yashsingh1/xdaforums huggingface dataset:
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
My bootloader is unlocked!

Thank you very much.

Now I am going to try to flash a custom recovery mode via fastboot in order to access the internal memory of the phone.

EDIT: I've just flashed twrp-3.6.2_9-0-begonia.img but still can't boot into recovery mode.

Any hint on how to extract data from the system now?
[Redmi Note 8 Pro Questions & Answers] Renate:
You really want to boot the normal system because that's the best way to get decrypted data.

I realized that you don't have ADB enabled there.

You should look at B. Kerler's https://github.com/bkerler/mtkclient/

If you can pull the boot image off your device then I might be able to fix it so that you have ADB.

You'd have to flash it back in fastboot or mtkclient.

You can also pull a copy of userdata off the device with mtkclient.

As far as booting into recovery, there's a way.

Here's how, if you don't have A/B (that is you flashed TWRP into recovery and not recovery_a or recovery_b)

then you can fastboot flash a special file into the misc partition and it wil boot into recovery next reboot.

To return things to normal you have to flash the empty file to the misc partition.

C:\>fastboot flash misc misc-rec.img
C:\>fastboot reboot

Only do this if you don't have partitions that end in _a or _b
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
I really don't know if I have partitions A and B as you mentioned and I think there's no way to check actually.

I confirm I don't have "USB Debugging" active on the phone.

So if I understand correctly I should do the following:

- Flash misc-reg.img via Fastboot

- Boot into recovery just rebooting the system after flashing the above file;

- use MTKclient to dump userdata or boot image to enable ADB on (I will need help with mtkclient I suppose).

Is it correct?

EDIT: flashed TWRP first and misc-rec then rebooted via Fastboot/Reboot but nothing happens.
[Redmi Note 8 Pro Questions & Answers] Kirasu2080:
TWRP cant boot because you used wrong one. Search again in that unlock bootloader channel and use suitable one.
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
Hmmm, I am almost sure that the TWRP I've flashed was listed under Redmi Note 8 pro page. Can you please indicate more precisely where should I sera

EDIT: I think I've downloaded and flashed the correct TWRP file.

@Renate can you please detail your method so I can try to extract data from the phone?
[Redmi Note 8 Pro Questions & Answers] Kirasu2080:
1/Yeah it's official. You "flashed correct TWRP." Downgrade to Miui Android 9 (_9 in it's name) to boot into that TWRP and lose your data.

2/In unlock bootloader video above, search other video in his channel playlist and find TWRP video suitable for your Miui version.
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
Can't find the right video, can you kindly send me a link (I am on the latest Miui version and I am in Europe)?

In all the videos I've seen on his page he is using the device to install TWRP etc.

I think I just need the correct TWRP version for my MIUI release and then I'll flash TWRP and misc-reg.img. Is it right?
[Redmi Note 8 Pro Questions & Answers] Kirasu2080:
Use brp 3.5.2 v3.1 or V3.6 to decrypt Miui 12.5
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
I'll try in a couple of hours. However watching the video I've seen that he is using the phone to insert phone password so I have no idea on how to proceed when I'll be asked for the password having no working display.
[Redmi Note 8 Pro Questions & Answers] Kirasu2080:
Mouse can work with otg. But no idea about keyboard and display can work same way or not. No working display = no choice
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
Thanks for your hint., unfortunately as told I have no access to the phone's display.

What if I try flashing this BRP TWRP version first and misc-rec.img instead?
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
Any idea on how to proceed?

Actually, my bootloader is unlocked so I think it's "just" a matter of flashing a bootable recovery image that can be booted without using the display or the keyboard of the phone.
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
Hey, I think I did a huge step forward: I can actually see my phone and navigate through its internal memory from my laptop!

Just flashed BRP TWRP image first and misc-rec.img and booted into recovery just with a normal reboot via Fastboot.

I think that the folders/files in the phone are encrypted btw because I just can see a list of folders/files with strange characters (see attached).

Any help?

EDIT1: already tried via ADB SHELL/TWRP DECRYPT with no luck: I am typing the right PIN but TWRP is not able to decrypt data.

EDIT2: Should I install this? Disable_Dm-Verity_ForceEncrypt_11.02.2020 ? If yes should I flash it via sideload?

