yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] lebigmac:
@xatornet did you try flashing super_fixed.bin yet and what was the result? Can you still boot into Android after flashing it?

adb pull /data/local/tmp/systemrw_1.31d/img/super_fixed.bin
adb reboot bootloader
fastboot flash super super_fixed.bin

And did you try mounting system as R/W after booting into Android?

adb shell
su
mount -o remount,rw /
mount -o remount,rw /product
mount -o remount,rw /vendor

Please show some screenshots thanks!
[Android Software/Hacking General [Developers Only]] xatornet:
I've flashed it but it boots into Qualcom Crash Dump Mode instantly. I'm gonna try to restore super, brb.

C:\Users\Alex\Desktop>fastboot flash super super_fixed.bin

Sending sparse 'super' 1/23 (262140 KB) OKAY [ 1.040s]

Writing 'super' OKAY [ 0.525s]

Sending sparse 'super' 2/23 (262140 KB) OKAY [ 1.015s]

Writing 'super' OKAY [ 0.505s]

Sending sparse 'super' 3/23 (262140 KB) OKAY [ 1.024s]

Writing 'super' OKAY [ 0.512s]

Sending sparse 'super' 4/23 (262140 KB) OKAY [ 1.028s]

Writing 'super' OKAY [ 0.509s]

Sending sparse 'super' 5/23 (262140 KB) OKAY [ 1.014s]

Writing 'super' OKAY [ 0.506s]

Sending sparse 'super' 6/23 (262142 KB) OKAY [ 1.015s]

Writing 'super' OKAY [ 0.504s]

Sending sparse 'super' 7/23 (262140 KB) OKAY [ 0.982s]

Writing 'super' OKAY [ 0.512s]

Sending sparse 'super' 8/23 (262140 KB) OKAY [ 0.974s]

Writing 'super' OKAY [ 0.503s]

Sending sparse 'super' 9/23 (262140 KB) OKAY [ 1.005s]

Writing 'super' OKAY [ 0.511s]

Sending sparse 'super' 10/23 (259271 KB) OKAY [ 1.041s]

Writing 'super' OKAY [ 0.518s]

Sending sparse 'super' 11/23 (262112 KB) OKAY [ 1.001s]

Writing 'super' OKAY [ 0.515s]

Sending sparse 'super' 12/23 (262128 KB) OKAY [ 1.027s]

Writing 'super' OKAY [ 0.510s]

Sending sparse 'super' 13/23 (262120 KB) OKAY [ 1.027s]

Writing 'super' OKAY [ 0.510s]

Sending sparse 'super' 14/23 (262128 KB) OKAY [ 1.028s]

Writing 'super' OKAY [ 0.506s]

Sending sparse 'super' 15/23 (262136 KB) OKAY [ 1.045s]

Writing 'super' OKAY [ 0.513s]

Sending sparse 'super' 16/23 (261997 KB) OKAY [ 1.039s]

Writing 'super' OKAY [ 0.516s]

Sending sparse 'super' 17/23 (237528 KB) OKAY [ 0.911s]

Writing 'super' OKAY [ 0.468s]

Sending sparse 'super' 18/23 (262140 KB) OKAY [ 1.046s]

Writing 'super' OKAY [ 0.512s]

Sending sparse 'super' 19/23 (236376 KB) OKAY [ 0.929s]

Writing 'super' OKAY [ 0.466s]

Sending sparse 'super' 20/23 (262140 KB) OKAY [ 1.021s]

Writing 'super' OKAY [ 0.518s]

Sending sparse 'super' 21/23 (262140 KB) OKAY [ 1.024s]

Writing 'super' OKAY [ 0.528s]

Sending sparse 'super' 22/23 (250712 KB) OKAY [ 1.039s]

Writing 'super' OKAY [ 0.521s]

Sending sparse 'super' 23/23 (70868 KB) OKAY [ 0.262s]

Writing 'super' OKAY [ 0.159s]

Finished. Total time: 33.997s

Welp, Something's wrong for Oneplus even with the super_original.bin. I've flashed it to restore, and it flashes 28/28 parts, not 23, and also does not work. I'll restore my system manually and try again tomorrow :-)
[Android Software/Hacking General [Developers Only]] srdjanLeo:
Actually it doesn't work with any Root explorer but now I can change it with TWRP File manager. It wasn't the case earlier.

