yashsingh1/xdaforums huggingface dataset:
[Asus Transformer TF700] slgta:
Sorry for a newbie question. I search and read a lot of threads on the internet but is still stuck in a very basic step.

How do I get to a CLI to type in commands?

I am able to root my TF700T using KingoRoot and have downloaded the unlock package.

But where do I go to issue the copy and mount commands in Step #3?

I read thru couple "beginner steps" threads but both seems to assume the reader already know how to do some of the steps.

I have experience flashing Android phone ... but this is my first attempt to load custom ROM to a tablet ... and I don't recall having to do CLI when I did that for Samsung phones few years back.

Do I need to install a terminal app first? or is there a way to somehow SSH to the OS on the tablet?

Any help/pointer will be much appreciated. Thanks.

UPDATE: problem solved using ESFile Explorer. Thanks.
[Asus Transformer TF700] slgta:
Many Thanks. I finally able to unlock my TF700T.

The trick is to use an very old version of ESFile Explorer. For some reason, I don't have to chmod the file as they are already 777 when ESFile copy the file to the /system/app folder. The mount command doesn't work anyway ... it just came back saying the device is busy. So I decided to just reboot the device and then run the unlock app .. and it works.

Thanks again.
[Asus Transformer TF700] kokokoshka:
Successfully unlocked TF201. Thanks!
[Asus Transformer TF700] nbenm:
Hello @d.l.i.w did you succeed in making a TF701T unlock tool?

We are many waiting for this.

You can save a lot of tablets.
[Asus Transformer TF700] nbenm:
I have tried to use Burp proxy with the original app to see what's happening, I have the following error message in Burp log:

The client failed to negotiate a TLS connection to mdm.asus.com:443: Remote host terminated the handshake
[Asus Transformer TF700] d.l.i.w:
I have finished it now. I had some difficulties with the DMClient for TF701T, so I am not sure if it works. I don't have the device, this is completely untested. Make sure you have a backup!

Here you go: https://leo.pfweb.eu/dl/2AcpB
[Asus Transformer TF700] nbenm:
Hi @d.l.i.w , it's now tested!

Excellent, it worked fine at first try.

just some fright when it rebooted many times.

Everything is ok now.

For others who want to unlock their device, tablet has been reset. So backup any valuable data before unlocking.

Thanks a lot @d.l.i.w , very good job.

Just for my curiosity. did you modify DMClient.apk and the unlock app?

I have seen a trace in the app ("*** Unlock: request"), but I'm not sure all changes were necessary. For DMClient, I haven't searched anything.

Anyway, thanks again.

Noury
[Asus Transformer TF700] d.l.i.w:
Great! Thank you for the feedback.

Yes, both apks are modified. I have put some additional markers into the unlock app. This is not really necessary, but helpful in case of problems.

Interestingly, the unlock app for the TF701T also supports the older devices (TF201, TF700T, TF300T, TF300TG, TF300TL) and a bunch of others:

TF500T, ME570T, P1801-T, ME301T, TF700KL, A66, A68, ME302KL, ASUS-A86, K00C

I am afraid there will be some demand for DMClients ;)
[Asus Transformer TF700] d.l.i.w:
Also @by_rom

Using the unlock app for the TF701T, this should work for you:

https://leo.pfweb.eu/dl/uiJPN

Please note the comments above.
[Asus Transformer TF700] by_rom:
2 d.l.i.w

A lot of thanks!!!

Confirm success unlocked with ME301T

Great project ! previous unlocked with your tool TF300 after updating to new version android was donated to kid from needly family. ME301T after upgrade will be donated too ;-)
[Asus Transformer TF700] NOBODYKNOWSWHO:
Thank you a million. I just unlocked a ME301T with your instructions.
[Asus Transformer TF700] luca075:
Hello, i tried with asus me302kl but it doesn't work, the message is " Parse error . There was a problem parsing the package" :(

I think it is no longer possible to unlock the bootloader on this device
[Asus Transformer TF700] d.l.i.w:
Unlock will not work without a modified DMClient.
[Asus Transformer TF700] warlock9656:
Hi guys, i need help with TF300T, what version firmware do i need to unlock? on the latest version from the official site (10.6.1.27.5 Android 4.2.1) does not work (an unknown network error(
[Asus Transformer TF700] d.l.i.w:
Which DMClient did you use? I had assumed that TF300T and TF300TG were compatible. But that is probably not the case.

