yashsingh1/xdaforums huggingface dataset:
[OnePlus 11] oppo_edl_hacker:
Some people never learn. If we want this solution to hold for a few years to come, we have to take precautions. This is for the best, and if Oppo finds the vulnerability by themselves, of course I will release the solution. The sole fact I opened a public thread could gain attention from Oppo and force them to review their security, so it is easy to figure out what's going to happen if they can study my solution.

This 0-day would be really easy to fix for them, and that's not what we want. If they can't study the solution, they'll have to figure it out themselves.
[OnePlus 11] mvikrant97:
@V0latyle @Oswald Boelcke
[OnePlus 11] cazt555:
@dekefake @chandu dyavanapelli srry For tagging them but I think this will be useful
[OnePlus 11] dekefake:
OMFG ! This is a game changer, @oppo_edl_hacker I'm DMing now. Thanks a ton @cazt555. I bricked my OnePlus 11 twice already while testing our first custom kernel builds, this will definetely help us a lot.

I really hope the moderators will understand how important this is for us. Smart move to not publish it publicly, this thread has to stay in my honest opinion.
[OnePlus 11] V0latyle:
I'll be honest, I'm not very familiar with the technical aspect of this.
[OnePlus 11] V0latyle:
@oppo_edl_hacker Welcome to XDA. If you have not already, please read the Forum Rules linked in my signature, and take special note of Rules 6, 7, 9, and 11:

Please answer the following questions:

1. Is the software you are using copyrighted in any way?

2. Are you redistributing software, or offering a service? Are you selling anything?

3. Is what you are doing legal?

4. Are you advertising a commercial service?
[OnePlus 11] oppo_edl_hacker:
Hi, good evening !

The software used to flash Oppo's phone is an internal software distributed to some phone repair stores. It needs an authentication. This software was previously publicly available with no authentication, but as OnePlus has been acquired by Oppo, their policy changed and they now use the Oppo software with authentication. This makes it impossible for developers to recover their devices themselves when testing their experimental ROMs and kernels. This is the cause of a lack of custom ROMs and kernels for OnePlus devices in the last two years. This has also lead to a situation where some corrupt people ask for money (from 4$ to 75$) to remotely flash phones using TeamViewer. This frequently happens throughout XDA and there are countless examples of that.

1. I do not intend to distribute copywrited software, but only my code, which is taking action in the operating system networking stack and not the OPPO software.

2. I only distribute this code to active developers working on OnePlus 10 and OnePlus 11, so they can quickly recover their devices if something goes wrong.

3. My code does not constitutes piracy as it does not includes copywrited code at all. It is then legal. I do not distribute the original software and developers are intended to find it by themselves. This software has already been leaking for years and is easy to find online.

4. I solely do this to help the community, and do not sell anything. I will never ask for money for this, and do not have a donation link. My code will always be free for developers.

As we say, code is speach. I wrote code that can help people, and I'm offering it to developers. I just want to avoid OPPO from obtaining my code, as they could change things in the future to further restrict developers from using their devices as they intend to.
[OnePlus 11] V0latyle:
Thank you for the response. Please respond to the PM I have sent you.
[OnePlus 11] dlads:
Utterly stellar work @oppo_edl_hacker

Heaps of praise to you... Your deserve a tonne of credit for this... And it should categorically be protected.

Thank you for proving me wrong, I didn't think this day would come.

👍🏼 Legend. 👍🏼
[OnePlus 11] oppo_edl_hacker:
Thanks for the kind words dude
[OnePlus 11] cavist:
Since the current tool is working and its only an additional crack it does not change anything at all - they cannot disable it.

Also, it will just come out sooner or later, intentionally or via leak so why artificially make a closed circle on this I have no idea but everybody can do whatever they want and my single opinion will not change anything.
[OnePlus 11] dlads:
Just respect his wishes...after all we had nothing before...

Don't want a back and forth, the guy who made this possible wants this to happen and unless we want oppos attention before it's even fully realised I agree we should tread lightly.
[OnePlus 11] mark332:
any proof of works, or it is just a login bypass similar to any other crack, the main Problem is SLA, if you are able to bypass Oplus server to get signature back then really thanks
[OnePlus 11] oppo_edl_hacker:
They cannot prevent already released tools from working but they can patch future versions and prevent yet to be released phones from being flashed. If we keep it closed circle, maybe OnePlus 12, OnePlus 13 will be able to be flashed. If I release the code today, we'll be sure they will not.

