yashsingh1/xdaforums huggingface dataset:
[Verizon Samsung Galaxy S6 Edge] 1chillassmfer:
Will u share the script

---------- Post added at 06:46 PM ---------- Previous post was at 06:45 PM ----------

Why can't we do what they are doing with the AT&T version and an eng boot file and be rooted on mm

---------- Post added at 06:48 PM ---------- Previous post was at 06:46 PM ----------

Hey what's up bro been waiting
[Verizon Samsung Galaxy S6 Edge] MrMike2182:
Unfortunately because they added something to the /system partition called SMU protection which means Smart Manger Unit problem is that that SMU protection was supposed to be removed when I uninstalled knox from my phone but it didn't matter every time I type adb root and then adb remount it says SMU_Protection enabled on /system and that means no root since we cannot mount /system as RW.. Anyone have any clue on how to either get rid of or disable the SMU protection crap that came with knox?
[Verizon Samsung Galaxy S6 Edge] 1chillassmfer:
How did they do it with the AT&T
[Verizon Samsung Galaxy S6 Edge] Rootthisorthat:
Build G925VVRS4DQE1

My apologies, I wasn't sure if I should post in this section so I started a new thread. I'm new here. And I can't seem to delete my own post.
[Verizon Samsung Galaxy S6 Edge] Delgoth:
Can you share the script you wrote?

I would rather use SuperSu than KingRoot really. The only thing hemming me up on that is figuring out which permissions/contexts to assign to which file.
[Verizon Samsung Galaxy S6 Edge] MrMike2182:
Yeah sure here you go.. S6EdgeRootByMrMike2182

You might want to start over fresh since KingRoot is going to be in the way. I do have a KingRoot removal script too but I'd advise you to start fresh instead since I don't trust KingRoot.
[Verizon Samsung Galaxy S6 Edge] Delgoth:
Thank you! I'm going to try and find time today to go over this and the script I made for the Note 5 a couple months back to compare them.
[Verizon Samsung Galaxy S6 Edge] FrankChills:
I'm also wondering about this build # does anyone know if this works for DQE1. I just need to root for simple recovery but this build is giving me hell. Any help would be great.
[Verizon Samsung Galaxy S6 Edge] Delgoth:
If you're using a Nougat Build of Android, I would look at using SuperSu 2.79+, as there are different permissions and seandroid/selinux contexts that need to be set on the files. Marshmallow & Lollipop builds both use different setups as well sometimes.

I will be attempting to use the Beta SuperSu 2.68
[Verizon Samsung Galaxy S6 Edge] BR2JZ:
I'm wondering if I can use this method to flash my phone with a rootable firmware? Right now I'm stuck on a Verizon S6 (G920VVRU4BOG7) which has been notoriously unrootable. I have been dying to root mainly so I can permanently get rid of the Samsung Bloatware as well other features I miss from being rooted. Anyone know?
[Verizon Samsung Galaxy S6 Edge] FrankChills:
Yes i am currently on the Nougat build.
[Verizon Samsung Galaxy S6 Edge] Delgoth:
Based on us being able to fully downgrade the complete firmware of our Device , back to the August 2015 LP build, I have begun compiling a bunch of resources (currently 13 articles and 8 slides presentations) on what is now possible again. At least on the G925V. I hope to post them by tomorrow. Along with all the implications and conclusions I've reached on them all. Because as of now I'm using the Eng Bootloader (sboot) from OJ1, which is newer than the OG7 Bootloader, but also keeps my KNOX counter at 0x0.

I do believe we can still downgrade back a bit further than that. But I've only gone as far as downgrading back to the OG7 Build that the Eng Kernel is based on. This is for better compatibility of any tests being done. Downgrading all parts of the firmware back that far exposes us to a great number of exploits once again.

EDIT: added vulnerability articles

This is what I might consider, professional research into the disassembly & vulnerability of the SM-G925V. I bring this up in light of coming back to this device from the Note 5 and S7E & seeing the device now downgraded to complete OG7 Builds (circa August 2015) W/ ADB Root.

