yashsingh1/xdaforums huggingface dataset:
[ZTE Maven 3  Questions & Answers] 000Nick:
I already did. Both on the OS and in FTM mode. No dice.
[ZTE Maven 3  Questions & Answers] RomLord14495:
Have you tried the old write protection method yet?

---------- Post added at 05:33 PM ---------- Previous post was at 05:29 PM ----------

Run this command in adb shell or terminal

Adb reboot disemmcwp
[ZTE Maven 3  Questions & Answers] Sanras:
status update

Any updates on this? Did the adb reboot disemmcpw command work?
[ZTE Maven 3  Questions & Answers] RomLord14495:
Idk I don't have a computer I've seen that command on a couple forums so I thought someone could try it out it is to disable write protection
[ZTE Maven 3  Questions & Answers] 000Nick:
Not sure - I think this is useful to gain root persistence from what I'm reading. ADB and root tools (like kingroot on pc/android) don't have any more permissions than they did before. We need to somehow exploit FTM or EDL mode for unlocked bootloader, like how the Axon 7 was unlocked. I don't think we'll have any luck with regular userland exploits on Android 7.1.1 with July security update...
[ZTE Maven 3  Questions & Answers] RomLord14495:
Yeah the axon 7 was great to root with exploits I wish so i wish someone had a bunch of free time to make one for this phone
[ZTE Maven 3  Questions & Answers] Merazomo:
Whatever you guys want me to install on this phone; I'll be happy to. A year ago I got the Alcatel Ideal 4060a for $10 on Black Friday, unlocked it for free right away, (this was before AT&T required 6 months of active service to unlock) and now "that" phone is rooted, has it's own TWRP recovery, there's a Custom Rom for it on XDA, etc.

1 year later, I picked up this ZTE Maven 3 on Black Friday for $8, unlocked it for $1.70 online. I hope the similarities don't end there. These phones are great casting devices.
[ZTE Maven 3  Questions & Answers] RomLord14495:
The ideal was a great phone but this zte is stubborn try the write protect command with king root on the first post in this
[ZTE Maven 3  Questions & Answers] Merazomo:
Disabling system write protection before rooting didn't wok. The Maven 3 is recognized by ADB just fine, reboots fine after "Adb reboot disemmcwp", Kingo ROOT completes the root-check to 100%, but it shows the dreaded "ROOT Failed" message.
[ZTE Maven 3  Questions & Answers] Padred:
word?

I have 2 of these sitting on my desk, unopened.

Would like to put in service, but not on AT&T rapine.
[ZTE Maven 3  Questions & Answers] Trysten.D.Tenney:
Try putting the phone in FTM mode and plugging the phone into your PC and run the root program. The only issue with that is it works until the phone is rebooted. That's worked on other ZTE phones I've had. I haven't seen a stable solution yet.
[ZTE Maven 3  Questions & Answers] Merazomo:
That doesn't work either.

If I could just remove those stupid "Play Movies & TV, Play Music, and Gmail" apps I never use, I would be happy. Those apps alone take up around 200mb of storage just being installed, you can't disable them either.
[ZTE Maven 3  Questions & Answers] RomLord14495:
Its annoying im currently looking at making an exploit for root
[ZTE Maven 3  Questions & Answers] greensoto101:
Please do, this phone is really good for the price besides all of the garbage at&t apps
[ZTE Maven 3  Questions & Answers] anasahmad17:
Look forward to an exploit. My storage is already full aftwr installing just a couple of apps. So much bloat from AT&T which is not relevant to me. Only if we can have a working recovery than the bloat can be cleaned.
[ZTE Maven 3  Questions & Answers] c:/Lumia:
have you gotten anything to go to sbin and got a successful root shell yet? im am current looking into getting the phones fastboot enabled to unlock the bootloader and also should go if we can find a bootloader exploit we can easliy get root faster