Some developers are starting to report that it indeed works for them so don't worry, if it is fake, it will quickly get known 😉

I will discuss with some developers to release a video showing the software in action, while preventing the vulnerability to be shown.
[OnePlus 11] Reynald0:
Nice job bro! Congratulations for your research.
[OnePlus 11] penguinus:
Well, it's sad that it is not for public. But thank you anyway for your work.
[OnePlus 11] cavist:
I am against such BS argument and using crystal balls to predict what could happen or not.

I can not imagine custom rom development and couple of releases and users reporting feedback and needing the MSM tool to go back before and reading "hey its not for you, sorry only for certain few".

Moves like that would create closed circle community and result in what, custom roms from devs for devs only? All the rest have a one way ticket in case they want to try the devs work, without possibility to revive their devices?

Feels strange for me. Especially here on public forum. I have a vibe that it is a bait to just create a closed community around a cracked software and you are using XDA as a mean and a resource.
[OnePlus 11] dlads:
Don't talk to anyone on xda like that lad...wth is wrong with you?

Reported.
[OnePlus 11] dlads:
Then go ahead and crack it yourself then you can share it freely, until that time comes stop throwing your rattle out the pram and accept it's not your call no matter how much you moan or whine about it.

Respect the person's decision and use your head before you type, it's pointless as you said yourself.
[OnePlus 11] Badger50:
Thread closed for evaluation.

-Regards: Badger50
[OnePlus 11] Badger50:
Thread opened. Please keep your posts and replies polite, and within the guidelines of the Forum Rules for member conduct.

Thank you: Badger50
[OnePlus 11] ChrisFeiveel84:
why don't you make the tool public? so even small hobby developers, or people who have bricked their cell phone can fix their cell phone or people who want to convert their cell phone
[OnePlus 11] dlads:
Because it could be patched mate.

For now it's just Devs, things will change in the future I'm sure.

This thread nearly got shut down for the back and forth that happened, for now let's just respect his wishes and be thankful it's even been possible.

It's a win compared to what we had before.
[OnePlus 11] oppo_edl_hacker:
Do not get fooled, I would LOVE to see my tool broadly used by the community to rebrand their phones and re-flash them as needed. But I've decided to keep it between the hands of developers only (at least for now) for two main reasons :

My solution involves using untouched version of the DownloadTool software, and involves code I wrote myself. It means this solution can be understood very quickly by Oppo, by just reading the code. No reverse engineering is required and a single developer could fix it in a day. Keeping it private prevents Oppo from understanding it and fixing it.

The solution is actually really complex to setup, and will most likely look too complicated for most people. Even some developers I shared the solution with were unable to understand and get it to work, despite having written a very extensive and comprehensive guide for it.

Keeping it private might also suggest Oppo that this isn't a big issue for them, and they might not notice it for months, and maybe even years. They probably consider that a handful of developers having access to this tool is no big deal, while it being public is a much more serious issue. So, this will probably give us the opportunity to work on Oneplus 12/13 next years. The fact Oppo makes extensive use of encryption in their software also makes me think this will possibly be the only bypass we will ever find. Given the fact it took two years to come, I feel like it is my duty to protect it.

I am still thinking about this, and I feel like this is an important decision I will have to make after carefully weighing the pros and cons.
[OnePlus 11] cavist:
If you don't like my opinion then add me to your ignore list. I don't need to write or crack anything same way I don't need to start a car manufacturing company to say if the new Ford or BMW drives better or worse.

I am rising questions since this scheme is quite unusual for public and open discussion about potential ROM development for OP11.

Would not say a thing if it would be discussed privately on a separate thread/forum on XDA accessible only to developers.

1. Sharing this in close circle could result in a same outcome, only one developer needed to release it or even send it to Oppo. Wishful thinking.

3. The tool is already available so you're not sharing anything more than a way to bypass it's restrictions offline.

Again wishful thinking that this could be available even for future years and still I am curious how development would benefit from this when only devs will be the ones that can troubleshoot their own creation without gen pop being able to test it and give feedback.