I also have the Eng sboot.bin from the OJ1 Build. This allows KNOX to not be tripped. Although I'm not sure if this bootloader being newer than the build I'm running will patch things before we get to them. Also if because of it being an engineering bootloader, certain things regarding KNOX may not be disable-able. I'm not someone versed in disassembly, but this is what I've found recently.

*****

** 4 Part Primer on Disassembly of the Galaxy S6 'sboot' & "Trusted Execution Environment"

Part 1 (3-7-2017): https://blog.quarkslab.com/reverse-engineering-samsung-s6-sboot-part-i.html

Part 2 (7-28-2017):https://blog.quarkslab.com/reverse-engineering-samsung-s6-sboot-part-ii.html

Part 3 - (7-24-2017) Trust Issues: Exploiting TrustZone TEEs https://leed.ech0t3am.net/index.php?action=selectedFeed&feed=33#6635

Part 4 - (2-28-2017) Code Execution Exploit in Sboot: http://hexdetective.blogspot.com/2017/02/exploiting-android-s-boot-getting.html

*****

Looking at these following links I believe some, (0%<, <=50%), of the vulnerabilties may have actually been patched at the time they compiled the 5.1.1 OG7 ENG Kernel in August. As two months later in October 2015 (Read: the OG9 build) 8 of the 11 exploits found at that time by Project Zero were patched (https://googleprojectzero.blogspot.com/2015/11/hack-galaxy-hunting-bugs-in-samsung.html)

But I'm still reading through and trying to get myself setup to disassemble my own sboot.

********

** Links

QSEE-privilege-escalation-vulnerability

Attacking Android ashmem

BROADPWN: Remotely Compromising Android And IOS via a Bug In Broadcom’s Wi-Fi Chipsets

Reverse Engineering Samsung S6 Modem

Over The Air: Exploiting Broadcom’s Wi-Fi Stack (Part 1)

Samsung SecEmailUI script injection

Samsung Galaxy S6: Samsung Gallery Bitmap Decoding Crash

Samsung Galaxy S6: Samsung Gallery GIF Parsing Crash
[Verizon Samsung Galaxy S6 Edge] MrMike2182:
The G920V can be rooted. I explained how using either the virus infected software while doing it either in a sandbox or virtual machine because after you finish you can delete the sandbox or virtual machine thus getting rid of any potential virus that could have tried to infiltrate and infect your normal PC.. And trying to root on Nougat is no go because it will block you from doing anything at all to the /system partition. It will say DMU_protection enabled on system partition.. And so far there's not much information on how to disable that.
[Verizon Samsung Galaxy S6 Edge] ShadowyStorm:
I'm not entirely sure but I took my old s6e to og7 as well and with eng sboot and eng boot I have full root access through adb... Shouldn't we be able to root from there?
[Verizon Samsung Galaxy S6 Edge] MrMike2182:
If you use my script for the G925V then yes.. It uses adb to root the phone which is why you need root in adb first. It's tether root until I can find an insecure kernel.

Follow this rootfors6ebymrmike2182
[Verizon Samsung Galaxy S6 Edge] kiit408:
im assuming the nand-del deletes the internal memory?
[Verizon Samsung Galaxy S6 Edge] prwolf477:
Not Activated

Will this work on a phone that is not activated?
[Verizon Samsung Galaxy S6 Edge] kiit408:
Yes
[Verizon Samsung Galaxy S6 Edge] Delgoth:
It does to a good degree, from what I've gathered, it really seems like ODIN erases the nand flash except for what is running in order to do the deletion process. But the device will be stuck in a bootlooop or booting to recovery mode if there is no AP file flashed, or if the flashed AP is interrupted during its first boot.

I don't think it erases the /persdata or the /vzw partitions though.

