yashsingh1/xdaforums huggingface dataset:
[Fire TV Original Android Development] vasir13:
Hello,

Already asked in other subforum. I rooted the system just fine, but got STUPID and updated Magisk via UI. After that the system is boot looping. Reapplied the patch to get into TWRP and installed the newest rom from rbox. Now it just sits at amazon fire sign. Wiped system and sideloaded the rom again .... no luck. Any ideas?

Resolved the issue.

via OTG cable, press esc for 5 sec .... (because the exploit is already there), I have mouse, kb and a usb stick on a usb hub connected to the OTG cable. installed older magisk version via TRWP from usb stick and rebooted.

Works now ...
[Fire TV Original Android Development] Stbennet:
Thank you, vasir13. This worked for me as well...eventually.
[Fire TV Original Android Development] navin23:
I'm getting this error when i tried to root my 4k stick. I downloaded the ISO file and created a live usb; I also tried to update the software on the stick and try again same error. I will try later on with an Ubuntu laptop and see what happens. Let me know if I'm doing something wrong. Thanks

[root@sysresccd /tmp/kamakiri]# ./bootrom-step.sh
[2019-10-14 12:37:05.613905] Waiting for bootrom
[2019-10-14 12:37:54.098384] Found port = /dev/ttyACM0
[2019-10-14 12:37:54.099166] Handshake
[2019-10-14 12:37:54.099989] Disable watchdog

* * * If you have a short attached, remove it now * * *
* * * Press Enter to continue * * *

[2019-10-14 12:38:00.125125] Load payload from ../brom-payload/stage1/stage1.bin = 0x27C bytes
Traceback (most recent call last):
File "main.py", line 114, in <module>
main(dev)
File "main.py", line 24, in main
load_payload(dev)
File "/tmp/kamakiri/modules/load_payload.py", line 69, in load_payload
udev = usb.core.find(idVendor=0x0e8d, idProduct=0x3)
File "/usr/lib/python3.7/site-packages/usb/core.py", line 1253, in find
import usb.backend.libusb1 as libusb1
File "/usr/lib/python3.7/site-packages/usb/backend/libusb1.py", line 39, in <module>
import usb.libloader
File "/usr/lib/python3.7/site-packages/usb/libloader.py", line 32, in <module>
import ctypes.util
File "/usr/lib/python3.7/ctypes/util.py", line 2, in <module>
import shutil
File "/usr/lib/python3.7/shutil.py", line 22, in <module>
import bz2
File "<frozen importlib._bootstrap>", line 983, in _find_and_load
File "<frozen importlib._bootstrap>", line 967, in _find_and_load_unlocked
File "<frozen importlib._bootstrap>", line 677, in _load_unlocked
File "<frozen importlib._bootstrap_external>", line 724, in exec_module
File "<frozen importlib._bootstrap_external>", line 859, in get_code
File "<frozen importlib._bootstrap_external>", line 917, in get_data
OSError: [Errno 5] Input/output error
[root@sysresccd /tmp/kamakiri]#
[Fire TV Original Android Development] Rortiz2:
You can't do this in ubuntu, you need to patch the kernel.

Try different port, different cable, or try again.
[Fire TV Original Android Development] aasoror:
So bootrom-step completed successfully (ended up with a reboot). But fastboot-step is stuck "waiting for any device"! Tried unplugging/replugging with no difference. Any pointers?
[Fire TV Original Android Development] hyperblu:
Did you break the resistor cap when shorting it? That will result in the fastboot part not finishing through. I can't stress enough to use DAT0 point. Those resistor caps are too weak and easy to break.
[Fire TV Original Android Development] aasoror:
To be honest, I am not sure, not as far as I can tell (pictures attached), shorting went smoothly and only took one attempt, I used CMD (third one from the right).

It's also worth noting rerunning the bootrom has been always successful (without any more shorts), aside from the warning regarding rpmb (which I think is expected on script reruns). Or do I need shorting whenever the script is rerun?

btw, I no longer get a signal over HDMI.
[Fire TV Original Android Development] :
Sorry for this basic question, but if we are are on 6.2.8.7 can we possibly root this currently?
[Fire TV Original Android Development] Sus_i:
No, but it's still easy to get old vulnerable stock from local shops... maybe even from amaz. (with some luck) ;)
[Fire TV Original Android Development] anphabvn:
Try it mate. This is free
[Fire TV Original Android Development] Animizio:
Hey I used an old version some time ago. Is it recommened to use the newest version again with the new features etc. or do I dont need it?