EDIT3: installed Disable_Dm-Verity_ForceEncrypt_11.02.2020.zip via ADB SHELL/TWRP SIDELOAD: phone reboots automatically but it's not showing up in the windows tray (see ADB_PROCEDURE picture attached). Rebooting it in FASTBOOT and giving REBOOT command via CMD bring the phone into a reboot loop.

EDIT4: entering again fastboot mode and flashing Only misc-rec.img reboots into recovery mode: when I try to list the devices via ADB DEVICES the device is recognized but ADB says ANAUTORIZED after listing the device id.
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
Good morning guys,

I am still trying to retrieve data from the phone, I feel I am so close that it's frustrating to give up :-)

I am actually in recovery mode but as you can see from my previous post all the folders are encrypted so I am trying to access the internal storage of the system via ADB/SHELL.

I can actually get the list of files/directories in the device but can't find the directory containing user data, please see the attachment (can't see any storage/emulated dir).

Any help?
[Redmi Note 8 Pro Questions & Answers] Renate:
Recovery doesn't usually mount /data

If you list /data you'll probably find it empty.

# ls -l /data
-- nothing --

Check the mounts:

# mount

Try the simplest mount:

# mount /data
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
Hello Renate,

find attached the results I got using the code you sent.

# ls -l /data

I can see a lot of stuff listed using this command

# mount

Same as above

# mount /data

I get a "device or resource busy"
[Redmi Note 8 Pro Questions & Answers] Renate:
Oh, you've got rooted ADB and the /data is mounted. You're all set.

What do you want to save? It's all there.

You can even just:

C:\>adb pull /data

You can figure later what you want to do with it all.
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
Hmmm, there should be still something wrong.

I can just get a list of "skipping special file" and "Required key not available" (please refer to attached images).

I don't think the phone is rooted btw, I've just unlocked the bootloader via MTKclient, removed SLA/DAA, flashed TWRP BRP and then misc-rec.img.
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
Hey, any update on this? :)
[Redmi Note 8 Pro Questions & Answers] Renate:
Hmm, I've not run into that.

Doesn't it copy over most of the files?

When I ran this on my stock, unrooted consumer device it started copying lots of file. I stopped it because I didn't need any of it.

I just use my own adbsync.exe (in my sig) and mostly in the direction desktop to Android.

If you are rooted and /data is mounted adbsync.exe (or any utility for that matter) can sync everything.
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
Thanks for your reply.

No luck so far: tested again with adb bull and with which I can just get a long list of "skipping special file" and no file is uploaded to the computer.

with mount /data command I get in output "device or resource busy" so I think data partition is not mounted.
[Redmi Note 8 Pro Questions & Answers] Renate:
Do these work?

# ls -l /data

C:\>adb pull /data/system/packages.xml
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
Didn't work as detailed below.

# ls -l /data

C:\>adb pull /data/system/packages.xml
[Redmi Note 8 Pro Questions & Answers] Renate:
Ok, all the files that have those long names are encrypted.

You're running recovery and it doesn't know how to decrypt them.

# ls -l /data/data

Is there any chance that you can fix the normal system?
[Redmi Note 8 Pro Questions & Answers] :
Can you try dumping system partition on mtkclient and mount it to get your data

The phone appears to use a MTK chipset according to gsmarena

By the way was it salt water

Because salt water will corrode

Even if it wasnt salt water you should disconnect battery and wash it with distilled water and make sure it is absolutely dry (best to wait a few days) before reconnecting battery and turning it back on
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
I think that the main problem is that the system is fully encrypted. TWRP Decrypt is not working even with the correct password.

By the way this is what I get with

# ls -l /data/data
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
I am trying to follow this guide:

https://xdaforums.com/t/backup-full...sing-mtk-client-oppo-reno6-5g-mt6877.4406069/

Is it correct?

UPDATE: Actually dumping whole firmware
[Redmi Note 8 Pro Questions & Answers] Renate:
I'll admit that I'm pretty ignorant about how all that userdata encryption works.

I do a lot with recovery but I always just leave /data unmounted and presume that I can't access anything anyway.

If you can get the regular system running (but not necessarily the Android subsystem) you should be able to get your data.

What happens when you try to run the regular system? Did you have ADB enabled?
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
Thanks for your support so far Renate ;-)

I don't understand what you mean when you say if I can get the regular system running.