The /persdata partition is where many of their software flags are kept but I lack the skill at the moment to parse the data it contains. There most likely some juicy device details on the /persdata partition.
[Verizon Samsung Galaxy S6 Edge] johnnynmonic:
Did you ever get this working?
[Verizon Samsung Galaxy S6 Edge] Delgoth:
My Phone is stuck in the qcom download mode at the moment and I need the unbrick files for the multidownloader.
[Verizon Samsung Galaxy S6 Edge] planejumper73:
Mine, too. :(

Edit: I let the battery die. Charged it. Then powered back on and it booted up like I hadn't done anything to it. *shrugs*
[Verizon Samsung Galaxy S6 Edge] raven213:
double post sorry
[Verizon Samsung Galaxy S6 Edge] raven213:
how were you able to do this? I was able to get it to P12 boots up fine but once i try to downgrade to OK7 it gives me bootloop
[Verizon Samsung Galaxy S6 Edge] Delgoth:
Bootloops how? When I did that I downgraded from PI2 to OK7 the same way I did from QA to PI. With a clean flash from ODIN. I have most of the firmware packages available for this device and the N920A.

Make sure you have the firmware for the Edge version of the phone and not the flat. You want G925 not G920. The naming conventions on the filename for the LP builds is confusing. I've accidentally flashed G920 stuff a time or two because of it.
[Verizon Samsung Galaxy S6 Edge] raven213:
On mines it keeps restarting over and over after flashing OK7 on P12. :(
[Verizon Samsung Galaxy S6 Edge] Delgoth:
Flashing the whole Odin firmware? Did the file get corrupt on download? What build are you currently on? Can you give me the full build number?
[Verizon Samsung Galaxy S6 Edge] raven213:
Edit:

Build number

MMB29K.G925VVRS4CPI2
[Verizon Samsung Galaxy S6 Edge] Delgoth:
And to be clear you are now trying to install "G925VVRU4BOK7_G925VVZW4BOK7_VZW"?

Here is a good link just incase to the OK7 build

https://androidfilehost.com/?fid=24269982087018504

Here is a link to the OG7 build.

https://www.androidfilehost.com/?fid=24052804347842201

Both of those should work with the eng kernel.
[Verizon Samsung Galaxy S6 Edge] raven213:
this are the files i have
[Verizon Samsung Galaxy S6 Edge] Delgoth:
The reason I unchecked auto reboot in ODIN, was so that when the flashing of PI2 passed and was complete, I held down Power+Home+Volume Down to restart the phone directly back to Download Mode.

From there I fully flashed all of OK7 and then rebooted the device normally and allowed it to boot up. During my flashes, I never actually let the PI2 build boot up.
[Verizon Samsung Galaxy S6 Edge] raven213:
ill try to unchecked auto reboot and nand erased and see if that helps

---------- Post added at 05:44 PM ---------- Previous post was at 05:42 PM ----------

i will try that also ill get back with updates thanks

Edit: what about F.reset time leave that on?
[Verizon Samsung Galaxy S6 Edge] Delgoth:
Yes leave it on. I'll check back in a bit to see what happened.
[Verizon Samsung Galaxy S6 Edge] raven213:
so im assuming you let ok7 fully boot up? if im correct?

---------- Post added at 06:11 PM ---------- Previous post was at 06:01 PM ----------

same :(
[Verizon Samsung Galaxy S6 Edge] Delgoth:
I did. What is weird though is you are having problems now flashing the 5.1 FW. When I first started, messing with the PI2 and PH1 builds about a year and a half ago I wasn't able to flash OK7 either. Later on I flashed without a hitch.

Maybe try flashing back to OG7 first, and then going to OK7. Or go back one build at a time. OK7 is still Bootloader v4 firmware. You can go back to any build that is a 4A, 4B, or 4C firmware.

What steps are you doing specifically?

PI2 boots up normal. That's MM. Now open ODIN turn the phone to download mode.

Uncheck auto reboot. Check nand erase all. Check f. Reset time.

Load the OK7 BL, AP, CP, and CSC file. Flash it.

Once it is done reboot back to Download Mode directly for another flash before booting up.

Check auto-reboot. Now flash the 5.1.1 ENG Kernel in the AP slot.

Now reboot normally. And what happens?

MAKE SURE NO APPS ARE DISABLED ON PI2 FIRST.

The ENG sboot might also help here.
[Verizon Samsung Galaxy S6 Edge] raven213:
where do i get BL,CP, CSC file from?
[Verizon Samsung Galaxy S6 Edge] Delgoth:
If you go back a few posts to the link I gave you for the OK7 firmware and download that zip file. You will find inside the zip file, a tar.md5 file.

