yashsingh1/xdaforums huggingface dataset:
[Miscellaneous Android Development] wentaas:
firstly this is huge, soon enough we'll probably get rid of oems' dumb restrictions and paywalls for having permission over your own device but it doesnt work on my redmi note 8 pro global

it's just stuck on waiting for device, i've tried everything like cmd in admin, restarting, all the debug parameters, even class filters. i dont see mtk6785t but 6785 is there so i think that shouldnt be an issue? idk but any help would be great, i have the payloads in the payloads/ folder and the default_config.json5 file in the dir with main.py in it

i'm running it on a pc w ryzen 5 3600 so that could be why? i've checked the code it seems to just not find the serial port. if i should try on an intel cpu, how would i use it with a mac? because i dont have any other pcs. maybe through vm but i doubt that'd work. anyways amazing work just wait for someone to make a gui for it (maybe me but.. cries in tkinter) and it'll be an end to all the stupid oem stuff

again any help would be really appreciated i dont wanna get a realme or something just because i hate miui :(
[Miscellaneous Android Development] k4y0z:
I don't know if mt6785 and mt6785t are the same.

If it doesn't even see your device your issue is something else.

Make sure your device is in bootrom-mode.
[Miscellaneous Android Development] Vyrrus2k9:
I'm using Ubuntu 16.04(from a container on an armv7 Android tablet) to try to Use mtk-bypass utility to access BROM on a similar generic Android tablet(mt8163). When I launch the bypass it just stays on waiting for device even after plugging in and holding buttons for BROM mode. Any thoughts as to why it's not detecting the device has been attached? lsusb returns a connected MediaTek device, but only for a few seconds (I guess before authentication fails and it switches to charge mode.)
[Miscellaneous Android Development] vans37:
Have you managed to follow this guide's steps to add support for a new device?

I've bricked my new poco m5 on mt6789(helio g99), bypass utility doesn't support this Soc and probably won't, considering devs are saying on github pages that Brom has been patched and none of the exploits work.

This is so frustrating, 'cause I've bricked my device and now I need to send it over to officials for repair.
[Miscellaneous Android Development] justchillinbro:
Any ideas or help on why I would be stuck on this "sending payload" step every time? I have gone through great trouble even getting to this point but I have managed to get to this point! Currently using an mt6765 or at least that's how it's listed. an SM-A037u from Cricket. Go easy on me if I am missing something super obvious. I am doing my best researching everything before I finally got to this point of just asking for help. I am at a dead end.
[Miscellaneous Android Development] JOSE407:
Hello everyone, this seems to me to be the bootrom for LMK51MM - MTK6762. Can someone help me to have the MTK - Auth Bypass (SLA/DAA) for my phone?
[Miscellaneous Android Development] rosenrot:
Could someone tell me if it also works for the MT6890? I saw other tools like mtk client to support it together with the MT6885. Could you give me an advice?
[Miscellaneous Android Development] patrick7777777:
Have read all the pages of this thread but it seems no one encountered the problems am having. I used the bypass utility on tecno pop 5 pro bd4h but my pc just continuously repeats the below statements till i choose to disconnect.

[2022-12-31 02:18:52.193148] Waiting for device

[2022-12-31 02:19:08.280012] Found port = COM7

[2022-12-31 02:19:09.094508] Device hw code: 0x717

[2022-12-31 02:19:09.095508] Device hw sub code: 0x8a00

[2022-12-31 02:19:09.297383] Device hw version: 0xca01

[2022-12-31 02:19:09.334359] Device sw version: 0x200

[2022-12-31 02:19:09.343354] Device secure boot: True

[2022-12-31 02:19:09.350349] Device serial link authorization: False

[2022-12-31 02:19:09.357345] Device download agent authorization: True

[2022-12-31 02:19:09.358345] Found device in preloader mode, trying to crash...

[2022-12-31 02:19:09.410311] status is 7024

[2022-12-31 02:19:09.519244] Waiting for device

[2022-12-31 02:19:31.268389] Found port = COM7

I tried to test the process with one other phone (tecno spark go 2021 ke5) to rule out usb port error but on running python main.py my pc just said it ran into a problem and restarted. Any possible explanation for any of the above issues? Am trying to unbrick the first device.
[Miscellaneous Android Development] alecxs:
+1 for reading thread. just guess status 7024 means no success entering BROM mode. open device and find kcol0 test point.
[Miscellaneous Android Development] davidsummers:
I've a MediaTek MT8183 device (Amazon Fire HD10 (2019) 9th gen). Few days ago it refused to boot, across usb I could see it was in the MediaTek bootloader and cycling through it. Tried connecting with the bypass_utility - and this could connect (I know this, becuase when it disabled the watchdog, the tablet stopped constantly rebooting) alas though the bypass_utility could not unset the authorisiation:

