yashsingh1/xdaforums huggingface dataset:
[Rabbit r1] kmransom52:
When running the powershell script I receive the following error.

FAILED (remote: '

Unlock operation is not allowed

')

fastboot: error: Command failed

Erasing 'userdata' FAILED (remote: 'not allowed in locked state')

fastboot: error: Command failed

Rewriting vbmeta struct at offset: 0

Sending 'vbmeta_a' (4 KB) OKAY [ 0.011s]

Writing 'vbmeta_a' FAILED (remote: 'not allowed in locked state')

fastboot: error: Command failed

Rebooting into fastboot OKAY [ 0.000s]

< waiting for any device >

Finished. Total time: 14.166s
[Rabbit r1] mvikrant97:
Because it failed to unlock your device bootloader in the first place.
[Rabbit r1] terracode:
When you performed the procedure, did the R1 get its first update or did you you perform the procedure prior. I was under the assumption from other reviewers that Rabbit patched the bootloader vulnerability on one of the first updates.
[Rabbit r1] mvikrant97:
Yes I'm aware its patched but we can still try.
[Rabbit r1] terracode:
Maybe this is why @kmransom52 couldn't unlock bootloader.
[Rabbit r1] mvikrant97:
Yes that is correct.
[Rabbit r1] angrymanhands:
Am I safe to assume someone is working on a new bootloader unlock?
[Rabbit r1] r1NITEMARE:
Yea…. Bricked my r1 yesterday due to boot loader. It’s stuck on fastboot mode 😔

I went ahead and used adb/fast boot commands on powershell to get it out of fast boot mode which worked but when I ran .\r1.ps1 again I had no luck 🤬 back to fast boot mode…

Any help to at the very least get it back on the original OS would be appreciated.
[Rabbit r1] mvikrant97:
The very first thing to do is to always backup the stock ROM.

Did you back up the stock ROM first?
[Rabbit r1] r1NITEMARE:
I’ll volunteer. I have no options at this point
[Rabbit r1] r1NITEMARE:
Dude noob mistake… I didn’t 😭
[Rabbit r1] mvikrant97:
Please message me here >>

CLICK HERE TO MESSAGE ME
[Rabbit r1] mvikrant97:
Thank you so much @r1NITEMARE

He let me tinker with his R1 device and his device is finally running with Android 13.

Thank you so much for your feedback as well.
[Rabbit r1] angrymanhands:
I volunteer my device as well!
[Rabbit r1] mvikrant97:
What are you planning to do?

The first thing to do is to backup the stock firmware of the device.
[Rabbit r1] handy-freak:
I have the same issue. When i power on the device it shows "dm verity failure" and 5 seconds until reboot.

It offers to press power key to continue, but it doesn't work. Nor with usb keyboard. Adb can't find the device.

If im running the script again and disconnect it in Fastboot mode, won't be recognized.

Also tried to emulate the key input with flipper bad usb - not working.

Any ideas?

Thanks in advance!
[Rabbit r1] mvikrant97:
Check fastboot drivers.
[Rabbit r1] handy-freak:
No success.

Attached a image of the error message.
[Rabbit r1] mvikrant97:
Will you allow me to do it remotely?
[Rabbit r1] mameise:
How can we backup the stock rom on r1? Thought this is not yet discovered? Would love to put android on my r1 but am a bit affraid now to brick it. Thanks in advance
[Rabbit r1] mvikrant97:
With mtk client tool.

I need someone who could test it.
[Rabbit r1] mameise:
Ok my current r1 i would want to keep stock for now. However by end of the week i should get my second one. There i would be willing to tinker around with. So we can try what works and what not.

If there is no risk losing or breaking anything i would also try with my current one to make a rom backup.
[Rabbit r1] mvikrant97:
There is no risk in dumping the stock firmware of the device.
[Rabbit r1] mameise:
Ok would it contain any of my data or even be able to connect to my rabbit hole?