Also I'm at 6.2.8.1 with unlook and root atm, are there any FireOS Updates yet which are still working with unlook/root etc.? I cant find any new version on the internet/xda. Maybe a new 7.x update or something? Thanks
[Fire TV Original Android Development] Sus_i:
Idk if you need it, but you can flash the latest kamakiri.zip (+magisk) with twrp if you like, in order to update twrp recovery...

Besides that,, 6.2.8.1 is still fine... later update = more bloat.
[Fire TV Original Android Development] Animizio:
thank you, will try to flash it then
[Fire TV Original Android Development] anphabvn:
if it is not broken, dont fix it
[Fire TV Original Android Development] Schnoinsch:
Hey :)

I´m stuck on this step:

./bootrom-step.sh

When i connect it with the short, nothing happens. When i connect without short, it´s a runtime error:

RuntimeError: ERROR: Serial protocol mismatch, expected 0001 got 0000

Any idea what i should do so it connects with short?

Greetings, Schnoinsch
[Fire TV Original Android Development] Sus_i:
Connect the shorted stick without running a script, then check lsusb...
[Fire TV Original Android Development] Schnoinsch:
Could you elaborate? Not too fit with linux and terminal. Thanks :)
[Fire TV Original Android Development] Sus_i:
It's written countless times in this thread... if you search for lsusb you get your answer.
[Fire TV Original Android Development] jacoghi:
Vm241 here. Anybody with such high SN who got lucky? Didn't get detected without shorting.
[Fire TV Original Android Development] hasobist:
Hello a newbie here fetched a firestick 4k on sale that was updated to the latest firmware 6.2.8.9.

Tried the unlocking procedure with the fire iso the script gets frozen at waiting for device and without short ends with runtime errors.

Is there any possibility can achieve root or any alternative method appreciated.

Thank you for all your work.
[Fire TV Original Android Development] Sus_i:
No, you may return it and get an older stick from a local store ;)

Compare your sticks current serial with the stock in the shop, in order to get an idea from the date of manufacture...
[Fire TV Original Android Development] hasobist:
Hello it's VM180 series

Thank you.......
[Fire TV Original Android Development] Sus_i:
Then forget about this serial, back then it was a vulnerable stick but patched via an update...

If the stick is really from amazon, it's maybe a refurbished one or maybe someone updated it and returned it after a quick read on xda. ;)

New sticks should have something with VM201... or later.

If you go for a look in a shop, VM20113xxx sticks arrived with 6.2.8.1, earlier serials should be fine.
[Fire TV Original Android Development] hasobist:
Okay fetched it from ebay .

Means once patched restore to factory defaults it still remains patched isn't it.

For now Wolf launcher works well ain't know the launcher manager never worked using the launcher with on fire boot and works well so far and with a debloat serves the purpose.

Will try for a new stick on sale a good deal with series mentioned by you

Have a cube 2nd gen will try rooting the same.

Thank you.......
[Fire TV Original Android Development] jacoghi:
VM241 with 6.2.8.1 out of the box here. After tweaking the script, I managed to get it working. After kamakiri succeeded, DRM stopped working, so for anybody with the same problem, here you go, this updates TZ back to whatever version was originally in your stick before kamakiri. Just flash it, credits to @Skel40 and @rbox since I extracted the TZ and cleaned script from his rooted rom.
[Fire TV Original Android Development] hasobist:
Hello received a new update 6.2.9.1 yesterday,

All looks good on a non rooted stick.

Hoping to find a workaround for the vulnerable and patched sticks achieve root.

Thank you.......
[Fire TV Original Android Development] mnrana2:
My device is block by amazon please help me
[Fire TV Original Android Development] hasobist:
Hello

Did you try to resolve the problem you had?
[Fire TV Original Android Development] anphabvn:
Did you root it?
[Fire TV Original Android Development] hasobist:
Hello

Had a previous stick as mentioned in posts above which was patched and vulnerable ain't had success rooting and fetched another one with the series mentioned and rooted it and all's good for now.
[Fire TV Original Android Development] mnrana2:
How fo it root? Explain
[Fire TV Original Android Development] mnrana2:
How do root it?
[Fire TV Original Android Development] hasobist:
A little Linux skills and use of adb and your good to go.

From one of the posts by k4y0z :

A new Version of the unlock for mantis by him.

