yashsingh1/xdaforums huggingface dataset:
[OnePlus 10 Pro] alate lee:
Oh it's my error , we are not found out it that how to bypass or crack msm tools and flash rom form edl mode .
[OnePlus 10 Pro] zopostyle:
Mine is bricked, but I didn't understand what to test and waht app to download.
[OnePlus 10 Pro] gonetask:
I got another tool for Realme devices to flash .OFP file in EDL 9008 Mode, can anyone check and say that it will work with OnePlus and Oppo devices with .OFP firmware, I have tested on Realme GT Series. It is working without issues.

Give it a try NO Auth No Password, Direct Flash, it moght brick other devices... can anyone give detail to this tool.

Tool Attached.
[OnePlus 10 Pro] Mr Hassan:
Bro but rom already have loader

The prob is its need vip(server based verification to start flash otherwise in the same thread ppls already bypass login

So login is not the issue need to patch loader or remove the server verification
[OnePlus 10 Pro] Ph0nysk1nk:
This tool is for a specfic phone
[OnePlus 10 Pro] dlads:
baffled as to where we're up to with this atm, sounds like it's not working obiously, but from what i can gather we've got a log in, but theres a file missing or not present, is that right? is this fixable?

would a bounty make more sense at this point? Get some wider exposure and attract the potential help that's needed? Although i'm disappointed in Oneplus i do think that the 10 pro is a device with massive potential.

What do you think?
[OnePlus 10 Pro] Relsich:
Need to delete authorization in firehose file, who crypted in ofp. And after delete authorization crypt to ofp. Uncrypt ofp is possible, but crypt back not yet possbile.
[OnePlus 10 Pro] hackslash:
Well we had an account. I used it to snitch the authorization token. The token still works, since it successfully queries the OPPO API Endpoints for device list, etc. However, when the flash starts the tool calls /sign endpoint to receive another signed token. Since we were unable to find anyone who could boot his device to EDL mode, we lost the chance to snitch that token.
[OnePlus 10 Pro] hackslash:
And yes, the download works fine. Changing the Region information also changes the Package files available and other things.

However, I haven't checked if Signature Validation works with his tool. Only checked with OPLUS one, and it didn't.
[OnePlus 10 Pro] spevil07:
Looks nice.

It means we can flash in edl mode with it?
[OnePlus 10 Pro] hackslash:
No idea. If someone wants to try it out, setup Fiddler and Proxifier on your PC. I've posted the tokens in this thread. Use them to auto respond to login request.

Feel free to PM me too, but only if you can go to EDL mode and test it out.
[OnePlus 10 Pro] evilhawk00:
An idea came to my mind.

I've checked the after-sale package of 10T, which can be downloaded from https://yun.daxiaamu.com/OnePlus_Roms/一加OnePlus Ace Pro/原厂包 氧OS 12.1 A.05/CPH2415GDPR_11_A.05_2022080401330000.zip?preview

If you extract the zip file you'll even find out it's not a .ofp file but a zip file containing many little files. It is completely different from the previous known after-sale packages. Looking at the file name format plus the screenshot you've shown, I'm pretty sure the zip file is the same as the one that can be downloaded from the tool. The weirdest part is that I found no way to import the zip package to the tool because it's not even a .ofp file. ?????

Plus, looking at this https://www.droidwin.com/leaked-edl-flash-tool-for-oneplus-realme-oppo-is-here/ I'm pretty sure it can only import .ofp file because I found no way to import a zip file like that.

However, if I simply change the file type part of the file name from "firmware*.zip" to "firmware*.ofp", it can import the .ofp file. So my question is, why is it downloading non-encrypted .zip files?

I'm guessing:

What if the flash tool actually encrypts the downloaded zip file to .ofp after downloading? Maybe it encrypts the zip to .ofp and adds the token of the downloader to the .ofp file and signs the .ofp file as a VIP signature? So the .ofp can only be flashed by the downloader? Maybe there's some kind of watermark technics to the .ofp file? The flash tool file size is small so it can be easily shared but the .ofp file size is big, so it is definitely the best place to put a watermark. Then during flashing, the flash tool reads the signature from .ofp again and checks if the current user is the signer(creator) of the .ofp? People used the .ofp from somewhere else and imported it to the tool, maybe that's why it failed with "flash_sign_error". ????? I really think connecting to the server during flashing makes no sense because the user has already logged in to the account, so why bother again? IMO, putting a watermark on the .ofp file is enough to protect it from flash tool Hex editing bypass. What if the .ofp has to be downloaded by the same login user token?

