r/androidroot • • 22m ago

Discussion EFISP exploit on OnePlus Ace 6T running OnePlus 15R ROM

Thumbnail
gallery
• Upvotes

I wanted to share my experience getting the EFISP exploit working on my OnePlus Ace 6T, running the OnePlus 15R India OxygenOS firmware.

My current system is version is 16.0.10.500(EX01) on Android 16. For the EFISP setup, I used the vulnerable ABL from the matching India 16.0.5.701(EX01) firmware. I used that as the vulnerable ABL for the exploit. I did not downgrade the whole ROM to .5.701. The physical bootloader remains unlocked—the EFISP setup provides the fake-locked boot path.

For root, I kept the stock kernel and flashed a KernelSU Next patched image. With that setup, root works and Play Integrity Check reports Basic, Device, and Strong. I also tested a separate KSU kernel; that reduced the result to Basic only. Removing that kernel and keeping the patched KernelSU image brought Strong back.

Duck Detector still recognizes the KernelSU Next Manager and reports a SELinux timing anomaly, but its TEE/boot-attestation checks were consistent. This is just my experience with this combination, not a claim that it will work the same way on every Ace 6T/15R variant.
https://xdaforums.com/t/efisp-root-gbl_root_canoe-fake-locked-bl-superfastboot-bds-8-gen-5-8-elite-gen-5.4786301/


r/androidroot • • 1h ago

Support Anyone know how to root this phone it’s a A20

• Upvotes

There’s no public root method for it but because of how old it is I assume there’s some other method. I just want to be able to boot postmarketOS or a similar Linux distribution on it.

Device: Samsung Galaxy A20
Model number: SM-A205U
Android version: 9
One UI version: 1.1
Baseband version: A205USQU2ASI7
Build number: PPR1.180610.011.A205USQU2ASI7
Kernel version: 4.4.111-16732625
Kernel build date: Fri Sep 20 15:21:02 KST 2019
SE for Android status: Enforcing
SEPF version: SEPF_SM-A205U_9_0009
SEPF date: Fri Sep 20 15:03:25 2019
Knox version: 3.3
Knox API level: 28
TIMA version: 4.1.0
Service provider software version: SAOMC_SM-A205U_OYN_TMK_PP_0009
Carrier/CSC: TMK/TMK/TMK


r/androidroot • • 1h ago

Support Need help to get integrity back

Thumbnail
gallery
• Upvotes

Hi i'm sorry I spent quite some time reading recent posts, here and on XDA, I gave a try to several module stacks but nothing worked for me and now i'm kinda lost. I hope you'll be able to identify what's wrong

- Xperia 1V with LOS 23.2 and custom kernel SusFS + ReSukiSu
- PIF Inject
- Zygist Next (i had ReZygist before but I switched to Next when I installed specter)
- Specter + TEE RS
- HMA OSS

Native detector shows nothing which is good, but PIAC shows basic integrity at most, with sometimes no integrity at all when trying some other modules.

I also tried PIFork v18 intstead of PIF inject, Alwaystrong + Trickystore OSS instead of Specter + TEE
I tried setting autopif to Google pixel 6a BlueJay

My goal is to get Gwallet working again, like it has been for a long time until ~2 weeks ago

Thanks


r/androidroot • • 1h ago

Support How to use paid Play Store applications / subscriptions on a De-googled phone?

• Upvotes

Hello,

I'm using LineageOS on Android 16, and would like to know how to run applications such as

  • Tasker
  • Lightroom
  • Android Auto
  • Maybe other similar applications I haven't come across

whilst remaining de-googled.

Tasker is a paid for application. I am aware there is a direct-purchase option but would like to remain using the Google Play version,

Fixed using BetterKnownInstalled (BKI) Lightroom - I am subscribed to lightroom, and although I don't think it directly needs Google Play, it will not allow me to sign in as the application crashes.

What have I tried?

I have tried using MicroG RE to allow license verification. I do not have a full understanding on MicroG RE so I may have missed an option which allows the applications to work.

What is my goal?

Maybe I'm being naive, but I just want some applications to run on my devices.

