yashsingh1/xdaforums huggingface dataset:
[Samsung Galaxy J3 (2017) Questions & Answers] HACK3DANDR0ID:
We figured out how to disable FRP, Just remove all accounts. someone and myself reported issues with AZ. And something labeled J327T shouldnt need to be changed to match said device.
[Samsung Galaxy J3 (2017) Questions & Answers] :
yea and well i think to get az autoroot to work we gotta unlock the bootloader. it says secure check fail which means it isnt signed. if we disable secure boot (which is enabled by default) we can flash the recovery and it should avoid the secure check failed error.
[Samsung Galaxy J3 (2017) Questions & Answers] craftress:
Can someone this method? The only problem is it's in Spanish. I find this on youtube under the title

"Quitar cuenta Google (FRP) Samsung Galaxy J3 Prime " I am not allow to post outside link yet. It would be great if someone could look at the video and try it out. Thanks.
[Samsung Galaxy J3 (2017) Questions & Answers] :
Edit: method doesn't work
[Samsung Galaxy J3 (2017) Questions & Answers] HACK3DANDR0ID:
i worked with the dev of AZ Root and we tried a few things and unfortunatly because of the lock bootloader he said we need a eng boot.img.
[Samsung Galaxy J3 (2017) Questions & Answers] seaf0ur:
I've tried this at least 15 times. The j327t combo does not make persistent changes on a j327t1.

It says its an emulated device, and it acts like a live usb.

The settings in the j327t combo has no accounts to delete and upon creating one, it forgets you ever did it once you reboot.

I sincerely wish it were that easy on this device.

In addition, the exynos_cpu tar file that flashes userdata which works on most exynos samsungs to remove frp does not work here either.
[Samsung Galaxy J3 (2017) Questions & Answers] :
https://www.xda-developers.com/galaxy-s8-snapdragon-root-system-rw/

this could be promising since our device is made similarly to the s8 but the chipset is different.

---------- Post added at 04:01 AM ---------- Previous post was at 03:56 AM ----------

A new device thread has been opened. Everyone please continue at: https://xdaforums.com/galaxy-j3-2017/help/sm-j327t-root-method-custom-recovery-t3653477
[Samsung Galaxy J3 (2017) Questions & Answers] HACK3DANDR0ID:
Waiting for instruction!
[Samsung Galaxy J3 (2017) Questions & Answers] Saul-66:
I'm hoping someone figures out the bootloader soon. Haveing both samsung and google dominating this little phone is seriously putting it in jeopardy. Never had a samsung phone before. But I don't foresee this one being around long.
[Samsung Galaxy J3 (2017) Questions & Answers] bobbyp1086:
Wrong azroot is for the on5 the default.Prop as well as every other file is written for the on 5. With cf you get the filed got your phone

I'm thinking we need to root the combo firmware before flashing or turn off the emulator and make it a real rom
[Samsung Galaxy J3 (2017) Questions & Answers] NixKo:
I have tried you way of removing frp lock multiple times to no avail, just simply flashing the factory binary does not save anything because it emulated, if thats how you removed it on your device could you elaborate anymore on how you did it?
[Samsung Galaxy J3 (2017) Questions & Answers] :
please ignore that method it does not work and since xda does not have a delete post option i cannot delete it. sorry.
[Samsung Galaxy J3 (2017) Questions & Answers] NixKo:
oh ok thank you for the reply
[Samsung Galaxy J3 (2017) Questions & Answers] seaf0ur:
As much as I've played with the frp lock, I believe this has been patched to cover all the previous exploits.

I simply cannot get anywhere with any of the normal methods. There is no accessibility aside long-pressing 2 fingers which goes nowhere, there is no "assist" on selecting text, you cannot get to google terms of service, you cant flash exynos userdata like old models and a OTG cable does not seem to be active until after you get past the lock.

edit: even when connecting to an xfinity hotspot, I get a error somewhere along the lines of: unable to open a web page to login to this wifi due to a factory reset.
[Samsung Galaxy J3 (2017) Questions & Answers] NixKo:
it sucks i got the same results you did i guess until someone finds a new way past i dont think we are going to get past frp
[Samsung Galaxy J3 (2017) Questions & Answers] seaf0ur:
false.