And what do i need to do? Will first have to check how the mtk client tool is used. I assume booting into recovery mode or anything is needed but not sure how this should be done on the r1. I already tried turning the wheel while turning it on but no reaction.
[Rabbit r1] mvikrant97:
No it won't contain any of your data as we will be skipping those partitions.

The device needs to boots to BROM mode for this task.
[Rabbit r1] mameise:
Ok do you have a short step by step guide or so? And what is BROM mode and how to come to this mode?
[Rabbit r1] mameise:
Ok googled a bit. But i doubt it will be possible to put the device in BROM mode... I tried volume wheel and also the hidden button in the SIM tray. No luck. So i hope someone will figure out how to backup the rom or even dual boot rabbit os and regular android.
[Rabbit r1] mvikrant97:
To boot into BROM mode you have to switch of the device and the concerned tool will automatically switch it to BROM using Mediatek Preloader Port.
[Rabbit r1] mameise:
Ok then i need to look further. Not quite sure on the steps yet.
[Rabbit r1] handy-freak:
You can find all flash dump in discord, i don't know if im allowed to post it public here. I can send invites via pm.

I made a lot of progress, but no success.

The communication between pc and device works fine, i can put it to fastboot mode, and its recognized.

But almost all commands i try are blocked from the device as "not allowed in lock state"

unable to flash any partition, or dump files (boot, system etc)

Unable to unlock

But able to change active partition from a to b.

Sadly unable to unlock anyhow.

The dump files are from the latest update, also got older ones.

Do you think the problem might be the use of Windows??
[Rabbit r1] handy-freak:
The hidden button in sim slot works as reconnect of battery.

To reboot just keep 15 sec pressed.

For brom: connect device powered of, and tick short oj power after connect via usb. Should be recognized, nothing visible on screen.

If device powers on automatically, no worries after reboot (keep connected) will be recognized again.
[Rabbit r1] handy-freak:
I fixed it changing the fastboot drivers. Thabks for the advice, and the offered support.
[Rabbit r1] mameise:
Can you PM me the place in discord? Is it in the official rabbit group or somewhere else? Thanks

So in theory with the available dumps and the script for android it should be possible to go back to stock i assume.

Regarding the unlock problem i saw that the last update closed the option to unlock bootloader but i also saw that there is already a working fix to enable again. I am just not sure if it is already available or not.

As i get my second one end of the week i think i will keep it offline to not update latest version then it should be still possible to unlock and load android on it.
[Rabbit r1] handy-freak:
Here are the dumps

dumps

firmware dumps

firmburrow.rabbitu.de

The Link to discord via PM.
[Rabbit r1] handy-freak:
I'll get a second one also this week hopefully.

About enable the unlock again, it's needed to boot the device, i think.

What i didn't tried yet is a usb keyboard connected to a usb hub with external power source, to confirm the unlock procedure.

Anybody can try? And post result please.
[Rabbit r1] wikiwheeler:
I have an r1 that I soft-bricked (I can get to fastboot mode but notFastbootd) Is there any way to flash Lineageos on this?
[Rabbit r1] mvikrant97:
Follow the tutorial and you shall be able to flash it.

Make sure you have usbdk and Mediatek drivers installed. Restart your PC and then use the tool above.
[Rabbit r1] wikiwheeler:
I'm running Linux Fedora 40 Workstation and could only find Windows drivers
[Rabbit r1] handy-freak:
The Rabbit is back to life!!

Follow this guideline, and use the system.img from post 1!

This is how I unbricked my Rabbit from "Your Device has been unlocked and can't be trusted..." endless loop · Issue #26 · RabbitHoleEscapeR1/r1_escape

I finaly managed to bring my bricked Rabbit R1 back to life. It was stuck on the "Your Device has been unlocked and can't be trusted..." endless loop. Could not do anything and I mean ANYTHING! The...

github.com
[Rabbit r1] colton12toes:
Having the same issue not being able to get to Fastbootd mode. Done this process about 10-15 times and getting the same result. Let me know if you figure it out
[Rabbit r1] mvikrant97:
Check Fastboot drivers.