The phone is not booting (at least I guess is not booting) and I can just get into recovery after flashing TWRP BRP image.

Btw I've dumped all the system using MtkClient and I am actually converting userdata.bin in a regular ISO to mount it in Windows (I don't know if this is the right procedure, I am just giving it a try).
[Redmi Note 8 Pro Questions & Answers] Renate:
What I mean, is how do you know that the normal system is not booting?

It doesn't matter what the screen is doing. If you've got ADB, that's enough.

If you Magisk'ed this and have either the original boot image or the Magisk'ed image on your desktop:

C:\>fastboot boot whatever.img

If you can reliably get to fastboot and your device is A/B have you tried swapping slots?

C:\>fastboot set_active a
C:\>fastboot reboot

Try with a or b
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
I did not use Magisk while the phone was still "alive" if you mean this.

I have the whole dump of the firmware on my pc, I can't figure out what should I try to boot.

Can you help?

The following is the actual dump of the phone (can't mount the userdata.iso image btw):
[Redmi Note 8 Pro Questions & Answers] Renate:
boot.bin should work fine.

64 Megs includes about 32 Megs of zeroes, but that shouldn't break anything.

I'd tell you to chop it down to size, but nowadays they stick so much on the end of a boot image it's hard to tell where it ends without looking.
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
No luck: ;-)
[Redmi Note 8 Pro Questions & Answers] Renate:
That "too many links" is the lamest error message that I've ever seen.

Yeah, I've run across it, but not personally.

In short: fastboot boot whatever.img is the easiest way to boot an image (if it works).

The "gold standard" is always:

C:\>fastboot flash boot whatever.img
C:\>fastboot reboot

The problem is, fastboot flash boot whatever.img is a deeper step in the mud than fastboot boot whatever.img

So, if you're sure that that boot image belongs to your device then you can fastboot flash boot it.
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
I am sure that the boot.img belongs to my device because I've personally dumped it using Mtkclient.

If this is not working I'll have to indagate on the possibility of extracting data directly from MtkClient.

I'll update later.

Andrea.
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
Flashed correctly and rebooted.

I can hear windows losing the USB connection with the phone but nothing more, I don't know if the system is effectively rebooting or not.

However, is not showing up in the windows tray and is not reachable via ADB.
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
It seems that

fastboot set_active a

is not a recognized command as fastboot is listing all the available options after entering this command.
[Redmi Note 8 Pro Questions & Answers] :
once it is extracted can you mount system partition?
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
Not really.

Partitions are al encrypted and there's no way to mount them.

I've opened userdata.bin with 7zip and this is what I see:
[Redmi Note 8 Pro Questions & Answers] Renate:
The exact spelling of that command changed over time. You may have a version mismatch between your fastboot.exe

Do this:

C:\>fastboot getvar all
[Redmi Note 8 Pro Questions & Answers] Renate:
Sorry, I don't know what I was thinking. I thought that you had A/B. You don't.

I've got to re-read this whole thread and get back in sync.
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
Eheh, ok.

So it seems I have no chance to boot into normal system and for what I've read actually no chance of decrypting the images pulled with MtkClient.

It seems an impossible task 🙄😅
[Redmi Note 8 Pro Questions & Answers] Renate:
I always think that it's worth pursuing.

I don't know TWRP well enough to know if/what versions ask you for your passcode so it can decrypt data.

I usually use a custom recovery.

You have recovery working, you can't get the regular system to run.

Probably the flash got corrupted somehow, you can fix that.

Possibly some peripheral got destroyed and it's hanging the system, but I don't think so.

When you try to boot the system you get nothing? No splash, no boot animation, no ADB.

Do you have an update, do you have a boot.img?

Using TWRP check what you currently have for boot image:

# mount /cache
# dd if=/dev/block/by-name/boot of=/cache/boot.img
# ^D
C:\>adb pull /cache/boot.img
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
TWRP can't decrypt the data even if I am using the correct password.

Tested both TWRP 3.6 and 3.5.2V3.1 from this site:

Begonia_Recovery_Project_Miui_A11

This Themed Twrp is based on TWRP 3.5.2 + Unified .Guide: https://youtu.be/HZo54LoUIdwThis version is available for non-cfw Custom roms based on MIUI 12.5 fw as well as MIUI 12.5 A11by:-...

www.pling.com

Decrypting via TWRP DECRYPT fails with both recovery images.