Above is my guess, because I still have no clue how to import a non-encrypted zip file. If this is the case, someone may need to flash the firmware downloaded by the tool, not just import external .ofp files.
[OnePlus 10 Pro] EtherealRemnant:
That file is an OTA, not an MSM, that's why it has a smaller file size and isn't encrypted. There is no posted OOS MSM there.
[OnePlus 10 Pro] Mr Hassan:
Have you id pw? I can manage Chinese device which is 2220 something

But if its totally secure becoz device is brand new without any issue

I'll install anything which you want

If have you have user account then I'll try manytime for your but the terms & conditions on device must be on same stat after all testing
[OnePlus 10 Pro] evilhawk00:
At first I thought it was OTA. But Then I figured out it is the same file downloaded from the flash tool, it's the only available 10T file that can be downloaded from the flashtool. So I took a deep digging in the zip. I didn't see any updater-script or payload inside zip? And I check the directory /image inside zip, there's even firehose loader inside. Additionally, according to the screenshot, all the available 10pro zips from flash tool download list are all in the same format, no ofp available. It makes no sense for a EDL tool to download a OTA file. Even if it's a OTA file, there may have a way to convert it to a ofp. The file contents looks very different in comparison to the old oxygenOS 11 OTA file.

This is the official A05 10T OTA link:

https://gauss-componentotacostmanual-sg.allawnofs.com/remove-0e61026cefb553942b1714a02e691cb1/component-ota/22/08/04/bbe19a331112422f93345d595c977276.zip

The official 10T A.05 OTA file is only 4.3GB. But the one from download tool, CPH2415GDPR_11_A.05_2022080401330000.zip is 5.43GB
[OnePlus 10 Pro] EtherealRemnant:
Interesting. I just went ahead and downloaded it on my phone (I'm not near my computer). I assumed like everything else it was only OTAs and MSMs that got posted there. This is indeed something I haven't seen before, complete with engineering files marked confidential.

It will be interesting if/when a 10T MSM leaks to see if that firehose is special or not.
[OnePlus 10 Pro] alate lee:
我 konw how to set authorized token , i wnat to test on my le2100 codename 9r to colorOS 11 .
[OnePlus 10 Pro] Ph0nysk1nk:
OnePlus 9 or 9Rt is excluded from this nonsense. Luck you .

Here's a 9r Msm tool. Password dmxv

Private files shared via TeraBox

Please enter the password to extract the file: TeraBox offers up to 1024GB of free cloud storage. Download the app for secure storage and file sharing anytime, anywhere.

www.terabox.com
[OnePlus 10 Pro] dlads:
Is this related to the 10 pro?
[OnePlus 10 Pro] hackslash:
This will need further analysis. I'll download the OP10 Pro files directly from the tool. Afaik, the files are hosted on Amazon S3 service. Let's see if those files are any different :)
[OnePlus 10 Pro] Relsich:
9rt is not excluded from this nonsense. He is also an OPPO. I wouldn't be here if it had msm xd/.
[OnePlus 10 Pro] evilhawk00:
Though I'm not an expert on the firehose, I'm even more sure that the non-encrypted zip file is a non-encrypted MSM firmware package. (I think it is the base file used to create a .ofp)

I found these articles(All written in Mandarin, here's the link with Google Translate):

https://lixiaogang03-github-io.translate.goog/2020/10/20/刷机工具/?_x_tr_sl=zh-CN&_x_tr_tl=en&_x_tr_hl=zh-TW&_x_tr_pto=wapp

https://www-twblogs-net.translate.g...-TW&_x_tr_tl=en&_x_tr_hl=zh-TW&_x_tr_pto=wapp

These articles introduce how to use the QPST flash tool(Which can be downloaded from https://createpoint.qti.qualcomm.com/to) to flash a "flat build".

Most of the files mentioned in the article can also be found in the 10T firmware package, such as:

So I still think it is possible that the error "flash_sign_error" can be an error that occurred during grabbing some signature from the .ofp file. If they really host a server to respond to some sort of VIP signature queries during flashing, then why do they put non-encrypted files there? They can simply release a single .ofp file, and let the client query that "always same" signature. What I mean is that they can also use the "user token" as an encryption seed(password) and write the VIP signature directly on the .ofp file, during the process of converting .zip to .ofp, maybe the VIP signature is also encrypted and appended to the output file.