somebody smarter than me will alter the combo to cease acting as an emulation or something similar to flash past this I'm sure.
[Samsung Galaxy J3 (2017) Questions & Answers] :
I think i found out something. The j3 prime for both tmobile and metropcs has an exynos chipset. Why am i mentioning this you may ask. Well from research i have found that exynos chipsets are usually never bootloader locked while snapdragon variants is bootloader locked. Further research shows that the exynos 7570 (in the j3 prime) was made in august 2016 and was intended to be a budget chipset. With this knowledge in hand one can assume we can flash a custom rom or recovery. The only way to tell if our device is locked is to test a file other than az_autoroot. If it shows a message on boot saying security error then it is locked. If it says an error occurred while updating the device software then theres some other security mechanism that can be cracked somehow. While looking through the bootloader files after downloading the stock rom i found images that the bootloader can show. If we can disable secure boot i think we can crack this.
[Samsung Galaxy J3 (2017) Questions & Answers] HACK3DANDR0ID:
i tried this a few times and got secure lock cache and recovery
[Samsung Galaxy J3 (2017) Questions & Answers] :
thats because of secure boot being enabled.
[Samsung Galaxy J3 (2017) Questions & Answers] bobbyp1086:
So been frp bypassing for a while, you need abd enabled on nougat. And that's easy just extract sboot edit build.Prop and insert adbkey where appropriate.

Also I found this see image

What can we do?
[Samsung Galaxy J3 (2017) Questions & Answers] HACK3DANDR0ID:
does this have something to do with a "token" we may or may not need?
[Samsung Galaxy J3 (2017) Questions & Answers] bobbyp1086:
Its the key to the firmware. Its Samsung's signature!!!
[Samsung Galaxy J3 (2017) Questions & Answers] :
holy **** it is!! looks like now we can build a custom recovery with the signature and we dont gotta unlock the bootloader. If anyone develops a twrp post it in the guide section of the j3 (2017) thread.

---------- Post added at 07:34 AM ---------- Previous post was at 07:21 AM ----------

we have gotten the signature to samsungs firmware thus possibly bypassing the locked bootloader.
[Samsung Galaxy J3 (2017) Questions & Answers] bobbyp1086:
Yes that is to remove it but i have yet to see one of these in any file we flashed before

i agree this is a step maybe to a new exploit for samsung devices period
[Samsung Galaxy J3 (2017) Questions & Answers] :
it is possible. and also i read up on root progress for the s8. they have got root on the snapdragon variant by using an exploit which means it would possibly work for our device too which also means we got two options now use the exploit or make our own signed "samsung" custom recovery or even a rom.
[Samsung Galaxy J3 (2017) Questions & Answers] bobbyp1086:
I think the signature might be device specific, or even circled against another in there somewhere

---------- Post added at 03:56 PM ---------- Previous post was at 03:53 PM ----------

Anyone else got an update?
[Samsung Galaxy J3 (2017) Questions & Answers] :
theres only one way to test it.
[Samsung Galaxy J3 (2017) Questions & Answers] HACK3DANDR0ID:
i dont mind testing
[Samsung Galaxy J3 (2017) Questions & Answers] :
since me and bobbyp has the metropcs version we are the first to test. then we will move on to testing it on the tmobile phone. we do not know if it is device specific or not and in order to test it we gotta wait to build a twrp recovery which may take a week or two depending on how experienced the person making it is. ashlyx can help with that because shes a recognized developer.
[Samsung Galaxy J3 (2017) Questions & Answers] HACK3DANDR0ID:
Please don't forget about the rest of us!
[Samsung Galaxy J3 (2017) Questions & Answers] :
lol im not forgetting about anyone. Theres no way you can pm ashlyx bc of her privacy settings. shes gonna be in the forum just like all of us is. and if i am correct it should work on both the metropcs and tmobile versions. i have no coding experience so i wont be able to make the recovery. since mentioning that it means i am a tester also.
[Samsung Galaxy J3 (2017) Questions & Answers] bobbyp1086:
I'm hoping in shower then I'll upload and share
[Samsung Galaxy J3 (2017) Questions & Answers] seaf0ur:
I thought the same. With the exynos_cpu.tar working for almost all exynos samsungs and the qualcomm_cpu.tar working for the rest, the fact that they did not work on this model - combined with the patches to things like browser access and lack of terms of service, I've been under the impression that we are looking at a new set of security in this device and that once a workaround was found, it'll be likely to work on future models.