So here is a modified DMClient for the TF300T:

https://leo.pfweb.eu/dl/vUHnp
[Asus Transformer TF700] warlock9656:
Thanks for DMClient, there are changes, now writes application optimization at boot, but the same error( which version UnlockApp should I use? try for TF700T, dont work(
[Asus Transformer TF700] luca075:
Thank you, I managed to unlock the ME302KL bootloader ! I used DMClient for ME301T and Unlock app for TF701T.
[Asus Transformer TF700] d.l.i.w:
Too bad. Both unlock apps should work. However, you are not the only one that gets an network error on a TF300T. It would be helpful to get some more information, on what actually happens. At the moment I have no idea whether it is a server problem (caused by wrong serial numbers or similar), or actually a problem with the DMClient or the unlock app itself.
[Asus Transformer TF700] ArmaDiaboli:
Thank you man, you saved me and my TF300T... I thought there was no way to get the f*ck*ng bootloader unlocked. Thanks!
[Asus Transformer TF700] DieAbrissbirne:
I ran into the same problem. Did you solve this?

My steps:

- root with KingoRoot

- Use ES Explorer to replace files in /system/app and renamed DMClient.deodex

- Changed permissions

- 1. reboot -> Unlock App was not installed

- 2. reboot -> Tablet stucks in ASUS boot screen

What I tried:

- Original Recovery won't work (Error)

- Several reboots but its stucks in boot screen

Any support is highly appreciated.
[Asus Transformer TF700] by_rom:
Hi!

Take a look here

https://xdaforums.com/t/unrecoverable-bootloader-error-but-not-bricked.2179759/#post-44244313
[Asus Transformer TF700] d.l.i.w:
@DieAbrissbirne

Sorry to hear that.

The suggested fix using fastboot will probably work only on devices that have already been unlocked. Unfortunately, I don't know a reliable method. If access via adb is possible, I would try to restore the original files. Otherwise, there may be a way to install the original firmware again (from the SD card, for example).

Which firmware version is on the device? How did you rename the odex file (the file name, the file extension or both)?
[Asus Transformer TF700] gothiKarts:
how did you make it? i was unable to copy dmclient :S
[Asus Transformer TF700] gothiKarts:
ooooohhh i already did it !!!!!! i forgot to set permission 644 in both archives, so i used total commander to that!!! unlock successful !!! thank you all of u !
[Asus Transformer TF700] :
I also tried ME302KL (DMCClient-ME301T and UnlockTool-TF701T) but it doesn't seem to work: Everything works fine but after reboot and starting the unlock tool (and going through "unlock without google acount") I have to wait a few minutes and then the following message appears: "device could not be unlocked, try again later".

Do I need to have an accout/register my device at ASUS first?

I guess it may work that way *hopefully*, maybe there is a litte thing I forgot?

Please help! Thanks.

Feli25

PS: I didn't need to mount.
[Asus Transformer TF700] :
I think I finally got it that way!!! :-) My problem was: I confounded CMC and DMC Client in es-explorer... fastboot oem device-info says: "device unlocked: true". Although in fastboot mode there is no entry (that is maybe the topic what others wrote about when they asked: Has ME302KL a bootloader? I think: Yes, it has ;) Yesterday it was "device unlocked: false"....)

Thanks a lot to luca075 and d.l.i.w.
[Asus Transformer TF700] sintar85:
Hi, i've a TF300TG 4.2.1 .

I was unable to unlock the bootloader with the Unlock_device_app_v8 tool for the usual network message (try again later).