If you remove the .md5 and leave the .tar extension you should be to open it in winrar or 7zip. Inside the .tar, you will find all four of the files.
[Verizon Samsung Galaxy S6 Edge] raven213:
are the files call boot.img,cache.img,recovery.img, and system.img?
[Verizon Samsung Galaxy S6 Edge] Delgoth:
Those are typically the files within the AP file.
[Verizon Samsung Galaxy S6 Edge] raven213:
sorry im a noob when it comes to this lol how should i run those files or are those not the correct files?
[Verizon Samsung Galaxy S6 Edge] Delgoth:
When you try to flash the OK7 Build are you using the file "G925VVRU4BOK7_G925VVZW4BOK7_G925VVRU4BOK7_HOME.tar.md5" in the AP slot?
[Verizon Samsung Galaxy S6 Edge] raven213:
yes
[Verizon Samsung Galaxy S6 Edge] Delgoth:
The last thing I can say then without you spelling out like I'm a dummy, the steps you went through during the flash really really specifically, is to redownload that firmware file and try again.

Because I'm honestly not trying to be disrespectful but, flashing the Home Tar in the AP slot of ODIN should be the only thing you have to do. The option of checking Nand Erase All is just for extra peace of mind that all previous settings are removed first.

So unless Verizon has disabled those builds once again from being flashed, there should be absolutely no reason why a perfectly Stock installation of 4BOK7 should not boot up after being flashed over 4CPI2. I've done it like a hundred times. There must be something else going on then.

Did trying OG7 work at all? Or any other 5.1.1 build? The ENG Kernel will work with any of the 5.1.1 builds.
[Verizon Samsung Galaxy S6 Edge] raven213:
i have tried all 5.1.1 and they dont seem to work for me for some reason but all of 6.0.1 seem to work perfect
[Verizon Samsung Galaxy S6 Edge] Delgoth:
What is the newest update/build you've ever installed on the phone? And do you let the device update the security policy after it boots up?
[Verizon Samsung Galaxy S6 Edge] raven213:
i havent updated the phone at all last update it had was 7.0 cant remember what firmware though
[Verizon Samsung Galaxy S6 Edge] Delgoth:
Have you tried using the eng sboot.bin from the combination firmware?
[Verizon Samsung Galaxy S6 Edge] raven213:
how will i be able to do that?

i just went back to G925VVRU4CPD2 this one seems to work also 6.0.1
[Verizon Samsung Galaxy S6 Edge] Delgoth:
Okay I just had this happen to me while downgrading my tablet from 6.0.1 back to 5.0.2, it also bootlooped on the first try.

When I did a factory reset from recovery mode after flashing the LP Build, it booted right up.
[Verizon Samsung Galaxy S6 Edge] raven213:
I have tried that also factory reset on its still the same

---------- Post added at 03:22 AM ---------- Previous post was at 03:21 AM ----------

Do you by any chance have this files?

BL, CP, and CSC
[Verizon Samsung Galaxy S6 Edge] Delgoth:
No, I only have the Home Tar versions currently.
[Verizon Samsung Galaxy S6 Edge] raven213:
damn alright i guess ill stick with 6.0.1 for now and hopefully we get root or something lol
[Verizon Samsung Galaxy S6 Edge] solomon-777:
Hello

Is there any news about bootloader unlock on android 7.0?
[Verizon Samsung Galaxy S6 Edge] charliecv686:
My PC doesn't even detect my S6 Edge (VZW), don´'t know what happened, im not even able to change the options "charging only" to "mtp", i got debug mode on too, to see if that help but not lucky :(
[Verizon Samsung Galaxy S6 Edge] kysta:
:good:
[Verizon Samsung Galaxy S6 Edge] jason696:
6.0-7.0

:D great job
[Verizon Samsung Galaxy S6 Edge] Gary90210:
Hi! I have the SM-G925F version of S6 Edge. The f/w from ts can't be flashed, getting Secure Check: Bootloader error. Have anyone tried to downgrade 925F from 7.0 to 5.1 ? Thank you!
[Nexus 6 Q&A, Help & Troubleshooting] FYBRU:
I recently had to replace the motherboard on my Nexus 6. I could only find refurbished ones, and bought one on AliExpress, with item description clearly specifying as unlock. I installed it, and it appears it is actually locked status 2. Looks like demo version used in T-Mobile retail network. Some settings inaccessible u such as developer mode or Apps. Trying to get refund but both AliExpress and the vendor are in denial mode.

