[Verizon Galaxy S 5 Android Development] jrkruse:
This process will allow flashing custom boot and recovery images on EMMC11 S5

Yes this will allow the EMMC11 S5 to run custom roms like Lineage

Than You ryanbg
​

Summary Of What This Does

You must be on G900VVRU2DPD1 bootloader for the exploit too work.

The exploit patches the header of the boot or recovery image which forces the phone to skip security check of them and allow them to be used. If on totally stock phone this process flashes combo firmware to your phone which is kitkat based and allows easy rooting. Then I inject safestrap into combo firmware which gives a system based hijack that gives you a custom TWRP like recovery. I then have safestrap recovery flash a minimal QL1 based rom with DPD1 bootloader that updates you back to Marshmallow firmware and a prepatched TWRP recovery. I have to use this method because this prepatched TWRP recovery cannot be flashed in odin because you need unlocked bootloaders to be able too do this. This minimal firmware is also rooted just for good measure but the only thing you will be using this firmware for is to access TWRP so you can flash an actual rom that can be rooted with a magisk root. I have provides some for you to use. If you mess up and loose recovery and dont have a rooted rom you can boot up to. The whole process will have to be done again so take care not too loose your TWRP recovery once using this process.

​

What You Can Do

Flash custom boot images that allows you to use magisk

Flash custom recovery

Flash custom roms like Lineage

What You Cannot Do

You can not unlock bootloaders on EMMC_11 so all flashing must be done on a device with custom recovery

You cannot flash custom binaries using odin

Downloads

S5_Root_Tools_2023.7z -- Use If Totally Stock

S5_Root_Tools_2023.7z AFH_Mirror

EMMC_11_Rom.zip -- Minimal_6,0 Rom Use If Already On Safestrap

Patch_Boot_Recovery_Image.zip

Boot Images Stock EMMC_11 Or 15

boot_ql1_stock.img

Boot Images Custom EMMC_11 Or 15

PhoeniX.Kernel.V13.0.TW6.0.1.img -- Phoenix Kernel Permissive

PhoeniX.Reborn.Kernel.V1.0.TW6.0.1.img -- Close To Stock Permissive

PhoeniX.Kernel.V1.0.TW6.0.1.G900V.img -- VZW Stock Permissive

TWRP Recovery EMMC 11

recovery_twrp_emmc_11.img -- Pre Patched For EMMC_11

TWRP Features

Backup and flash system images

Green color to distinguish between regular twrp

EMMC_11 TWRP image is prepatched flashing patch zip not needed

EMMC_11 TWRP startup screen labeled to identify its patched

Regualr TWRP can be use if you choose on either model

View attachment 5881473View attachment 5881475View attachment 5881485View attachment 5881491

Technical Questions And Answers Here

Telegram Channel

Directions If Already Running Safestrap

1. If already running safestrap flash EMMC_11_Rom.zip in safestrap this will install very minimal QL1 rom with proper bootloaders and stuff. From here you can flash rom of your choice just make sure you dont update or change bootloaders. Special roms just for this exploit are found in post#2

2. Then root with root of choice.

3. Then flash Patch_Boot_Recovery_Image.zip then your done

4. Then from there on in future flashes follow the EMMC_11 Flashing Custom Roms Boot Images And Recovery Images section

5. I recommend you dont mess with recovery. If you accidently flash an unpatched recovery you may not be able to get it back without starting the whole process over. If a rom you are using flashes a recovery image I recommend you remove it or make sure you flash the patch zip

Directions If Totally Stock

I would recommend Windows defender is turned of before starting

1. Download S5_Root_Tools_2023.7z and unzip

2. Make sure Usb debugging is enabled on your phone

3. Plug in phone and run Safestrap.exe and follow directions on command window

4. This process is pretty much 1 click all automatic except following command window prompts

5. This will detect if your phone is EMMC 11 or 15

6. If it detects EMMC 15 it will automatically unlock your bootloaders.

7. EMMC 11 detection will install Twrp recovery where you can install custom stuff from there.

EMMC_11 Flashing Custom Roms Boot Images And Recovery Images

1. The above tool will give you TWRP Recovery and stock 6.0 rom

2. Flash your rom of choice in TWRP or stay on stock one provide. Do not flash a rom that updates bootloaders.

3. Then flash your root zip like magisk this will patch your boot.img

4. Once a boot.img is no longer stock you will need to flash the Patch_Boot_Recovery_Image.zip after the image is patched with magisk. This zip will be placed on your internal storage from the above tool

5. I recommend you dont change recoveries there is really no need too

6. Anytime you flash a new boot.img it will most likely require you to reflash root zip and then make sure you flash the Patch_Boot_Image.zip very last

Source For Kernel

Source Code For Expolit

Source For TWRP