It comes with an all new TWRP (3.6.1) and an unlock method that works even for fused devices with firmware version < 6.2.8.7, no shorting needed!

For detailed instructions check https://xdaforums.com/t/...k-3-and-fire-tv-stick-lite-sheldon-p.4410297/ (Use mantis-zip from here)
[Fire TV Original Android Development] anphabvn:
Use twrp delete folder OOB or OBB in system/private-app
[Fire TV Original Android Development] adogen:
I am using fire stick 4k. (not max) Then one day, it stopped at the logo.

chmod a+x *.sh

./bootrom-step.sh

Traceback (most recent call last):

File "main.py", line 135, in <module>

main(dev)

File "main.py", line 25, in main

load_pl_payload(dev)

File "/home/kamakiri/modules/load_payload.py", line 47, in load_pl_payload

dev.send_da(0x40001000, len(payload), 0, payload)

File "/home/kamakiri/modules/common.py", line 342, in send_da

self.check(self.read(2), to_bytes(0, 2))

File "/home/kamakiri/modules/common.py", line 103, in check

raise RuntimeError("ERROR: Serial protocol mismatch, expected {} got {}".format(gold.hex(), test.hex()))

RuntimeError: ERROR: Serial protocol mismatch, expected 0000 got 2001

The above error is appearing.

Does kamakiri not support my version?😂
[Fire TV Original Android Development] hasobist:
Hello

Are you trying to root?
[Fire TV Original Android Development] adogen:
Yes I am rooting to change roms.

My firestick is waiting indefinitely on the logo screen
[Fire TV Original Android Development] hasobist:
Is the problem resolved Did the firestick boot?

Are you using an OTG cable if so try connecting the firestick to the power adapter directly and give it a try,hope it helps.

Was it working normally and when did the said problem occur?
[Fire TV Original Android Development] adogen:
I've tried all of those ways

i have to root
[Fire TV Original Android Development] hasobist:
Okay Did the Firetv 4k boot?

can you connect the shorted stick without running the script, only run lsusb in terminal and check whether the stick is listed...

Also read the earlier threads for vulnerable sticks later patched by amazon and also check the serial no of the stick......
[Fire TV Original Android Development] adogen:
still not booting

When I plug the Firestick into Windows, it is recognized, but

It is not recognized by fireiso-2.0.0.iso.
[Fire TV Original Android Development] hasobist:
How you say it's ain't detected by the fire iso.

If possible try the above possibilities mentioned and answer all the above to get an idea what your facing,thank you.......
[Fire TV Original Android Development] Lafraga1750:
hi, is it posible to root firestick 4k using windows computer?

sorry if this is not the right place to ask this question.
[Fire TV Original Android Development] roodrizx:
hello, can someone help me? my fire tv was blocked by amazon, how can i change it? I open the device but I don't know how to do the procedure.
[Fire TV Original Android Development] hasobist:
Hello

Yes you can.

Burn the Fire iso 2.0.0 which has all the requisites for rooting to a usb drive /bootable usb and then you can follow the instructions to unlock firetv 4k provided it's ain't vulnerable or patched by amazon burning the Efuse.

Just go reading the rooting thread ,Linux skills and adb and your all good.

Hope it helps.......
[Fire TV Original Android Development] adogen:
If I just do lsusb, the firestick is not recognized,

After writing ./bootrom-step.sh, firestick is recognized as MT65xx.

But after that, I get the first error....😂
[Fire TV Original Android Development] hasobist:
Hello

You have your answer a few posts #2006

Also go through the rooting thread firetv 4k,hope it helps.......
[Fire TV Original Android Development] hasobist:
Can you share the serial no of your firetv 4k stick also when did the problem occur of no booting?

Try changing the power adapter if you have one to see if it boots........
[Fire TV Original Android Development] Lafraga1750:
Thank you!!

So jus follow the instructions here https://xdaforums.com/t/unlock-root...k-3-and-fire-tv-stick-lite-sheldon-p.4410297/

after burning fire iso 2.9.9
[Fire TV Original Android Development] roodrizx:
Voce pode me ajudar, pelo telegram ? @roodrizx
[Fire TV Original Android Development] hasobist:
Yes it's Fire iso 2.0.0 and you ain't need to open or short the Firetv 4k to root,cheers........
[Fire TV Original Android Development] Lafraga1750:
Thank you so much I’ll try it and post results
[Fire TV Original Android Development] ThaDraGun:
Is there a special way I need to connect the firestick to my PC? Or a special cable?