Also make sure you have Mediatek and USDdk drivers installed.
[Rabbit r1] colton12toes:
I know I have Mediatek drivers installed, I’ll verify USBdk.

Maybe I need to update my fast boot driver as well. Thank you

I’ll give it a try later tonight
[Rabbit r1] handy-freak:
@All

+ keep an eye on your device manager while playing. Make sure, that the device is recognized correctly and double check the drivers!

This was my mistake and caused me several days of frustration....
[Rabbit r1] colton12toes:
What should the device be recognized as? That could be one of my issues. About to recheck all my drivers lol

Edit: Seems like whenever i start up the device, it will be recognized for a second until it reboots, Driver states its "MediaTek PreLoader USB VCOM".. once it goes into fastboot mode, it turns into "Android ADB device" im lost
[Rabbit r1] colton12toes:
NEED HELP. JUST GOT TO FASTBOOTD SCREEN.

not sure how. But, cannot run fastboot commands and device is listed in "other devices" under r1 and says no compatible drivers. what do i do???
[Rabbit r1] mvikrant97:
Update the fastboot drivers.
[Rabbit r1] RicardoCervera:
Hi.

I received my R1 yesterday and it did a update without any option for me to even try to stop it, will this affect me from doing this?.
[Rabbit r1] mvikrant97:
No idea unless tested but please don't use the tool without dumping your stock firmware.
[Rabbit r1] RicardoCervera:
I am happy to help too, I received mine yesterday and I dont really care as long I can use at least as an android device!.
[Rabbit r1] RicardoCervera:
Let me know how to extract the stock firmware and send it to you?.
[Rabbit r1] mvikrant97:
Are you familiar with MTK client tool?
[Rabbit r1] RicardoCervera:
No at all but I'm sure the r1 can tell me all about it!!!, hahahaha

Let me get on it and see what is that witchcraft you are talking about.
[Rabbit r1] RicardoCervera:
It looks difficult, but if there is anybody in london I can bring it over to get the firmware dump?...
[Rabbit r1] mvikrant97:
:ROFLMAO::ROFLMAO:

Check this out on how to setup it.

GitHub - bkerler/mtkclient: MTK reverse engineering and flash tool

MTK reverse engineering and flash tool. Contribute to bkerler/mtkclient development by creating an account on GitHub.

github.com
[Rabbit r1] RicardoCervera:
On it...
[Rabbit r1] mvikrant97:
I have already written a detialed guide on how to setup the mtk client here.

Bootloader unlock and root for Nokia 2.2, Nokia 2.3, Nokia C2 Tava and Nokia C2 Tennen.

Disclaimer: You are responsible for any damage to your device with the use of this tutorial and tools posted here. You are choosing to make these modifications on your own in reference to this guide and tools made available here. For any...

xdaforums.com
[Rabbit r1] Dictator008:
Guys can anyone help me please. I just got my device today and when i connected to the wifi, it updated automatically. I didn't know they pushed an update to lock the bootloader. I tried to run the rabbit escape script and my device got bricked ;(. It got stuck on "dm-verity corruption - your device is corrupted" bootloop. On cmd it shows "not allowed in locked state - fastboot:error Command failed"
[Rabbit r1] mvikrant97:
Install Usbdk drivers and then restart your PC and then run the script again to unlock bootloader.
[Rabbit r1] sir orlow:
hello hoping anyone can help , so i went thru the steps when geting to the last step . after runing r1/ps1 command . i connect the device . and it connects but keeps disconnecting ,not long enough for it to run anything on it ,

then shows bootloader screen and it boots up on r1 , i keep trying an does the same . but no luck . do u have any idea why it keeps disconnecting ?
[Rabbit r1] mvikrant97:
Install libusb and usbdk drivers.
[Rabbit r1] Nonamepromo:
Hi!

I have the Rabbit R1 with the latest firmware installed, so the bootloader is locked.

I'm trying to figure out which steps I have to follow.

