yashsingh1/xdaforums huggingface dataset:
[Wear OS Software and Hacking General] nemzzy668:
I renamed it disabler.zip before trying to move it over, I think maybe the SD card folder has been removed from the watch maybe I did a step wrong, is there a way for me to start all over again put the watch back to default and try again?
[Wear OS Software and Hacking General] nemzzy668:
Ok got that to work must of messed up so started again and it moved it over, Problem is now this step

- Reboot & do initial setup (pair with your phone through WearOS app)

It just keeps rebooting into recovery, isn't booting the watch like normal
[Wear OS Software and Hacking General] nemzzy668:
Right trying again, these steps aren't really clear

- Make a copy of your Magisk apk file to Magisk-v24.3.zip

- Flash Magisk with `adb sideload`

Are we doing adb side load Magisk-v24.3.zip because when I do that it says invalid zip format, if I do

adb sideload Magisk-v24.3.apk, that seems to work, but then it gets stuck in a boot loop when you get to the

- Reboot & do initial setup (pair with your phone through WearOS app) step
[Wear OS Software and Hacking General] yesimxev:
Sure I don't know what was the sdcard missing issue, you could try a reboot to recovery, see if /sdcard will be usable in that case.

That's odd. Yes if you rename the apk to zip, it can be flashed as a zip with sideload. When I created this guide, it all worked in one go. Try just renaming the .apk to .zip without making a copy. Or download the apk again and rename to zip
[Wear OS Software and Hacking General] nemzzy668:
I've done that and it seems to work, but now i'm just stuck in a boot loop, it just keeps going back to booting in recovery
[Wear OS Software and Hacking General] yesimxev:
There must be a step missed or so and it messed up everything. Twrp wipe everything, format data. Reboot to twrp, start from flash all again
[Wear OS Software and Hacking General] nemzzy668:
I got it to work and it almost booted by the looks by changing it to .apk, but then something happened and it rebooted and now its just stuck in bootloop and can't even get it to reboot to recovery. Watch bricked by the looks just constant loop now comes up tickwatch logo then warns you ther bootloader in unlocked, then restarts again rinse and repeat. Managed to get back to bootloader menu by holding both power buttons, reflashed recovery, but reboots and just does logo bootloader unlocked and restarts.

Gutted
[Wear OS Software and Hacking General] nemzzy668:
I can't even get it to boot to recovery mode now, stuck in a bootloop, deffently didn't miss any steps
[Wear OS Software and Hacking General] nemzzy668:
Is there a way to clear everything with adb or fastboot, as I can't get it to boot into recovery mode, is shows the wear os logo, and then reboots again
[Wear OS Software and Hacking General] yesimxev:
Hit me up on Telegram. As long as you got fastboot, we can solve it
[Wear OS Software and Hacking General] nemzzy668:
Whats your telegram bud
[Wear OS Software and Hacking General] yesimxev:
yesimxev

Pentester | Kali NetHunter Developer | Security and Mobile

t.me
[Wear OS Software and Hacking General] nemzzy668:
Yeh i've sent you a message on telegram
[Wear OS Software and Hacking General] m@rco:
I did all the steps and did the reboot. Then i got a screen with 4 dots that a running clockwise. How long does it take to boot?

Nevermind. Missed a step because off small screen and bad eyes :cool:

Still got one question.

"You might want to disable auto-update, set grant access in auto response, and disable toast notifications for easier navigation in the future"

Where can i find those settings?
[Wear OS Software and Hacking General] NUMAflex:
hey there its in "magisk manager"

but "menu" kinda hide in there up corner right (sorry in case of dyslexia) =] and it will show up, watch screens...
[Wear OS Software and Hacking General] nelikp:
Thank you
[Wear OS Software and Hacking General] nelikp:
This only for amoled screen

I mean i want disable the secondary tilt to wake also
[Wear OS Software and Hacking General] mkgrage:
Hi Sir, for TWP3 there's no custom kernel (due to use nethunter generic one). Is that duckhunter and HID attacks really works normally? I thought it need its custom kernel. Am i wrong? thank you
[Wear OS Software and Hacking General] yesimxev:
There will be, however HID and duckhunter works by default on this because it's kernel 4.x
[Wear OS Software and Hacking General] col_forbin:
@yesimxev, In the first post, you have this step:

- Select Wipe -> Advanced Wipe -> select Format Data

Does that mean, Select Wipe -> Advanced Wipe -> Check box for Data -> Wipe

Or does that mean, Select Wipe -> Next Page -> Format Data -> Type yes to continue?