I have the terminal opened up, I ran the first command "./bootrom-step.sh" and it says "waiting for device"

I plugged my firestick 4k in to a usb port with a regular micro usb cable and nothing is happening.
[Fire TV Original Android Development] Lafraga1750:
Where can I download fire iso 2.0.0?
[Fire TV Original Android Development] adogen:
Unfortunately, the serial number cannot be checked.

It still won't turn on when I plug in another adapter.

Today, I plan to purchase a new OTG that can input power and test the safe mode.

+ Couldn't get into safe mode.
[Fire TV Original Android Development] Sus_i:
Depends on the fireOS version installed on your stick.

If it's stock 6.2.8.7 and above, it won't work at all.

Lower than 6.2.8.7 may work without a short (see the sheldon unlock guide),

and if it's a rather old fireOS, then it works only with shorting.
[Fire TV Original Android Development] ThaDraGun:
Where do I find the "sheldon unlock guide"? My firestick 4k is at 6.2.8.1
[Fire TV Original Android Development] Sus_i:
[UNLOCK][ROOT][TWRP][UNBRICK] Fire TV Stick 3 and Fire TV Stick Lite (sheldon/p)

Read this whole guide before starting. This is for the 3rd gen Fire TV Stick (sheldonp) and Fire TV Stick Lite (sheldon). NOTE: FireOS < 7.2.7.3 required NOTE: This process does not require you to open your device. What you need: A Linux...

xdaforums.com
[Fire TV Original Android Development] hasobist:
Hello

Use kamakari-mantis-v2.0.1 of firetv 4k from OP and follow the instructions here https://xdaforums.com/t/...k-3-and-fire-tv-stick-lite-sheldon-p.4410297/

Use Fireiso 2.0.0 or you can

try using ubuntu for unlocking.......
[Fire TV Original Android Development] anphabvn:
FireOs 6.2.8.1 can jailbreak
[Fire TV Original Android Development] hasobist:
Hello

Check the serial no if VM 201.xxxxxx should be fine if no patched by Amazon.

You can go through the unlock thread Firetv 4k so many answers you find to the questions the experiences shared by others in the thread.

It's worth a try as you ain't need to open the stick or short just follow the instructions run the exploit and try your luck.

Cheers!
[Fire TV Original Android Development] navin23:
I have was able to unlock serial with VM242 without opening the case, but not VM252. I get the the error below.

[2022-10-05 16:38:56.625763] Waiting for device

[2022-10-05 16:39:03.501441] Found port = /dev/ttyACM0

[2022-10-05 16:39:03.527664] Handshake

[2022-10-05 16:39:03.563747] Load payload from ../brom-payload/pl/pl.bin = 0x3A04 bytes

Traceback (most recent call last):

File "main.py", line 135, in <module>

main(dev)

File "main.py", line 25, in main

load_pl_payload(dev)

File "/home/dell/Desktop/Stick4knew/kamakiri/modules/load_payload.py", line 47, in load_pl_payload

dev.send_da(0x40001000, len(payload), 0, payload)

File "/home/dell/Desktop/Stick4knew/kamakiri/modules/common.py", line 342, in send_da

self.check(self.read(2), to_bytes(0, 2))

File "/home/dell/Desktop/Stick4knew/kamakiri/modules/common.py", line 103, in check

raise RuntimeError("ERROR: Serial protocol mismatch, expected {} got {}".format(gold.hex(), test.hex()))

RuntimeError: ERROR: Serial protocol mismatch, expected 0000 got 2001
[Fire TV Original Android Development] this.guy.lol:
How did you do the one without opening the case? I got 2 4k firesticks id like to root but can't figure out the instructions
[Fire TV Original Android Development] anphabvn:
new kamari exploit dont need open the case
[Fire TV Original Android Development] tito_puente:
Today I learned that the fire TV stick 4K is rootable without opening the case... I headed to xda, found this thread and your posting. Now I am unsure or better I'm disappointed because it seems that it won't work...

Am I right that with this firmware version I still habe to open the case? Or isn't the stick rootable at all?

Any feedback is appreciated! 😊
[Fire TV Original Android Development] Sus_i:
I'm sorry, but thats it...