I'm following this guide , but I don't know if I only need to do the "Unlock bootloader" part or if I need to do something more.

Then, when the bootloader is unlocked, can I follow this guide?

Thank you!
[Rabbit r1] mvikrant97:
If you are using MTK client then please configure it correctly and backup the stock firmware first.
[Rabbit r1] Nonamepromo:
I've seen there that there is a backup file, is that enough?
[Rabbit r1] mvikrant97:
Yes that backup shall be enough.
[Rabbit r1] Nonamepromo:
I'm trying but look at that:
[Rabbit r1] mvikrant97:
If its failing to handshake with the device then please try it again and let me know.
[Rabbit r1] Nonamepromo:
I'm stuck in fastboot mode

**Edit: solved, I'm not stuck anymore.

I'm trying to understand how to put the R1 in BROM mode, in order to unlock the bootloader
[Rabbit r1] mvikrant97:
Your device supports both Preloader and BROM mode if you have older device or update.

To switch to BROM mode your device needs to be connected in Preloader mode and then the tool will switch it to BROM mode.
[Rabbit r1] Nonamepromo:
I'm on Rabbit R1.

How can I put my R1 to Preloader mode?
[Rabbit r1] mvikrant97:
Install Mediatek Drivers in Your PC. Install USDk drivers in your PC.

Restart Your PC.

Open the MTK client.

Turn off your Rabbit R1.

Connect it to PC in switched off mode and the tool will detect your device.
[Rabbit r1] Nonamepromo:
Done, still not working
[Rabbit r1] Dictator008:
Im on linux but managed to get it working! Is there any way to turn off this notification "Serial Console enabled Performance is impacted". Also, is there any way to get thr camera working?
[Rabbit r1] sir orlow:
Thank You for the reply . I installed both . Maybe am doing it wrong .but it’s Still disconnecting . is there anything else I can do . Took photos

Spoiler content hidden.
[Rabbit r1] bulgdog:
Hello, pls help I stuck here :
[Rabbit r1] mvikrant97:
Please share the picture on your computer screen when shows error during fastboot flash.
[Rabbit r1] bulgdog:
it's exactly de same
[Rabbit r1] bulgdog:
flashing is OK but after i took the message " your device ...." and the rabit reboot in fastboot
[Rabbit r1] bulgdog:
now i'm flashing to stock backup, hopr will work
[Rabbit r1] TheP3n9u1n:
I have the same Problem, my r1 stucks at fastboot.

In the mtk tool fails the handshake...

I tried differnt options but nothing works.

I need a litte help...
[Rabbit r1] bulgdog:
finaly arrived to restor stock rom with : https://github.com/RabbitHoleEscapeR1/r1_escape?tab=readme-ov-file#restore-stock. But this took 20 hours with mtkclient
[Rabbit r1] Marcosjarroyo:
Hello, I have a problem, when trying to install android on my rabbit I ran the rabbit escape script but I was such an idiot that the system.img was not unzipped, now my rabbit only turns on for a few seconds and says that it is not trust and Turn it off and do the same thing again, is there anything I can do? I'm on windows, thanks
[Rabbit r1] mvikrant97:
You don't need to unzip system.zip.

Just run the Rabbit R1 escape script again and immediately connect the rabbit when it turns off.
[Rabbit r1] Marcosjarroyo:
Yes I did it several times but it always returns to the loop, I even followed this guide but it didn't work for me

This is how I unbricked my Rabbit from "Your Device has been unlocked and can't be trusted..." endless loop · Issue #26 · RabbitHoleEscapeR1/r1_escape

I finaly managed to bring my bricked Rabbit R1 back to life. It was stuck on the "Your Device has been unlocked and can't be trusted..." endless loop. Could not do anything and I mean ANYTHING! The...

github.com
[Rabbit r1] mvikrant97:
Please install the USBdk drivers and restart your PC.

