Hey colleagues,
I've a hardware device (no phone) that includes some kind of a MediaTek tablet with a MT8167 and Android 8.1 installed on it.
Currently I try to enable ADB in order to intercept some network traffic flows with custom apps I'd like to install.
Unfortunately the device is running a System.User App with no chance to escape.
I was able to dump the entire memory including all partitions. Then I tried to change the default props (adb enable, etc...) in the img and did a re-flash. The device boots into safe mode - but is stuck there.
I've seen that dm-verity is enabled / Android Verified 1.0 (not 2.0). So I tried to magisk on another arm Device and updated the boot.img. Unfortunately that lead to an ininite boot loop.
Do you guys have any other ideas?
I've physical access to the device and I am able to flash images back to the device.
Any help would be appreciated.
Osral
Osral said:
Hey colleagues,
I've a hardware device (no phone) that includes some kind of a MediaTek tablet with a MT8167 and Android 8.1 installed on it.
Currently I try to enable ADB in order to intercept some network traffic flows with custom apps I'd like to install.
Unfortunately the device is running a System.User App with no chance to escape.
I was able to dump the entire memory including all partitions. Then I tried to change the default props (adb enable, etc...) in the img and did a re-flash. The device boots into safe mode - but is stuck there.
I've seen that dm-verity is enabled / Android Verified 1.0 (not 2.0). So I tried to magisk on another arm Device and updated the boot.img. Unfortunately that lead to an ininite boot loop.
Do you guys have any other ideas?
I've physical access to the device and I am able to flash images back to the device.
Any help would be appreciated.
Osral
Click to expand...
Click to collapse
@Osral
Welcome to XDA. I hope you'll always get the support you require.
However, prior to your next posting please read the guidances that are stuck on top of every forum like
Note: Questions go in Q&A Forum
If you are posting a Question Thread post it in the Q&A forum. Technical discussion of Android development and hacking. No noobs, please. Device-specific releases should go under the appropriate device forum...
forum.xda-developers.com
and the others. I've moved the thread to Android Q&A. Thanks for your cooperation.
Regards
Oswald Boelcke
Senior Moderator
Related
I unfortunately somehow managed to corrupt the android o/s on my acer liquid e.i try to boot into recovery mode and nothing shows up.there is no more screen with white type,my computer cannot find device,it shows up as unknown USB device ,it will install Adb test drivers,then it won't install anything else.is there any referrences I can draw knowledge from to try and recover,restore,or re-install android os. So my phones not useless anymore? Please anyone with any useable knowledge please post links etc.so I can fix this VERY annoying problem I have created myself.
You might try posting this in your device's forum's Q&A instead of general Android Q&A.
Eric_Eric_Eric said:
You might try posting this in your device's forum's Q&A instead of general Android Q&A.
Click to expand...
Click to collapse
try this
http://forum.xda-developers.com/showthread.php?t=1706918
Hi Guys,
i have been trying to unlock bootloader on my Doogee S55 phone, i have some experience with rooting phones.
But this thing.... i downloaded all the drivers for that phone all around the internet,,
when its normaly turned on, ADB command line recognise it, but when i boot to Fastboot using command (or manualy with power+voldown buttons, doesnt matter) it shows in device manager as unknown device, and when i input command to unlock bootloader it show just waiting for device, and when i input command to show connected devices nothing shows up (in fastboot, when booted normaly the device shows up fine)
my only possible explanation is that i dont have a right driver for ADB and this phone to communicate. but in instaled a tryed so many of them for span of several hours and days
i have instale minimal ADB and Fastboot, i have google drivers that comes with it and bunch of drivers for this phone nothing work
BigKjju said:
Hi Guys,
i have been trying to unlock bootloader on my Doogee S55 phone, i have some experience with rooting phones.
But this thing.... i downloaded all the drivers for that phone all around the internet,,
when its normaly turned on, ADB command line recognise it, but when i boot to Fastboot using command (or manualy with power+voldown buttons, doesnt matter) it shows in device manager as unknown device, and when i input command to unlock bootloader it show just waiting for device, and when i input command to show connected devices nothing shows up (in fastboot, when booted normaly the device shows up fine)
my only possible explanation is that i dont have a right driver for ADB and this phone to communicate. but in instaled a tryed so many of them for span of several hours and days
i have instale minimal ADB and Fastboot, i have google drivers that comes with it and bunch of drivers for this phone nothing work
Click to expand...