---------- Post added at 07:59 PM ---------- Previous post was at 07:49 PM ----------

we cant have a working recovery if we dont have bootloader unlocked but we could bump a recovery img so we dont need to bootloader unlock
[ZTE Maven 3  Questions & Answers] c:/Lumia:
guys i think there is a possibly a exploit in the bootloader we can use to get root i was digging around and the snapdragon 200 possibly may have an exploit the only issue is that we will have to get past the dm verity check it does on boot
[ZTE Maven 3  Questions & Answers] RomLord14495:
I may of cracked it guys try running logcat in adb while rooting
[ZTE Maven 3  Questions & Answers] tge101:
Any updates?
[ZTE Maven 3  Questions & Answers] c:/Lumia:
have u tried running logcat during root procedure
[ZTE Maven 3  Questions & Answers] FreakofN:
Debloat Maven 3

Try this : RootJunky has a debloater tool

rootjunky.com/debloater-tool-android
[ZTE Maven 3  Questions & Answers] Padred:
Does not work.

Shows one package, DriveMode.apk which I already have disabled.

I ended up buying 2 X Sandisk Ultra 32GB Micro SDHC UHS-I Card from Amazon.

I also bought a $1 BYOP SIM card pack from Tracfone and put one of the phones I have into service, the other I use for Swagbucks stuff, WI-FI only.

Sure would be nice to get these rooted and cleaned up, the AT&T crap is REALLY annoying.

cheers,

Pad
[ZTE Maven 3  Questions & Answers] Wizav812:
I have a AT&T prepaid ZTE z835 with Android version 7.1.1 and you have to tap the build number in about phone multiple times to get developer options open. I got my developer options open and about to root my phone. But now 7.1.1 has an option in developer options to force move and write apps to SD card or format SD card to internal storage so iPhone is 8 gigabytes hard drive and I had a 16GB SD card so I took the 16GB SD card and formatted it in options to the internal memory of the phone now I more internal memory with the added 16GB SD card formatted to it. You cannot move apps like Google or Google Play movies stuff like that but any other app you can
[ZTE Maven 3  Questions & Answers] Padred:
This is not a flame.

It seems you are confusing memory and storage.

Installed applications take up both.

Storage is not an issue, memory is.

Totally wiping all the crapware/bloat apps off the device would free up precious memory.

No one has figured out how to root this device so you cannot wipe the unwanted apps, they just get reinstalled.

Force stopping the unwanted apps, zeroing the data and cache, and disabling helps a bit, but is not ideal.
[ZTE Maven 3  Questions & Answers] Bowserman16162:
What about with Emode might be an exploit there
[ZTE Maven 3  Questions & Answers] Bowserman16162:
I just download the xda labs app and it's telling me my device classifies as an zte axon 7 even thought I'm using a ZTE maven 3 so we might only have to do what the axon 7 people have to do
[ZTE Maven 3  Questions & Answers] FenyxFyrez:
Possible fastboot?

Turning on the phone while holding both volume buttons seems to make the phone boot with nothing but a red LED showing. Is this some type of fastboot mode maybe?
[ZTE Maven 3  Questions & Answers] RomLord14495:
That is what they call Qualcomm emergency mode or EDL mode

---------- Post added at 08:37 PM ---------- Previous post was at 08:37 PM ----------

I've tried the axon 7 method
[ZTE Maven 3  Questions & Answers] FenyxFyrez:
how did that go?
[ZTE Maven 3  Questions & Answers] RomLord14495:
It didn't work
[ZTE Maven 3  Questions & Answers] Bowserman16162:
You might have found something. I just did some digging and found out that that allows you to unlock the bootloader and stuff like that
[ZTE Maven 3  Questions & Answers] OezE-Red:
Have anything worked yet?
[ZTE Maven 3  Questions & Answers] Aharbin256@gmail.com:
Root maven 3
[ZTE Maven 3  Questions & Answers] Bowserman16162:
Great news I've gotten into both FTM and Recovery Mode. For FTM mode power down the device. Now turn on the device but as soon as you see the ZTE logo press and hold the volume down button. For Recovery mode just do the same thing except instead of pressing volume down press volume up.
[ZTE Maven 3  Questions & Answers] Bowserman16162:
Bump
[ZTE Maven 3  Questions & Answers] Padred:
big whoop-de-doo?