I tried your procedure (after resetting to factory settings):

-root with kingo root

-installed efs explorer

- deleted the DMClient.odex file

- overwrite the DMClient.apk file

- restarted the tablet

I can't find any unlock apps.

After about ten seconds I only see an "Update not completed.Retry" message.

in system / app I don't see new DMClient.odex file,

I have tried the DMClient.apks of all the models you have attached, but have not gotten any changes.

i also tried to install Unlock_device_app_v8 and attempt to unlock, but no change.

The patched unlock_app in the bundle cannot be installed; the same of unlock_forT701.app.

do you have any suggestions?

thanks
[Asus Transformer TF700] robak666:
Hi. Just wanted to say thank you! Works like a charm :)
[Asus Transformer TF700] DieAbrissbirne:
It was on 10.6.1.14.10.

I renamed only the file extension.

Meanwhile I managed to recover it using this guide (maybe this is helpful for others):

Bricked my Asus TF300T? Manual JB update

First, my device failed to get the OTA Update because I deleted some system apps (see my original post). Then I found this post where another user restored original APKs in /system/apps and manage...

android.stackexchange.com
[Asus Transformer TF700] dzwdz:
so the method from the original post didn't work for me - i couldn't remount `/system` as rw, the tablet kept crashing after that.

so i came up with a workaround that should work on all tablets (but if you **** up your tablet with this, don't blame me. it *shouldn't* **** anything up, but i'm not 100% sure about that. make backups of all the files you modify)

first you need root, even temporary root will work. i used https://github.com/timwr/CVE-2016-5195, because i don't trust kingoroot, but kingoroot would probably also work just fine

also, you need to have launched the v8 unlock app at least once.

copy over /data/app/com.asus.unlock-1.apk@classes.dex and /system/app/DMClient.odex to your pc - you'll need to patch both of those.

open them in a hex editor, and search for "https". depending on the file, you'll find one of those (the offsets might be different):

in classes.dex
00008220: 7000 0568 7474 7073 0014 6874 7470 733a p..https..https:
00008230: 2f2f 6d64 6d2e 6173 7573 2e63 6f6d 002b //mdm.asus.com.+

in DMClient.odex
00058cd0: 616d 7300 0568 7474 7073 0008 6874 7470 ams..https..http
00058ce0: 733a 2f2f 0002 6875 0006 6877 5f76 6572 s://..hu..hw_ver

replace the first "https" in both files with some other text.

if you're curious about what this does: the function which adds the asus' ssl certificates has a check if the url begins with "https". you are replacing the string it compares against with garbage, so it always fails and never adds the certs. it's the same one which d.l.i.w used for their DMCLients

now you need to make /system/app writeable. as i've said, i couldn't just remount /system as rw, so i came up with this workaround (enter those commands as root on the device):

mount -o remount,rw /
mkdir /tmp
mount -t tmpfs tmpfs /tmp
cp -v /system/app/* /tmp
mount -t tmpfs tmpfs /system/app
cp -v /tmp/* /system/app
umount /tmp

after that just put both of those files back. relaunch the unlock app, and hopefully it will work. it took me a few tries to get it to work, though
[Asus Transformer TF700] diamondd123321:
dear d.l.i.w:

When I use your attached DMClient.apk and UNLOCK V7

After rebooting, in the system/app folder

Found that no DMClient.odex file was created

But ULOCK V7 is successfully installed..

Run the unlock program to display a network error

Is it because the DMClient.odex file is missing?

Or you directly have the DMClient.odex file for me to copy directly to the system/app file box

Thanks for your reply

更多關於此原文的相關資訊需要提供原文才能顯示其他翻譯資訊
[Asus Transformer TF700] d.l.i.w:
Certainly not. If you use the supplied DMClient, you do not need the odex file. The instructions clearly say:

Most likely, for SKUs other than WW and US, a separate version of DMClient is needed. Which firmware do you have?
[Asus Transformer TF700] d.l.i.w:
Thanks for the tip. I put it in the starting post.