Thanks for the script! 😉
[Android Software/Hacking General [Developers Only]] zeestats:
Hi all

In orange fox recovery there is no "enter" button available in keyboard while using the terminal.... anybody can tell me how to press "enter" after giving a command in terminal....?
[Android Software/Hacking General [Developers Only]] RETIEF:
I have the same phone. Please let me know if you get it to work.
[Android Software/Hacking General [Developers Only]] Kilgore714:
Hey can confirm if works

Nubia red magic 5s NX659J
[Android Software/Hacking General [Developers Only]] Kilgore714:
Oh and also no BL unlock is needed on this phone
[Android Software/Hacking General [Developers Only]] metaxda:
I have:

- Poco X3 NFC (unlocked bootloader)

- Android 11 firmware (MiUI ROM V12.0.8.0.RJGEUXM )

- TWRP 3.5.2_10-1-surya by Brigudav

and the v1.31d script did not work.

The error message flashes by too quick and I cannot see it properly.

This phone is new and I am experimenting with it, before I decide on which ROM.

After many years of unlocking/ROMing many different phone brands,

this is my first Xiaomi and I am finding the X3 NFC a bit annoying.

I just want to make the phone decrypted (so that I can flash .ZIP via TWRP),

and doing so, is proving to be rather difficult (eg. must make filesystem RW, must flash 'encrypted' .ZIP via TWRP, etc.)

EDIT:

I just re-flashed a custom ROM, via TWRP,

and then flashed "Disable_DM-Verity_ForceEncrypt" straight after the ROM,

and then Magisk (via TWRP Brigudav)

then rebooted to system.

Then, installed the Magisk.apk from within the ROM.

Now, I find my filesystem is unencrypted and it looks good to me :)
[Android Software/Hacking General [Developers Only]] lebigmac:
This is not true. Script works perfectly when launched manually but there is a little recovery installer issue on some devices in v1.31d that I have already fixed and will be released in next version v1.32!

If this little installer issue bothers you feel free to use the old v1.31 that is still available in original post.

Oh you using the TWRP by that spineless thief who stole my script, deleted me from my own project and released as his own... I'm still waiting on his public apology since he first steal my script on March 14th 2021... I would NOT recommend using recovery by a cyber thief as stealing other people's hard work is not very trustworthy behavior. I mean deleting all important comments from original script such as credits, disclaimer, author name, instructions (and much much more) and replacing with meaningless words that's despicable and inacceptable behavior by itself but hacking into the update-binary and replacing original program title with a made-up bogus program title that has absolutely nothing to do with the original project? Come on seriously? Only malware would do such a misleading and malicious thing!

Maybe this project would already be finished and 100% working on all devices if some malicious hacker would actually contribute positively to the project and help me fix any bugs rather than only hacking my update-binary and deleting only my comments from script (and renaming my functions to some bogus meaningless words) and then releasing it as if he created whole project from scratch without even mentioning original source... Not once did this spineless and ruthless cyber pirate offer to help with the original project.
[Android Software/Hacking General [Developers Only]] metaxda:
thank you for your reply.

i am sorry to hear this.

i really did not know about this history and i just used what i saw online.

i should use the OrangeFox project now then.
[Android Software/Hacking General [Developers Only]] superslayer0040:
Hello,first of all i like to thank you and others for yours hardwork.here i encountered this error

I already try flash the zip with twrp and failed before try the manual method.
[Android Software/Hacking General [Developers Only]] lebigmac:
Hi thanks for the screenshot. Script almost works as expected on your device. Did you properly copy script folder into /data/local/tmp/ ?