We knew this a few seconds after powering it on the 1st time, its standard operating procedure.

It also provides nothing useful.
[ZTE Maven 3  Questions & Answers] Bowserman16162:
I wish there was a way to copy the system to my computer so I could dig through the code. That would be very useful.
[ZTE Maven 3  Questions & Answers] Bowserman16162:
Guys, big news! We are getting a dedicated forum for the ZTE Maven 3! It will be up within the next day or so.
[ZTE Maven 3  Questions & Answers] Bowserman16162:
Anyways when it is up I'm going to move over there from now on and use that forum, so I'm gonna move this thread to the new forum when it is up.

---------- Post added at 08:25 PM ---------- Previous post was at 08:22 PM ----------

I take back what I said, they already made a forum and moved it to the new forum!
[ZTE Maven 3  Questions & Answers] Bowserman16162:
When I was digging through the data folder of the android folder I saw a folder named System. When I went inside I saw another folder named local. When I opened this I found about 6 or 7 files (disregard the bootanimation.zip file). Anyways people with be phone please have a dig through the files. I don't know coding and stuff very well... (I'll upload a zip file of the files soon)
[ZTE Maven 3  Questions & Answers] Bowserman16162:
Ok everyone here is the zip file of all the files. Please read the README.txt file in the zip as well.
[ZTE Maven 3  Questions & Answers] RomLord14495:
I'm glad I was able to participate in this thread ...

I'm still working on trying a root process

---------- Post added at 06:01 PM ---------- Previous post was at 05:59 PM ----------

Also I got mine in a bootloop after kingo PC froze my phone
[ZTE Maven 3  Questions & Answers] Bowserman16162:
Rip, I am also trying to find a root method as well.
[ZTE Maven 3  Questions & Answers] 000Nick:
Decided to take a look at this again, it looks like we need the Qualcomm Firehose programmer files for our device (or just cpu? MSM8909 = Snapdragon 210) in order to do anything with EDL mode. If we can get that programmer (which I doubt we will), we can flash whatever we want with MiFlash, including fastboot. I'm pretty sure this is how the Axon 7 works kinda? It's on a recent kernel version/security update + 7.1.1... I doubt we will ever get root unless someone can leak the appropriate files or provide a massive exploit (which no one currently in this thread can do).
[ZTE Maven 3  Questions & Answers] RomLord14495:
I'm looking for an exploit it takes time aa and many bricks and many devices
[ZTE Maven 3  Questions & Answers] vis0nz:
Thank you for the effort. I look forward to good results! *Fingers X'd*
[ZTE Maven 3  Questions & Answers] RomLord14495:
News on any new exploits ...also avoid security updates u guys

---------- Post added at 06:20 AM ---------- Previous post was at 06:17 AM ----------

U are usually not supposed to be able to see these files ... Possible way into system maybe.... I'll shall get to work
[ZTE Maven 3  Questions & Answers] Bowserman16162:
Also another thing you guys should get an app called FX File Explorer, it let me view and copy some components of the system

---------- Post added at 03:04 PM ---------- Previous post was at 03:01 PM ----------

Post above this directed towards you.
[ZTE Maven 3  Questions & Answers] Bowserman16162:
Here is an example.
[ZTE Maven 3  Questions & Answers] KJThaDon:
I'm guessing no one ever figured this out?
[ZTE Maven 3  Questions & Answers] 000Nick:
Unless we get the factory Qualcomm programmer files or a major Android bug that affects 7.1.1 is publicly released... no I don't think we will ever get root.
[ZTE Maven 3  Questions & Answers] prepaidunlocked:
King Root Chinese software version

I tried King root, and nothing, I wanted to try the temp root using the PC but when I install King Root I got a Chinese version of the software, is that common with King Root?
[ZTE Maven 3  Questions & Answers] 5un53tt3r:
If you download the root explorer app, root browser, and an app called Kali lenux then open the root browser app it gives you access to all the system/programmer files in your phone including Qualcomm files....a lot of these files I can't open because I don't have anything that can read them and a lot of them are encrypted...I hope this helps find an unlock for the bootloader, I can't wait to root this phone!
[ZTE Maven 3  Questions & Answers] Rvrjei:
I think i found the stock rom "https://www.4shared.com/rar/bUeb2gxNfi/Z835V100B13-BBversionZ835H01.html" and ill try to remove the AT&T apps from the .rar file and flash it with stock recovery...I think unlock bootloader is like axon 7 method with EDL, but we need some expert help.

probably using the magisk, we can root it, but for that we need to patch the boot.img and flash it, but according to the instructions we first need to unlock the bootlader :(

I know that with the MiFlash and the phone in EDL mode we can flash anything, but we still need the original boot.img.