I ran the utitily in test mode, and attach the bypass log. Eventually test mode bombed out

So is the problem here with my tablet, or is it that MT8183 isn't supported? I'm using bypass_utility v.1.4.2 and exploits_collection-1.6

Does anyone have any idea what is going wrong?
[Miscellaneous Android Development] elt03:
hello, what's the status? have you done?
[Miscellaneous Android Development] vans37:
hello. nope, the known vulnerabilities has been patched in newer socs.
[Miscellaneous Android Development] davidsummers:
OK I dug some more into where the code is failing - probably the "[Errno 5] Input/Output Error" - this is generated in src/exploit.py the line "udev.ctrl_transfer(0xA1, 0, 0, var_1, 0)" - with var_1 = 10.

So does anyone know what the error and problem is? I'll keep digging.
[Miscellaneous Android Development] Kelexine:
After typing python main.py and hitting enter it shows everything it's supposed to show but instead of protection disabled it shows access denied insufficient permission, payload did not reply.

Note: it's a windows pc

Here is the log:
[Miscellaneous Android Development] davidsummers:
I had to run as root, as hadn't given the user permissions to run it so try "sudo ./main.py"
[Miscellaneous Android Development] Breezy7637:
I tried this on MT6765 with a hard brick (Redmi 9c NFC) because of a failed kernel flash.

Did it work? Shouldn't Device serial link authorization: be False ?

Firstly, with the battery disconnected, I got Protection disabled, but the device disconnects a few seconds later, therefore can't run SP Flash.

Secondly, I connected the battery and tried again. Same output from bypass utility, the device remained connected, but I get several errors in SP Flash, depeding which version I use (I tried 4).

These errors are:

Hash (integrity) check of the images being flashed failed.

The format of the scatter file is invalid.

The device attempted to power on before SP flash tool could flash files to it.

If someone can help, please.
[Miscellaneous Android Development] Kelexine:
It's on windows and as administrator
[Miscellaneous Android Development] Kelexine:
Does bypass utility request any form of permission before disabling SLA/DAA cause it is constantly failing to disable protection on my device with Access denied (insufficient permission) payload did not reply.

Attached below is the log
[Miscellaneous Android Development] luridphantom:
most devices with security updates past jan 2022 can't run this bypass anymore
[Miscellaneous Android Development] Kelexine:
Ok, thanks for the reply
[Miscellaneous Android Development] Kelexine:
But according to this utility it disabled protection, but if I try flashing with sp flashtool it just throws up an erro_status_device_exception_ctr
[Miscellaneous Android Development] ko_hi:
Can you share the tool in pm, maybe it didn't succed to bypass it
[Miscellaneous Android Development] Kelexine:
Here

All credits go to the developers.
[Miscellaneous Android Development] ko_hi:
I'll check on my device if it'll report the same
[Miscellaneous Android Development] Kelexine:
Ok
[Miscellaneous Android Development] veloc_h:
Thank you for all your work, @k4y0z!

In your manual

https://github.com/MTK-bypass/bypass_utility/blob/master/README.md you write

"select "Add Python X.X to PATH")"

Does that mean" Do ad python to environment variable" during the py installation?

-> obviously "yes

I haven't got a pip.* file on my drive c: or d: (I have only got these partitions on my windows installation. How can I run the command

"pip install pyusb json5" then? (message can not be found).

Sorry, I didnt' restart the computer, could run the command without any problems after the restart.

Couldn't read the messages during the install of UsbDk (64-bit), happened quickly.

To which directory should I download the payload mt6761_payload.bin? I have run the

following command in the folder, where I have downloaded the payload.bin

d:\dl\cubot_mini\mtk_bypass>python main.py

python: can't open file 'd:\\dl\\cubot_mini\\mtk_bypass\\main.py': [Errno 2] No such file or directory

Still searching for the file main.py ...

Do I have to uninstall the older version linked to inkskape

C:\Program Files\Inkscape\lib\python2.7\unittest\main.py?

What about these three files?