Click to collapse
@BigKjju
Please read the guidances that are stuck on top of every forum prior to your next posting like
Note: Questions go in Q&A Forum
If you are posting a Question Thread post it in the Q&A forum. Technical discussion of Android development and hacking. No noobs, please. Device-specific releases should go under the appropriate device forum...
forum.xda-developers.com
I've moved the thread to Q&A.
Regards
Oswald Boelcke
Senior Moderator
Oswald Boelcke said:
@BigKjju
Please read the guidances that are stuck on top of every forum prior to your next posting like
Note: Questions go in Q&A Forum
If you are posting a Question Thread post it in the Q&A forum. Technical discussion of Android development and hacking. No noobs, please. Device-specific releases should go under the appropriate device forum...
forum.xda-developers.com
I've moved the thread to Q&A.
Regards
Oswald Boelcke
Senior Moderator
Click to expand...
Click to collapse
thank you very much, this forum helped me many times over the years, this is the first time iam posting, and i am really angry at that phone please accept my apology and i promise i will do better next time
I have 2 of these with Android 9. A 50 and a 60. They use the android home launcher and so display ads, etc.
Specs:
Mstar M7322
2gb Ram
4GB storage
Mali GPU
Right now:
Adb can be entered over wireless. Most apps can be user disabled/uninstalled.
App List: https://pastebin.com/GL8b00s6
Apps to Disable: https://pastebin.com/ngM3Gy8g
You can use termux with ADB addon to use ADB right from the TV with BT keyboard.
Use ADB and Fastboot Commands on Android without Root
Using ADB Fastboot Termux Git you can install and use ADB and Fastboot commands on Android devices via Termux without root or using a computer.
technastic.com
Android launcher contains the input switcher so hard to replace but this one works: https://forum.xda-developers.com/t/app-android-tv-projectivy-launcher.4436549/
Can only use VPN based firewall. Can't use my VPN.
Can't be trusted on network.
Remote has a microphone (hi Orwell!).
Bromite/VLC/Kodi/etc all run.
No [email protected] 4:4:4 beyond 8bit.
Issues:
* USB adb works with a male to male cable. Bought one on ebay.
* There is no service jack/socket or service manual I could find to get the bootloader console.
* On reddit someone used a raspi zero?
https://www.reddit.com/r/AndroidTV/comments/pyo4sk/_/hfqvua9
* Cannot list MTD partitions on ADB without root.
* Supposedly unlockable from bootloader/fastboot but beware:
https://forum.xda-developers.com/t/android-tv-stuck-on-black-bootloader.3803695/
* No firmware updates to dissect.
Service Mode (Mstar Service Menu):
Menu -> Sound -> Advaned -> Balance -> Type '1' '9' '6' '9'
How to disable an app without root:
Code:
pm disable-user --user 0 com.hisense.tv.ota
pm uninstall --user 0 com.hisense.tv.ota
pm disable-user com.hisense.tv.ota
Board info?!
In app manager system info the mainboard identifies as MSD6886. This one is slightly different in terms of port layout as if it was the upgrade version. But that board has a service manual and bootloader/layout stuff applies. https://www.manualslib.com/products/Hisense-Msd6886-10481497.html
The uart on that board is the headphone jack which isn't present on this TV. Maybe it has to be soldered.
TV Source code from Hisense:
GitHub - opensource-hisense/SmartTV-SeriesVidaaU5: product:75U9GEVS 75U9GQ 75U90GQ 75U91GQ 75U92GQ 75U9GQCH 75U90GQCH 75U98GQNE 75U96GQ 75U97GQ 75U98GQ 75U99GQ 75U96GQCH 75U97GQCH 75U99GQNE 75U9GQTUK 75U90GQTUK 75U91GQTUK 75U92GQTUK 75U96GQTUK 75U97G
product:75U9GEVS 75U9GQ 75U90GQ 75U91GQ 75U92GQ 75U9GQCH 75U90GQCH 75U98GQNE 75U96GQ 75U97GQ 75U98GQ 75U99GQ 75U96GQCH 75U97GQCH 75U99GQNE 75U9GQTUK 75U90GQTUK 75U91GQTUK 75U92GQTUK 75U96GQTUK 75U9...
github.com
Has anyone gotten any farther with this or any other mstar based TVs? Tried more malwareish programs like kingroot? What's worth trying next?