Surely it is in the link with the rom ... But right now I do not have PC to download and verify.

I have many ideas right now in mind. Possibly modifying the Build.prop or removing the AT & T hotspot app, the Hotspot can work outside of AT & T.

As far as I can I will keep you updated
[ZTE Maven 3  Questions & Answers] 5un53tt3r:
I'll have my PC when I get home and I'll try to download the stock rom files to verify them and try the magisk download as well.... I'll keep everyone posted on the results
[ZTE Maven 3  Questions & Answers] RomLord14495:
I have a pic and Dev tools I can help
[ZTE Maven 3  Questions & Answers] George_Jetson:
ROOTED

BIG NEWS Magisk IS WORKING ON THIS FONE,

I Had to USE UAT Tool to flash the magisk modded boot.img to the fone, but if you find the right loader you could use QFIL.

modded boot.img

https://drive.google.com/open?id=1wZiIZ8h348yZqfzmlpxAdoC3EeOf1uba

rawprogram0.xml

https://drive.google.com/open?id=1vxs7Y4aNCnZMw4Aohg4D6XhjoqrJVNpb

find a loader /firehose file and enjoy
[ZTE Maven 3  Questions & Answers] George_Jetson:
Heres the proof
[ZTE Maven 3  Questions & Answers] George_Jetson:
Magisk Working....

wooohooo

Score again To Team Astr4y4L
[ZTE Maven 3  Questions & Answers] George_Jetson:
Team Astr4y4L Wins Again :)
[ZTE Maven 3  Questions & Answers] RomLord14495:
I'll build twrp :)
[ZTE Maven 3  Questions & Answers] andryxd:
Thanks, I have time waiting for the root to this telephoto ..

What are the instructions?
[ZTE Maven 3  Questions & Answers] prashanthca:
This information is pretty much useless, considering folks would need either the firehose mbn file or they need to buy UAT (Uni-Android Tool). You don't even mention how UAT can be used to do this. The screenshots are great, but again, not really useful.
[ZTE Maven 3  Questions & Answers] rickastillo:
Can anybody make some instructions to make the process of rooting this phone? would be awesome to be able to erase all the bloatware
[ZTE Maven 3  Questions & Answers] Bowserman16162:
Oh **** wow gg I actually got a pixel so I stopped paying attention to this forum good job guys it took forever but good job
[ZTE Maven 3  Questions & Answers] Bowserman16162:
Once I get my old maven 3 up and running I will make a tutorial on how to root. I probably will end up porting twrp for the system too.
[ZTE Maven 3  Questions & Answers] rickastillo:
awesome man, that would be great! looking forward for it
[ZTE Maven 3  Questions & Answers] Bowserman16162:
Well I would if the method required was free... Apparently you have to pay like 30 bucks for the software for a month... So the only way I can make a root method is if someone dms me their account there is no way I can do anything.
[ZTE Maven 3  Questions & Answers] rickastillo:
oh well, I guess there won't be any recovery soon, what a bumer, its a nice cheap phone chained with a lot of bloat apps for the tiny memory available , carry limitations ( like the hotspot one)
[ZTE Maven 3  Questions & Answers] Bowserman16162:
Well I've been screwing around with the shell a lot so hopefully I can find something with that. Also ftm mode might be the answer but I don't know how to configure the fastboot commands to work with the ftm mode stuff

---------- Post added at 03:52 PM ---------- Previous post was at 03:33 PM ----------
[ZTE Maven 3  Questions & Answers] amart79196:
Did this process catch a flat tire?

