yashsingh1/xdaforums huggingface dataset:
[T-Mobile LG G6 Guides, News, & Discussion] Flippy125:
I thought that we should probably get one thread going for theorizing/working on getting root on our G6's. I have already gone through the aboot with the latest update, and there is no way we can flash anything from there. Our best bet will be using the files autoprime supplied here.

I have no experience building TWRP if anyone would like to help with that. I'll gladly be a guinea pig once I find a way to get LGUP or a similar flashing option to work on the G6.

I also propose that all root bounty donations should go to the EFF once we achieve this.

[YOUTUBE]I1188GO4p1E[/YOUTUBE]

To-Do:

Get LGUP to detect the G6 - DONE - Use the attached DLL file and follow the instructions below to enter download mode

Create test build of TWRP - DONE

Flash TWRP via custom *.TOT or *.KDZ (Priority)

Verify that we can flash an unsigned image in LGUP

Install supersu.zip

??????

PROFIT

How to enter download mode:

Unplug USB cable (if connected) and power off your device

Hold the volume up key and connect your USB cable

Welcome to download mode

I am not responsible for anything that happens due to this thread. This includes (but is not limited to) bricked phones, a broken plumbus, or explosive diarrhea.
[T-Mobile LG G6 Guides, News, & Discussion] Flippy125:
I'm going to go pass out now. Will start again in the AM. (Also reserving second post in case it is needed.)
[T-Mobile LG G6 Guides, News, & Discussion] UniX1rm:
Hey, just curious, have you tried the axon7-g6-repack that was done for testing here?

https://xdaforums.com/showpost.php?p=71607116&postcount=44
[T-Mobile LG G6 Guides, News, & Discussion] Flippy125:
Thanks, I didn't see this. Researching how to make a custom *.tot file now. This is my first LG phone that wasn't a Nexus, so all this LGUP/FlashTool stuff is new to me
[T-Mobile LG G6 Guides, News, & Discussion] nima0003:
Here is the recovery https://drive.google.com/file/d/0B7S6ou836i7AMXJ5c2dmNHBBLXc/view?usp=drivesdk
[T-Mobile LG G6 Guides, News, & Discussion] Flippy125:
So I have run into a roadblock trying to get a custom tot file made. I have reached out to someone that has created them in the past for assistance.
[T-Mobile LG G6 Guides, News, & Discussion] nima0003:
What went wrong?
[T-Mobile LG G6 Guides, News, & Discussion] Flippy125:
There is just absolutely no documentation on repacking a tot file. Lots of ways to extract them though. I could not open it for modification as a disk image or a compressed file
[T-Mobile LG G6 Guides, News, & Discussion] nima0003:
I think this tool has the ability to repack the tot. https://xdaforums.com/showthread.php?t=2483250
[T-Mobile LG G6 Guides, News, & Discussion] mingkee:
.dz also works.
[T-Mobile LG G6 Guides, News, & Discussion] Flippy125:
I won't be able to play with this until tomorrow night, but this looks promising. Hopefully I can come back with good news
[T-Mobile LG G6 Guides, News, & Discussion] nima0003:
Alright, sounds amazing!
[T-Mobile LG G6 Guides, News, & Discussion] MicroMod777:
I only see that tool as a kdz extractor. Can it repack a kdz too, and if so how. Because if so we can replace the recovery.bin with maybe twrp.
[T-Mobile LG G6 Guides, News, & Discussion] Flippy125:
There is a modified version in the thread for repacking, but hopping on the Github page shows that there is some hidden verification method in the kdz file that makes it fail. Still worth looking into, as this seems to be the best option.

I believe .kdz files have some sort of encryption, and .tot files do not
[T-Mobile LG G6 Guides, News, & Discussion] nima0003:
Oh, so the software does not work with tot files?
[T-Mobile LG G6 Guides, News, & Discussion] Flippy125:
Not from what I'm seeing here. I'm at work so I cant download the script and mess around with it yet
[T-Mobile LG G6 Guides, News, & Discussion] nima0003:
Any progress?
[T-Mobile LG G6 Guides, News, & Discussion] Flippy125:
I'm still at work, but I'll post any updates here
[T-Mobile LG G6 Guides, News, & Discussion] nima0003:
Alright!
[T-Mobile LG G6 Guides, News, & Discussion] jkashuba07:
Any chance this will work on the AT&T version too?
[T-Mobile LG G6 Guides, News, & Discussion] Yazuken1:
Oddly it seems like most the other commands except for flash and boot are working...