If the bootloader can be unlocked a backup could be made and it might just be a matter of adding magisk binary for all of that receiver/service disabling goodness.
Maybe one day we can compile a rom for it.
nxb said:
Has anyone gotten any farther with this or any other mstar based TVs? Tried more malwareish programs like kingroot? What's worth trying next?
Click to expand...
Click to collapse
Hello and good afternoon, @nxb
Prior to your next posting please read the guidances that are stuck on top of every forum like
[ATTN] : Read before posting - Any questions posted here will be MOVED or CLOSED
Please read the below before posting. Any questions not development related will be moved or closed. Forum Searching | Posting | The Basics: (Make sure you've read them before starting a new thread) Forum Rules Forum Search Google Forum...
forum.xda-developers.com
and the others. I've moved the thread to Android Q&A.
Thanks for your cooperation!
Regards
Oswald Boelcke
Senior Moderator
Hope its not moved here to die.
nxb said:
Hope its not moved here to die.
Click to expand...
Click to collapse
I guess that depends on other things then that it has been moved out of an not suitable forum.
Regards
Oswald Boelcke
I have simply copied where similar threads were posted:
Rooting MediaTek Based Linux Smart TV
Hi Guys, I am looking for methods to get root on my Linux smart tv. Anyone have any ideas? I ran metasploit against it and had no luck, it did find some open ports for upnp and something called twonkymedia but I was not able to get anywhere...
forum.xda-developers.com
Sony Android TV Users
Hi All, I have searched over XDA but couldn't find any appropriate place for Sony Android TV. I have got my Sony Android TV, KDLW800C, couple of days ago. Sony has just started to ship out 4K and 2K Android TV's. From the interface, it's almost...
forum.xda-developers.com
This is definitely not help/troubleshooting and Q&A.
I have my 70A6G3 Bootloader unlocked following in your footsteps then unlocking via fastboot command in bootloader. Now im kinda stuck as I dont have a boot.img to use for root. Nor TWRP to make a backup. Any ideas?
Did unlocking reset to factory defaults? I should unlock mine now that its not going to brick.
We can try to boot generic recoveries through fastboot until we get one that works and then dump the MTD partitions, edit and flash back.
Backup/dump kernel image without root or twrp/cwm
Is there any way to backup/dump kernel image without root or twrp/cwm ?
android.stackexchange.com
AndroiddiordnA said:
I have my 70A6G3 Bootloader unlocked following in your footsteps then unlocking via fastboot command in bootloader. Now im kinda stuck as I dont have a boot.img to use for root. Nor TWRP to make a backup. Any ideas?
Click to expand...
Click to collapse
Bro,I have a rom of hisense tv, Can you extract the boot image for me,plz?
AndroiddiordnA said:
I have my 70A6G3 Bootloader unlocked following in your footsteps then unlocking via fastboot command in bootloader. Now im kinda stuck as I dont have a boot.img to use for root. Nor TWRP to make a backup. Any ideas?
Click to expand...
Click to collapse
Bro,I have a rom of hisense tv, Can you extract the boot image for me,plz?
codernixx said:
Bro,I have a rom of hisense tv, Can you extract the boot image for me,plz?
Click to expand...
Click to collapse
It should not be too difficult to extract a boot image from the ROM file.
What file format is the ROM? tz rar zip ?
codernixx said:
Bro,I have a rom of hisense tv, Can you extract the boot image for me,plz?
Click to expand...
Click to collapse
How did you manage to get rom? I am also looking for rom of 50A71F tv. Any help would be appreciated!