4k stick on 6.2.9.0 isnt rootable at all.
[Fire TV Original Android Development] this.guy.lol:
mine has 6.2.7.6 can i root without opening the case?
[Fire TV Original Android Development] tito_puente:
But wasn't it originally said that the exploit with the short circuit was an unrecoverable hardware bug?
[Fire TV Original Android Development] Sus_i:
Probably yes

Yes, that didn't aged well
[Fire TV Original Android Development] Leproide:
UPDATE:

Ok, i have a rooted firestick now but i cant login in amazon account, for this i cant pair a remote.

I tried to pair with a bt pairing app, but the remote wont work.

Is possible to change the firestick serial number for unban?
[Fire TV Original Android Development] cnnn1234:
Thank you. It fixed our streaming issue. I discovered the DRM issue on day 1 of our vacation and it was a huge bummer kids couldn’t watch Disney+.

In case anyone needs some quick instructions.

adb reboot recovery

adb push path_to_the_tz.zip /sdcard

adb shell

# twrp install /sdcard/the_tz.zip

adb reboot
[Fire TV Original Android Development] Spyder_NA:
I have a fire tv stick 4K with a software version of 6.2.9.1 and serial number containing VM201. Will this method work for me or as the firmware is too current it will not be possible?
[Fire TV Original Android Development] bl3ckjeck:
Help please
[Fire TV Original Android Development] emkorial:
Was an exploit ever found that allowed a device with a blown e fuse to be rooted?
[Fire TV Original Android Development] Sus_i:
[UNLOCK][ROOT][TWRP][UNBRICK] Fire TV Stick 4K (mantis)

NOTE: There have been multiple reports of devices with serial numbers containing VM190 or higher being shipped with DL-Mode disabled in BROM. These devices cannot be unlocked using kamakiri. These devices do not show up at all on USB when...

xdaforums.com
[Fire TV Original Android Development] emkorial:
This says it is for the sheldon version, will that work with mantis?

Also, for a device that is already rooted, how do you reboot the device into TWRP to flash a new ROM? DO you boot the live ISO, plug in the fire stick, and run ./fastboot-step.sh?
[Fire TV Original Android Development] hasobist:
Hello

The first part of your question,The script does work to unlock Firetv 4k without short so you ain't need to open the stick.

The second part of your question, when you boot the Firetv 4k it gives 5 seconds to boot into recovery a mouse connected via usb dongle helps in selecting the option to recovery once lapsed it boots to OS.

The third part of your question just follow the instructions in the unlock thread.

Just read through the previous posts of this thread you'll find most of the answers.

Hope it helps.......
[Fire TV Original Android Development] emkorial:
I was asking if it works on Mantis. And does it work if the eFuse is already blown?

Your second part is for my already unlocked Fire Stick. When I plug the device in, I do not get any option to select anything, so plugging a mouse won't do anything. The only way I was able to get to recovery before was performing the entire exploit. How do you get into recovery after you have already performed the exploit/unlocked the device?

Would I boot a laptop with the ISO from the unlock thread, plug in the Fire Stick, and then run adb commands from there to fastboot into recovery?

Thanks for any help. I need to re-flash the 6.6 Fire OS.
[Fire TV Original Android Development] hasobist:
Hello

Which version of OS you're currently on and check the serial no of the stick nevertheless it's worth giving a try.

If your Firetv 4k is unlocked and the script Kamakari-mantis-v2.0.1 ended successfully it should provide you with an option ,try connecting it to the TV and check on screen whether you get the option.

You can burn the ISO to USB to make a bootable USB and boot via USB using a Desktop or a Laptop.

As said earler read through the thread you have the unanswered answered.

Hope it helps.......
[Fire TV Original Android Development] emkorial:
Still trying to understand what you are saying ... Let me break it down

I have a Fire Stick. It has been unlocked and rooted following the instruction for the exploit. I had flashed the 6.6 OS. It all worked great

I now need to RE FLASH 6.6 on the same stick.

How do I get to an ADB shell to do so? Once I can get to an adb shell I know I can fastboot recovery the device to and the run the TWRP commands needed to re flash 6.6, but I don't know how to get to the adb shell in the first place to issue those commands. Plugging the stick into the TV just boots it as a normal fire stick.

Thanks for any help
[Fire TV Original Android Development] hasobist:
Hello emkorial

Your not getting the option since the Firetv 4k is ain't connected to an OTG cable or a USB hub and a usb mouse connected to navigate once in TWRP and then try reboot you'll get the option.

Hope it helps.......
[Fire TV Original Android Development] emkorial:
Can you clarify? You say "Once in TWRP", how do I get into TWRP? I need to issue command from an adb shell anyway, I will not be using a mouse.