If my opinions hurt or insult anyone then I am not sorry at all for willing to have an open discussion since there thread is open and public.
[OnePlus 11] dlads:
@oppo_edl_hacker did you have a chance to have a nose at the logs I sent over?

Are they all that's required?
[OnePlus 11] birdie:
@cavist

It's obvious you don't like this person's thinking and decisions, OK, we get it.

Why don't you leave them alone, please? They won't change their mind. The reasoning is sound. OK, good? There's plenty of things to do in life than to express how you're discontent with someone's actions. You could learn Chinese, read a book, watch a movie, go for a walk, engage in community service, etc. etc. etc.

Thank you.
[OnePlus 11] oppo_edl_hacker:
Actually I do not have much time to, but I will do my best to have a look to them this week. I'll let you know by DM, and hopefully let's fix the OnePlus 10 flash as well.

I think I made it clear and sound that it releasing it will most likely cause more harm than good. I ask every developer downloading the code to follow the included guidelines so everything stays in control, so I hope everyone will follow that for the good of the community.

In the future, we should ignore these attacks and remain polite. This is my last message regarding this controversy.
[OnePlus 11] dlads:
No worries man,

Happy to follow your lead, I'll test if I can set up what's required..

Cheers... Much appreciated.👍🏼
[OnePlus 11] JPower123:
Absolutely fantastic news in my opinion! thank you so much @oppo_edl_hacker for the amazing work (I am assuming that it is amazing haha) I fully support the idea of not releasing the code yet, at least until either a custom rom is released as you said or when the next oneplus comes out. (a custom rom fold device would be incredible.) In its current form, I really do not see much of a cause for hard-bricking devices besides not following directions. (there are some edge cases but this is for the majority) There is currently not much to gain from messing with the device beyond rooting and flashing updates, which have all been safe for me with no MSM tool needed. In my personal opinion, developers are really the only group of people who could utilize the tool correctly. Whilst I also much prefer open source software, I believe that you will take this in the right direction and it will end up with a lot of good in the end.

On a side note, if you have someone that you trust and that has a lot of free time... They could in theory act as the paid services who are remotely flashing computers, but not charge anything. (this is obviously risky and I don't expect anyone to actually do this, but it was just a thought)

Anyways, thanks again for saving all of my countless hours of scrolling XDA waiting for this moment, and good luck everyone with development!
[OnePlus 11] oppo_edl_hacker:
Thanks for the kind words man. I can't wait to see what the developers will bring to the OnePlus 11, and I've read some guys are getting closer. Reminds me of the OnePlus 7/8 days, glorious times.
[OnePlus 11] dlads:
His accounts disabled... Jesus what's going on? We get a bit of good news and then it's gone... Have mods disabled it?
[OnePlus 11] Sib64:
INFO MODERATION​

As the moderation team often points out, this is a public place, a place where discussions are open to all, but for that to happen it's essential that there's mutual respect!

And that's sometimes the problem!

Respect for others is forgotten, and that's why we're here, to REMIND people!

Let me remind you of the forum rules:

I therefore invite you to reread some of your comments from now on and to pay attention to what you write.

Thank you and enjoy good time on xda. Thanks for your attention.

Sib64 - Moderator
[OnePlus 11] dlads:
Can you advise on the OPs account? Did he disable it or you guys? He seemed alright?
[OnePlus 11] Oswald Boelcke:
Hello and good evening, @dladz

I'm the one who disabled the account; however, in close coordination and communication with the member but finally on own request. It was an additional XDA account and as such violating rule no. 14 anyway. And we all decided to leave this thread open.

I hope you agree that I won't go into further details due to confidentiality.

Regards

Oswald Boelcke

Senior Moderator
[OnePlus 11] dlads:
Nah I appreciate the info mate,

I was aware of his standpoint and hesitance surrounding the whole thing.

Least we have the work that was done, hopefully he resurfaces at some point.

Thanks again man,
[OnePlus 11] dlads:
To oppo_edl_hacker

If you're watching this thread, message me on TG...you've got my user name.