Update: It turns out that my guess was wrong, the tool doesn't create a .ofp file. Eventually, I found a way to load the Non-encrypted 10T firmware package by hosting the package on the localhost Apache server and redirecting the traffic to localhost. So there's no need to really download the file again, it takes less than 1 minute to copy the file.

The tool simply unzips all the files in a single directory and creates some metadata points to the directory so the tool can recognize it. Then it triggers an integrity checking screen before flashing. (Importing a .ofp doesn't trigger an integrity checking screen) And no data was transferred during the unzip process.

The previous known failure was confirmed by the community when using a .ofp file. The result with the Non-encrypted zip firmware is still unknown, and I think it is still worth a try on 10T, 10Pro, or 9RT because the algorithm of the .ofp file is still unknown and this tool seems to only use Non-encrypted zip firmware. This tool is unified for OPPO devices and OnePlus devices, if there's a success it would be great news for all the devices on the device list.

And my journey with the tool has to stop here because I don't own a 10T, 10Pro, or 9RT.
[OnePlus 10 Pro] alate lee:
Thanks , the thread not only 10rt or 9rt etc , we are the trappeds that oneplus or oppo decrypt them program file or loader of download , oem lock and based oneline server verfiy ofp file and only permit customer service fix our phone ,its nor free , and not premium how to it , form 8 series later .

If we can use edl flash our phone and not customer server of oneline , its beneficial for everyone . Now we should unitive for ours free recovery our phone by edl mode and nor oem authorized and await .
[OnePlus 10 Pro] zopostyle:
Just got to this thread today... The account shared is not working anymore.. ;(
[OnePlus 10 Pro] dlads:
Sounds like MSM is no go, it is what it is... Oppo did their job well....

I'll be honest though, of all the ROMs I've ever flashed on OnePlus devices.. which is a lot..

I've never once required any MSM tool to save my device, it's either been stock recovery, a new ROM, TWRP or if I've really really needed it if RMA'd the device..

Do we really need MSM? Would that work everyone has put in to get MSM working have been better spent getting TWRP functional? Testing is only booting as is actual use and it could offer a recovery avenue as well as a flashing method.

Not all phone have a method from my experience, a tonne of HTC device didn't and they were my favourite devices.
[OnePlus 10 Pro] evilhawk00:
Can't say it is no go currently, the result is still unknown. There are some OPPO backend APIs still working great until now with token setup, and another firmware format that is not encrypted .ofp was discovered(Non-encrypted MSM zip pack). The community only confirmed the failure with the hex edited binary when flashing .ofp firmware, but the following solution is still open for testing:

Flashing the Non-encrypted MSM zip pack with the token obtained.

And the above option can be tested on 9RT, 10 pro, 10T, Nord series, or even other newest OPPO devices that use the latest Sahara protocol because the tool is unified for OPPO and OnePlus devices, all those devices on the list may have a chance. The result is still unknown. The only problem is that people who own those devices haven't stood out for trying other solutions. I only have 8T, I don't own those devices so I can not test them. @hackslash was finding people to try for 10 pro.
[OnePlus 10 Pro] dlads:
Point I was making is do we actually need it?? From past experience I don't think we do, I never have... Sending the device back for RMA isn't going to kill me or anyone else.

I've watched this and other threads since their inception and it appears every angle has been covered, time will tell I guess.

I'm sure there is someone out there with a bricked device if we're only waiting on someone to test.
[OnePlus 10 Pro] centifanto:
I agree with this. I have only ever had to use MSM once when I absent mindedly locked the bootloader with a patched boot.img due to late night not thinking. Other than that, I have had no need. I remember the good ole days of the OG Moto Droid, flashing multiple broken ROMs in a single night just via stock recovery before there was ever TWRP. Never had a magic flashing tool like MSM. Maybe the difference is now the devices are more temperamental with their boot sequence, but as I have mentioned in other threads, I think the current OOS/COS flavors are great and so I don't have any desire to tinker around with custom ROMs. I do sympathize with the few that might want that, but I think that is going to be less and less of an option with the direction that Android is heading.
[OnePlus 10 Pro] hackslash:
It's honestly just fun.

I really don't have any other reason for why I'm doing it xD
[OnePlus 10 Pro] dlads:
Ha.. I can't argue with that pal
[OnePlus 10 Pro] hackslash:
The zip files downloaded from the Flash Tool are unique. It doesn't sends a sign request to the server, unlike other OPF files which do require a sign request before flashing. Instead it sends a unique device model request which is failing for some reason. I'll share the endpoints soon, hopefully.
[OnePlus 10 Pro] dlads:
I didn't mean to sound defeatist there by the way..I love the way everyone rallied together, it shows great cohesion from the community... I'm just starting to think if it's possible that's all...