I have a Hisense 43A6H and its bootloader unlocked it was easy just had to load the drivers in bootloader mode and fastboot flashing unlock worked and yes IT WIPES THE TV but patching my boot.img never works, well it patches successful on some but not all magisk versions and flashing is a success in bootloader fastboot but it did not root the tv so its not working for some reason on my tv, as its android 11.
recently my moto 5g stylus (xt2131-1) got stuck on something like a boot loop, it would start up and freeze on the needlessly animated moto logo. i exhausted the recovery options and was forced to factory reset to un-brick it loosing (possibly up to 100>/ 250gb) data. hoping that like a micro sd card there might still be 'ghost copies' of the data i plugged it into laptop and tried laptop recovery softwares (tried w/ wo usb debugging on), which failed to discover anything. then at the risk of corrupting the 'ghost data' reluctantly installed and ran android recovery apps which only detected new files intentionally-deleted to test their capabilities. im unaware of any other options other than to root my phone in an attempt to have it recognized by my laptop as another external hard drive to scan for 'ghost files'...aside from the handfull of recovery apps no new data was written over the (original data). ANYONE KNOWLEGEABLE IN ROOTING AND RECOVERY ANY HEADS UP OF WHETHER OR NOT THAT'LL WORK WILL BE GREATLY APPRECIATED
SINCERELY_FKD said:
recently my moto 5g stylus (xt2131-1) got stuck on something like a boot loop, it would start up and freeze on the needlessly animated moto logo. i exhausted the recovery options and was forced to factory reset to un-brick it loosing (possibly up to 100>/ 250gb) data. hoping that like a micro sd card there might still be 'ghost copies' of the data i plugged it into laptop and tried laptop recovery softwares (tried w/ wo usb debugging on), which failed to discover anything. then at the risk of corrupting the 'ghost data' reluctantly installed and ran android recovery apps which only detected new files intentionally-deleted to test their capabilities. im unaware of any other options other than to root my phone in an attempt to have it recognized by my laptop as another external hard drive to scan for 'ghost files'...aside from the handfull of recovery apps no new data was written over the (original data). ANYONE KNOWLEGEABLE IN ROOTING AND RECOVERY ANY HEADS UP OF WHETHER OR NOT THAT'LL WORK WILL BE GREATLY APPRECIATED
Click to expand...
Click to collapse
Hello and good afternoon, @SINCERELY_FKD
Welcome to XDA. I hope you'll always get the support you require.
However, prior to your next posting please read the guidances that are stuck on top of every forum like
Note: Questions go in Q&A Forum
If you are posting a Question Thread post it in the Q&A forum. Technical discussion of Android development and hacking. No noobs, please. Device-specific releases should go under the appropriate device forum...
forum.xda-developers.com
and the others. I've moved your thread to Android Q&A.
Thanks for your cooperation!
Regards
Oswald Boelcke
Senior Moderator
i installed lsexposed magisk module which sent fine but then i installed Xposed-Disable-FLAG_SECURE_2.0.0.apk that caused the bootloop
i tried getting my phone into lineage safe mode (holding down volume button) i dont know if this is hte correct way to achieve it but i didnt get into a safe mode
and for some reason on 2 laptops i've tried (lenovo t480 ubuntu 22.04.2 and Lenovo t14 gen 1 ubuntu 23.04) i couldnt connect to adb when i enabled adb in lineage recovery
anyone have any suggestions? im pretty desperate because i really dont want to reinstall
latumus said:
i installed lsexposed magisk module which sent fine but then i installed Xposed-Disable-FLAG_SECURE_2.0.0.apk that caused the bootloop
i tried getting my phone into lineage safe mode (holding down volume button) i dont know if this is hte correct way to achieve it but i didnt get into a safe mode
and for some reason on 2 laptops i've tried (lenovo t480 ubuntu 22.04.2 and Lenovo t14 gen 1 ubuntu 23.04) i couldnt connect to adb when i enabled adb in lineage recovery
anyone have any suggestions? im pretty desperate because i really dont want to reinstall
Click to expand...
Click to collapse
Hello and good afternoon, @latumus Welcome to XDA! I hope you'll always get the support you require.
However, prior to your next posting please read the guidances that are stuck on top of every forum like
Note: Questions go in Q&A Forum
If you are posting a Question Thread post it in the Q&A forum. Technical discussion of Android development and hacking. No noobs, please. Device-specific releases should go under the appropriate device forum...
forum.xda-developers.com
and the others. I've moved your thread to General Q&A.
Thanks for your cooperation!
Regards
Oswald Boelcke
sorry for posting in wrong forum.
tried adb on windows 11 and macos now too no response on any (2 different cables)
2 broken usb cables what are the odds everything sorted now