Then try again.
[Rabbit r1] Marcosjarroyo:
thanks, any source ?
[Rabbit r1] mvikrant97:
GitHub - bkerler/mtkclient: MTK reverse engineering and flash tool

MTK reverse engineering and flash tool. Contribute to bkerler/mtkclient development by creating an account on GitHub.

github.com

Get usbdk installer (.msi) from here and install it
[Rabbit r1] Marcosjarroyo:
I think the installation fails I only see that usbdk libraries appears and the installation window closes by itself
[Rabbit r1] mvikrant97:
Do you have Windows 11?
[Rabbit r1] Marcosjarroyo:
windows 10
[Rabbit r1] mvikrant97:
It installs like that only. Try to restart your PC.
[Rabbit r1] Marcosjarroyo:
Hello, now the loop shows me a dm-verity corruption error and it turns off after 5 seconds to return to the same thing, running the script I can put it in fastboot moode (black screen with fastboot mode written in the background on the left) some Any idea what I can do?
[Rabbit r1] Marcosjarroyo:
I tried python mtkbootcmd.py FASTBOOT but it only stays listening for ports and nothing else happens
[Rabbit r1] mvikrant97:
Once your device gets into the fastboot mode.

Immediately disconnect your Rabbit from the PC. Close the script. This will allow you to keep your Rabbit in Fastboot mode.

Then flash the Super.img and boot.img from backup in fastboot mode.

fastboot flash super super.img

Also flash the boot.img

fastboot flash boot boot.img
[Rabbit r1] Marcosjarroyo:
i dont have a super.img
[Rabbit r1] mvikrant97:
Download it from here.

GitHub - RabbitHoleEscapeR1/r1_escape

Contribute to RabbitHoleEscapeR1/r1_escape development by creating an account on GitHub.

github.com

Download and unzip a r1 backup.
[Rabbit r1] Marcosjarroyo:
I don't see a super.img, in backup I see a super.bin or if there is the system.img that I already have
[Rabbit r1] mvikrant97:
Rename super.bin to super.img

Then flash using fastboot mode.
[Rabbit r1] Marcosjarroyo:
Is it the same if I use super.bin ?
[Rabbit r1] Marcosjarroyo:
ok
[Rabbit r1] Marcosjarroyo:
nothing works for me, I tried everything I always ended up in the dm-verity loop, if someone was able to solve it I appreciate any help, even via remote desktop
[Rabbit r1] mvikrant97:
Okay I can help you.
[Rabbit r1] tonyquan:
Hi, I have an R1 that I've never updated or connected to a network. Unfortunately none of the steps in this thread have let me load Android 13 to the device. It seems to refuse to unlock the bootloader. I'm always getting the same message below. Any clue on what I'm doing wrong?

Wait for device. Plug in USB.

Connect port:

Begin executing download without scatter command...

Stage: [--0] writing to frp

Download Flash 0

Download Flash 100

Download result: STATUS_SEC_IMG_TYPE_MISMATCH(-1073610710)

Disconnect!

No device found with HWID: VID:PID=0E8D:2000

(bootloader) Start unlock flow

FAILED (remote: '

Unlock operation is not allowed

')

fastboot: error: Command failed

Erasing 'userdata' FAILED (remote: 'not allowed in locked state')

fastboot: error: Command failed
[Rabbit r1] mvikrant97:
The bootloader unlock has to be forced using a third party tool.

The Rabbit R1 Escape tool on Github no longer works on updated devices.

I'll be working with a person today to try to update the script and test the bootloader unlock capabilities on an updated device.

I was successfully able to unlock bootloader of his device but was unable to flash the system.img partition for Android 13.

I will update this post accordingly with my findings.
[Rabbit r1] tonyquan:
Thanks for the quick reply. If I can be of any help let me know.
[Rabbit r1] mvikrant97:
Thank you for offering help.