When I try to boot the regular system I have no outputs on the LCD screen (I think is dead) and no output from the connected laptop too.

Below is the result using the code you gave me.

I think that the boot.img I have is the one I flashed into the device after extracting it via MtkClient.

Actually I have a boot.img got from ADB PULL command. Should I do something with this image?

What if I try to use magisk manager to Magisk the boot.img I've just pulled from the device? (using an android emulator or another device obviously)

Or maybe I can download somewhere a fresh/new boot image for my device (not sure what is the miui version/build installed on my device btw).

PS C:\adb> adb shell
begonia:/ # twrp decrypt 1199
Attempting to decrypt data partition or user data via command line.
Failed to decrypt data.
begonia:/ # mount /cache
mount: '/dev/block/sdc41'->'/cache': Device or resource busy
1|begonia:/ # dd if=/dev/block/by-name/boot of=/cache/boot.img
131072+0 records in
131072+0 records out
67108864 bytes (64 M) copied, 0.275959 s, 232 M/s
begonia:/ # adb pull /cache/boot.img c:\adb\data\bootrecoveredviatwrp
/system/bin/sh: adb: inaccessible or not found
127|begonia:/ # ^D
PS C:\adb> adb pull /cache/boot.img c:\adb\data\bootrecoveredviatwrp
4088 KB/s (67108864 bytes in 16.030s)
[code/]
[Redmi Note 8 Pro Questions & Answers] Renate:
Well, ok, but I wanted to see the boot.img to see if it was any good.
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
should I send you the boot.img then?
[Redmi Note 8 Pro Questions & Answers] Renate:
Just put it on a floppy disk and wave it at the TV screen when my show comes on.

I will use my amazing clairvoyance to read the data.

Or you could paste it as an attachment to a post.
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
5 1/4 floppy disk used because is bigger and contains more data. Still uploading btw :-D

I've sent you a PM with a link to download the boot.img extracted from my device :-)
[Redmi Note 8 Pro Questions & Answers] Renate:
I just wanted to see the boot image to see if it was complete garbage or not.

It looks screwy. It looks like a Magisk'ed boot image that had the Magisk removed.

The fingerprint is:

Redmi/begonia/begonia:11/RP1A.200720.011/V12.5.8.0.RGGMIXM:user/release-keys

I don't know how it got in this state, but since boot.img is modified and it has stock init it will fail dm_verity.

Do you have any boot images (Magisk or otherwise) on your desktop? Can you find a stock version?
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
During all the tests I did to retrieve data from the device I also tested, with no success, these:

I will search for a stock boot image on the web.

Is possible to extract the boot image from a stock firmware like this?

I am not sure if the system is running 12.5.7 or not but I always did all the OTA updates so I think it should be running the latest system.
[Redmi Note 8 Pro Questions & Answers] Renate:
That first one is the same fingerprint as what you've got now, V12.5.8.0.RGGMIXM.

Download that and look inside.
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
Flashed this one and rebooted with no luck (can hear the phone jingle but I have no output from the LCD or from the laptop)

Xiaomi Firmware Updater

The ultimate script that provides firmware packages for Xiaomi devices.

xiaomifirmwareupdater.com
[Redmi Note 8 Pro Questions & Answers] Renate:
How did you flash it?

You could pull the boot image like you did last time and see if it actually changed.
[Redmi Note 8 Pro Questions & Answers] Sephiroth79:
flashed with

fastboot flash boot boot.img

Trying to pull it with ADB and comparing the two.
[Redmi Note 8 Pro Questions & Answers] bvoz412:
You need a recovery that supports decrypting data for your Android version (11). Try downloading this TWRP recovery, it claims it is able to do it.

