Welcome to mtkclient Discussions!

[bkerler]

👋 Welcome!

We’re using Discussions as a place to connect with other members of our community. We hope that you:

• Ask questions you’re wondering about.
• Share ideas.
• Engage with other community members.
• Welcome others and are open-minded. Remember that this is a community we
  build together 💪.

To get started, comment below with an introduction of yourself and tell us about what you do with this community.

[Warlockguitarman]

Hey everyone, I've been working for a handful of months now on the reverse engineering of the universal mtk bootloader unlock, mainly on the LG Stylo 6 and K51 and K61. I finally figured out it is all in the seccfg.img and then others showed up with the same conclusion but with more info than I had until I got the usb logs of chimera doing the unlock, I've not been able to get this tool to properly sign or flash the modified seccfg.bin yet, am i doing something wrong or is it just not implemented for the LG devices

[Warlockguitarman]

The update is amazing, works perfect on the LG K models, I'm gonna test with the Stylo 6 tonight.

[bkerler]

Thanks, hopefully we can get it working with Stylo 6 as well soon

[Warlockguitarman]

That would be great, I have many many stylo 6 users in my Bootloader Locksmiths discord that are growing impatient, but I tell them it's not a phone for novice android users to unlock, it takes some computer know-how and patients, I'm glad it works with the stylo 6 on Linux at least.

[wangzeqiong]

So how does this payload get compiled? Is there open source?

[bkerler]

The source code isn't yet released because a lot of people just copy our code into commercial products without knowing what they do, leading to many bricked devices.

[Warlockguitarman]

Do you have the mediatek source code? I just downloaded it and we have a link in the collaborator chat of my discord, I figured with this tool you'd already have it but if not I can share it with you

[Warlockguitarman]

https://discord.gg/9AnNHzBtZv feel free to join my server. "The Bootloader Locksmiths" It's very focused on all bootloader unlocking programs and sharing knowledge about anything android, there are a few high level developers in it, everyone is welcome. Mostly LG and Samsung development but we branching out to all models of phones.

[Warlockguitarman]

Hey bkerler this stylo 6 on windows still has me stumped, I have the stylo 6 in brom and can't get a handshake to work, but the k51 I plug it in holding volume down and Google assist, it first is unsuccessful but you continue to hold the 2 buttons and quickly disconnect and reconnect the cable and it connects, but no matter what except for one time i by having chimera open in the background and sp flash tool flashing the preloader only it connected, ive helped dozens of people use a VM running Linux on windows and just straight up using Linux perform the unlock successfully on the stylo 6. But nobody including me has been successful on windows 10, I believe I may be close to figuring it out but was wondering if you think zadig could help. I've tried libusb and usbdk

[bkerler]

if you use usbdk, make sure that the driver is installed correctly. Once the preloader is reconnecting, on some windows, the driver disappears and shows an exclamation mark. Then you just need to reinstall the mtk driver in the device manager and then it should work fine.

[Warlockguitarman]

I finally got it, the stylo 6's bootloader is unlockable using your tool on windows 10, I need to do a little more testing but I feel like using sp flash tool to flash the preloader at the same time is what helped, and I put the actual dumped preloader in your preloader folder and removed the 2 lower DA files from the loader folder but success, it took about 100 plug in and unplug attempts though before it finally connected and unlocked it. I was gonna make a zip file with all downloads, files, and step by step instructions with the correct commands to root by adding _a or _b to the ends of the file names and share it if that's OK with you.

[cryptojoe3737]

I finally got it, the stylo 6's bootloader is unlockable using your tool on windows 10, I need to do a little more testing but I feel like using sp flash tool to flash the preloader at the same time is what helped, and I put the actual dumped preloader in your preloader folder and removed the 2 lower DA files from the loader folder but success, it took about 100 plug in and unplug attempts though before it finally connected and unlocked it. I was gonna make a zip file with all downloads, files, and step by step instructions with the correct commands to root by adding _a or _b to the ends of the file names and share it if that's OK with you.

Where are these instructions?? I really need a step by step I am not able to even download mtk because I don't understand how to build it

[cryptojoe3737]

After I install python on windows what mtk files do I need & where do I put them???

[cryptojoe3737]

Also what is the exploits package and bypass utility tool, i need both of these I am having a hard time with git hub (Dont laugh) thanks everyone

[halal-beef]

i'd like to ask where did the idea of mtkclient come from :DD cause its such an amazing tool

[bkerler]

i'd like to ask where did the idea of mtkclient come from :DD cause its such an amazing tool

It's something I intended to do for quite some years but never had the time to do it, because I was mostly doing qc research

[DenofTranquility]

Hi big fan of the work done. I would like to contribute but I think it's bit too advanced for me lol. I do have a question though... I'm trying to use this on my Xperia XA1 Ultra and I can't get it to recognise the phone.
I've tried it in different ways: fastboot mode(blue led), flash mode(green led), plug in after running mtk, plug in before running mtk.
I have also added the vid and different pids depending upon the mode it's in. None of these are working so far...