👍🏼

Hope you're good.
[OnePlus 11] kouzelnik3:
Hopefully this wont affect his future work on MSM tools :/
[OnePlus 11] dlads:
He's got back to me
[OnePlus 11] AkayamiShurui:
It's not software you have to buy so it's not cracked. Cracking software refers to making paid software free this is not a paid software it's a software blocked from an OEM to its users so they have to pay more money to get their devices fixed
[OnePlus 11] AkayamiShurui:
I agree
[OnePlus 11] AkayamiShurui:
It's not a oplus servers that's actually talking to a couple of OnePlus phone repair service Representatives because of a phone repair I had where they replace the motherboard for software issues and I file complain and got really high up and then finally was told that there wasn't nothing wrong with the motherboard but they don't have access to the edl tool themselves so they can't fix software problems they have to replace them physically so that's why they had to replace the motherboard only oppo has access in it authorizes through oppos servers
[OnePlus 11] AkayamiShurui:
Can you actually like put the post you guys are referring to because I've yet to see anything that relates to the rules and you guys are saying here.
[OnePlus 11] AkayamiShurui:
I know your accounts deactivated at the moment but soon as it's not you should private message me so we can discuss
[OnePlus 11] Daniha:
after couple of years xda find a dev and he's diable now.

you're no longer here but i really really appreciate your work i wish we had some chat.

whenever you come back to xda community don't forget to dm

best of 🤞 mate.
[OnePlus 11] Sib64:
As a matter of principle, I don't give out names in public, but first of all I prefer to write a public message so that everyone can read it.

Then, if I have something to report to someone, it's done by PM and never in public.

That way, things are very clear and defined.

I hope I've answered your question.

Regards

Sib64 - Moderator
[OnePlus 11] SKNIZZY:
Does it work with the oneplus 10 pro?
[OnePlus 11] dlads:
No mate,

We already tried it in depth... Needs more data from a valid flash.

At this point it's useless for the 10 pro
[OnePlus 11] SKNIZZY:
Will there ever be a way to flash the stock rom of Oneplus 10 pro NE2215 without the use of MSM tool? Because if someone can truly find a way around this hiccup then it would save us all a lot of trouble smh.
[OnePlus 11] BratoMo225:
Thanks man
[OnePlus 11] dlads:
ATM it's just fastboot enhance , fastboot or recovery only it won't work in EDL or Qualcomm flash modes.

If you end up in Qualcomm 9008 then it's pay or RMA.

I still have some hope that it'll be done although it needs to be looked at by someone who knows what they're looking at during a flash... unfortunately that involves grabbing the logs during a flash, we do have some but they've not proved useful as yet.
[OnePlus 11] mattie_49:
Really can't believe where this thread ended up at. Sad that people get upset because of the op's choice to keep private. Now you get what you started with nothing but getting this guy's acc locked down. . Geesh so many entitled people roam everywhere amongst us now. Looks as if they have found their way to our beloved xda community as well. Smfh and I have no dog in this fight I'm an owner of the op9. We can call it the last of the mohicans that utilize the msm tool. Calling it like I'm seeing it. My opinion I wouldn't even attempt to root my device till the msm tool was available for the op9 global na and I could download to my desktop. Period. To much can go south and I dont have $700 to replace what I've broken.
[OnePlus 11] Renate:
Oh, I thought that this was about EDL and I didn't think it possible.

I've never seen a clear discussion on the Firehose on this, so I'll just mention what I know.

If somebody wants to point me elsewhere...

This Firehose has custom extensions of <getsigndata> and <verify>

The <getsigndata> returns XML from the device:

A random decimal seed of ~50 bits.

A digest (maybe SHA2-512) of 512 bits

The SoC serial number of 32 bits

A data block of 352 bytes (signature "OSIG") encoded Base64

The <verify> sends 256 bytes raw data to the device to unlock it.

The only way I know to hack this would be to get the Oppo servers to process the four getsigndata items into the raw verify.

Of the ~700 Firehose loaders floating around only four of them have this getsigndata/verify.

oneplus/0000000000020000_467f3020c4cc788d_fhprg_op10pro.bin
oppo/0000000000510000_22f415bec935e3cb_fhprg_rmx3471_695_SM6375.bin
oppo/000520e100510000_c8b4fe1cd7221f88_fhprg_peek.bin
oppo/0009a0e100000000_2440693284962ae0_fhprg_peek.bin
[OnePlus 11] empty.cad:
roundabout , I only need 2usd to buy the code
[OnePlus 11] dekefake:
The thing is, Oppo removed device encryption requirements for the OnePlus 11. No idea if this is a mistake or if it is done on purpose.
[OnePlus 11] Oswald Boelcke:
Moderator Announcement

Thread cleaned from off-topic social media related posts.

