[Asus ZenPad 10 Guides, News, & Discussion] jose tronco:
Guide to get full root access of ZT500KL and it is supposed to work on Z500KL(ZenPad 3s 10) as well.(not yet tested on the latter device.)

As we know,the Verizon modified devices are often difficult to unlock and get root access.BUT,this device ZT500KL has got a 'sister' version,which named similar called Z500KL.

The bootloader of ZT500KL is strict and of course will not boot without unlock.

HOWEVER,the Z500KL's bootloader does not seem to fully verify the signature of boot.img.

Also i found a post by Shakalaca which contains a command to allow partition flashing even without bootloader unlock on some ASUS devices.

So,here it comes the magisk.

DISCLAIMER

THIS POST IS FOR EDUCATIONAL ONLY,OUR PURPOSE IS TRYING TO FIND OUT SECURITY WEAKNESS OF THE DEVICE,AND WE ALWAYS SUGGEST THE MANUFACTUAR TO ENHANCE DATA SAFETY.

YOUR WARRANTY MAY NOW VOID

I AM NOT RESONSIBLE FOR ANY UNEXPECTED CIRCUMSTANCES,INCLUDING DATA LOSS,SOFTWARE ERROR EVEN HARDWARE DAMAGE.

REQUIREMENTS

A ZT500KL tablet,running on ZenUI version 3.3.7//3.4.3//5.4.6//5.4.7 or Z500KL

Backup all your data,including internel storage,such as your photos or movies.

aboot file of z500kl,magisk patched boot image.(All files are provided below)

Adb and fastboot driver installed

basic knowledge of shell commands

INSTRUCTIONS

IF YOUR HARDWARE IS Z500KL,please jump to step

reboot device to fastboot,plug cable and type this command to allow partition flashing

fastboot getvar sofia_support

flash aboot image of z500kl(skip this step if your device itself is z500kl):

fastboot flash aboot ww5.4.6-emmc_appsboot.mbn

reboot to bootloader again:

fastboot reboot-bootloader

in fastboot,check your tablet,the 'TARGET PROJECT 'should be z500kl,not zt500kl

allow partiiton flashing again and flash magisk patched boot image:

fastboot getvar sofia_support
fastboot flash boot boot_patched.img

unplug your cable after flashing the boot,use the volume key on your tablet to select 'factory reset',it will reboot to recovery automaticly and wipe your data.

finish the new device set up and install magisk manually,at first time magisk will ask you to download additional setup,just click download now,and your device will reboot again.

now you've got a magisk full root.

THANKS AND ACKNOWLEDGEMENTS

Shakalaca,thanks for his post for the partition flashing command. The original post was in his medium,you can search this in google[ZenPad S 8.0 (Z580CA) bootloader unlocked]

(i cant put link on xda cause i am a new user)

落落大 in CoolApk,for his work on getting the full boot image of 5.4.7 os version

IMPORTANT NOTES

As the bootloader is still locked,the device will refuse to boot without signature.if you want to modify the boot,remeber to sign it.you can sign it using your own signature.

the version of boot should be same as your os,for example if you want to root 3.3.7,flash the 3.3.7patched.the image for other version may not function well

if you are using Z500kl,you can extract the boot image from ota package from asus website,and patch the boot by yourself

All attched files:

mega.nz/#F!mrJzWIyb!ABRueM7EoRJ1hkKhRVpexg

discuss QQ group(Chinese only)(QQ群):657908957

find me in CoolAPK(酷安):建华WEI业的前HR