Which Xiaomi device is it?

Your device doesn't have neither super partition nor shared_blocks feature and your system can already be mounted as R/W. Please run these shell commands while phone is in Android mode and send me screenshot. Thanks.

adb shell
su
mount -o remount,rw /
mount -o remount,rw /product
mount -o remount,rw /vendor
[Android Software/Hacking General [Developers Only]] superslayer0040:
Hi,thank you for quick response.im running Mi 9t with patched nethunter hasty kernel.

I could run all of the commands above without any error except for /product

The terminal response with : mount: '/product' not in /proc/mounts.

By the way in response for your replied i copied all the existing file and folder which i left into /data/local/tmp/? and executed the script once more which then intructed me to connect to pc with adb.

Will update again after i done that,but not tonight.

By the way i did connect to to pc,but couldnt figure out what to do.also when i tried to flash the script through recovery i got error said that the file is not a flashable zip.
[Android Software/Hacking General [Developers Only]] mario1634:
Need some help I keep getting this message

Manipulating vbmeta on a LOCKED device will likely cause the

device to fail booting with little chance of recovery.

If you really want to do this, use the --force option.

ONLY DO THIS IF YOU KNOW WHAT YOU ARE DOING.

Manipulating vbmeta on a LOCKED device will likely cause the

device to fail booting with little chance of recovery.

If you really want to do this, use the --force option.

ONLY DO THIS IF YOU KNOW WHAT YOU ARE DOING.

resize2fs 1.44.4 (18-Aug-2018)

e2fsck 1.45.4 (23-Sep-2019)

resize2fs 1.44.4 (18-Aug-2018)

resize2fs 1.44.4 (18-Aug-2018)

e2fsck 1.45.4 (23-Sep-2019)

resize2fs 1.44.4 (18-Aug-2018)

resize2fs 1.44.4 (18-Aug-2018)

e2fsck 1.45.4 (23-Sep-2019)

resize2fs 1.44.4 (18-Aug-2018)

resize2fs 1.44.4 (18-Aug-2018)

e2fsck 1.45.4 (23-Sep-2019)

resize2fs 1.44.4 (18-Aug-2018)

resize2fs 1.44.4 (18-Aug-2018)

e2fsck 1.45.4 (23-Sep-2019)

resize2fs 1.44.4 (18-Aug-2018)

tune2fs: Bad magic number in super-block while trying to open /data/local/tmp/makesysrw_1.31/files/super/system_b-cow.img

tune2fs: Bad magic number in super-block while trying to open /data/local/tmp/makesysrw_1.31/files/super/system_ext_b-cow.img

tune2fs: Bad magic number in super-block while trying to open /data/local/tmp/makesysrw_1.31/files/super/product_b-cow.img

tune2fs: Bad magic number in super-block while trying to open /data/local/tmp/makesysrw_1.31/files/super/vendor_b-cow.img
[Android Software/Hacking General [Developers Only]] _BJIAD_:
I recorded a video about the manual installation of the script, but I speak russian, so if you do not understand the russian language, you can turn off the sound. And just watch the video starting at 1:01. If will there are questions, I will answer.
[Android Software/Hacking General [Developers Only]] blackpope32:
officially works on Moto g power 2021 have to use a and b switch work around
[Android Software/Hacking General [Developers Only]] prvtprsn:
Hello. Is it normal that my super_original weighs 8,5 GB and super_fixed weighs only 2,74 GB on my POCO F3?
[Android Software/Hacking General [Developers Only]] kpykpy:
normal

my original 12gb

fixed 4.5gb
[Android Software/Hacking General [Developers Only]] Keven11:
did you flash this from recovery or call it manually?
[Android Software/Hacking General [Developers Only]] Pipedream420:
Could it be that COW is referring to Copy on Write?