D:\adb\systrace\catapult\systrace\profile_chrome\main.py

D:\adb\systrace\catapult\common\py_vulcanize\third_party\rjsmin\bench

D:\adb\systrace\catapult\common\py_vulcanize\third_party\rcssmin\bench

Can't you set a copyright to your code? Pretty mean to "steal" your code...
[Miscellaneous Android Development] Qwerty_in_me:
you'd want to put the payload binary in the same directory as the tool: D:\dl\cubot_mini\mtk_bypass\

what does inkscape have to do with mtkclient? the only thing that comes to mind is because of winblows having inkscape's main.py in it's PATH, a workaround would be that you speify the full path of main.py that's a windows problem because if there's a main.py in mtk_client there shouldn't be a file not found, scratch that again, you seem to have a borked mtk_client install

switch to *nix it Just Works^TM, I hear Linux Mint is good, I do prefer Arch based distros and Alpine is a close second
[Miscellaneous Android Development] veloc_h:
now I get the error:

D:\dl\cubot_mini\mtk_bypass\bypass_utility-v.1.4.2\bypass_utility-v.1.4.2>python main.py

Traceback (most recent call last):

File "D:\dl\cubot_mini\mtk_bypass\bypass_utility-v.1.4.2\bypass_utility-v.1.4.2\main.py", line 3, in <module>

from src.exploit import exploit

File "D:\dl\cubot_mini\mtk_bypass\bypass_utility-v.1.4.2\bypass_utility-v.1.4.2\src\exploit.py", line 2, in <module>

from serial.serialutil import SerialException

ModuleNotFoundError: No module named 'serial'

Not sure about your hint (see attachment)

I have installed linux (siduction, based on Debian) on another laptop:

Linux: "you need FireISO or this patch for your kernel". What should I do? burn the fireiso with rufus? Would it find my linux installation starting the pc? "or the patch": a lot of text, but no hint how to patch the kernel using this text file (??).
[Miscellaneous Android Development] veloc_h:
I have uninstalled inkscape and tried to delete the python files in C:\Users\xx\AppData\Local\Microsoft\WindowsApps

However I got the error 0x80070780... allthough the files are not write protected.

icacls "C:\Users\xx\AppData\Local\Microsoft\WindowsApps" /grant Administrators:F /t in cmd admin window was not succesful... chkdsk c: did not show any errors.

Edit: in admin mode I could remove the remaining python files

del C:\Users\hk\AppData\Local\Microsoft\WindowsApps\python*.*

still the same error:

"

Serial is not included with Python. It is a package that you'll need to install separately.

Since you have pip installed you can install serial from the command line with:

pip install pyserial."

Why is this not mentioned in the manual?

C:\py>pip install pyserial

Collecting pyserial

Downloading pyserial-3.5-py2.py3-none-any.whl (90 kB)

---------------------------------------- 90.6/90.6 kB 5.4 MB/s eta 0:00:00

Installing collected packages: pyserial

Successfully installed pyserial-3.5

still an error

python D:\dl\cubot_mini\mtk_bypass\bypass_utility-v.1.4.2\bypass_utility-v.1.4.2\main.py

Traceback (most recent call last):

File "D:\dl\cubot_mini\mtk_bypass\bypass_utility-v.1.4.2\bypass_utility-v.1.4.2\main.py", line 213, in <module>

main()

File "D:\dl\cubot_mini\mtk_bypass\bypass_utility-v.1.4.2\bypass_utility-v.1.4.2\main.py", line 37, in main

raise RuntimeError("Default config is missing")

RuntimeError: Default config is missing

I give up.
[Miscellaneous Android Development] Qwerty_in_me:
don't give up pal! the FireISO is just a prebuilt (Unix like (Linux kernel)) OS you can use speciffically to avoid the problems you are having (yes you can flash it using rufus and boot the usb), the kernel patch is in mainline allready (I think) and just stop using windows(if you think your soul is worth more than a cup of coffee that is).

the problem is that the payload and toolkit repositories SHOULD BE IN THE SAME FOLDER, as in

`git clone payload.git`: clone the payload repo

`git clone bypass_utility.git`: clone the toolkit repo

`ln -s ./payload/* ./bypass_utility/`: softlink the files in the payload directory to the toolkit directory so that you can maintain the latest versions of both with git (Note: this is a Unix like example and won't work for DOS like OSes)

otherwise you can get tarballs (zipfiles on DOS) and decompress all the files into a single directory
[Miscellaneous Android Development] Qwerty_in_me:
your bypass_utility directory should look like this:

LICENSE
README.md
bypass_utility.log
default_config.json5
libusb-1.0.dll
logs
main.py
payloads
preloader_x626_h623.bin
src
[Miscellaneous Android Development] Noiceguy42069:
Works on mt6762

Tested on my redmi 9a
[Miscellaneous Android Development] Kcryptonian:
I need help on how to remove the bootloop associated with my phone orange state please. After I unlocked bootloader, I didn't flash empty vbmeta before I went to go and flash twrp custom recovery (using adb and fastboot commands from adb &/ platform tools) . This made my phone to enter an unending bootloop accompanied by the orange state message everytime it reboots. I can't boot into fastboot or recovery again, I can't even switch off my own goddamn phone unless the battery drains out. And I don't think orange state warning is the real problem coz it's nothing but a warning message for unlocking the bootloader, the problem is definitely from something else.