Whenever I try to flash or boot twrp I get an error which states "FAILED (remote: unknown command)" ... commands such as "fastboot var all" work fine though.
[T-Mobile LG G6 Guides, News, & Discussion] joedeuce:
Ah ok. That's the way it has been with previous versions.
[T-Mobile LG G6 Guides, News, & Discussion] Polycarbonate:
Do you exclusively need the 10o KDZ of the claro firmware? There's a 10a KDZ file for claro around in a site called LG-Firmwares.
[T-Mobile LG G6 Guides, News, & Discussion] letrain02:
---------- Post added at 12:16 AM ---------- Previous post was at 12:14 AM ----------

On another note! I have flashed H87210q firmware to my phone and flashboot commands seem to be working!!! :D:D[/QUOTE]

This is a development for sure...
[T-Mobile LG G6 Guides, News, & Discussion] johndc7:
Where did you get the firmware from? Has anyone else tried?
[T-Mobile LG G6 Guides, News, & Discussion] johndc7:
10o probably because I'm pretty sure it has to be a higher version than what's currently on the device otherwise it won't flash (due to the anti-rollback stuff).
[T-Mobile LG G6 Guides, News, & Discussion] Polycarbonate:
I live in Puerto Rico, sadly, I don't have a claro as my carrier, I have TMobile, but I have buddies with Claro who have LG g6's and their latest firmware is 10a so maybe that's our equivalent to 10o?
[T-Mobile LG G6 Guides, News, & Discussion] johndc7:
You could try it but I'm not sure if it would work or not. Do they have root on their devices? If they can't root their device on claro then there doesn't really seem to be much hope for that.
[T-Mobile LG G6 Guides, News, & Discussion] Polycarbonate:
They know nothing about rooting, quite a shame really, I don't think any of them would want to anyways.
[T-Mobile LG G6 Guides, News, & Discussion] theFume:
I just wanted to make sure people read this quote after they get excited about "fastboot working"
[T-Mobile LG G6 Guides, News, & Discussion] johndc7:
Lol show them the bounty thread. That might motivate them to help.
[T-Mobile LG G6 Guides, News, & Discussion] letrain02:
What is the difference between h872bk vs h872 vs h872tn? They all seem to come up as TMobile. Lg has released the source code for the h872bk and h872tn and h872... Ive located a tot file for the h872bk.
[T-Mobile LG G6 Guides, News, & Discussion] FCORivers:
BK black, tn titanium, is the colors, h872 is TMobile variant.
[T-Mobile LG G6 Guides, News, & Discussion] letrain02:
So if the only difference is the color but they are all 872's then the tot file should work on any of the 872's? On the Lg website they actually list it with three different source codes.

http://opensource.lge.com/osSch/list?types=ALL&search=H872
[T-Mobile LG G6 Guides, News, & Discussion] letrain02:
https://octopusbox.com/eng/features/features

any thing to this box? claims to be able to flash any firmware, etc...so ? kind of expensive though.
[T-Mobile LG G6 Guides, News, & Discussion] PequenoBuda:
I have a medusa pro box with ultimate lg octoplus module activated. If I can be of help in something please tell me and I will do it delighted. Sorry for my bad English, i´m from Spain :p
[T-Mobile LG G6 Guides, News, & Discussion] AlbinoCookie:
I remember using something similar to this with the lg l9, it magically made the bootloader unlock command go through after flashing the right kdz. I don't remember much aside from that.

It would be interesting to see what would happen if you tried what this guy did

https://xdaforums.com/showpost.php?p=75216175&postcount=274

Just spit balling of course, so if you do end up trying this make sure your phone is backed up.