I will ping you if I need someone to assist.
[Rabbit r1] eddybesse:
hey what version of android 13 do you use ?
[Rabbit r1] eddybesse:
what version of adnroid 13 do you use as system ?
[Rabbit r1] mvikrant97:
The GSI which is already included in the R1 escape on GitHub.
[Rabbit r1] eddybesse:
@m

can someone update the system image ? it's not in the github anymore, i DL one but it froze my rabbit lol
[Rabbit r1] mvikrant97:
Release 20240605 · RabbitHoleEscapeR1/r1_escape

Contribute to RabbitHoleEscapeR1/r1_escape development by creating an account on GitHub.

github.com

The file is available on Github.
[Rabbit r1] eddybesse:
oh thank you i feel numb aha, i hope that will help others too :)
[Rabbit r1] mvikrant97:
Also the link is already available in the OP.
[Rabbit r1] Minimog06:
Hello everybody. I was stuck on the last screen with the error message and my rabbit turns off and on every 5 seconds.

Then I try the method and this appears:

My R1 is Totally blocked. Cannot put it off. Cannot connect it anymore nothing rien nada :/

Please help
[Rabbit r1] mvikrant97:
Use the secret switch to force it to turn off.
[Rabbit r1] Minimog06:
Thank you :)

I would like to know how to access my rabbit to find my ID following this tutorial:

How to Fix the "Device is not Certified by Google" Error

Are you having trouble with signing in to your Google account? Can't access the Google Play Store or use Google apps like Gmail, Maps, Play Music, or Photos? Seeing a "device is not certified by Google" error? Here's how to fix that.

www.xda-developers.com

But cannot manage to open the apk... :S

Idk which appliation use to open the APK, i try Android studio but even with, impossible...

Trying to use the reboot but cannot do those steps:

Run mtkclient from the command line using:

On Windows: python mtk.py wl "path\to\backup" --serialport

On Linux: python mtk.py wl "path\to\backup" (or use mtkclient-GUI).

(If you have issues with slow write speeds, follow this issue)
[Rabbit r1] mvikrant97:
Use the GUI version and post the error message screenshot here.
[Rabbit r1] Minimog06:
sorry but i'm quite a newbie on this, when i click on the mtkclient-GUI nothing happens :S
[Rabbit r1] mvikrant97:
Please follow the instructions on the GitHub page to setup MTK client

GitHub - bkerler/mtkclient: MTK reverse engineering and flash tool

MTK reverse engineering and flash tool. Contribute to bkerler/mtkclient development by creating an account on GitHub.

github.com
[Rabbit r1] Minimog06:
Spoiler content hidden.

{Mod edit: Spoiler added for better reading and scrolling experience. Oswald Boelcke, Senior Moderator}

Did someone can discord with me (I’ll pay of course) I get no hack and no rabbit neither… :/
[Rabbit r1] eddybesse:
hello where is the secret swich ? i look into the sim slot but don't see nothnig
[Rabbit r1] eddybesse:
hello i got the USB error screen

just wait your rabbit is out of batteyr

and redo the script
[Rabbit r1] eddybesse:
Hello ! how did you pass the screen sayong " your device is corrupted" ? mini reboot every 5s on this scren ... and again again
[Rabbit r1] mvikrant97:
Did you flashed the Android onto it?
[Rabbit r1] eddybesse:
yes i flash with the system.img
[Rabbit r1] mvikrant97:
So your Rabbit doesn't boots or ....?
[Rabbit r1] eddybesse:
thank you again for your help, yes the rabbit doenst boot, after 5s it reboot and same screen with the same message ... the reboot
[Rabbit r1] Minimog06:
Hidden next to the s’il card port. Not a real button.
[Rabbit r1] eddybesse:
thanks ! i think i saw it, a little black thing above the slot
[Rabbit r1] eddybesse:
i re download rhe got and system img and redew it let see !
[Rabbit r1] eddybesse:
okay i redew the same process and damned same sh***
[OnePlus 12R / OnePlus Ace 3] banboune:
Hi everyone,

I wonder if by flashing my ACE 3 with EDL with ColorOS I would have the Google and Playstore applications from the first start or if I would have to do additional actions to find them?