I don't know what Android does when it sees unneeded .odex files. But renaming the extension worked for me...
[Asus Transformer TF700] diamondd123321:
dear d.l.i.w:

my firmware is TF700T

3.1.10-g9827b9a

android@uranus#1

Tue May 14 19:45:05 CST2013

JOP40D.TW_EPAD-10.6.1.1.14.8-20130514

thanks your response :)

looking forward to your reply
[Asus Transformer TF700] diamondd123321:
I have an idea

Is it possible to modify the firmware to conform to DMClient.apk?
[Asus Transformer TF700] d.l.i.w:
It is probably much easier to create a compatible DMClient. I found a working download link for the firmware, so here you go:

https://leo.pfweb.eu/dl/iFs1B

Use at your own risk. Good luck!
[Asus Transformer TF700] diamondd123321:
My goodness

I used this link to show me the same situation (internet mistakes)

I try to restore to factory mode, but it is same situation.

Is it because I accidentally deleted CMclient.odex?

or asus DMClient is close?

by the way

I originally had two TF700T pad.

Fallow your accessory was successfully unlocked on last week

But another one can’t be unlocked

I am so confused

Thanks for your reply
[Asus Transformer TF700] d.l.i.w:
Yes, that could be.

If you followed the instructions exactly and replacing the DMClient did not help, then I probably cannot help you.
[Asus Transformer TF700] diamondd123321:
I think my tablet may not be able to unlock

By the way

Can you tell me the unlocking method you use

Is it to modify DMClinet.apk and unlock APK?

Or just modify DMClient.apk

thank you for your help. It's so kind of you.
[Asus Transformer TF700] sintar85:
this is awesome !!! it worked for me !!! thanks a lot !!
[Asus Transformer TF700] erictmc:
Anyone can help? Trying to root TF300T with Kingaroot but always got download error. If I can't root then I cannot use this method to unlock the bootloader...
[Asus Transformer TF700] erictmc:
Hi, I can't root with Kingaroot and would like to try your timwr method but have no idea how to do that, can you please give some information? Thanks in advance
[Asus Transformer TF700] diamondd123321:
maybe you have to download old version by kingoroot.
[Asus Transformer TF700] erictmc:
I managed to root using vroot but still having problem with unlock bootloader, network connection issue. Thanks for the help anyway.
[Asus Transformer TF700] diamondd123321:
i have the same situation with you.

so i give up to unlock.
[Asus Transformer TF700] Arsenick:
@Nox17 Can you reach any https website in the browser on your tablet ? it appears I'm unable to visit www.asus.com with the default browser.. asus.com support only TLS 1.2 and 1.3. I tried visiting www.badssl.com which seems to support old vulnerable ssl version and I get the same result.. So not sure what's broken here..

W/chromium( 4700): external/chromium/net/http/http_stream_factory_impl_job.cc:865: [0509/194734:WARNING:http_stream_factory_impl_job.cc(865)] Falling back to SSLv3 because host is TLS intolerant: www.asus.com:443
E/chromium( 4700): external/chromium/net/socket/ssl_client_socket_openssl.cc:788: [0509/194734:ERROR:ssl_client_socket_openssl.cc(788)] handshake failed; returned -1, SSL error code 1, net_error -107
E/Tab ( 4700): onReceivedError -11 https://www.asus.com/ Couldn't establish a secure connection.
W/browser ( 4700): Console: The page at https://www.asus.com/ displayed insecure content from file:///android_asset/webkit/android-weberror.png.
W/browser ( 4700): null:1