Could those "files" somehow be basically empty space used for Copy on Write? Kinda like what a swap file does instead of a swap partition?

Copy-on-write - Wikipedia

en.wikipedia.org
[Android Software/Hacking General [Developers Only]] kosmatyj:
Where can I get 1.31c version of the script?
[Android Software/Hacking General [Developers Only]] harvey186:
Sorry if this question was asked before, I haven't find it.

I have the super.img from my firmware. So I need no dump/extract from device. How can I use the script for local saved super.img ?
[Android Software/Hacking General [Developers Only]] Frxhb:
Thanks... Doesn't work for me .. now he tells me there is no space left ( I have over 60 GB free).. :D
[Android Software/Hacking General [Developers Only]] baxal0:
which phone you have? with super partition or not?
[Android Software/Hacking General [Developers Only]] Frxhb:
I do have super partition and I did everything what lebigmac said. I texted with him yesterday much :D

The Skript also worked and he told me the "header magic" error is normal .. but yea.. no write access for me :D Maybe I do something wrong.

Device: Mi 10 T Lite Android 11
[Android Software/Hacking General [Developers Only]] Frxhb:
Ah funny, In recovery I can mkdir Test in /system :D

But after reboot the folder is gone xD

Interesting....
[Android Software/Hacking General [Developers Only]] baxal0:
do you use size=100 or more?
[Android Software/Hacking General [Developers Only]] Frxhb:
yes I did this. :(

What is this apk?
[Android Software/Hacking General [Developers Only]] Frxhb:
I think it was 100
[Android Software/Hacking General [Developers Only]] baxal0:
cleanmaster. I chose randomly.. it is in system partition app

are you root? do you give root permissions to total commander?
[Android Software/Hacking General [Developers Only]] Frxhb:
yes :( When I try to create a folder in /system it says : "mkdir /system/test : No space left on device. But I have more than 60 GB left :D

I tried 3 different explorer
[Android Software/Hacking General [Developers Only]] baxal0:
as i understand...

60gb is the free space from whole phone. has nothing to do with the free space of system partition. the space of system, vendor, product (and whatever partiton has your super) defined from parameter size=???mb when you run the script. if you use size=100 it mean extra space 100mb at system etc.

(sorry my bad english)
[Android Software/Hacking General [Developers Only]] Frxhb:
yep! Thanks. I looked wrong. I just have 1mb left, LOL. Ill try to re-run the script.
[Android Software/Hacking General [Developers Only]] lebigmac:
Hi greetings to Greece!

This is just an annoying lpmake warning that can be safely ignored. It's actually a good sign if you see this warning.

If you can do mount -o remount,rw /

after running the script then this means that the script was successfull. Congratulations!

Can you please tell us more about your device? What model, android version, do you have super partition or not etc.? Thanks.

Enjoy a fully read/write-able system!
[Android Software/Hacking General [Developers Only]] baxal0:
Hallo from Greece :)

I have redmi note 9 pro (joyeuse) with a10, official miui 12, twrp from geoanto. root, with super partition.

can i share your work to our community forum? (xiaomi-miui.gr)
[Android Software/Hacking General [Developers Only]] lebigmac:
Please feel free to share a link to this official SystemRW by lebigmac project homepage with your friends.

Also keep in mind a new hotfix is already in the works to make installation more simple (with flashable zip) and also some folks with empty partitions inside super have reported some issues that still need to be fixed.
[Android Software/Hacking General [Developers Only]] Frxhb:
WOW! Finally it worked! Big thank to @lebigmac who really helped me in private chat!

First of all, my device:

Xiaomi Mi 10T Lite, MIUI V.12.0.1.0 (Android 11)

I was managed to run this script with following commands :

cd /data/local/tmp/makesysrw_1.15
./makesysrw.sh in=./files/super/super_original.bin size=100

After this, it worked without problems.

I have orangefox recovery installed, but I used to fastboot in TWRP Recovery, cause I faced some problems with orangefox.