Please recommend a solution to me sir🙏

Anyone who has face the issue before and resolved it should please say something!

Device: Infinix S4 X626; android 9 pie.
[Miscellaneous Android Development] Kcryptonian:
Where does the "logs" folder comes from?
[Miscellaneous Android Development] Kcryptonian:
+1
[Miscellaneous Android Development] luridphantom:
erase userdata
[Miscellaneous Android Development] Kcryptonian:
With what sir?
[Miscellaneous Android Development] luridphantom:
mtkclient or something like that
[Miscellaneous Android Development] Argonon:
Is anyone familiar with Blu B140DL

I can't even figure out how to flash stock. It's bs. Can't even flash stock with sp flash tool. Tried every DA I could find. I'd love to know bootloader unlock also. I tore the back of device off and see all the test points but no guide. What can I use at home to short to gnd? Sorry if not allowed I'm just at my ends. We have a thread but no real help there unfortunately.
[Miscellaneous Android Development] SickBirdi3:
So I was attempting to flash an MT8163 device with MTKClient, I have done this a few previous times successfully.

Well this time I am getting two different "error" messages after establishing a handshake.

The first message is:

Failed to dump preloader from ram

The second message is:

Preloader needed due to dram config

Any ideas on what I may be able to to do to fix this issue anyone?

Do I possibly need something else like this? I have this:

bypass_utility-1.4.1

Maybe newer version will help? Honestly I am a little lost at this point as I have yet to encounter an issue like this yet.

Attached are some screenshots of me in terminal...
[Miscellaneous Android Development] BlackNetttle:
Where should I extract it?
[Miscellaneous Android Development] rael7979:
One way to use in android?
[Miscellaneous Android Development] rael7979:
Whats ur terminal?
[Miscellaneous Android Development] SickBirdi3:
I was using material terminal at the time, but I found out I had just needed to define my preloaded, which I eventually figured out how to do thanks to the help of Mvikrant97.

At which point I was able to flash no problem!
[Miscellaneous Android Development] rael7979:
Can I bypass the sla and daa using this terminal?
[Miscellaneous Android Development] SickBirdi3:
I don't see why not, I'm not sure that bypassing those two aforementioned items is not Terminal related however...
[Miscellaneous Android Development] ayus2003:
Please help me guys I am facing this error and even with force -f option

I have also provided the bootroom.bin

Note: after doing this I am getting the same error in sp flash tool status "STATUS_EXT_RAM_EXCEPTION" in both UART and usb mode I am getting payload did not reply

I will honestly pay you if someone helps me repair my phone
[Miscellaneous Android Development] brokeruly:
*Exploit first before you flash using SP flash tool

try command

python mtk payload
[Miscellaneous Android Development] ayus2003:
I did that it gives me error "kamakiri2 failed cache issue"
[Miscellaneous Android Development] brokeruly:
Use other software to exploit and you can flash it using spflash tool
[Miscellaneous Android Development] ayus2003:
I think probably all tool are based on this software (they don't even bother giving credits to the original creators). I tried different softwares even {Mod edit: Link to paid services website removed. Oswald Boelcke, Senior Moderator} to disable auth (paid version) but no help

Something is wrong maybe the tool is patched on newer mtk chipsets like 68xx.
[Miscellaneous Android Development] Kelexine:
Are the mtk drivers installed correctly on the device
[Miscellaneous Android Development] J_ mohan:
Did you repair your phone
[Miscellaneous Android Development] Darquanquier:
Hi

Unfortunately I've used this tool and made an huge mistake!

I've selected the MT6768 and exe the tool.

But my device is MT6769T and since the mistake I am unable to switch back and the device ( SM-A137F ) can be accessed only by the mediatek USB Port and has a black screen. Of course no more ADB is anymore possible .

I'm also stuck with SP Flash tool which stops all of my attempts with that kind of message: device is MT6768 invalid config MT6769.

What can I do ?