Im surprised that there is no loader for this device at all. If the UAT can bake the loader into their software that means that it does in some format exist. Can't someone pull it out of that and make one that is free to use for the community? Not sure why we would be beholden to having to subscribe to UAT. The Other option listed in the thread is using QFIL and a firehose...but that is all gibberish to me...seems free, but, there actually needs to be someone that actually knows how to accomplish this task.

What is actually needed? QFIL is free download, but it never recognizes the phone when connected. Its just a broken method at this point! We need someone who maybe can get files from one program and get them to work in the QFIL? Im just guessing! Someone VERY smart please chime in!
[ZTE Maven 3  Questions & Answers] Sloogle_Flugelmann:
I found out it has to be in DFU mode (Volume up + Volume down + Power on) in order for QFIL to see it. But I don't know about the firehose/loader file stuff.
[ZTE Maven 3  Questions & Answers] rickastillo:
flat tire, ideed. I don´t see this phone rooted anytime soon, or at all.
[ZTE Maven 3  Questions & Answers] Rvrjei:
How about using the "dd" command, using adb to replace the original boot with the patched boot?
[ZTE Maven 3  Questions & Answers] tronoftroy:
Root obtained

Just got one of these in and i have rooted it!

Running Z835V2.0.0B12

ill come back and post the solution when i get some free time.

Woot!
[ZTE Maven 3  Questions & Answers] vortexnix:
Noob here.. looking forward to the root process. Thanks.
[ZTE Maven 3  Questions & Answers] JHell:
Maybe this could help with getting TWRP for our phone? https://xdaforums.com/android/software-hacking/ide-adk-android-reverse-engineering-t3803044/page1
[ZTE Maven 3  Questions & Answers] tronoftroy:
!!!Warning do NOT install a boot img using the Magisk APP will Brick the device!!!!

Here is they way i root the device. This process will install Magisk enabled boot img.

Attached is the ZTE PST. Install and open.

Choose Z835.

Put Device into FTM. Vol Down and Power.

plug device in to PC.

Click Download Tab.

Choose the "Modified Boot img" folder.

Choose a location for Logs.

Start Download.

Magisk should not grant root permissions.

PS. i need the OTA.zip file for this phone. please can anyone send it to me or post a link. Thanks!

Download : https://mega.nz/#!sWw1XQyI!8sdZvCZweSo31q_O8Vsgdofty74iLqKkUkjaJVdcsAM
[ZTE Maven 3  Questions & Answers] Alijosekt:
Firmware SD Z835V2.0.0B10

https://mega.nz/#!ogQlWQSD!mt4uY6WOPdo7c870MOLzbDdhkVusPvxSer7YXYWsVtY

---------- Post added at 07:19 AM ---------- Previous post was at 06:52 AM ----------

Does it work for this version? Z835V2.0.0B10
[ZTE Maven 3  Questions & Answers] Alijosekt:
Prog emmc firehose zte z835

It works 100% (prog_emmc_firehose_8909.mbn) taken from ZPST for AT&T (ZTE z835)

https://mega.nz/#F!0lIjmYjC!TTVrZVn3ZL6LCWMF4MvDew
[ZTE Maven 3  Questions & Answers] RomLord14495:
It does work
[ZTE Maven 3  Questions & Answers] Alijosekt:
Info

it worked for my previous device.

"About

TWRP Builder is a project that aims at creating Team Win Recovery Project (TWRP) for the devices which don't have their own TWRP support yet.

With our project, TWRP will be created for your device! Download our app, create an account, upload the neccessary files from your device and keep calm! Once we get the TWRP recovery image ready for your device, you will be notified!"

link:

https://twrpbuilder.github.io/
[ZTE Maven 3  Questions & Answers] robotsensible:
So, what one should do to root the device? i've been following this thread for a year. I see user "tronoftroy" posted a small guide but then user "Alijosekt" posted more files. I have the Z835V1.0.0B13.