Xiaomi Redmi Note 8 Pro - Прошивки MIUI - 4PDA

Xiaomi Redmi Note 8 Pro - Прошивки MIUI

4pda.to
[Redmi Note 8 Pro Questions & Answers] jhay006:
its easy , you can create full dump roms , using mtk client , just download the mtkclient, connect your phone in bootrom mode , then create a dump rom from there :)

then you can extract userdata.img via linux shell i don't know in windows but i know theres a tool in windows that can extract userdata

also in twrp recovery mode mtp is enabled .
[Touch Diamond, MDA Compact IV General] V8Turbo:
I need the GER (German) Bepe`s Pack for my HTC Touch Dimond
[Android Software/Hacking General [Developers Only]] northmendo:
Auto Pixel Updater - BETA​

created by @northmendo, please do not take my work without permission. Feel free to use it for yourself as much as you like. ​

Prerequisites: ​

You will need a Pixel with an unlocked bootloader and a Windows computer. Preferably Windows 10 or 11.

Downloads are now below in the second post.​

Android File Host should just give your the 7z file.​

Instructions:​

To launch the scripts you just right click and choose Run with Powershell

1. Download and unzip the google factory image (Link)

2. Unzip my download an put all 3 files and the 1 folder in your extracted factory image folder. They must all be in there individually.

It should look like this

View attachment 5671207

3. Make sure your phone is booted and has adb debugging turned on and authorized. (you can test with adb-test.ps1)

4. Run Pixel_Updater_Win10 with Powershell - Wait like 3 minutes for it to finish, be patient.

5. Unlock your updated phone and Run Flash_Magisk follow the on screen instructions.

That's it. Let me know if anything isn't clear enough.
[Android Software/Hacking General [Developers Only]] northmendo:
Downloads:

Version 1.2 - Updated Platform Tools for Android 13
[Android Software/Hacking General [Developers Only]] northmendo:
One more.
[Android Software/Hacking General [Developers Only]] radionerd:
It worked like magic on my Pixel 6 Pro. Downloaded the Factory image, unzipped and ran powershell watching the helpfull notes in powershell as it progressed along the whole process. Thank you Northmendo!!!!!
[Android Software/Hacking General [Developers Only]] Slim2none4u:
Great work! But is it neccessary when there is this.

https://xdaforums.com/t/pixelflashe...dating-rooting-managing-pixel-phones.4415453/
[Android Software/Hacking General [Developers Only]] northmendo:
To be honest, I hadn’t seen that. It looks like really nice work. I suppose this is not necessary, it was just a fun project I wrote for a friend and I. It does have some merit for someone who wants to easily be able to see the code. Just two powershell scripts makes it easy to read through. Not saying there’s anything wrong with the other app.
[Android Software/Hacking General [Developers Only]] radionerd:
Brilliant!

September Update went smoothly on my Pixel6.

I had to remember when looking for the temporary Magisk patch that my device hides the SD folder, but shows the folder "pixel_updater_northmendo" as I scroll down. I clicked on it and it showed the boot.img with Jan,1, 2009 date.

It's awesome that your script "automagically" cleans out the folder so last months boot image is deleted.

Thanks Northmendo! You Rock
[Android Software/Hacking General [Developers Only]] radionerd:
I was kind of late doing December's update, just completed successfully THANKS North Mendo!

For some unknown reason I had lost Developer options last Month. Had to tap tap tap a roo... and turn on USB debugging again.

Then the update went smooth as glass. I really like to watch your Power Shell code and helpful explanations go scrolling by.

Hope you and your family had a great Christmas ;-)
[Android Software/Hacking General [Developers Only]] radionerd:
I'm getting good at this, just flashed February factory image in record time

13.0.0 (TQ1A.230205.002, Feb 2023)

THANKS NORTHMENDO!!!
[Android Software/Hacking General [Developers Only]] radionerd:
I skipped some updates. Just updated to 13.0.0 August, Yaaaa! Love to watch the power shell script make progress, and you're comments :cool:

I Broke my pixel6-pro screen a few days ago, face-plant on some rocks. Ordered an OEM screen kit from IFXIT, came in two days. Just replaced screen successfully, well almost. The front camera might have gotten bump loose during cleanup. No Biggy, I don't use front camera LOL.

The Pixel 6 is super easy to tear open. Easiest replacement ever. IFIXIT had a cool seal template that lays in place like a screen protector., no messy seals, looks like the water IP rating is still good.

The fingerprint sensor needs to be aligned using rescue tools. When I started the rescue process it wanted to update my rooted device. So I backed out and updated to latest update. Now I'm up to date, I'm gonna proceed with the fingerprint sensor calibration.

Thanks @northmendo YOU ROCK DUDE!!!!!