Here's the exact cord I used with the lg l9

https://m.aliexpress.com/item/93739...ductSubject=GPG-3-in-1-micro-USB-cable-for-LG
[T-Mobile LG G6 Guides, News, & Discussion] The_Anomalist:
I was reading ways to root and came across the one plus backdoor root using engineer mode. It might be possible to install it on the phone and tweak it to our phone, which I'm pretty sure servicemenu might be the same but I wouldn't know how to get started. I tried but say the app does not exist.

I failed upon receiving an "error 3" recieved
[T-Mobile LG G6 Guides, News, & Discussion] The_Anomalist:
Here
[T-Mobile LG G6 Guides, News, & Discussion] The_Anomalist:
Trying with service menu
[T-Mobile LG G6 Guides, News, & Discussion] midnight102:
Would kingroot even work or is that a brick?
[T-Mobile LG G6 Guides, News, & Discussion] The_Anomalist:
I have my edl/flash cable and tried to issue commands through fastboot but its was a no go :(
[T-Mobile LG G6 Guides, News, & Discussion] The_Anomalist:
I emailed lg 3 times in a row lets see if they give us what we want lol ill email so much they will get sick of me to the point were they will give is our fastboot!
[T-Mobile LG G6 Guides, News, & Discussion] mingkee:
There's a reason LG is so desperate to make promo.

This phone is already DOA even the first day.

Too perfect to root destroyed it.

I have jumped ship to Sony and HTC and keep enjoying root.

If you still have G6, it's better to sell it on eBay.
[T-Mobile LG G6 Guides, News, & Discussion] johndc7:
You should email T-Mobile. They are the ones that removed the fastboot commands. If it was LG then the international version (H870) wouldn't have fastboot commands either.
[T-Mobile LG G6 Guides, News, & Discussion] The_Anomalist:
I already did but they said it up to the development team to re enable commands over at lg
[T-Mobile LG G6 Guides, News, & Discussion] The_Anomalist:
can someone help me find a firehose for the msm 8996? i just got an extra lg g6 to test. im looking online right now for the firehose the more 8996 firehoses i get the better. e.g. ddr.elf, ddr.mbn, etc etc.
[T-Mobile LG G6 Guides, News, & Discussion] brossovitch:
I don't see why after a phone is unlocked (SIM unlocked) ot doesn't just enable the fastboot commands. Its dumb.
[T-Mobile LG G6 Guides, News, & Discussion] The_Anomalist:
So I got a firehouse but I can't get into edl mode can someone help me figure it out?
[T-Mobile LG G6 Guides, News, & Discussion] christopherrrg:
I've been reading a bunch on EDL.

https://www.google.ca/amp/s/www.theandroidsoul.com/boot-edl-mode-qualcomm-android/amp/

Check this article out too on xda.

https://www.google.ca/amp/s/www.xda-developers.com/exploit-qualcomm-edl-xiaomi-oneplus-nokia/amp/
[T-Mobile LG G6 Guides, News, & Discussion] Josh McGrath:
whats the file name of the firehouse? I am bricked into 9008 mode anyhow. But im on the v30

All previous LGs have to be shorted out via opening the pins to enter EDL mode, so the g6 and v30 are probably no different.

---------- Post added at 01:33 AM ---------- Previous post was at 01:31 AM ----------

Can you attach the file ?
[T-Mobile LG G6 Guides, News, & Discussion] The_Anomalist:
I got it from online it wont let me upload the files just Google firehose for msms 8996.

Although it is specifically for our devices doesn't mean it won't work. I haven't tested since I can't get into edl.
[T-Mobile LG G6 Guides, News, & Discussion] The_Anomalist:
These are the ones I have but there is another one
[T-Mobile LG G6 Guides, News, & Discussion] Josh McGrath:
NM... buggy XDA :mad

---------- Post added at 07:24 AM ---------- Previous post was at 07:21 AM ----------

EDIT: That is for a ZUK smartphone. The partition tables are probably WAY different

Finding/learning building the XML is a PITA
[T-Mobile LG G6 Guides, News, & Discussion] The_Anomalist:
Couldnt we find an xml file already built and edit it? All we would need is the partition if I'm correct
[T-Mobile LG G6 Guides, News, & Discussion] goat_sea:
I'm on the og firmware please let me test anything ?
[T-Mobile LG G6 Guides, News, & Discussion] Globespy:
Are we any closer to figuring this out?