W/chromium( 4700): external/chromium/net/http/http_stream_factory_impl_job.cc:865: [0509/201240:WARNING:http_stream_factory_impl_job.cc(865)] Falling back to SSLv3 because host is TLS intolerant: www.badssl.com:443
E/chromium( 4700): external/chromium/net/socket/ssl_client_socket_openssl.cc:788: [0509/201240:ERROR:ssl_client_socket_openssl.cc(788)] handshake failed; returned -1, SSL error code 1, net_error -107
E/Tab ( 4700): onReceivedError -11 https://www.badssl.com/ Couldn't establish a secure connection.
W/browser ( 4700): Console: The page at https://www.badssl.com/ displayed insecure content from file:///android_asset/webkit/android-weberror.png.
W/browser ( 4700): null:1

Using an old version of chrome I can visit them.. https://androidapksfree.com/chrome/...old/chrome-39-0-2171-93-2171093-apk-download/

So I'm not an expert at all but it look to me it's related to our version of webview..
[Asus Transformer TF700] dhumerez:
Everything works fine, but when trying to use the unlock tool it doesn't pewmrite it. and the network or connection eeror continues to come out ,,, It seems that we have no help
[Asus Transformer TF700] dhumerez:
do all the steps, and everything is fine, but when executing the unlock, a connection error appears, I don't know how to get out of that problem, I don't know how to unlock the bootloader of this TF700 tablet
[Asus Transformer TF700] QiuDer:
Similarly, TF701T can't be unlocked at present. If there are friends who have successfully unlocked, which system version do they use?
[Asus Transformer TF700] Eliazeno:
I started from freshly flashed firmware on TF300T (WW 10.6.1.27.5, followed steps correctly but keep getting network error :(
[Asus Transformer TF700] d.l.i.w:
Apparently, Asus has updated the servers and older protocols are no longer supported. See

SSL Server Test: mdm.asus.com (Powered by Qualys SSL Labs)

I think there are two possible solutions:

Change the apps and the firmware to support at least TLS 1.2. This is not an easy task.

Use a MITM setup to downgrade the connection to an older SSL version for the unlock. Something like this:

Running a man-in-the-middle proxy on a Raspberry Pi 3

www.dinofizzotti.com

The certificate won't cause problems as the verification is deactivated in the modified versions.

This is probably the more realistic way to go.
[Asus Transformer TF700] Nox17:
@d.l.i.w Thanks a lot for having a look.

I also thought of trying to run some MITM setup. Just did not have the time yet. I was also wondering if it could have been that ASUS updated their certificates, but good to know the modified version ignores that.

@Arsenick A bit of a late reply, but I did check on my tablet and indeed with the stock browser I can't access the asus page. Chrome works, and there TLS 1.2 is used. On my PC chrome uses TLS 1.3. So just like d.l.i.w pointed out Asus does not support older versions anymore.

On the weekend I will try to do a test for a MITM setup, see if that works. If anyone has any success, let me know!

Cheers.
[Asus Transformer TF700] Arsenick:
Let us know how it goes with the mitm, not to discourage you but I'm on my third day on this track using mitmproxy and so far I just confirmed Asus did certificate pinning in their stuff so wathever I tried, there's problem :p As far as I know, mitmproxy should be the right tool for this like described here. As you'll see in the next error, SNI is not set by our device, so I had to force insecure mode, which seems to fail because of the cert pinning..

mitmproxy config:

mode: transparent

showhost: true

ssl_insecure: false

192.168.8.197:57514: clientconnect
192.168.8.197:57514: Cannot establish TLS with 123.51.152.19:443 (sni: None): TlsException('Cannot validate certificate hostname without SNI')
192.168.8.197:57514: clientdisconnect

-----

mitmproxy config:

mode: transparent

showhost: true

ssl_insecure: true

:ffff:192.168.8.197:37327: Certificate verification error for None: ("hostname 'no-hostname' doesn't match either of '*.asus.com', 'asus.com'",)
::ffff:192.168.XXXXXX:37327: Ignoring server verification error, continuing with connection
192.168.XXXXXX:37327: Client Handshake failed. The client may not trust the proxy's certificate for ('123.51.152.19', 443).

@d.l.i.w the hack you did seems to workaround the original certificate pinning issue, how did you do that ? Any idea why it would not work right now with mitmproxy ?