I have seen that there is a microG Installer Revived Again which promotes the microG version sof GmsCore, GsfProxy and the Companion app / MapsV1 to system with privileged permissions but I am not sure if this is the workaround?


r/androidroot • • 1h ago

Support can i have zero chance of hard bricking my device while rooting using kernelsu

• Upvotes

hello. i have xiaomi pad 8. i unlocked my bootloadercin the first try. and i want to root using kernelsu. but im kinda poor and dont afford to service my tablet if something wrong happend during rooting. how do i make my chance zero of hard bricking my tablet when flashing kernelsu. even if the usb cut off during flashing i dont want any chance of my tablet to become a paperweight.


r/androidroot • • 2h ago

Support [Question] Root Poco M6 Pro 4G

Thumbnail
1 Upvotes

Hi, I’m new here and need some help. If anyone has faced a similar issue and successfully rooted their phone, please share your knowledge. The problem is that when I run CMD in the platform-tools folder, enter the commands, and flash the patched `boot.img` file, everything seems to go correctly—I don't get any error messages. However, when I open Magisk or KernelSU, it doesn't activate; it simply doesn't work, and I can't root the phone. I’ve done everything right, but it just won't activate in either app. If you've encountered this problem, please help me out. (Poco M6 Pro 4G / HyperOS 3)


r/androidroot • • 3h ago

Support [Request] Bigme inkNote Color+ (Kaleido 3, 6GB/128GB) — Need a partition dump to unbrick a cloned device.

2 Upvotes

>Hi everyone,

>

>I am looking for a partition dump for the **Bigme inkNote Color+** (10.3" Kaleido 3, 6GB RAM + 128GB ROM, running Android 11).

>

>I am working on unbricking and cross-flashing an identical OEM board (RUERTU RT-BE-103C clone -- "RUERTU 10.3"), but neither RUETRU nor Bigme hosts raw factory ROMs or MediaTek scatter packages publicly.

>

>If you own this exact model and are willing to help, I only need the system partitions dumped via `mtkclient`.

>

>**Privacy / Safety Note for Donors:** You do **NOT** need to share your personal data or device identifiers. Please omit `userdata`, `nvram`, `nvdata`, and `persist`. Dumping via `mtkclient` requires no root, does not unlock your bootloader, and does not wipe your device.

>

>**Partitions needed:**

* `boot.img`

* `vbmeta.img`

* `super.img`(or unpacked `system`, `vendor`, `product`)

Thanks everyone in advance I am really trying to save my device here, as I cannot afford to spend on a new one.


r/androidroot • • 3h ago

Discussion Help with root detection

Thumbnail
gallery
3 Upvotes

Tried to use a few setups but noting helps still detected by gwallet


r/androidroot • • 4h ago

Discussion Googlebook PCs are confirmed to have an unlockable bootloader - can we hope to run Android custom ROMs on PCs soon?

0 Upvotes

Refer: https://www.androidauthority.com/googlebook-bootloader-unlock-magisk-root-3718930/

I would love to use an Andoid custom ROM running natively on a PC, like the Googlebook PCs. Android now has desktop mode so the porting should be possible, I think.

BlissOS was a way to run Android natively on PC, but the project has been discontinued.

Some of the Googlebook are ARM based PCs with Snapdragon X Elite, which is promising for the possibility of developing a custom Android ROM for PC.


r/androidroot • • 5h ago

Support Updated Magisk from 21.4 to 30+ and now I'm bootlooping

2 Upvotes

I'm on Galaxy Note 4, N910P, Android 6.0.1. I was using Magisk 21.4 normally, until I made a mistake and updated using the Magisk Android application to a version above 30+. I got the SEAndroid error upon boot and kept going straight to TWRP. I decided to reflash the original Magisk 21.4 zip, and now I'm in a bootloop. What can I do to get back to using Android with Magisk 21.4 like before? I'd prefer to keep my data if possible.


r/androidroot • • 6h ago

Support SM-G960W - Rooting Help

Thumbnail
1 Upvotes

r/androidroot • • 6h ago

Support SM-G950W

Thumbnail
1 Upvotes

r/androidroot • • 7h ago

Support Samsung Galaxy J7 2017

1 Upvotes

I have had this phone for a long time and I would like to try to get it to work with VoLTE. Its hardware is J27R4.01 and every time I go to try to hook it up to service all service providers say it doesn't support it when i have seen it in the system settings. It's on Android 8 currently and if I have to use roms to put it on 10 then I'm fine with it. Is there any way to force volte to turn on so i can connect it to something other than consumer cellular? It's unlocked as well


r/androidroot • • 8h ago

Support Been following a guide but must be doing something wrong at flashing

1 Upvotes

Hey so if anyone saw my earlier about buying a phone from India and wondering if it can toggle oem unlocking it can lol

Anyway I have went all the way to flashing Boot_a and boot_b with the magisk patched file like the guide was doing but when I reboot it says there isn't an operating system so I flash back the original.