Seems this phone has been the new standard in locked down Android phones.

Surprised something hasn't leaked from LG by now?

Is the main reason I won't ever buy another LG phone. Of course I don't mean anything to their bottom line but they won't see a dime of me and my family's money. And that at least gives me satisfaction
[T-Mobile LG G6 Guides, News, & Discussion] Hex-US:
I mean, they're not obligated to have the T-Mobile variant rooted, just get the unlocked one instead if you care so much for root. Trust me I wish I had it, so when the G7 comes out, I'll get the unlocked US version. I don't think that's any reason why you shouldn't by LG phones; they solidly built this phone and the software is much better than it used to be. The dual cameras come in handy all the time, it's the best multi-purpose phone I've ever used.
[T-Mobile LG G6 Guides, News, & Discussion] zakiyy:
Any update about ROOTING? I am stuck with one phone to unlock... Tmobile App... I need to root to be able to UNLOCK... very strange why we cant root.. Very disappointing
[T-Mobile LG G6 Guides, News, & Discussion] brossovitch:
You can just use the unlock app from T-Mobile. As long as your device is paid off.
[T-Mobile LG G6 Guides, News, & Discussion] zakiyy:
Not paid Off. Buy in China as a second-hand phone. The phone had a DEMO retail version.. I guess was in a shop. But cannot unlock always failed !!
[T-Mobile LG G6 Guides, News, & Discussion] skulldreamz:
I'm sure this has been mentioned ( haven't been through the whole thread yet ) but if we can get a temp root then we can just dd the TWRP that's already compiled
[T-Mobile LG G6 Guides, News, & Discussion] Josh McGrath:
Temp root then flashfire is one option
[T-Mobile LG G6 Guides, News, & Discussion] zakiyy:
Can we use TEMP root?? what are the steps??
[T-Mobile LG G6 Guides, News, & Discussion] FCORivers:
RETAIL DEMO PHONES do not have cellphone antennas. They are as useless as any brick.
[T-Mobile LG G6 Guides, News, & Discussion] Josh McGrath:
That's not true. When I worked for tmobile, my job was to set them up with the software and demo crap. They also, at TMobile require a Sim as per policy and believe me, LP watches the usage on them because people steal the Sim cards.
[T-Mobile LG G6 Guides, News, & Discussion] Arsenic1234:
There are mock demo phones which are dummies.

There are live demo phones with sim cards in them (an actual real phone).

There are live demo phones non activated just using wifi to run like retail mode software.

I cover all 4 major carries as well as third party retailers.

So I dunno where that antenna thing came from but its wrong.

Even if it was a seeded device for a rep, its still a real phone which works.
[T-Mobile LG G6 Guides, News, & Discussion] Knoblauchs:
Nothing yet?
[T-Mobile LG G6 Guides, News, & Discussion] Josh McGrath:
Double post
[T-Mobile LG G6 Guides, News, & Discussion] Josh McGrath:
This thread sure is slow for possible root method about to be released for the G6 and other LG phones
[T-Mobile LG G6 Guides, News, & Discussion] brossovitch:
LOL!

It's coming, you know already. Lets wait though.
[T-Mobile LG G6 Guides, News, & Discussion] pantmunu:
Any source ?
[T-Mobile LG G6 Guides, News, & Discussion] brossovitch:
Yep.
[T-Mobile LG G6 Guides, News, & Discussion] pantmunu:
Link for the source please. I would like to know.
[T-Mobile LG G6 Guides, News, & Discussion] brossovitch:
Look in the v30 forums
[T-Mobile LG G6 Guides, News, & Discussion] SuperPerfection:
link to twrp

Where is the link to the twrp test build?
[T-Mobile LG G6 Guides, News, & Discussion] Barsky:
beating a dead horse.com :)
[T-Mobile LG G6 Guides, News, & Discussion] SuperPerfection:
In regards to root or in regards to getting the img?

