Tired of being locked out of the full potential of your brand new AI companion that's really just Android with a Flutter App?
Well, look no further!
The following collection of scripts will do the following:
- Enable "OEM Unlocking"
- Unlock the bootloader (will wipe any and all userdata!)
- Disable AVB
- Flash a userdebug system image of AOSP-13 (with GMS!)
- Rabbit Hole escaped!
You probably need to do nothing, except have a Linux machine with root access (sudo).
If you're using a custom kernel, make sure cdc_acm module is present and loaded.
Please note, currently only amd64/x86_64 systems are supported. It will not work on ARM PCs.
(If you do manage to get it working using box64, I'd be happy to merge it!)
The script currently supports Arch, Debian and Fedora distros.
You will need adb/fastboot drivers, you can grab them straight from Google, XDA or use Koush's driver package:
- Google: https://developer.android.com/studio/run/win-usb
- XDA: https://xdaforums.com/t/official-tool-windows-adb-fastboot-and-drivers-15-seconds-adb-installer-v1-4-3.2588979/
- Koush: https://adb.clockworkmod.com
XDA and Koush's all-in-one package is possibly a bit dated, but will do the job.
You will also require MediaTek Preloader USB VCOM drivers. Now, there are many sources on rather shady websites, but I suggest grabbing them from an OEM's instructions directly, for example:
- Hovatek: https://www.hovatek.com/forum/thread-16640.html
- Teracube: https://downloads.myteracube.com/Drivers/MediaTek_Preloader_USB_VCOM_Drivers_Setup_Signed.zip
- Some random Mediafire source that worked for me: https://www.mediafire.com/file/uoko5a2gnn8vwtc/MT65XX-Preloader-drivers.rar
Windows might also automatically try downloading and installing these drivers, but your mileage may vary.
Okay, lets get down to business.
- Open an admin PowerShell
- Run
Set-ExecutionPolicy unrestricted - Search for "Manage app execution aliases", scroll down till you see 2 entries called "App Installer" - python/python3.exe, disable these.
- Either clone this repository or download it as ZIP
- Extract it, and in the directory you should see a bunch of files including
r1.ps1 - Download and place the system.img file from here.
- Right click in the directory and click "Open in Terminal"
- Run
.\r1.ps1 - You may be asked to turn off and plug in your device multiple times, the script should take care of the rest.
- Either clone this repository or download it as ZIP
- Open a terminal in the directory of extracted files
- Run
./r1.sh - The script may ask you for your sudo permissions several times, so please enter your password
- You may be asked to turn off and plug in your device, the script should take care of the rest.
If the script stalls at any point, please check devmgmt.msc - Device Manager, and select the appropriate driver.
If the script says "Plug in USB" or similar, you may need to select any "Preloader USB VCOM" driver
If the script says "Waiting for device" or similar, you may need to select any "fastboot" driver.
¯_(ツ)_/¯
Upon booting, you may be spammed with notifications saying "Your device isn't certified". This is currently normal, and you can workaround this by following here: https://www.google.com/android/uncertified
Coming soon
- mtkclient
- my cat mocha for moral support
- Everyone else actively developing & reversing MediaTek platforms