I've been trying to install 2022.3, and I keep getting a boot loop after I install Nethunter.
[Wear OS Software and Hacking General] enter2explore:
I use below step

Select Wipe -> Next Page -> Format Data -> Type yes to continue

I had installed nethunter few time with no boot loop for me
[Wear OS Software and Hacking General] col_forbin:
Thanks. I've tried both now, and I'm still getting a bootloop. Are you using a twp3gps, or a twp3lte?
[Wear OS Software and Hacking General] enter2explore:
Hi..mine twp3gps
[Wear OS Software and Hacking General] col_forbin:
Mine's a twp3gps too. I think I screwed something up on my watch. I wish there was a way to go back to the original, stock ROM and start over from the beginning.

I get a boot loop 3 times, and then it just sits at the TicWatch screen indefinitely.
[Wear OS Software and Hacking General] enter2explore:
When u get boot loop..can u force to reboot to recovery?

Format data again from twrp and reboot back to system didn't work for you?.
[Wear OS Software and Hacking General] col_forbin:
I can get back to recovery, yes.

I can format data again (Select Wipe -> Next Page -> Format Data -> Type yes to continue).

I can do everything according to the instructions in the first post. After I install Nethunter, that's when I'm back to the boot loop. I've tried this more than 10 times now. That's what leading me to believe I've screwed up my watch somehow. If others have not issues, than this is a PEBKAC
[Wear OS Software and Hacking General] yesimxev:
Do a clean OneOS flash then without wipe and let it start. Then reboot to recovery, format data, reboot to recovery and continue the steps
[Wear OS Software and Hacking General] col_forbin:
I reboot to recovery, adb sideload OneOS-22.01.30_rubyfish.zip, reboot and the watch reboots to recovery.

Then I try; reboot to bootloader, fastboot --disable-verity --disable-verification flash vbmeta vbmeta.img, reboot to recovery, adb sideload OneOS-22.01.30_rubyfish.zip, MobvoiAPPS-TWP3_pico.zip, Magisk-v24.3.zip, push and twrp install Disable_Dm-Verity_ForceEncrypt_11.02.2020.zip, reboot & do initial setup, enable debugging, adb install Magisk-v24.3.apk, setup Magisk, reboot to recovery, adb sideload nethunter-2022.3-ticwatchpro-wearos-kalifs-nano.zip, reboot, and watch sits at the TicWatch screen indefinitely. I have let it sit for about a half an hour.
[Wear OS Software and Hacking General] yesimxev:
Wrong NH zip. That's for the old TWP

https://build.nethunter.com/contributors/re4son/catfish/nethunter-2022.2b-generic-armhf-kalifs-nano.zip
[Wear OS Software and Hacking General] yesimxev:
You can try the all new 2022.3 version, but still has to be the generic nano image (Lite), as kernel flashing is not supported yet. You'll still get all the features except BadUSB attack (RNDIS)
[Wear OS Software and Hacking General] col_forbin:
Derp! You've told me this before. Sorry about that.

nethunter-2022.3-generic-armhf-kalifs-nano.zip works fine. Had to sideload twice, in order for chroot to start, but after that, it's all on point.

