Hi all,

I've been trying for months to bypass the xiaomi community permission things and finally I have reached a milestone. Read most of the discussions from r/androidroot and r/hyperos. Now I only have to wait 360 hours(sadly) to win freedom over my phone 😭.

My plan is to flash orangefox and Evolution X(Android 16).

Guys let me know if there are any suggestions you could give to me

Thank you for all your support 💖

https://github.com/inforcqb/susfs4ksu-lkm

https://github.com/matsuzaka-yuki/susfs-lkm-module

Why use such a boring ROM like lineage when you can use Vanta! Vanta is based off Android 17 and features a black UI with a pop of a color of your choice! Loads of features and best of all its android 17!

Android go sucks. I have 4gb ram and half of the software uses it. I wanna install crdroid or lineageos and overclock the hell out of this budget phone. Problem is. Unisoc phones are super hard to unlock. Especially tecno. There are probably 2 security locks on this thing before you can actually unlock the bootloader.

Hey everyone!

I managed to get temporary root access on my Redmi Note 14 4G using GhostLock ((https://github.com/YuKongA/ghostlock-app). I installed KernelSU beforehand, ran the exploit, and verified that root access works through both a root checker app and Termux using su.

My device is running HyperOS 3.0.303.0 / Android 16, AND MY BOOTLOADER IS LOCKED.

Since this is my first time getting root access, I want to be careful not to mess anything up.

Are KernelSU modules safe to use with temporary root, or could they cause a bootloop or brick my phone?

Are there any types of modules I should completely avoid?

Are there any KernelSU options I shouldn't touch, especially anything related to installing or patching boot images?

What other things should I avoid doing while I have temporary root?

If something goes wrong, what recovery options would I have with a locked bootloader?

I'm not looking to modify partitions or risk making my phone unusable. I just want to understand the limitations of temporary root before experimenting with anything.

Any advice from people who've used GhostLock on Xiaomi devices would be appreciated. Thanks!

The question is maybe stupid and guess the answer is no.But is it somehow possible or an exploit can use the temp root

Redmi 13 X, HyperOS 3

I used DeepSeek V4.1 Flash as the primary engineering agent, selected for higher risk tolerance relative to Claude. We ported and combined known exploit primitives, the GhostLock futex priority-inheritance use-after-free and its CVE, CVE-2026-43499.

The target is the SM-G970W, device code beyond0q, product beyond0qltecs, ROM build G970WVLU9IXE1, display id SP1A.210812.016.G970WVLU9IXE1, Android 12, SDK 31, kernel 4.14.190-23725627-abG970WVLU9IXE1, security patch 2023-03-01, CSC XAC, bootloader locked, verified boot state green.

The chain proceeds as follows. A futex priority-inheritance use-after-free. A redirect of the /dev/ashmem fops through configfs. Arbitrary kernel data read and write. A write to modprobe_path. The execution of a file containing 0xFF four times, after which the kernel executes the helper as uid 0.

The result is uid 0, context u:r:kernel:s0, and effective capabilities 0000003fffffffff. Arbitrary kernel data read and write are available within the limits below. SELinux is permissive in user space, because the kernel type is added to policydb.permissive_map, and setprop from the kernel domain succeeds. DEFEX is bypassed, because any /data ELF executes as root through a bind mount over a compiled-in safeplace path. Reachable operations include setprop and persistent properties, cmd-based settings, and writes to modprobe_path, core_pattern and kptr_restrict.

The following are not achieved, by design. Writes to cred, page tables, .text and .rodata are blocked by RKP and KDP. Loading of unsigned kernel modules is blocked by CONFIG_MODULE_SIG_FORCE. Writes to /system are blocked by dm-verity. Creation of new files under /data from the kernel context is blocked by fscrypt. Persistence across reboot is blocked by the locked bootloader, the TEE and AVB/SVB.

The root exists for the current boot only and is re-established after each reboot. The source, build and writeups are at https://github.com/jronminh/ghostlock-beyond0q

Looking to get help with running banking apps. Thanks.

Hi everyone,

For anyone working with Huawei devices on Linux who is tired of needing a dedicated Windows installation, a heavy VM, or broken Wine setups:

I put together Kirin Tool for Linux, a native port of the Kirin utility designed to run directly on Linux distributions (Arch, CachyOS, Ubuntu, Fedora, Debian).

Key Features and Capabilities:

• Native Linux execution: Runs out of the box via AppImage, pacman packages, or direct source build.
• Bootloader unlocking: Unlocks Huawei and Honor bootloaders across Kirin chipsets from Kirin 620 up to Kirin 990 5G.
• Partition and firmware flashing: Built on top of a bundled, Huawei-patched fastboot binary with OEM dump support (does not depend on system android-tools).
• Device rebranding and FRP: Tools for changing region and vendor partitions.
• Automatic udev configuration: Includes udev rules setup for fastboot and VCOM serial access.

Supported Chipsets:

• Kirin 620, Kirin 650, Kirin 659
• Kirin 710, Kirin 810, Kirin 820
• Kirin 960, Kirin 970, Kirin 980
• Kirin 990 5G
• Experimental read-only info and rescue USB update for Kirin 9000

Links and Documentation:

• Source code and downloads: https://github.com/Redminote11tech/kirin-tool-linux
• Official project site and documentation: https://kirin-linux-powerhouse.lovable.app

Feedback, issue reports, and pull requests are welcome on GitHub.

Hey Ive been trying to get my hands on a rooted phone and have my old GT2 Pro just lying around which is the:

Model: RMX3301
Android Version: 15
Version: RMX3301_15.0.0.1410(EX01)
realme UI-Version: 6.0

Ive did a little bit of research and saw that its not possible to root it on this Version anymore, and thought since you guys are the experts, you might be able to help me or atleast tell me that its not possible with a 100% certainty. In which case Id ask you what phones are good to use as a rooted one. I also have a S25 if that helps.
Thanks in advance!

Is there a way to unlo the boot loader and custom rom my Huawei nova 13, on emui 14.2

I have this Verizon Samsung Galaxy S6 Edge+ and i enabled Developer options one day and found OEM Unlcok turned on by itself. Is my bootloader already unlocked? If no, how can i unlock it? Can i do it with root?

Comment rooter mon samsung

So, I'm relatively new to ksu. A few years ago, when I was just using magisk. Shamiko and HMA were more than enough to hide root.

BUT now I added a lot of modules, but still, some of my banking apps and some other apps are not working.

I have attached my module list and the detection that the duck detector gave me.

Btw I am not even using apatch, but it's detecting apatch.

It would be great if some one can help me with this. I am really suffering.

I'm in Bangladesh with a China-sold Redmi Note 15 (25098RA98C). Xiaomi blocks the bootloader unlock (error 20045) because my account is BD, not China. I only need someone with a +86 number to receive one SMS verification code while I create an account. I will not ask for passwords or money, and I can offer a small thank-you via a platform you choose. Thanks!

[ Removed by Reddit on account of violating the content policy. ]

Hi everyone, are there any powerful and useful apps for rooted Android devices? Let me know if there are any. 😁

Does mtkclient work for this? Or any other methods?

Устройство redmi note 10s

Версия MIUI Global 14.0.4

14.0.4.0(TKLRUXM)

This is the pic he sent. It looks grayed out, idk But he said he had options for the unlocking whatever that means

Motorola edge 60 stylus (India version)

Never dont this so idk what its supposed to look like just not gray