I've also got the metro, I'm willing to test as well.
[Samsung Galaxy J3 (2017) Questions & Answers] bobbyp1086:
OK uploading and heading to Starbucks to test

---------- Post added at 05:18 PM ---------- Previous post was at 05:15 PM ----------

Also I will upload adb enabled firmware for our device flash and use adn commands to bypass

---------- Post added at 04:43 PM ---------- Previous post was at 04:18 PM ----------

https://drive.google.com/file/d/0B862bO7fghEfLU8zZUU3aEpPMVk/view?usp=drivesdk

This is the key. My laptop died gotta wait for frp bypass
[Samsung Galaxy J3 (2017) Questions & Answers] HACK3DANDR0ID:
**** i dont know what to do with that file.....
[Samsung Galaxy J3 (2017) Questions & Answers] bobbyp1086:
I found it using 7zip. Open archives with the * its in boot.Img>8.Gz>8>sbin
[Samsung Galaxy J3 (2017) Questions & Answers] HACK3DANDR0ID:
yea let me know when said is ready to test....
[Samsung Galaxy J3 (2017) Questions & Answers] bobbyp1086:
ok who has 7zip and some basic knowledge?

i have an idea but imy phone isnt working rn
[Samsung Galaxy J3 (2017) Questions & Answers] HACK3DANDR0ID:
You cant build tar files?
[Samsung Galaxy J3 (2017) Questions & Answers] bobbyp1086:
o i can my phone just cant get to dl mode, its completly drained thought i had it plugged in.i just want someone to extract the default.prop from sboot, edit or change and repack flash and lemme know...
[Samsung Galaxy J3 (2017) Questions & Answers] HACK3DANDR0ID:
All i know is flashing tar files via Odin....sorry
[Samsung Galaxy J3 (2017) Questions & Answers] ashyx:
Unfortunately not.

There's not a lot you can do with a public key. In any case it's just a digital certificate. Likely used to verify the integrity of the firmware for updates and such like.

Not only that it will be hashed to that particular firmware. You wouldn't even be able to reverse engineer it as the encryption used means you'd need about a thousand years and just as many high powered computers.

Samsung would never be so lax as to inadvertently put its private signing key in the Ramdisk of a boot image. There wouldn't even be a need to.

Could you imagine the ramifications of such a faux pas?

Every Samsung device comprised

You see these types of keys in the Ramdisk all the time and aren't of any value as far as rooting goes.

I don't like to put a downer on things, I've been watching this thread and a few times I've been tempted to interject as I've seen you and a few others try things that I just knew were going to be fruitless.

However I promised way back in this thread I wouldn't interfere so just let it play out, but seeing as I was mentioned directly I felt it did elicit a response.

I admire the determination in this thread and maybe, even though it was pretty much going to be a foregone conclusion that the methods tried would fail, it's good to gain experience as you probably now have a better understanding of how the mechanism of these things work.

Like they say better to have tried and failed than not at all.

I'm aware of the progress with the S8, however as far as I was aware up to this point they haven't got a useable system wide root
[Samsung Galaxy J3 (2017) Questions & Answers] bobbyp1086:
Welcome back, the boot image i have that has this has a bunch of new files i havent seen before. any pointers as were a good place may be to look to get any insight or even maybe, just maybe, catch samsung slipping?
[Samsung Galaxy J3 (2017) Questions & Answers] ashyx:
Samsung change they way they do things all the time and I've seen these keys in the Ramdisk of other devices.

Unfortunately it's the opposite of what you think, it's not a helping hand, it's just another security measure and therefore another hurdle to get past.

Samsung are serious about security, their whole corporate business and reputation depends on it.

If there is going to be an exploit I doubt it will be a Samsung slip up, moreover more likely to be be just another flaw in either Google's or some hardware OEM's code that can be taken advantage of.
[Samsung Galaxy J3 (2017) Questions & Answers] bobbyp1086:
totally understandable, that key wasnt in our device it was a diferent one i was working on for frp bypass and got a little giddy, MY BAD GUYS, any place tho i can look to get a better understanding of the oem lock? maybe a command to re-enable the option in settings?
[Samsung Galaxy J3 (2017) Questions & Answers] :
oh yea i did notice when i took a look at the certificate that it was RSA encryption which does have a public and a private key. it isn't practical to try to bruteforce the key as you have said it would take a thousand years lol. but luckily the people working on the s8 (snapdragon variant) has used some exploit to get root. hopefully we can learn how they did it sometime soon.
[Samsung Galaxy J3 (2017) Questions & Answers] ashyx:
See the thing is OEM UNLOCK is pretty much useless on a bootloader locked device. Likely the reason it doesn't even exist.

As far as Samsung devices go OEM UNLOCK does not actually unlock the bootloader.

OEM UNLOCK is even available on devices shipped with unlocked bootloaders.

It's function is to set a flag to the boot loader that FRP is disabled.