Thanks again @yesimxev
[Wear OS Software and Hacking General] k27079024:
hi i flash new stock rom PMRB.220703.001

but is didnt work

and my adb is not working now

so i cant flash anything for fastboot and recovery

what can i do
[Wear OS Software and Hacking General] col_forbin:
Can you boot your watch into fastboot mode? With the watch powered off, press and hold both buttons, until the watch vibrates.
[Wear OS Software and Hacking General] k27079024:
I kill the adb.exe and reboot pc

and now I can flash in fastboot

thx
[Wear OS Software and Hacking General] col_forbin:
Right on!
[Wear OS Software and Hacking General] k27079024:
my gps pro 3 change ultra screen

and i flash the TWRP-OEM_FOR_TICWATCH_PRO_3_ULTRA_GPS(rubyfish).zip

now i can change e-ink color and more watchface

thank for all
[Wear OS Software and Hacking General] enter2explore:
Can share here the rom pls?
[Wear OS Software and Hacking General] Radem:
Hello, how does the rom work in general, how long does the battery last, how does LTE GPS work.
[Wear OS Software and Hacking General] k27079024:
hi i flash onerom and i fail

and i try flash stock rom for fastboot

but now my watch still in fastboot

not reboot not going recovery

what can i do
[Wear OS Software and Hacking General] yesimxev:
Did you try the correct ROM, and see if the below steps help. Also see the downloads for stock ROM + ultra addons https://wear.lunawolf.es/en/faq/
[Wear OS Software and Hacking General] lxjin81:
@yesimxev I have strange problem on the ticwatch pro 3 ultra lte.

After flash magisk and nethunter. system boot successful. add Nethunter app show's chroot status is OK.

I can start the nethunter 's ssh service.

But when i connect to ssh，

I cann't run any command,. eg. ls ,cat.

this is the ssh shell info：

zsh: failed to load module `zsh/zle': /usr/lib/arm-linux-gnueabihf/zsh/5.9/zsh/zle.so: cannot open shared object file: No such file or directory

kali# ls zsh: required key not available: ls

kali# who zsh: required key not available: who

but i can use adb shell su

to see these file is located at /data/local/xxxxx right folder。（eg： /usr/lib/arm-linux-gnueabihf/zsh/5.9/zsh/zle.soxxxx/usr/lib/arm-linux-gnueabihf/zsh/5.9/zsh/zle.so）

The nethunter.terminal app also not work at all, the same problem.

looks like it is the /data file encryption problem？

adb shell getprop show it is encrypted:

[ro.crypto.state]: [encrypted]

[ro.crypto.type]: [file]

I've tried flashing Disable_Dm-Verity_ForceEncrypt_11.02.2020.zip throgh TWRP before 。

Although the flashing reporting job is successful,

But it will cause the startup system to fail. just stay in boot animation. or auto reboot to recovery.

I've spent days dealing with this issue and all failed。

eg:

try flash diffent rom version，

try use dfe-neo instead the Disable_Dm-Verity，

edit the fstab.rover file to remove fileencryption=ice

...

But these attempts all failed to disable the /data encryption

How to solve this problem？pls
[Wear OS Software and Hacking General] yesimxev:
All is up here https://wear.lunawolf.es/en/therprojects-Recovery/
[Wear OS Software and Hacking General] yesimxev:
Yes encryption causes these anomalies. When you edit fstab, you should edit to fileencryption=encryptable if I remember properly. Then format data in TWRP
[Wear OS Software and Hacking General] rubydynamo69:
is this possible on galaxy watch 4?
[Wear OS Software and Hacking General] yesimxev:
If there's twrp and 8gb storage (4gb for data), yes.
[Wear OS Software and Hacking General] lxjin81:
Thank you. I tried this method, but it will cause the watch boot failed and auto reboot to twrp。

Is there currently have no way to disable data encryption for the TicaWatch Pro 3 Ultra LTE（ticwatch pro x）？

How the android system to know and set the ro.crypto.state=encrypted and ro.crypto.type=file when the system starts？
[Wear OS Software and Hacking General] yesimxev:
Did you flash vbmeta as twp3 oneos install guide says? Generally, after you did the steps properly, when you get to flash disabler, then format data should be enough. Did you push the installer to /sdcard, then installed with twrp? So it will read disable task from filename
[Wear OS Software and Hacking General] lxjin81:
Yes, I tried this when I first started to flashing on this watch.

my flash steps is flow the install guide：

- fastboot --disable-verity --disable-verification flash vbmeta vbmeta.img

- astboot flash recovery recovery.img

- Boot into recovery

- Select Wipe -> Advanced Wipe -> select Format Data

- Reboot to recovery

- Select "Install -> ADB Sideload"

- adb sideload OneOSxxx.zip

- adb sideload xxxx.