(for this, just download your TWRP, connect your phone in fastboot and run:

"fastboot boot .\twrp...........img"

After the script has finished, my phone rebooted successfully. I opened root explorer and created a test folder in /system. The program asked me to mount /system as read write (mount -o remount,rw /) and e voila, remount sucessfully and write rights worked!

Thanks man
[Android Software/Hacking General [Developers Only]] Ayoub$#:
Please is there a Windows version as I have neither twrp nor lunix?
[Android Software/Hacking General [Developers Only]] baxal0:
I try to redo the procedure, i want to change the size. but i get error, can't remove lock.
[Android Software/Hacking General [Developers Only]] Ayoub$#:
Please for Windows
[Android Software/Hacking General [Developers Only]] Frxhb:
do it with fastboot TWRP, its really easy
[Android Software/Hacking General [Developers Only]] Ayoub$#:
I do not have τώρπ I do not have I do not have a recovery rate
[Android Software/Hacking General [Developers Only]] DoubleHack:
First of all thanks for your hard and great work! I have simple question. I have a redmi note 9s; which version of the script do you recommend to use: 1.26 ( Which is the version written in parentheses next to my phone model in the "confirmed working on this device" list ) or the latest version of your script?.

Also in the list the redmi note 9 is repeated twice: once with written in brackets 1.26, and the other without written anything ... This confuses me a little...Perhaps one of the two entries refers to the redmi note 9s (curtana)? Which is my model.

So which version Of your script should I use?

Thanks in advance. 😉
[Android Software/Hacking General [Developers Only]] megiss:
What do i need to install and do exactly on my phone since when i try to enter some commands to termux it just enters it and it does nothing (oneplus 8 pro)

I want in depth tutorial on how to do this in manual way without recovery

i managed to run the script once and this is the log:

systemrw: Initiating procedure...

systemrw: Device is in Android mode. Ignoring
systemrw: Current device: OnePlus
systemrw: Current Android version: 11
systemrw: Current SELinux status: Permissive
systemrw: Current slot is: 1
systemrw: Your super partition is located at: /dev/block/sda14
systemrw: / is read-only
systemrw: /product is read-only
systemrw: /vendor is read-only
systemrw: Attempting to disable dm-verity and verification...
Successfully disabled verification on slot with suffix _b. Reboot the device for changes to take effect.
Successfully disabled verity on slot with suffix _b. Reboot the device for changes to take effect.
systemrw: Dumping super partition to: ./img/super_original.bin
systemrw: Please wait patiently...

dd: ./img/super_original.bin: No such file or directory
systemrw: Error: Failed to dump file to: ./img/super_original.bin
[Android Software/Hacking General [Developers Only]] megiss:
b

basically everything works except that last part

"

dd: ./img/super_original.bin: No such file or directory

systemrw: Error: Failed to dump file to: ./img/super_original.bin

"
[Android Software/Hacking General [Developers Only]] lebigmac:
Hi @megiss.

Open script with notepad and you will find expert example in comments section (if some spineless malicious hacker hasn't deleted it yet).

Try the expert example without the out= argument like this:

adb shell
su
cd /data/local/tmp/systemrw_1.31d
./systemrw.sh in=`ls -l /dev/block/by-name/super | awk '{print $NF}'` size=15

This will directly use your super block device (/dev/block/sda??) as input argument to the script and it will skip dumping of super_original.bin to your device.

Hi @DoubleHack. You are welcome. For Xiaomi device any script version should work perfectly.

Hi @harvey186

You must specify your custom input file when launching the script using this parameter in=/path/to/your/super.img

Hi @kosmatyj v1.31c and v1.31d is the same thing. Soon I will release v1.32 ;)

Hi @Pipedream420 yes you are right this is the same COW as in dirty COW. Do you think it's safe to skip these COW files or do Oneplus devices require these files to boot properly?

Hi @blackpope32

Did you use @harpreet.s slot A/B switching method?