Because if its to root:

To clarify a way has been found:

We just need a working twrp image for the LG G6 Tmobile.
[T-Mobile LG G6 Guides, News, & Discussion] omariscal1019:
https://xdaforums.com/tmobile-g6/development/wip-t3619809/page2

Its on the first page he said he has it build a recovery may be u can check it out

---------- Post added at 05:14 AM ---------- Previous post was at 05:01 AM ----------

Check my post i think i found one gotta check to see if its good
[T-Mobile LG G6 Guides, News, & Discussion] MudaTrucka:
It would be pretty cool if someone were to try it, it's a pretty difficult looking task and probably risky as this was only tested on the v30
[T-Mobile LG G6 Guides, News, & Discussion] brossovitch:
Root for h872 is basically here. Give it a few more days and we should have root!

Nothing is going to happen for the v30 though. But v20 and g6 yes! Very excited!

---------- Post added at 03:32 AM ---------- Previous post was at 03:31 AM ----------

https://xdaforums.com/v20/how-to/laf-download-mode-how-root-t3676011
[T-Mobile LG G6 Guides, News, & Discussion] MudaTrucka:
https://xdaforums.com/v20/how-to/root-lafsploit-h918-version-t3773443
[T-Mobile LG G6 Guides, News, & Discussion] brossovitch:
Yep that's the new thread.
[T-Mobile LG G6 Guides, News, & Discussion] runningnak3d:
[MENTION=3505796]KAsp3rd[/MENTION] got me the info I needed. I am going to create an H872 branch later today when I make a few commits to address the issues that were raised by the first batch of people to test it.

Also, the instructions that were posted above have been superceded by a much easier process.

-- Brian
[T-Mobile LG G6 Guides, News, & Discussion] MudaTrucka:
I look forward to this, thank you very much for all that you've done :)
[T-Mobile LG G6 Guides, News, & Discussion] The_Anomalist:
Where can i find the easier method? Is it the one updated in the op?
[T-Mobile LG G6 Guides, News, & Discussion] runningnak3d:
Oh this is far from done.

Even the oldest firmware for the G6 doesn't have the COPY opcode in lafd that is needed for the lafsploit to work (LG plugged that hole before the G6 was released). So I flashed the H872 laf onto my H918 to see if it would boot -- it did and it worked.

It is not guaranteed that the H918 laf will boot on the H872 just because it worked the other way, but [MENTION=3505796]KAsp3rd[/MENTION] is willing to try. That requires a really complicated procedure using the patched LG UP.

If it works, I will pull the SIGN payload out of the H918 KDZ, and add flashing for the H918 laf partition to lglaf so that it will be far easier -- something like flash_laf.py and it will do all the work for you, no LG UP needed.

I don't want to invest that time until we verify that the H918 laf will boot and work on the H872.

So that is step 1. Step 2 is then flashing a build of TWRP, and hoping that IT boots. Step 3 will be to bundle all that up into a nice tidy package that anyone can use to root there H872.

So, here is hoping H918 laf boots on the H872 -- it didn't on the H932 (V30), and that person lost download mode. If that happens, an OTA will come along and flash laf back.

-- Brian
[T-Mobile LG G6 Guides, News, & Discussion] NighthawkXL:
Sounds fantastic. Recently upgraded to a G6 from a G4 and have been waiting to take the plunge back into rooting. Also, just because rooting is the primary focus-- since this is installing TWRP on devices are custom ROMs a go with this or just rooted stock? Thanks for all the work you've done.
[T-Mobile LG G6 Guides, News, & Discussion] runningnak3d:
Once you have TWRP, you can flash whatever you want. I don't think there are many custom ROMs for the H872 right now, but if we can get this working, that will change.

-- Brian
[T-Mobile LG G6 Guides, News, & Discussion] runningnak3d:
Well, I have good news and bad news. The H918 laf boots on the G6 even on 11g (I think that is the latest). The bad news is [MENTION=3505796]KAsp3rd[/MENTION] didn't wait for me, and something he did bricked his phone, so officially root has not been tested.

Unofficially, since laf will boot, I am going to make it safe for you guys to flash (no LG UP needed), and this will work .. booting a laf that had the copy2 COPY opcode was the big missing piece.

[MENTION=3505796]KAsp3rd[/MENTION] Thanks for testing that, but I wish you would have waited for me :(

I am sorry about your phone.