I have 7.0, NBD92G installed. Very hard to unlock as I cannot access developer mode to allow usb debug. Pressing build nr several times won't help. I get message "you're already a developer" but actually usb debug does not work.

Anybody can help?
[Nexus 6 Q&A, Help & Troubleshooting] ShernDog:
Go download factory image from Google and flash it manually by using the command prompt.
[Nexus 6 Q&A, Help & Troubleshooting] Strephon Alkhalikoi:
[MENTION=5281391]ShernDog[/MENTION]: He can't as his bootloader is locked. He can however download an OTA and sideload it.
[Nexus 6 Q&A, Help & Troubleshooting] FYBRU:
Thanks. You are right, bootloader is locked too. Would there be any instructions somewhere on your proposed solution (sorry I am rather inexperienced user).
[Nexus 6 Q&A, Help & Troubleshooting] FYBRU:
I think I figured out how to do this but the other question is whether I won't be stuck afterwards being requested to enter the only registered user's login which I do not have (I cannot register a second user, as this setting screen is locked too). Do I need to sideload the OTA corresponding to current version / build or can I sideload an older one?
[Nexus 6 Q&A, Help & Troubleshooting] Strephon Alkhalikoi:
Download the oldest OTA available, as long as it is a full system OTA (easily detectable by size). You're going to have to bypass Factory Reset Protection to be able to resolve this, and the older the OTA, the better.

If this doesn't work, you're going to have to fight with the place you got the motherboard from, and file a chargeback with your credit card company if need be.
[Nexus 6 Q&A, Help & Troubleshooting] FYBRU:
Ultimately I can go for the refund, but there is no place where I can find 64 GB MBs outside China, which means I'll have to wait again for something like 3 weeks with poor backup device, and with no certainty I don't receive again a locked MB.

I tried with 6.0 OTAs (page with instructions I followed: https://developers.google.com/android/ota#shamu) and even with just older versions of 7.0, I got every time abortion after about 45% installation, with the msg that I cannot update with older versions.

I am a bit confused now, I just tried to install same build as what I had installed (https://dl.google.com/dl/android/aosp/shamu-ota-nbd92g-2b65257b.zip), it worked but it looks like absolutely nothing has changed on my phone. I thought it would have erased pretty much everything. Am I missing something?
[Nexus 6 Q&A, Help & Troubleshooting] Strephon Alkhalikoi:
OTA updates don't wipe system. That's why nothing changed.

Ultimately, I think you're going to have to go for the refund and take the risk that the next motherboard you get is going to be locked. Unless the version of Android you're on can have its FRP bypassed - and I don't think it can - you're stuck.
[Nexus 6 Q&A, Help & Troubleshooting] FYBRU:
Thanks, bad news. Would it be worth trying wipe data / factory reset accessible from the recovery mode + power/volume up menu ?
[Nexus 6 Q&A, Help & Troubleshooting] Strephon Alkhalikoi:
You can try it, but it won't help. Doing a factory reset will cause Factory Reset Protection to kick in, meaning you'd need to know the original owner's account information.
[Nexus 6 Q&A, Help & Troubleshooting] FYBRU:
Surprisingly it worked. I could log in with the google account I used before the reset. Everything works, but indeed I was expecting some more difficulties
[Nexus 6 Q&A, Help & Troubleshooting] Strephon Alkhalikoi:
[MENTION=8346684]FYBRU[/MENTION]: This is one of those times where I'm pleased to be wrong. LOL.