Any suggestions of what to try next?

[bkerler]

Sure. The xa1 has a testpoint on the pcb. Short it to ground on connection and it should work. Contributions are always welcome ;)

[DenofTranquility]

That's brilliant cheers! Although I was hoping there would be a non intrusive way of getting it to work... Is there a specific reason why mtk doesn't detect the phone?
For example when connected to fastboot the phone receives commands ok so is it because of Sony's S1 protocol that mtk cannot detect it?

[ghost]

Any idea if this could work on a Chromebook

[cryptojoe3737]

Yes as long as it has a mediatek board

…

On Tuesday, February 8, 2022, nk8800 ***@***.***> wrote: Any idea if this could work on a Chromebook — Reply to this email directly, view it on GitHub <#60 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AWRRDKPAXAR222OBBUCYJQLU2EVBXANCNFSM5EKHO2OQ> . Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>. You are receiving this because you commented.Message ID: ***@***.***>

[cryptojoe3737]

Or rather a mediatek chipset

…

On Tuesday, February 8, 2022, nk8800 ***@***.***> wrote: Any idea if this could work on a Chromebook — Reply to this email directly, view it on GitHub <#60 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AWRRDKPAXAR222OBBUCYJQLU2EVBXANCNFSM5EKHO2OQ> . Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>. You are receiving this because you commented.Message ID: ***@***.***>

[kenkit]

I'm also a researcher and have been trying to figure out where Samsung stores KG or knocks guard information.
If anyone knows I'm all ears.

[bkerler]

Some key stuff is being stored in the anti-rollback rpmb

[jhay06]

does not work on mac os
it says no backend

[rosenrot00]

Could someone tell me if the tool can unlock the MT6890 bootloader? Any thoughts?

[bkerler]

Short answer: No, and support for it isn't planned right now.

[rosenrot00]

Short answer: No, and support for it isn't planned right now.

Is there a long answer to it as well? I would be happy if you could elaborate. I just started to read various resources on the internet. However, you are much more knowledgeable and I'm still not 100% sure if the MT6890 can be unlocked by any app today.

If there is no possibility from your point of view, this would mean I have to forget about the idea of playing with the MT6890. I was about to unsolder several parts to gain access to the pin for forcing it to USB bootrom mode.

[oday-ddraad]

hi there I am using this project on a daily bases and the script arg is great
I was hopping if you could add wait or delay function
ex :
printgpt
wait 10 // the code pause for 10 seconds to giv another script time to phrase the output from printgpt arg
arg2
arg3 ....

[boy220]

How to preloader auth no TP thankyou🙏🙏🙏

[R-3MY]

they seem to have changed something with preloader, now i cannot use mtk payload command (handshake failing), i read somewhere it's caused by "preloader auth", others tools (paids) like unlocktools... have preloader auth feature

[boy220]

I can't write rpmb.

[joephtest9097]

device does not show OEM unlock option
I have not run MTK client is it going to work? or I should not waste my time?
also I heard nokia has a special bootloader password is this software going to bypass that

DEVICE INFO
Nokia device C100
Locked bootloader
MediaTek chipset
HMD Global N152DL
Hardware MT6762
CPU arch : aarch64

[chrismichaelmonaghan]

I have the same device and Ive been trying to find a vbmeta.img to flash so it won't boot loop on this dm-verity corruption screen anymore. Can anyone offer some wisdom?

-Chris

[hujinqw]

May I ask how I can read the hardware key in the MTK device, such as CID SOCID RID FDEKEY? Which partition are they in? And is it encrypted? How can I decrypt them if they are encrypted?

[bkerler]

The hardware keys aren't stored in any partition, they are fused in a non-readable efuse in the cpu. Extraction isn't possible with sw, only with expensive hw attacks

[hujinqw]

ok thank you，but why mtk client can read hardware keys ？maybe use attacks?how can i read hardware key on 1200 or higher?

[bkerler]

mtk client can't read hardware keys. hardware keys cannot be extracted.

[moad-M013]

hello

[moad-M013]

hello

[Darian1999]

Is this tool capable of bootloader-unlocking MTK devices that don't have an OEM unlocking or something like that??

[eg200-blip]

Hello Source code is published

[eg200-blip]

Hello Source code is published Is there open source code?

[hujinqw]

what code?

[YourSoul0]

hello! I must be stupid but I can't open this mtk_gui.py
HOWWWW cmd just tells me that there's no mtk_gui.py but there is
[Errno 2] No such file or directory (thats what I get)
Sreenshot of folder

Please help me what am I doing wrong