-- Brian
[T-Mobile LG G6 Guides, News, & Discussion] The_Anomalist:
If you pm me the files needed ill give it a try as well. If I lose download mode then ill just wait for an it's no boggy. I have a patched lg up dont know if ots the roght one but its there
[T-Mobile LG G6 Guides, News, & Discussion] MudaTrucka:
I don't wanna be that guy but is there an ETA on when you'll do this? Again though, thank you for all of your hard work
[T-Mobile LG G6 Guides, News, & Discussion] The_Anomalist:
Ok so if it boots on the h872 even on the latest which is what I'm on. So if i were to try to flash the h918 laf to my phone I would still be able to use the phone correct? And if i didnt do anything else the phone would technically boot and if it does that means that we could flash the twrp.img onto laf and misc without issues? I just making sure I understand what going on because im willing to give it a shot.
[T-Mobile LG G6 Guides, News, & Discussion] runningnak3d:
Yep. Here is the problem. Until I can finish my updates to lglaf, you have to use the patched LG UP. It requires flashing the H918 laf, and then pulling the USB cable, and then flashing the H872 KDZ but uncheck laf.

It is very risky. I told you he bricked his phone.

If you want to take the risk, install an IRC client, and join IRC.freenode.net #lglaf

Understand, going in, you will brick your phone. If you have that mindset, then any other outcome is just a bonus.

Or you can wait till I can make it safe.

-- Brian
[T-Mobile LG G6 Guides, News, & Discussion] KAsp3rd:
It's not bricked!! Was just stuck in download mode with no connectivity to the phone
[T-Mobile LG G6 Guides, News, & Discussion] Josh McGrath:
I hate to keep bothering you with these questions , but does the v30 have the copy2 instead of no copy opcode?
[T-Mobile LG G6 Guides, News, & Discussion] The_Anomalist:
Ill take the risk im so ready for root lol the other memeber mentioned his pbone is not bricked so. Send me the patched lg up and ill get to it and do we have a kdz with the latest? H87211g
[T-Mobile LG G6 Guides, News, & Discussion] MetroWestMA:
Guys -- I am an Apple guy but do Android development and just got a 872 and unlocked he bootloader. I have Mint Linux (same as Ubuntu) and experience in hacking Linux and Python development.

So I'll also give it a try and contribute when I can. For a lot of reasons (including some Android hardware we are developing), I need a rooted phone ASAP, so I am motivated to help :)
[T-Mobile LG G6 Guides, News, & Discussion] FCORivers:
How did you do to get it back? Asking for a friend.

---------- Post added at 07:45 PM ---------- Previous post was at 07:40 PM ----------

Who's we? You and LG? [emoji848]
[T-Mobile LG G6 Guides, News, & Discussion] KAsp3rd:
Either the battery died or it was from holding the vol - and power for 60 seconds and it finally rebooted back into Android. I didn't actually brick the phone it was just stuck in download mode.
[T-Mobile LG G6 Guides, News, & Discussion] runningnak3d:
The V30 laf has been stripped of all non KDZ realted opcodes. The only way to flash with V30 or G6 laf is if you have a SIGN payload .. you get that from a v3 KDZ.

V1 KDZ was LP

V2 KDZ was MM

V3 KDZ is Nougat and includes the sign payload.

[MENTION=9074982]MetroWestMA[/MENTION] If you have Python development skills you can absolutely help. Even after all these months, I am much better at Python, but I am still lacking. You don't need to know the laf protocol to help out, I can provide any information on that that isn't already documented.
[T-Mobile LG G6 Guides, News, & Discussion] omariscal1019:
Paitiently waiting... Have inquired about the bounty yet?
[T-Mobile LG G6 Guides, News, & Discussion] runningnak3d:
Yep folks the H872 can be rooted. Now, who is going to cough up the bounty money...... lol

I will release it when we have a working build of TWRP, right now we are using the H918 TWRP, and it can't init the screen, so it is only accessible via adb.

But the H872 has been conquered.

-- Brian
[T-Mobile LG G6 Guides, News, & Discussion] Josh McGrath:
Hopefully everyone who put up a pledge to bounty will do the right thing...

It's the honor system here lol