Still optimistic, just increasingly sceptical.
[OnePlus 10 Pro] mxz55:
@OppoTech123 thanks a lot, but can you also publish tools for OnePlus 10T ?

kernel sources for that phone got released early, and lack of flash tool access for developers is the main thing holding back ROMs to get going faster than with most newly released OnePlus devices. Please man :)

It's not often that someone arrives on XDA that has the ability to give the finger to OnePlus/Oppo's anti development stance that it has employed for the last few years (against its roots of being known as dev friendly brand), to bring some hope.
[OnePlus 10 Pro] evilhawk00:
There's no OnePlus reseller in my region, I received my device oversea, and I'm the one who can not send RMA :(

Sending back to CHINA requires paying high customs duty of 40% so maybe I would just buy a new phone. And this is the reason I still stick with OnePlus 8T, lol.

I don't know much about OPPO's RMA but I know that if you f*ked up your SAMSUNG and sent it to RMA and if they can't immediately fix it by a single flashing, they will treat it as man-made damage and refuse to fix it for free. I once f*ked up the partition of my SAMSUNG device but I wasn't able to know the default partition table of the device so I sent it back and the employee just asked me to replace the motherboard(300USD) and it is not free because it is man-made damage so I refused. A few months later, I fixed my device by finding a leaked .pit file with the Odin flash tool, lol.

Anyway, I was just messing with this tool for fun.
[OnePlus 10 Pro] evilhawk00:
The tool is unified for all OnePlus devices and OPPO devices, it is the thing you want. If the community finds a way to use it, it can be used on Oneplus 10T for sure. OPPO uses the same tool for all their devices from now on.
[OnePlus 10 Pro] dlads:
4 days RMA here...I wouldn't buy a phone if it didn't offer it, also the reason I wouldn't buy an overseas device.

You shouldn't have to pay a penny.
[OnePlus 10 Pro] mxz55:
Considering some of the posts here about a lack of 10 Pro / 10T owners' cooperation.. what do you think the chances are if i sent you my 10T overseas?

I mean it looks like you're a decent reverse engineer and you said the road ends for you as you don't own a relevant device - if you really want to invest time and effort into hacking the leaked EDL tool further, feel free to PM me and we can arrange the sending of my device (at my risk for everything, including bricks). I am really like 'bleh' if i have to keep using ColorOS on it, its my worst nightmare, so i would go back to buying a second hand 9 Pro for running LineageOS in the meanwhile before 10T gets some ROMs facilitated by having tools available.

I'm constantly asking for devs to step in with getting development going, but if more than 'begging' i can make a meaningful contribution to the community in achieving this then ill go with it.

* Note: If you don't think that you are the right person to accept this challenge, i would be interested in hearing the best candidates next (only reputable users that are known for device development/contributions to community efforts to reverse or crack vendor tools)
[OnePlus 10 Pro] alate lee:
When i use fildder autoresonser or break request form the flash tool of leak , I can't login in the tool , and I found a https request that get country on the request ahead of login request and not cloud verfiy request .
[OnePlus Nord Questions & Answers] roshandroids:
Hi there, recently I was using oxygen OS 12 and wanted to install custom ROM with pixel experience, but IDK what went wrong the recovery image is not being installed and getting some error like

The current image(boot/recovery) have been destroyed and cannot boot. Please flash the correct image or contact customer service to fix it.

I'm stuck at this point and searched and tried every possible solution out there. If anyone can help me please reply. Thank you 🙏
[OnePlus Nord Questions & Answers] Deleted member 12317835:
reboot to bootloader, switch your fastboot slot and flash stock fastboot rom
[OnePlus Nord Questions & Answers] roshandroids:
Not able to reboot to bootloader neither able to access fastboot mode
[OnePlus Nord Questions & Answers] Deleted member 12317835:
Same, contacting oneplus right now
[OnePlus Nord Questions & Answers] gorro8:
Flash with msmtool
[OnePlus Nord Questions & Answers] sixtenson1:
Any solutions?
[OnePlus Nord Questions & Answers] Deleted member 12317835:
they told me to send it in for repair
[OnePlus Nord Questions & Answers] supremoITA:
i have solved with this guide:

[OPNORD][OOS AC01AA/BA/DA] Unbrick tool to restore your device to OxygenOS

Disclaimer: By attempting any of the processes listed in this thread you accept full responsibility for your actions. I will not be held responsible if your device stops working, catches fire, or turns into a hipster and claims to have been...

xdaforums.com
[OnePlus Nord Questions & Answers] roshandroids:
I really appreciate you man, You're a saviour, I was able to restore my device through this. Many Thanks dude 🙏
[Realme Narzo 30 5G (AKA  Realme 8 5G)] Allan8635:
Device is the RMX3242. After the Realme UI3.0 update I've been having an issue with the phone freezing when I have my sim in. Without it no issues, please help me
[Magisk] PickleMorty282:
Before, you ask, I must use fastboot since no one built TWRP for my device.