Hi @_BJIAD_ thanks for mentioning original source. Can you please contact me before uploading next version of your video? I have some important feedback for you that will help to make your video even better ;) Thanks.

Hi @mario1634.

Try to run v1.31d manually. And then send me your myargs.txt file from log folder. Thanks!

Manipulating vbmeta on a LOCKED device will likely cause the

device to fail booting with little chance of recovery.

Maybe this is what's causing some OnePlus devices to fail at booting the super_fixed.bin ? It looks like I need to implement dumping of vbmeta partition for backup purposes before attempting to disable dm-verity and verification using avbctl binary. Thanks for feedback!

Hi @superslayer0040. Thanks for your interest in my project. I'm a little bit sad that you were not able to successfully launch it. The good news is you don't even need to run my script at all because your custom ROM allows mounting of /system partition as read/write by default! You are very lucky!
[Android Software/Hacking General [Developers Only]] megiss:
nvm
[Android Software/Hacking General [Developers Only]] DragonFire1024:
Google Pixel 4a. Everything seems to pass until it goes to create in the very end super_fixed.img, and fails with error code 73. Might have something to do with the fact that there might be a partition but the image in my firmware is an super_empty.img.
[Android Software/Hacking General [Developers Only]] Mikeyd7186:
Which method are you using?
[Android Software/Hacking General [Developers Only]] Mikeyd7186:
Ok I tried your way and get error 73 have not tried out way yet
[Android Software/Hacking General [Developers Only]] DragonFire1024:
Same error number for me too. You mentioned a cable and I generally use a Chrome OS debugging cable for my Pixel 4 because of various testing reasons and the environment it contains and really can't explain much more beyond that other than it's usually my go-to cable but I have others and will give it a shot with a different cable when I get home. But it is the same error number for me it seems like everything else completes except for the last step.
[Android Software/Hacking General [Developers Only]] lebigmac:
@Mikeyd7186 To fix error 73 please use included troubleshooting repair script or try harpreet slot a/b switching method as described in first post troubleshooting section. Good luck!
[Android Software/Hacking General [Developers Only]] megiss:
Works like a charm on my Oneplus 8 Pro (eu model) running on android 11 and OOS 11.0.66 !
[Android Software/Hacking General [Developers Only]] DragonFire1024:
I still haven't been able to get this to work and I've tried almost everything. I even tried the alternative tool superpack and I get stuck at the Google logo on the opening boot animation. Anytime I try to set active slot I am unable to reboot. I posted my logs right here hopefully somebody can tell me what I'm doing wrong.
[Android Software/Hacking General [Developers Only]] lebigmac:
If you experience the mysterious error 73 you need to use the troubleshooting repair script (linux only) that's included with the v1.31d BUNDLE.
[Android Software/Hacking General [Developers Only]] DragonFire1024:
Well I'm happy to say at least it worked. Everything was going pretty good, until I decided to make a change to the system. And I decided to be bold and the first thing I changed was the build prop to 'userdebug'. The file opened my file manager asked if I wanted to mount the system, I did and I made the edit and saved the file. That's the first problem that happened saving the file. It took about a minute or so before the backup file appeared. So out of curiosity I had decided to adb pull the build prop I had just edited. The file was blank there was not a single bit of text inside of it. But it wouldn't have mattered because for some reason it wouldn't let me replace the build prop file not even in recovery. instead I kept getting the error "not enough space on device". I know these partitions are small and there's not a lot of space on them however there was enough for this build prop file.But at that point it didn't matter because somehow the system was no longer writable and even if it was I could not replace the build prop file which was blank so I ended up at a boot loop. Luckily I can fix everything really easily without having to reset anything. I'm not at home and I did not have time to post any logs because I was literally about ready to walk out the door when it finished but it was pretty weird.

Would having magisk be a problem while trying to do this? Though I have custom recovery I have no other root option at the moment. I'm not sure that would matter having twrp though.