Welcome to mtkclient Discussions! #60
Replies: 20 comments 19 replies
-
|
Hey everyone, I've been working for a handful of months now on the reverse engineering of the universal mtk bootloader unlock, mainly on the LG Stylo 6 and K51 and K61. I finally figured out it is all in the seccfg.img and then others showed up with the same conclusion but with more info than I had until I got the usb logs of chimera doing the unlock, I've not been able to get this tool to properly sign or flash the modified seccfg.bin yet, am i doing something wrong or is it just not implemented for the LG devices |
Beta Was this translation helpful? Give feedback.
-
|
The update is amazing, works perfect on the LG K models, I'm gonna test with the Stylo 6 tonight. |
Beta Was this translation helpful? Give feedback.
-
|
Thanks, hopefully we can get it working with Stylo 6 as well soon |
Beta Was this translation helpful? Give feedback.
-
|
That would be great, I have many many stylo 6 users in my Bootloader Locksmiths discord that are growing impatient, but I tell them it's not a phone for novice android users to unlock, it takes some computer know-how and patients, I'm glad it works with the stylo 6 on Linux at least. |
Beta Was this translation helpful? Give feedback.
-
|
So how does this payload get compiled? Is there open source? |
Beta Was this translation helpful? Give feedback.
-
|
The source code isn't yet released because a lot of people just copy our code into commercial products without knowing what they do, leading to many bricked devices. |
Beta Was this translation helpful? Give feedback.
-
|
Do you have the mediatek source code? I just downloaded it and we have a link in the collaborator chat of my discord, I figured with this tool you'd already have it but if not I can share it with you |
Beta Was this translation helpful? Give feedback.
-
|
https://discord.gg/9AnNHzBtZv feel free to join my server. "The Bootloader Locksmiths" It's very focused on all bootloader unlocking programs and sharing knowledge about anything android, there are a few high level developers in it, everyone is welcome. Mostly LG and Samsung development but we branching out to all models of phones. |
Beta Was this translation helpful? Give feedback.
-
|
Hey bkerler this stylo 6 on windows still has me stumped, I have the stylo 6 in brom and can't get a handshake to work, but the k51 I plug it in holding volume down and Google assist, it first is unsuccessful but you continue to hold the 2 buttons and quickly disconnect and reconnect the cable and it connects, but no matter what except for one time i by having chimera open in the background and sp flash tool flashing the preloader only it connected, ive helped dozens of people use a VM running Linux on windows and just straight up using Linux perform the unlock successfully on the stylo 6. But nobody including me has been successful on windows 10, I believe I may be close to figuring it out but was wondering if you think zadig could help. I've tried libusb and usbdk |
Beta Was this translation helpful? Give feedback.
-
|
if you use usbdk, make sure that the driver is installed correctly. Once the preloader is reconnecting, on some windows, the driver disappears and shows an exclamation mark. Then you just need to reinstall the mtk driver in the device manager and then it should work fine. |
Beta Was this translation helpful? Give feedback.
-
|
I finally got it, the stylo 6's bootloader is unlockable using your tool on windows 10, I need to do a little more testing but I feel like using sp flash tool to flash the preloader at the same time is what helped, and I put the actual dumped preloader in your preloader folder and removed the 2 lower DA files from the loader folder but success, it took about 100 plug in and unplug attempts though before it finally connected and unlocked it. I was gonna make a zip file with all downloads, files, and step by step instructions with the correct commands to root by adding _a or _b to the ends of the file names and share it if that's OK with you. |
Beta Was this translation helpful? Give feedback.
-
Where are these instructions?? I really need a step by step I am not able to even download mtk because I don't understand how to build it |
Beta Was this translation helpful? Give feedback.
-
|
After I install python on windows what mtk files do I need & where do I put them??? |
Beta Was this translation helpful? Give feedback.
-
|
Also what is the exploits package and bypass utility tool, i need both of these I am having a hard time with git hub (Dont laugh) thanks everyone |
Beta Was this translation helpful? Give feedback.
-
|
i'd like to ask where did the idea of mtkclient come from :DD cause its such an amazing tool |
Beta Was this translation helpful? Give feedback.
-
It's something I intended to do for quite some years but never had the time to do it, because I was mostly doing qc research |
Beta Was this translation helpful? Give feedback.
-
|
Hi big fan of the work done. I would like to contribute but I think it's bit too advanced for me lol. I do have a question though... I'm trying to use this on my Xperia XA1 Ultra and I can't get it to recognise the phone. Any suggestions of what to try next? |
Beta Was this translation helpful? Give feedback.