On my Alldocube KPad, when flashing my Magisk patched boot.ig file, it always goes into a bootloop.

Can anyone help me on how to fix this? I'm tired of flashing stock firmware over and over.

Thanks in advance.
[General Questions and Answers] wenyendev:
Dear all,

An error message popped up, when I tried to post a thread in "Android General".

"Please try again later. More error details may be in the browser console".

I changed browsers on Mac (Chrome, Firefox, Safari, etc.) and Android phone (Firefox), it is the same case.

Please refer to the attached image for more details.

How to resolve this issue?

Thanks in advance.

Regards,
[General Questions and Answers] ze7zez:
​

Oops! We broke the matrix. Someone call Neo!

Don't worry too much. This forum does. I can't reply to your message either, but if I use "Reply" it works. Report the problem by clicking on "Report" under the first post of your message.
[General Questions and Answers] wenyendev:
Thanks for the reply.

I resolved the issue by creating a post with a very brief message first, and editing it in the second place.
[Realme 8] sayanmitra753:
How to install magisk in realme ui 3 ( unlocked bootloader ) without twrp ? Can i patch the boot.img and flash it to get root ?

Please help
[Android Q&A, Help & Troubleshooting] wenyendev:
Dear all,

According to the guides for Android data recovery,

https://xdaforums.com/t/guide-undelete-data-recovery-internal-memory.2143188/

https://xdaforums.com/t/guide-internal-memory-data-recovery-yes-we-can.1994705/

Netcat (nc) is required to transform userdata partition to RAW.

After superuser privilege was granted ("su") on my Redmi S2 (Android 12, rooted), I stuck on the Command line (Cygwin on Windows)

nc 127.0.0.1 5555 | pv -i 0.5 > mmcblk0p12.raw,

it prompts:

bash: pv: command not found

Unable to find nmap-services! Resorting to /etc/services

Failed to resolve "5555".

Failed to resolve "5555".

Failed to resolve "5555".

I found several netcats online, but all of them produced the same result as described above:

- http://netcat.sourceforge.net/download.php

- https://github.com/diegocr/netcat

- https://nmap.org/download.html

- https://github.com/skyformat99/netcat-for-windows/tree/master/1.11

Has anyone got or found any netcat able to transform userdata partition to RAW, susceptible of VHD conversion?

Thanks in advance!

Regards,
[Android Q&A, Help & Troubleshooting] Oswald Boelcke:
Hello and good afternoon, @wenyendev

Prior to your next posting please read the guidances that are stuck on top of every forum like

[Read Before Posting]QUESTIONS DO NOT BELONG IN GENERAL

Hello Everybody, In order to attempt to keep this forum neat and tidy the moderation team is asking you to post your questions into the Questions and Answers (Q&A) forum and not into the General section. You can find the Q&A forum by clicking...

xdaforums.com

and the others. I've moved the thread to Android Q&A.

Thanks for your cooperation!

Regards

Oswald Boelcke

Senior Moderator
[Redmi Note 10 Pro] ToxicMS:
What is the best custom rom for Redmi note 10 pro?
[Redmi Note 10 Pro] Captain Dexter:
Pixel OS, It's one of the most optimized custom rom out there.
[Redmi Note 10 Pro] kihoijr:
Currently on Pixel OS and so far no complains about it.
[Redmi Note 10 Pro] NicramGalam:
ArrowOS is more battery friendly, I have changed from Pixel OS.
[Redmi Note 10 Pro] Xavind:
Pixel OS. Very stable. I have no issue with any battery drain.
[Redmi Note 10 Pro] Ilykthings:
lucky you but I think you are in the minority
[Redmi Note 10 Pro] Fostel:
No experience with other custom ROMs but flashed ArrowOS 12L and had no issues that I could find.
[Xiaomi Poco F3 / Xiaomi Mi 11X / Redmi K40] gabrielczrim:
excuse my ignorance, but what is the firmware requested in some roms for?