FRP is Google's security mechanism and has nothing to do with Samsungs bootloader lock.

OEM UNLOCK only has the ability to disable FRP and allow unsigned firmware to be flashed without triggering FRP.

No matter what, Samsungs locked bootloader will reject any unsigned firmware usually producing a SECURE CHECK FAIL error on the device screen.

This means no modified boot.img or custom recovery can be flashed.

It's sad and locked bootloaders are the devil.
[Samsung Galaxy J3 (2017) Questions & Answers] :
https://xdaforums.com/galaxy-s8/how-to/progress-root-progress-thread-g950u-t3655239 check this out.
[Samsung Galaxy J3 (2017) Questions & Answers] Relyt2012:
So is Samsung for us atleast.
[Samsung Galaxy J3 (2017) Questions & Answers] bobbyp1086:
I know you hate arguing with the inferior ? butttttt....Remember the J320a? Well as it so happens you said the same thing they're and I flashed my 320a att to 320az cricket and unlocked bootloader as well as flashed custom recovery
[Samsung Galaxy J3 (2017) Questions & Answers] ashyx:
Both those devices have locked bootloaders as far as I'm aware which is why we needed the eng boot for the root method I posted.

Yes there is another method now because the eng root boot image became available which had ro.secure=0 set. Giving a root shell.

However I would like you to elaborate on your apparent ability to unlock a locked bootloader and install a custom recovery as it's a first.

By the way no one is inferior, just less informed. ;)
[Samsung Galaxy J3 (2017) Questions & Answers] bobbyp1086:
i knw inferior was a joke...idk how it worked i can try to get screen shots, digitizer gone. but i just flashed the 320az file by accident next boot instead of att it was cricket then twrp for the device, i believe it was a different variationb yet again, phone was just for messing around
[Samsung Galaxy J3 (2017) Questions & Answers] ashyx:
OK, just so I can get a handle on this, can you provide more detail.

I'm not surprised the 320AZ firmware flashed over an ATT device as they are pretty much one and the same. The reason why the ATT eng boot works for both models.

However i'm at a loss as to how this could possibly unlock a bootloader.

Did you actually boot to TWRP successfully and from which device did you use TWRP from?
[Samsung Galaxy J3 (2017) Questions & Answers] bobbyp1086:
One sec plugging it in now I may need to repair screen but no worries near the end my phone didn't even recognize itself as a phone
[Samsung Galaxy J3 (2017) Questions & Answers] bobbyp1086:
OK I flashed the twrp for I think the j320p it booted into twrp but hot the att wall after then I flashed to crikey
[Samsung Galaxy J3 (2017) Questions & Answers] ashyx:
So you actually booted in to a workable twrp? Screenshot?

Is there another thread where all this happened?
[Samsung Galaxy J3 (2017) Questions & Answers] bobbyp1086:
It booted yo twrp can't get screen shots screen went out, haven't seen it before but I tell you its weird because I know some have locked boots some don't, I will try my best on the morning to show you. As stated it does cause the att screen saying "take to a store" after twrp. I also had xfinity wifi only on that device for live. Never needed to put in pwd
[Samsung Galaxy J3 (2017) Questions & Answers] ashyx:
OK humour me, did you actually boot to a workable TWRP. IE, could you access all options, backup, restore etc?

What does it mean 'the screen went out'?

I'd appreciate screenshots of this.
[Samsung Galaxy J3 (2017) Questions & Answers] bobbyp1086:
My digitizer is fine shattered screen but I can hook up to computer. And yes I tried fishing supersu, and that's when I got the att screen
[Samsung Galaxy J3 (2017) Questions & Answers] ashyx:
So to be clear, you actually got as far as booting into TWRP then managed to flash SuperSU with it?

Can you do this again via your PC and video it? I'd also like to see the recovery log after flashing.

I'm intrigued as to how this would even be possible.:eek:
[Samsung Galaxy J3 (2017) Questions & Answers] bobbyp1086:
Yes ma'am. Idk I have bricked and flashed and killed this phone so many times the steps I took was

Flash 320az engboot

Flash that funky xposed

Use any app capable of making busybox, supersu, flash fire, titanium and lucky patcher system apps

Flash twrp img, I'll find out which one and update

Don't auto reboot

Reset Odin and flash twrp again

Then power down (not reset)

Power up to recovery and blam you not only keep root but also your most important apps
[Samsung Galaxy J3 (2017) Questions & Answers] NixKo:
My device is in working order aside from frp lock do you think i would be able to recreate your results?
[Samsung Galaxy J3 (2017) Questions & Answers] bobbyp1086:
I honestly couldn't tell you. I was shocked that no matter how many times I flashed and reset xfinity was free everywhere.
[Samsung Galaxy J3 (2017) Questions & Answers] :
xfinity gives me 20 connected devices at a time via hotspot.