Ultra zip

- adb sideload Mobivoxxxx.apps.zip

- adb sideload Magiskxxxx.zip

No reboot, and then finally to do this step

- adb push Disable_Dm-Verity_ForceEncrypt_11.02.2020.zip /sdcard/

Use Twrp to install this zip, then format data.

Reboot to System

But the watch can not boot system. just stayin boot animation and reboot to twrp.

I use the 'Disable_Dm-Verity_ForceEncrypt_11.02.2020.zip' file name.

Is it right name to disable data encryption?
[Wear OS Software and Hacking General] yesimxev:
Yes that's fine. You can split the steps then, see where it fails. No need to do vbmeta again. Flash oneos, ultra addon, mobvoi apps, boot up. Reboot to recovery. Flash disabler, format data. Reboot, setup watch. Reboot to recovery, flash magisk. Reboot again, install magisk apk. If all is fine, reboot to recovery, flash NH zip
[Wear OS Software and Hacking General] innerfrost:
Hello, I follow the steps from kali site but when I flash nethunter-2022.2b-ticwatchpro-wearos-kalifs-nano.zip file using sideload it puts watch on boot loop, anyone has suggestion for this problem?

I have ticwatch 3 pro gps rubyfish, in all other steps I don't have any problem.
[Wear OS Software and Hacking General] yesimxev:
Can you flash Disable_Dm-Verity_ForceEncrypt_11.02.2020.zip from twrp, after NH installer?
[Wear OS Software and Hacking General] innerfrost:
Hello, I got it when install other version - nethunter-2022.2b-generic-armhf-kalifs-nano.zip, but now I'm wondering with one chroot image to install on the watch
[Wear OS Software and Hacking General] yesimxev:
Just go back to TWRP and flash dm verity disabler, that might be the key. As far as I remember I didn't have to, but I might have forgotten
[Wear OS Software and Hacking General] innerfrost:
Everything work now, I just reinstall the nethunter from TWRP and now everything is OK, thanks
[Wear OS Software and Hacking General] innerfrost:
Hello, I have a question about Wi-Fi on nethunter version on the ticwatch, my watch connect and disconnect automatically in every 5 seconds on the every Wi-Fi that I try to connect it... Any suggestions?
[Wear OS Software and Hacking General] yesimxev:
Awesome! I think this was the thing for me. Strangely, sometimes dm verity zip was needed, sometimes not
[Wear OS Software and Hacking General] yesimxev:
Not too sure, if you have the paired phone nearby, it will try to use Bluetooth as it's preferred by wearos. If that's the case, try turning BT off and see if wifi still disconnects
[Wear OS Software and Hacking General] innerfrost:
Nice, thanks! Do u know a way that I can enforce both Wi-Fi and Bluetooth?
[Wear OS Software and Hacking General] yesimxev:
I wanted to do that for WPS attacks tab. I found some switches which makes them both enabled and active in the same time, but there was still something which prevented doing so. That's why I turn off BT when scanning for WPS APs
[Wear OS Software and Hacking General] ALHARTHI6:
Hello, thanks for sharing, appreciate your great job.

I've ticwatch pro 3 ultra and here in our country, Google pay isn't supported, but we have a local payment app called mada pay works on android 6-13 smart phones but not for wear os, I could install it on my watch but it doesn't work, the app isn't officially by wear os.

I know someone mentioned he got it to work on Ticwatch E, but with some root able customized rom as he said.

The app is very weak supported and it works on most devices but sometimes it doesn't work for new devices or OS,s at beginning, so I know its not very well build or updated.