Glad you got it resolved.
[Xperia Z5 Android Development] RyTekk:
This is AOSP for Sony Xperia Z5 (Sumire) (E6653)

SonyAosp build will always mainly based on AOSP with some Material stuff

/*
* Your warranty is now void.
*
* I am not responsible for bricked devices, dead SD cards,
* thermonuclear war, or you getting fired because the alarm app failed. Please
* do some research if you have any concerns about features included in this ROM
* before flashing it! YOU are choosing to make these modifications, and if
* you point the finger at me for messing up your device, I will laugh at you.
*/

IMPORTANT: Make sure you have an unlock Bootloader

Please if you have Locked Bootloader you may check this http://developer.sonymobile.com/unlockbootloader/

WORKING
- RIL
- Mic
- Sound (Speaker and Headset)
- LED
- Thermal Manager
- Audio and Video Decoders/Encoders
- Camera (WIP)
- Recovery (Only for flash signed zips)

XDA:DevDB Information

Android Open Source Project, ROM for the Sony Xperia Z5

Contributors

RyTekk, davidteri91

Source Code: http://github.com/SonyAosp

ROM OS Version: 7.x Nougat

ROM Kernel: Linux 3.10.x

ROM Firmware Required: Unlocked Bootloader

Based On: AOSP

Version Information

Status: Beta

Beta Release Date: 2017-06-04

Created 2017-06-16

Last Updated 2017-06-16
[Xperia Z5 Android Development] RyTekk:
Reserved
[Xperia Z5 Android Development] RyTekk:
Download​

Follow to be adviced for new builds​

This ROM has included GAPPS

Steps for Flash

[FONT="Arial"][SIZE="3"] fastboot -S 256M flash boot boot.img [/SIZE][/FONT]
[FONT="Arial"][SIZE="3"] fastboot -S 256M flash recovery recovery.img [/SIZE][/FONT]
[FONT="Arial"][SIZE="3"] fastboot -S 256M flash system system.img [/SIZE][/FONT]
[FONT="Arial"][SIZE="3"] fastboot -S 256M flash userdata userdata.img [/SIZE][/FONT]

You don't need flash userdata everytime .... only first time ..... userdata.img will wipe your data... you may adviced ​
[Xperia Z5 Android Development] RyTekk:
For those who wanna install this ROM on dsds device. Open build.prop and edit following:

Find and delete ro.telephony.default_network=9

Adding those lines:

# DSDS Modem Bringup
persist.multisim.config=dsds
persist.radio.multisim.config=dsds

# System props for telephony DSDS
ro.telephony.default_network=9,1

Optional:

Replace

all 6653 -> 6683

all sumire -> sumire_dsds

ro.product.model=Xperia Z5 (AOSP) -> ro.product.model=Xperia Z5 Dual (AOSP)
[Xperia Z5 Android Development] Ayriksa:
A very nice rom
[Xiaomi Redmi Note 3 Questions & Answers] gsp3rm:
Greeting to all,

I want to ask on my RENO3 that are having no service error. The first time it happend is suddenly (ROM stock MIUI 7 global version). But after stock update to MIUI 8 through system update, the problem is gone. But today, once again the no service came back. Tried to turn radio ON in Phone update still nothing. No change can be made in phone information. Please assist to show the way...thank you.
[Xiaomi Redmi Note 3 Questions & Answers] gsp3rm:
updates on what I did.

1. I did flash NON-HLOS.bin from the same ROM and still "No Service".

2. Flash MIUI 8.2.4.0 from 8.0.6.0 using updater apps. (ROM downloaded from MIUI website). Still "No Service".

Now I am started to think that it is hardware problem. But seeing so many "No Servoce"problem on Xiaomi device does gives me some hope.

Hope theres some help.
[Xiaomi Redmi Note 3 Questions & Answers] Androbots:
Go to settings about device and then status an f2f then send a screenshot from there.
[Xiaomi Redmi Note 3 Questions & Answers] gsp3rm:
What do you mean by status an F2F? Sorry Im not familiar.

But an update on what im doing on the RENO3,

1) After updating to 8.2.4.0 I tried reflash NON-HLOS.bin from the same ROM (8.2.4.0) through fastboot, I got the signal again. But until the battery was down to like 20%, again the "No Service"is back. But this time it was intermittent, as after recharge to more than 50%, there was network again. For now, I do not know if the problem will reoccur again.
[Xiaomi Redmi Note 3 Questions & Answers] Androbots:
Surely a hardware problem and f2f was typo sorry about that.