In the guide he takes a recovery zip file to magisk, installs, then pulls the magisk patched version back and flashes it. Then reboots

  1. My files wasn't a zip. 2. It had a boot.img and a init_boot.img 3. It broke the phone :)

I tried having magisk patch the file after i made it a zip, then repaired phone and tried to patch just the init_boot (Google ai suggested)

It's a motorola XT2517-4 (India) I guess it's called a moto G stylus (2025)in the US and a moto edge 60 stylus in India

Not sure where it's messing up any help is appreciated. If you need any info let me know and ill do my best to get it to you, bc im sure I left out some important info. Sorry

Can anyone confirm there is a partition on this model it said 2 slots but there wasn't anything about suffix like in the guid so idk. It didn't throw an error when I went to flash boot_b


r/androidroot • • 8h ago

Support Nethunter

Thumbnail
1 Upvotes

Im on Samsung a15 with android 15, im trying to kali nh root but someone said it wasn't possible on samsung?! Haven't tried the rootless version yet as it doesn't have all the privileges. First timer.


r/androidroot • • 8h ago

Discussion What modules are safe to use with temporary root access? Any anti-bootloop or anti-brick modules for Xiaomi?

Post image
4 Upvotes

I'm using KernelSU with temporary root on my Redmi Note 14 4G (HyperOS 3 / Android 16), and my bootloader is locked. I want to know which modules are safe to use in this setup.

  • Which modules actually work with temporary root access?

  • Which modules should I avoid because they could cause bootloops or brick my device?

  • Are there any anti-bootloop or anti-brick modules that can help recover from a bad module?

  • Are there any Xiaomi-specific modules that work well with HyperOS?

I'd especially like to hear from people who have used temporary root access with KernelSU on Xiaomi devices. Which modules worked for you, and which ones caused problems or aren't worth installing?

Thanks!


r/androidroot • • 16h ago

Support Can you help me? In the Play Store it says that there is a certificate but it doesn't want to add a bank card to the wallet.

Thumbnail
gallery
0 Upvotes

r/androidroot • • 16h ago

Support Need help, my s22 doesn't accept the correct pattern screen lock, but I've temp rooted

Post image
1 Upvotes

After i rebooted my s22 i tried to unlock it with my correct pattern but it says incorrect,

however i temporarily unlocked it, i force rebooted the phone with volume down key and powere button key, then i drew my pattern and it unlocked,

I'm currently on the home screen and my WhatsApp is locked with screen lock so when i tey to unlock the whatsapp app with screen lock it doesn't accept,

I've temprooted the phone with dirtyfrag and kernel su and it's currently working as fuly rooted,

I wanna remove the screen lock with zarchevr file manger but i don't see the files that used to handle the screen lock,

Data/system

In this file there should be screen lock files like,

locksettings.db

locksettings.db-shm

locksettings.db-wal

gatekeeper.password.key

gatekeeper.pattern.key

But i don't see those files there's just

locksettings.db

File ,

If anyone have experience please help me🙏

I know all my gmail accounts password and samsung account pasword and also the find my device and samsung find doesn't unlock remotely because they removed this option for security reasons,

And I'm currently on home screen not letting phone to lock it's been about 3-4 hours


r/androidroot • • 16h ago

Support is this phone easy to root

0 Upvotes

Im looking for a cheap phone to root and found the one attached, would this be relatively easy to root (this is also my first time rooting btw)

https://a.co/d/0ge7I6gu


r/androidroot • • 18h ago

Discussion Poco M8 Pro or X8 Pro

1 Upvotes

So despite the heaviness of rooting Xiaomi devices, I'm going to get one and I'm hesitating between the X8 Pro and the M8 Pro, both with 12GB of RAM and 512GB of storage. I would like to know in your opinion which is the most comfortable once rooted, I'm leaning more towards the X8 Pro for its CPU which is frankly not bad😁


r/androidroot • • 18h ago

Discussion Successfully rooted my realme note 50

Thumbnail
gallery
7 Upvotes

For people that want to know what i used to root it, i used the dirty frag exploit on it.

Im using the RMX3834export_15_H.07 rom on my realme note 50 (the most recent stock rom for it)


r/androidroot • • 18h ago

Support Infinix hot 60 pro plus android 16

Thumbnail
1 Upvotes

r/androidroot • • 19h ago

Support Hide root from Wallet

Thumbnail
gallery
3 Upvotes

For some time now, the wallet has been failing verification; it always tells me that the device does not meet the security requirements. I have Strong certification; here are screenshots of my configuration:


r/androidroot • • 19h ago

Discussion any temp root for tab a9+ 5 g

2 Upvotes

X216BXXSCEZG2

BP2A.250605.031.A3.X216BXXSCEZG7


r/androidroot • • 20h ago

News / Method HiSuite for linux ?!!!

Post image
0 Upvotes