Can you please try it if it works or no or if you can just let it work by any chance with this rom?

Or can anyone just try it or give any help, one this rom please, thanks to all.
[Wear OS Software and Hacking General] ALHARTHI6:
Any help guys!
[Wear OS Software and Hacking General] yesimxev:
You'll have to figure that out, there are magisk workarounds on phone, but some also say this way with gpay, maybe works with other apps: before root or NH, add your cards to gpay, then install magisk and NH
[Wear OS Software and Hacking General] ALHARTHI6:
Can you please just try that for me, I can give you the app and the card to try because don't have the required cable to do all staff, if it worked I can buy a cable to do it later
[Wear OS Software and Hacking General] yesimxev:
You can do adb install xy.apk through adb over wifi. Enable in developer settings on watch
[Wear OS Software and Hacking General] ALHARTHI6:
I did this already, as I mentioned above, and can this root the device to install magisk to try?!
[Wear OS Software and Hacking General] yesimxev:
I thought you tried installing through play. I think it won't work for me if it doesn't work for you. Try asking their dev team. My watch is rooted anyway
[Wear OS Software and Hacking General] ALHARTHI6:
No bro, I installed only by apk adb slide, it not on wear os store.

It was installed no problem and opened but can't add card, I know the app has a lot of security, some mobiles markets, it doesn't work on them and some updates has also the same thing.

But as I said above there is only one guy has mentioned it worked on his watch with root and some customization.
[Wear OS Software and Hacking General] yesimxev:
So your watch is full stock? Then it should work. What's your error? Also ask him for the steps how he did
[Wear OS Software and Hacking General] ALHARTHI6:
Yes my watch is fully stock rom but the app is for mobile not watch.

I want to use it in my watch.

For that guy I found him in youtube 3 years ago, he was explaining root for ticwatch E, he said he did a lot of customization that time and the app is working with him, I'm not sure if he is telling truth, but I remember he just said to root it and use magisk to hide that's all.

But I was having ticwatch c2 tried everything, also used busybox but never got it to work.

I didn't use NH and never heard about it.
[Wear OS Software and Hacking General] yesimxev:
I see. What's the problem? Is it crashing? You can see the errors, launch before starting the app.

adb logcat *:E

ctrl+c right after the crash and send me in code brackets
[Wear OS Software and Hacking General] ALHARTHI6:
ok its below
[Wear OS Software and Hacking General] ALHARTHI6:
Amm it's little long story, on version 3.0.0 it's crashing after typing card number, but o newer version 3.0.2 it's crashing on start up.

hope this helps

07-19 22:25:57.759 32447 32447 E AndroidRuntime: ... 32 more
07-19 22:25:58.287 759 833 E InputDispatcher: channel '4452342 com.mada.madapay/o.getPrecomps (server)' ~ Channel is unrecoverably broken and will be disposed!

07-19 22:25:58.411 1229 1229 E om.mada.madapa: Not starting debugger since process cannot load the jdwp agent.

07-19 22:25:59.051 20768 1301 E memtrack: Couldn't load memtrack module

07-19 22:26:01.372 759 869 E TaskPersister: File error accessing recents directory (directory doesn't exist?).

07-19 22:26:03.478 1278 1278 E libnfc_nci: [ERROR:StNativeNfcTag.cpp(1075)] nativeNfcTag_doDisconnect: tag already deactivated

^C

C:\Users\m\Desktop>
[Wear OS Software and Hacking General] nsa.hnx:
Hi all, this is a great thread. Firstly thanks for that outstanding work :)

i have a Ticwatch 3 Ultra (rubyfish) and folowed the steps described.

Seems to have worked Device boots Faces is installed Oneos working .

One thing to mention is after all the sideload things u need to change to regular adb mode with adb usb, then the push works also to the sdcard, may be helpfull for the beginners.