Thanks in advance for your help
[Miscellaneous Android Development] strubedo:
I cant get this to work on linux i keep getting this error

raceback (most recent call last):

File "/home/kubuntu/Downloads/bypass_utility-master/./main.py", line 237, in <module>

main()

File "/home/kubuntu/Downloads/bypass_utility-master/./main.py", line 38, in main

raise RuntimeError("Default config is missing")

RuntimeError: Default config is missing
[Miscellaneous Android Development] OMAKE:
Can ypu pls help me? I want to unlock LG Q7 phone with Mediatek MT6750S cpu,

but i cant connect phone in brom mode. Even fastboot doesn't works, no command message.

MTK bypass is waiting for device forever. No official way to unlock bootloader for Q7.

I can connect mtk client with other phones, not a pc problem i guess.

Installed firmware

Thanks
[Miscellaneous Android Development] natedawg1604:
So I am trying to run MTK-Bypass, via the FireISO version of Linux booted from a USB stick, and I get a python Type error identical to what is described in this Github issues report:

TypeError: 'NoneType' object is not iterable · Issue #104 · MTK-bypass/bypass_utility

I have tried redownloading, rebooting, but nothing works, this is the error i get: [2023-06-09 15:54:08.191908] Waiting for device [2023-06-09 15:54:08.191908] Found device = 0e8d:20ff Traceback (m...

github.com

Any thoughts on what could be going on? Also if it matters I'm trying to root a TCL 30Z, which cannot be accessed via Fastboot or otherwise put into boot mode from the recovery screen.
[Miscellaneous Android Development] LR Tecno:
Mod translation: Thank you very much I was finally able to recover an infinix zero 8 model x867 with mediatek 6785 due to a bad twrp flashing. and wait for it to hopefully unlock the security of the device in addition to many previous steps such as starting the PC in advanced mode to admit the blessed mtk drivers that are not signed and only worked for me when I left the type-c cable connected to the computer, the phone with the battery disconnected and once the process where the main.py file is used is carried out, it must be modified in the part where it says default.bin. In my case, change that line to the mtk 6785 line and the mtk bypass was left and it says waiting for device later By pressing volume down it connects to the cable and the phone begins to connect and disconnect every 5 seconds and so on infinitely during that period with some thin tweezers I made a jumper to the point on the test point board and it was finally connected to the com port

and the wonderful message appeared that the bypass had worked once the phone was there, I hurried to open flash tools and flash the device by unchecking the box

--preloader --btbo--trans---vtk-- since otherwise the imei and the bluetooth address are lost and I think it is unrecoverable. I was only able to achieve it thanks to their tools and I was just going to comment on my experience with the brick that had that phone that was already stuck in bootloop.

Spoiler content hidden.
[Miscellaneous Android Development] Badger50:
Greetings, and welcome to XDA. As a friendly FYI, you stand a much better chance of having your questions answered in a timely manner by simply abiding by XDA Rule #4:

Spoiler content hidden.

Which is why I have translated your post.

Your cooperation is appreciated and expected. Thank you, and have a great day.

-Regards: Badger50
[Miscellaneous Android Development] myanonymousaccountname:
Set device to preloader mode

Waiting for device

Found device = 0e8d:003

Stuck at this point, device is jiayu g4s

I can access recovery, fastboot and preloader. preloader by connecting phone to pc while it is off, see charging animation, press all buttons power, vol + and -. Sp flash tools does nothing.

Debian 12/linux mint 21.2/win 7 user
[Miscellaneous Android Development] Alfa_omega001:
Hello all, I am goign to use utility but i have question. My device have MT6757D and in supported list is only MT6757. it is compatible? can i use it? thank you i am total noob
[Miscellaneous Android Development] katefrench:
Same question for MT6765H (Helio G37). My device have MT6765H and in supported list is only MT6765. it is compatible?
[Miscellaneous Android Development] myanonymousaccountname:
use the utility and see for yourself if it works, thats how you find out
[Miscellaneous Android Development] Ikefix:
Hello, simple question, I have a samsung A12, wich I presume is locked by the mtk chipset, as the MTK secure boot is enabled (0). I need to root this device in order to use it with drivedroid and create a fake memory card to install Endgame to my xbox original (I know it is a too much complicated way, but I learn a lot). I have the python script running, after having executed "pip install pyserial", but before I go further and opening my A12 to do the test point thing and have my smartphone in EDL (also known as BROM), I'd like to know if you think that I'm in the correct path. Thanks and sorry if this is too much off topic.
[Miscellaneous Android Development] Ikefix:
Wow, I'm having a reaaaaally hard time setting up libusb as com port driver, wich is, apparently, needed to run the commands successfully. Everytime I install the unsigned driver libusb-win32-bin-1.2.6.0 for the com port it creates its own driver class and the script does not run at all, it does not even detect the device. Windows 10 64 bits.