So far I've tried:

- Restore latest tf201 ww firmware, no root no modification to dmclient, multiple mitmproxy setup, user trusted key, added key directly to the system cacert to no avail

- Tried the original hack + mitmproxy in regular and transparent mode, with and without ssl_insecure enabled, same result

Thei weirdest part is using the stock browser, I get the same error when I try to visit https://badssl.com so there's no certificate pinning on this... I'm a bit lost

they replied to my ticket today, saying how to enable TLS 1.2 on Android by installing Chrome and enabling in the option, so I tried to stay polite with my reply and started from scratch with the detail of the problem... It's not gonna be easy, I have to pass thru the 1st and probably second level of helpdesk to get an engineer who will understand what I'm saying but let's not forget those devices are almost 10years old so they'll probably throw the towel wayyy before... Let's have some hope. Maybe you guy's can open support issue too so they might see there's more people with this problem.

Just tried to bypass the pinning with Justtrustme, Android-SSL-TrustKiller and SSLUnpinning to no avail.

I've extracted the apk and looking at the smali code, I'm in unknown land!
[Asus Transformer TF700] d.l.i.w:
See https://xdaforums.com/t/howto-unlock-tf700t-in-2020.4157143/post-84819987

This is the minimal amount of changes you need to make.

As far as I remember, mitmproxy (mitmweb) worked in transparent mode with default settings back then when I tested the unlock for my device. I simply created a wifi hotspot and routed all traffic through mitmproxy.
[Asus Transformer TF700] Arsenick:
Thanks a lot for taking time to help again! I already tried those step with mitmproxy. I cleared user data + reinstalled a fresh firmware from bootstrap and I realized in the dalvik cache there was this file "/data/dalvik-cache/system@app@UnLock_App_V7_update.apk@classes.dex" which is your apk installed in my previous attempts...

So I'm a bit confused and I'm starting to question myself on the different tests I've done.. I've always though deleting user data+ firmware reinstall started with a fresh system but it doesn't look like that, which could explain all the problem I'm having with certificate in webview and the default browser...

I should be doing something wrong when I reinstall, I need to do this corectly before trying anything else, any suggestion anyone ? How can I restore my tf201 reinstalling firmware but be sure nothing I could have changed, files, folders, permissions etc.. has been left behind ?

For others you can try to follow this post: https://xdaforums.com/t/poll-unable...al-fix-mine-is-unlocked.1764917/post-71796522 The unlock tool in this repo is what have almost worked for me today, I'm stuck with ssl error but with this package it crashed later in the process so something's working in there, maybe I'm the only one with my exact issue, let me know if this work. Seems our problem can come not only from asus server but maybe rma/sn problems, therE's details in the thread about sdcard too, I'm just too tired and stubborn to let my tf201 die so close but I'm starting to loose faith!
[Asus Transformer TF700] UK_Mike:
Hi dzwdz - I've read and tried just about everything on this forum to unlock the bootloder on my TF300T without success. I would like to try your method but I have no idea how to use the code you refer to on github to temporarily root the device. Would be great if you could provide guidance on this part of the process.
[Asus Transformer TF700] Arsenick:
FYI I tried this method too and what it does is similar to the unlock tool provided by OP. Sadly It didn't work for me. I'm sure it worked before Asus disabled the support for <TLS1.2. From what I see for both method to work we need to have something like a mitmproxy to handle the connection with assus server using TLS1.2 ans talk with the asus tablet with <TLS1.1 or ssl. It should work but as far as I can say it didn't worked here...

I was trilled to make this work but, **** I've put way too many hours on that and I'm out of solution to try..
[Asus Transformer TF700] west1963:
Hello. The TF701T cannot be unlocked. Thank you.
[Asus Transformer TF700] west1963:
Hello. The TF701T cannot be unlocked. Thank you.:cry:
[Asus Transformer TF700] d.l.i.w:
See the posts above. Hopefully someone finds a solution.