Best regards,

Ned
[Wear OS Software and Hacking General] Cryopier:
The OneOS ROM link is dead
[Wear OS Software and Hacking General] ALHARTHI6:
One month no one answer!!
[Wear OS Software and Hacking General] kerode:
I've got a cable and adb running etc but before I proceed, if I decide I don't want to stay on Kali, can I just revert back to stock and relock the bootloader?
[Wear OS Software and Hacking General] MoonBeautySabata:
Is there a particular reason that the OS is built without android.hardware.nfc enabled? It would be really nice to have access to Mifare Classic or NFC tools as they seem to work fine on stock after sideloading. Getting root access would just be nice for card emulation
[Wear OS Software and Hacking General] buxtor:
How do you start chroot? I only know just enough to be dangerous.
[Wear OS Software and Hacking General] yesimxev:
Paste this to the app's issue page
[Wear OS Software and Hacking General] yesimxev:
What do you exactly mean? Should i mention to enable ADB usb because it's not usb adb by default? Please let me know
[Wear OS Software and Hacking General] yesimxev:
Go to top left menu in nh app (you can't see yet, I'll need to optimise), chroot manager - start chroot on bottom left
[Wear OS Software and Hacking General] yesimxev:
Probably the reasons what we would use for 😆 yes I'm looking to build a vanilla wearos just for that to enable but there's no tutorial like for lineage
[Wear OS Software and Hacking General] yesimxev:
Be patient
[Wear OS Software and Hacking General] yesimxev:
You can flash stock back but i never tried locking bl. In theory yes, but better ask the dev @LoboMalo_SoyDeGatita on https://t.me/ticwatchpro3testing
[Wear OS Software and Hacking General] Lord Sithek:
I've tried to relock my Ultra and all is fine
[Wear OS Software and Hacking General] yesimxev:
Fixed
[Wear OS Software and Hacking General] ALHARTHI6:
What is it and where?
[Wear OS Software and Hacking General] ALHARTHI6:
Sorry buy I'm too petient, I replied then waited 5 days then deleted the reply and replied again to make sure you receive the notification then I waited more than a month.

And I've this watch for almost 2 years!. So I'm too patient.

Any way I've replied to you in pervious reply.

Note: I'm on stock firmware as I mentioned before so I don't where to paste that result.l as you requested.

Thanks.
[Wear OS Software and Hacking General] Jbrimb:
What can I do if WearOS has never booted again after trying to flash OneOS ? I've tried every stock rom and fastboot rom for rubyfish, + my own twrp backup but no luck

edit : is userdata formatted as ext4 or something else by default ?? I formatted it ext4 after seing a mount data error message, but maybe I used the wrong fs
[Wear OS Software and Hacking General] ALHARTHI6:
Any way I'll just throw it, no need for any help
[Wear OS Software and Hacking General] wass47:
Hi,

I just have a quick question, when I install nethunter on my ticwatch, will it remove all google apps that are on it or do the apps stay.

To be honest, I am happy to DeGoogle my smartwatch but i wanted to check with you if it will be degoogled when I install nethunter.

Thanks guys
[Wear OS Software and Hacking General] yesimxev:
After formatting, just reboot recovery to mount again
[Wear OS Software and Hacking General] yesimxev:
You know, I really have no options. You and I can't debug that app. It's not even OneOs or NetHunter related. The only people can help who developed the app to add wearos support.
[Wear OS Software and Hacking General] yesimxev:
Did you also flash dm-verity disabler?
[Wear OS Software and Hacking General] yesimxev:
Everyting will stay. You can choose to keep stock wearos with all the apps, or flash OneOs and your selected Mobvoi apps package sizing from a few apps to all apps
[Wear OS Software and Hacking General] Jbrimb:
I did, my issue was that formatting the storage as the wrong partition type after I got a storage error wasn't very smart. Watch works now (well most things don't work because I paid it 15€ but that's fine)
[Wear OS Software and Hacking General] yesimxev:
Good to know. I'm still trying to make a kernel, so far the watch just rejects any modifications as it is. Would be good to give support for Bluetooth Arsenal just like the Pro

https://twitter.com/i/web/status/1706420458797543834

But hold on. KeX is on the way 😄 That doesn't need kernel