-
|
Sure. The xa1 has a testpoint on the pcb. Short it to ground on connection and it should work. Contributions are always welcome ;) |
Beta Was this translation helpful? Give feedback.
-
|
That's brilliant cheers! Although I was hoping there would be a non intrusive way of getting it to work... Is there a specific reason why mtk doesn't detect the phone? |
Beta Was this translation helpful? Give feedback.
-
|
Any idea if this could work on a Chromebook |
Beta Was this translation helpful? Give feedback.
-
|
Yes as long as it has a mediatek board
…On Tuesday, February 8, 2022, nk8800 ***@***.***> wrote:
Any idea if this could work on a Chromebook
—
Reply to this email directly, view it on GitHub
<#60 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AWRRDKPAXAR222OBBUCYJQLU2EVBXANCNFSM5EKHO2OQ>
.
Triage notifications on the go with GitHub Mobile for iOS
<https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675>
or Android
<https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>.
You are receiving this because you commented.Message ID:
***@***.***>
|
Beta Was this translation helpful? Give feedback.
-
|
Or rather a mediatek chipset
…On Tuesday, February 8, 2022, nk8800 ***@***.***> wrote:
Any idea if this could work on a Chromebook
—
Reply to this email directly, view it on GitHub
<#60 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AWRRDKPAXAR222OBBUCYJQLU2EVBXANCNFSM5EKHO2OQ>
.
Triage notifications on the go with GitHub Mobile for iOS
<https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675>
or Android
<https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>.
You are receiving this because you commented.Message ID:
***@***.***>
|
Beta Was this translation helpful? Give feedback.
-
|
I'm also a researcher and have been trying to figure out where Samsung stores KG or knocks guard information. |
Beta Was this translation helpful? Give feedback.
-
|
Some key stuff is being stored in the anti-rollback rpmb |
Beta Was this translation helpful? Give feedback.
-
|
does not work on mac os |
Beta Was this translation helpful? Give feedback.
-
|
Could someone tell me if the tool can unlock the MT6890 bootloader? Any thoughts? |
Beta Was this translation helpful? Give feedback.
-
|
Short answer: No, and support for it isn't planned right now. |
Beta Was this translation helpful? Give feedback.
-
Is there a long answer to it as well? I would be happy if you could elaborate. I just started to read various resources on the internet. However, you are much more knowledgeable and I'm still not 100% sure if the MT6890 can be unlocked by any app today. If there is no possibility from your point of view, this would mean I have to forget about the idea of playing with the MT6890. I was about to unsolder several parts to gain access to the pin for forcing it to USB bootrom mode. |
Beta Was this translation helpful? Give feedback.
-
|
hi there I am using this project on a daily bases and the script arg is great |
Beta Was this translation helpful? Give feedback.
-
|
How to preloader auth no TP thankyou🙏🙏🙏 |
Beta Was this translation helpful? Give feedback.
-
|
they seem to have changed something with preloader, now i cannot use mtk payload command (handshake failing), i read somewhere it's caused by "preloader auth", others tools (paids) like unlocktools... have preloader auth feature |
Beta Was this translation helpful? Give feedback.
-
|
I can't write rpmb. |
Beta Was this translation helpful? Give feedback.
-
|
device does not show OEM unlock option DEVICE INFO |
Beta Was this translation helpful? Give feedback.
-
|
I have the same device and Ive been trying to find a vbmeta.img to flash so it won't boot loop on this dm-verity corruption screen anymore. Can anyone offer some wisdom? -Chris |
Beta Was this translation helpful? Give feedback.
-
|
May I ask how I can read the hardware key in the MTK device, such as CID SOCID RID FDEKEY? Which partition are they in? And is it encrypted? How can I decrypt them if they are encrypted? |
Beta Was this translation helpful? Give feedback.
-
|
The hardware keys aren't stored in any partition, they are fused in a non-readable efuse in the cpu. Extraction isn't possible with sw, only with expensive hw attacks |
Beta Was this translation helpful? Give feedback.
-
|
ok thank you，but why mtk client can read hardware keys ？maybe use attacks?how can i read hardware key on 1200 or higher? |
Beta Was this translation helpful? Give feedback.
-
|
mtk client can't read hardware keys. hardware keys cannot be extracted. |
Beta Was this translation helpful? Give feedback.
-
|
Is this tool capable of bootloader-unlocking MTK devices that don't have an OEM unlocking or something like that?? |
Beta Was this translation helpful? Give feedback.
-
👋 Welcome!
We’re using Discussions as a place to connect with other members of our community. We hope that you:
build together 💪.
To get started, comment below with an introduction of yourself and tell us about what you do with this community.
Beta Was this translation helpful? Give feedback.
All reactions