Thanks in advance guys, and good job !
[ZTE Maven 3  Questions & Answers] Alijosekt:
Firmware Z835V2.0.0B12

[MENTION=2648881]tronoftroy[/MENTION] You can upload the firmware Z835V2.0.0B12? :RE

---------- Post added at 05:05 PM ---------- Previous post was at 04:53 PM ----------

Boot.img version of different firmware, you need to extract boot.img from your firmware and modify it with magisk
[ZTE Maven 3  Questions & Answers] robotsensible:
How do you do that?
[ZTE Maven 3  Questions & Answers] Alijosekt:
Download this firmware and extract boot.img, gpt_main0.bin and gpt_backup0.bin and load it here, I'll modify it

Firmware: Z835V100B13

https://www.4shared.com/postDownload/bUeb2gxNfi/Z835V100B13-BBversionZ835H01.html
[ZTE Maven 3  Questions & Answers] robotsensible:
Here are the files, XDA doesn't let me post links so its obfuscated, note that there was no "gpt_backup0.bin" but instead a "gpt_back0.bin" i put that instead, is that wrong?

Thanks.

Link is

we.tl SLASH t-6uK9Mp590Y
[ZTE Maven 3  Questions & Answers] JHell:
How does everyone have different firmware? I have z835v200B14
[ZTE Maven 3  Questions & Answers] cognus:
Subscribed! On Thanksgiving Day I’m grateful to you warriors who love a root challenge ?
[ZTE Maven 3  Questions & Answers] fharfhank:
Help!
[ZTE Maven 3  Questions & Answers] rikrdospace:
Contact me! from vargas too!

Contact me!

FB: /rikrdomoises

WP: +584142754031

I want root my maven 3

Catia La Mar, Vargas - Venezuela!!
[ZTE Maven 3  Questions & Answers] Alijosekt:
boot mod root https://mega.nz/#F!gkgklIpQ!CNO97ynWCG7QLfJ2q5IgWA
[ZTE Maven 3  Questions & Answers] amart79196:
Hello everyone.

I'm having a problem in Windows 10 where once I get the phone into FTM, and I run the ZPST, I can not to anything further because the phone will not come up in the list of devices in the ZPST program.

Yes, I have installed the following zips: "ZTE Android USB drives 003z; QDLoader HS-USB Drivver_64bitsetup". Nothing seems to get the computer to recognize the device when it is in the FTM mode. Any help would be greatly appreciated.

BTW- When looking in the device manager, there are a bunch issues found. "other Devices" and Android and unknown devices are listed. It seems as though the driver for he FTM mode is not working here in Windows 10. I have tried this on two machines running Win10. Any help for this specific issue is greatly appreciated.
[ZTE Maven 3  Questions & Answers] Sloogle_Flugelmann:
Same problem here. I guess it just won't work on Windows 10. Just shows up as "android" in other devices with an exclamation point.
[ZTE Maven 3  Questions & Answers] amart79196:
I just tried to do this with Windows 7, NO DICE!

So, to all that have had success, please spill the beans....what is up with getting this device to be recognized with Windows 7 or Windows 10 in FTM mode so that we can follow through the rest of the instructions...
[ZTE Maven 3  Questions & Answers] Sloogle_Flugelmann:
EDIT: Okay I figured it out. Boot the phone regularly and connect it to PC. Pull down notification bar and choose usb mode, then select driver install mode and install those drivers. Then it should work.
[ZTE Maven 3  Questions & Answers] amart79196:
Hey Sloogle, can you elaborate on what you flashed exactly.

I have realized that many instructions here say to do many different things, but what I have learned today with my own testing is that you must get the phone into EDL mode, not FTM.

I was able to get the phone into EDL mode by using UAT TOOL 9.0.1 by putting the phone into ADB mode first and accepting the RSA connection to the computer for ADB mode. Then, going through the menu's in UAT, I found the tab that says "reboot" under "android", and choose ADB to EDL. It puts the phone into EDL mode.

Now a few questions still remain:

1. Did you find success in Windows 7, 8, 10?

2. Are you rooted?

3. Did you use MiFlash 2016.08.30.0?

4. If you used MiFlash2016.08.30.0, how in the world do you tell it what XML files (I assuming BOTH are critical) as well as where the boot.img file is and how to execute the operation?