Regards

Oswald Boelcke

Senior Moderator
[OnePlus 11] penguinus:
You mean OP11 doesn't require VIP signatures for edl?
[OnePlus 11] dekefake:
Yeah it seems like so. That's why this hack came from nowhere. Was easier than Oneplus 10 Pro.
[OnePlus 11] penguinus:
But in this case it should be possible to rebuild ops from ofp and use it with old unprotected version of MSM. It is how MSM for OnePlus 9R appeared.
[OnePlus 11] AGNBSL:
Say, i have an access to EDL Flashing tool (MSM tool or Oplus flashing tool). Will i be able to flash OxygenOS to Chinese OP11? Sorry, i have to buy OTP (one-time-password) to login, so i don't want to lose few bucks (yet it's almost my full day income). If anyone tried rebranding in EDL mode, please reply :D thanks y'all
[OnePlus 11] dekefake:
I can confirm it works perfectly well, Including OTAs. I have no issues with brightness or anything I've heard about here with people flashing images to rebrand phones. I've imported a Marble Odyssey OP11 from India to France (so it's a CPH2447) and I've flashed the CPH2449_GPDR_A09 on it. I've been able to do A10, and then A22 OTAs.
[OnePlus 11] ChrisFeiveel84:
For convert india to to eu/global you need no edl flash this you can make with the oplokal Updater app for android 13 and all works
[OnePlus 11] fanticgamerw633:
So, finally I can consider buying the oneplus 11. The Msm tool block was the only thing keeping me from not buying. Still running the good old 7 pro.
[OnePlus 11] dekefake:
Following a discussion with @oppo_edl_hacker, a complete and comprehensive flashing guide will be published AFTER developers boot LineageOS on the Oneplus 11, allowing anyone to :

Revive a bricked phone

Rebrand any model, including OTAs support and avoiding known rebranding glitches

Why he changed his mind :

Oppo lowered the security level of the Oneplus 11 compared to the Oneplus 10 series, which allowed this hack to happen. While it may have been a mistake on their part, we believe it was an intentional change, in the context of Oneplus's effort to recapture its image of yesteryear.

Once the hard part of booting LineageOS will be done, protecting the code will be less important

Rebranding this phone has been a pain, and this will help more people than just devs

Please do not DM me asking for it, It will come once we're ready to publish our first LineageOS build.
[OnePlus 11] maamdroid:
This has all been fantastic news and makes me much happier I bought the 11!

Thank you to all devs and others working on this!!
[OnePlus 11] SKNIZZY:
I pray someone will find a work around for the 10 series or 10pro…soon.🙂
[OnePlus 11] dlads:
He's said he's not going to look into it for some reason, so no I highly doubt it...

Just confirms things for me, I'm done with this device, it's a turd.. same as Oppo / OnePlus.

Lost all faith in them and this piece of crap.
[OnePlus 11] xuanhoang1811:
This is firehorse loader for 1+ 11, is there any difference between these firehorse loaders?
[OnePlus 11] AGNBSL:
So i've tried with Locked bootloader and failed. Now phone won't flash OOS or COS. I'm thinking about sending this to China official repair center. I think my mistake was trying this on locked bootloader. I saw somewhere that Locked and unlocked bootloader works different on EDL mode (i can't quite remember exactly). I know there are people who can convert OP11 in EDL mode and i tried to fix by myself (for saving time and money) yet i failed.
[OnePlus 11] dekefake:
Try FlashTool 5.0.8 or 5.5.5, it works whatever the bootloader status is. If you can't wait for the guide to come out, find a local repair center that can flash it for free, or someone who can flash it remotely for $4 (I do NOT provide that service btw)
[OnePlus 11] kouzelnik3:
Oh damn, that is sad news :/
[OnePlus 11] AGNBSL:
It doesn't. It doesn't even start. Also this tool isn't updated. OP10, 11 etc newer models are missing. Only way is use Oplus flash tool version 4 or bring this device to official repair center. In my country, there is no center. Nearest one is in China.