The xfinity account has a login page that I can go to to see my "connected devices" the server remembers the mac address of devices to auto-login for convenience...
[Samsung Galaxy J3 (2017) Questions & Answers] :
https://xdaforums.com/galaxy-s8+/development/root-g955u-g955u1-snapdragon-sampwnd-t3658911

in the future it is possible to use a similar method like this on our devices. We need experienced people to develop this for our device otherwise almost all hope is lost.
[Samsung Galaxy J3 (2017) Questions & Answers] :
Android 8.0 (Oreo) has been released and is rolling out to googles devices. If you are wondering if samsung is going to release android 8.0 for the j3 prime? well look no further samsung has confirmed via live chat that this device is going to get the update eventually.

---------- Post added at 07:09 PM ---------- Previous post was at 07:03 PM ----------

http://www.samsung.com/us/mobile/phones/all-other-phones/galaxy-j3-16gb-2017--unlocked--sm-j327uzkaxaa/ if anyone is able to or want to. try ordering the unlocked version of our device. all you need is a sim card. if that phone has an unlocked bootloader then we can root the device no problem. it will work on any carrier. gsm or cdma carriers will work on this phone.
[Samsung Galaxy J3 (2017) Questions & Answers] Relyt2012:
When it is semptember 14th, my 3 months are up. Then I can finally unlock my metro pcs phone. Maybe ill get an unlocked software update?
[Samsung Galaxy J3 (2017) Questions & Answers] :
it doesnt work like that lol. unlocked devices (by using the unlock app) are only able to be transferred to another cell phone company. the unlocked variant that is sold by samsung directly usually have an unlocked bootloader and it is network unlocked too.
[Samsung Galaxy J3 (2017) Questions & Answers] KevMetal:
A carrier subsidy lock has nothing to do with the bootloader or root ....bootloader is the first thing that runs on your android and is responsible for loading your operating system ....if it is locked it will only load an os or rom signed by the manufacturer ..

Carrier subsidy lock just locks down your phone to a specific carrier ( the one who subsidies your phone ) because they want you to only use their network . Your phone could be rooted and still be carrier locked ...or your phone could be carrier unlocked and any simcard would work in it but your bootloader locked .

I think you guys are grabbing at straws in desperation for root . That's okay but read up om things a little first to save face & mostly time .

There is a small possibility someone might find a software exploit in the official samsung os that can be exploited to get root without bootloader unlock ..

Alternatively you need to find or wait for someone to find a way to bypass or unlock the bootloader so a custom recovery can be loaded and a boot image patced so you can run magisk and other stuff ...

It is true an Eng boot image might be found that could assist like in some other devices or that some other loopholes may be uncovered but i think its hardly likely that a bunch of guys with minimal coding knowledge will stumble onto a loophole by accident .

I don't think Bobby has twrp or root running ..i dont understand his problems with his computer and phone that he keeps talking about ..

When I tread on Ashyx toes by saying I don't think an exploit is impossible I was just trying to say the above ...

First is the bootkoader locked ?

Yes / no

If no , no problem make a custom recovery

Does the device have adb and can you select oem unlock in the settings and can you boot into fastboot to do a booloader unlock

Yes/no

If no you will struggle

Can you enable the missing oem unlock option through adb ?

No/yes

If no its getting really dismal

Is there any eng boot image or any known soft exploits available or any signed image that can enable fastboot ?

No / Yes

If no then you will have to wait for a experienced person with programming knowledge to decide to actively look for an exploit and hopefully release it

[MENTION=4899305]ashyx[/MENTION] IMPROBABLE because it is not a big name device but as ive said before not IMPOSSIBLE.
[Samsung Galaxy J3 (2017) Questions & Answers] ashyx:
Sensible post, correct and shows you have an understanding of how these things work.

However I have never said rooting a bootloader locked device is IMPOSSIBLE?

Why would I? Considering the amount of devices I have already rooted with locked bootloaders.

I have always maintained that root is highly unlikely without an exploit or engineering firmware aquired.
[Samsung Galaxy J3 (2017) Questions & Answers] KevMetal:
My memory has been known to skew facts :good:

And very true . So here's to future exploits and unlocks ..who knows what will be around the corner .