to mount anything as r/w. I can't do any editing/moving of any file that requires r/w permissions. I thought it was a backup of before I flashed the konverged kernel (which it wasn't) and went to try and flash it, and I get the error of being unable to mount /system. I still have root via rootchecker and a few root required apps I have and am still on the konverged kernel. Is there any fix I can do to get these permissions back? No problems with the phone, just the inability to mount things as r/w.

T.L.D.R. - how do I get mount as r/w permissions back still being rooted.
[LG V20 Guides, News, & Discussion] roc342:
read through the thread and still a little confused. is there a working method to restore sprint unit to stock or a way to restore a full TWRP backup image. I believe the later does not work. but just trying to clearify
[LG V20 Guides, News, & Discussion] Matt07211:
Currently their is not, sorry.
[LG V20 Guides, News, & Discussion] roc342:
thank you for the clarification. once we have that I'll be ready to dive head first into this. It's been almost a full year since I had root. Benched my G5 as soon as I saw this and picked up the v20. just salavaiting waiting to get root back. just want that safe graud Incase I go crazy doing stuff.
[LG V20 Guides, News, & Discussion] elliwigy:
bro, the bounty collected was for the spr, att, vzw, F800L (maybe some other) v20's.. This is NOT a G5 thread.. the v20 bounty has been fulfilled, that guy is for some reason posting about G5 and V10 and even G6 in a darn v20 root thread, sorry for any confusion but if you have a v20 then bounty was fulfilled.. if you dont have a v20 then you might have paid up and didnt read carefully as to what devices were covered.

---------- Post added at 01:51 PM ---------- Previous post was at 01:40 PM ----------

hell he thinks itll even work on the G6 lmao..
[LG V20 Guides, News, & Discussion] MANDROIDS:
I'm on Sprint LS997 rooted and need to get access to PRL updates and ##codes.

So just as a feeler, are there any developers out there working on getting a sprint kernel or getting us back to stock?

PS I want to thank all developers working on the V20, especially me2151, for all and their time and efforts.
[LG V20 Guides, News, & Discussion] elliwigy:
its been asked multiple times, not sure if by you, but stock kernel will not work with the dirty santa method to my knowledge even if we did get one for you.

also, i do not believe he was successful at reverting either
[LG V20 Guides, News, & Discussion] bond32:
Would one be ok to flash this: http://xdaforums.com/v20/how-to/vs995-img-boot-img-devs-t3525750

On a verizon V20, unlocked with the method with success and have everything as it should except I didn't make a stock back-up.

The only VS995 rom is giving me a ton of UI crashes.

Edit: that system.img, I wouldn't know where to begin with that.
[LG V20 Guides, News, & Discussion] lennybronx:
Hello,

I am not the most fluent when it comes to rooting, unlocking bootloaders, etc. This is why i have always waited on all of you incredible, skillful people to come out with the simplest and issue free method of rooting before i proceed to do anything. From what i've read thus far, there is currently no way to revert back to stock should anything go wrong in the process(please correct me if i am wrong). Can anybody tell me as clearly as possible whether or not this is a safe and fool-proof method of rooting. I've been patient in waiting for a proper method. I see that there is a One-click method in development. Would it be better for me to wait for that method? If so, how far along is this development. I am simply a concerned user not wanting to brick my device so any answers available would be tremendous. Also, thanks once again to all of your hard work!
[LG V20 Guides, News, & Discussion] nahepler90:
So before I try things myself to get it to work, should I format my system? Oris there anything in the steps to achieve root/unlock I can run with adb or fastboot that can be a fix?
[LG V20 Guides, News, & Discussion] me2151:
Have you tried reinstalling supersu?
[LG V20 Guides, News, & Discussion] nahepler90:
I have not yet as I want to ask before I mess something up seriously. Can I do that via adb/fastboot?

Or through the su app itself?
[LG V20 Guides, News, & Discussion] me2151:
You can do it in twrp
[LG V20 Guides, News, & Discussion] emdroidle:
Download mode has been analyzed and there is a tool to talk to LG phones in download mode. Problem is the tool was originally created when the G4 was new, and as of the V10 they started to authenticate the exec command. Near the end of that report, according to [MENTION=287606]snore[/MENTION]master3000 as of November only the exec command was being authenticated, while the read and write commands were usable without authentication.

You'll need to read some sparse documentation to get it to work, but this should be usable if LG hasn't made further changes to their download mode protocol. At this point I kind of doubt LG really needs to further secure the protocol since there is now enough verification of the system/firmware images so as to make this an unlikely spot to break into their phones.

I hope this isn't something you'd already tried and failed. :fingers-crossed:

Sorry about the confusion. I took a quick look at the G5 procedure and it looked similar enough to the V20 procedure to confuse me as to how much they had in common (choosing the exact same filenames).

I think there is a non-zero chance this same bootloader image could work on the G6. This isn't a particularly good chance, but is a high enough probability chance as to be worthy of some investigation. I'd likely end that investigation if the G6 gets the 830, but that is not yet a certainty.
[LG V20 Guides, News, & Discussion] me2151:
On the v20 all needs authentication. I have already bypassed that authentication and was able to run commands(like ps and ls) But its not a common command set anymore. there is no DD command. Just replies with Hello, I am LAF whenever you try a command that doesnt exist. Bypassing the authentication was easy. I cannot write images through LAF.

EXIT: even then my issue is not with a system img. i need to reencrypt the device somehow as thats what went wrong. I already have a stock system img on it.
[LG V20 Guides, News, & Discussion] AlkaliV2:
Even if you use a kernel that doesn't force-encrypt like Tilde88 was working on?
[LG V20 Guides, News, & Discussion] me2151:
Cant use a custom kernel when on full stock. Since so many people were wanting a method to return to stock i was working on it. and that bricked me.