Giter Site home page Giter Site logo

rmx3474-rooting's Introduction

WARNING: Since May 26-31 2023, this does not seem to work anymore

If you tried to use Realme's "deep testing" apk from here and got that nasty "This phone model does not support deep testing." screen, this script may help you bypass it.

Run it like this, replacing the HHH... with the serial number and the DDD... with IMEI 1 (you can get them both from Settings/About Device/Status):

perl deeptesting-junk.pl pcb 0xHHHHHHHH imei DDDDDDDDDDDDDDD cmd applyLkUnlock

Keep the 0x at the start of the serial number, it's not a typo!
Also notice that --despite the pcb name-- it really is the serial number, not the pcb number from the engineermode app! 1

Do NOT edit the script to change the model or otaVersion to the ones from your phone; that will defeat the very purpose of this script: namely, to submit the unlock request using your serial + imei and a supported phone model.

If the answer is {"resultCode":0,"msg":"SUCCESS"}, continue with

perl deeptesting-junk.pl pcb 0xHHHHHHHH imei DDDDDDDDDDDDDDD cmd checkApproveResult

If the answer is somethink like

{"resultCode":0,"msg":"SUCCESS","data":{"unlockCode":"0345af...lots of hexdigits"}}

(without any warnings) then try running again the deeptesting app on the phone.

That should now work as described in their tutorials, and the app will reboot the phone into fastboot/bootloader mode from where you could unlock the bootloader from your PC with fastboot flashing unlock.

Before running the app, you could also try the script with the actual model and firmware version sent by the app, e.g.:

perl deeptesting-junk.pl pcb 0xHHHHHHHH imei DDDDDDDDDDDDDDD cmd checkApproveResult \
       model RMX3474EEA otaVersion RMX3474_XX.L.XX_XXXX_YYYYMMDDHHMM

This worked for me, at some point in February 2023, on a Realme 9 5G RMX3474, the Android 12 GDPR variant of the firmware.


If instead of that all you get is:

{"resultCode":-1006,"msg":"已成功提交审核,正在审核..."}

(even when retrying the checkApproveResult after a couple of minutes), that means that either their server doesn't work, or they don't accept your serial number or IMEI.

In that case (or if the deeptesting app doesn't work, despite a succesful answer) please open an issue, including the output of:

adb shell pm has-feature oppo.version.exp
adb shell getprop ro.product.name
adb shell getprop ro.product.model
adb shell getprop ro.build.version.ota

I cannot guarantee that that will help, but there still are some leads which could be investigated.


The deeptesting-junk.pl script does nothing else than simulate the https requests performed by the deeptesting app to their lkf.realmemobile.com server; it does not save or send any data anywhere else.

On a debian-like linux system, use apt-get install libwww-perl libcrypt-rijndael-perl to install the modules required by this script.

On windows, the Strawberry Perl distribution includes those modules by default; to prevent the windows console from mangling the output, set its code page to utf-8 with chcp 65001 before running the script.

Footnotes

  1. The app is getting that value from the /proc/oplusVersion/serialID file. The serial number should be an 8-digit hex number; if the serial number has a different format, then this script will probably NOT work, and you will get the -1006 "please wait till the hell freezes over" result code.

rmx3474-rooting's People

Contributors

turistu avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar

rmx3474-rooting's Issues

OPPO step by step guide

Hello, I'm trying to play with your patches for OPPO. I have Find N2 device. So, can you guide me what I need to do?
I patched deep testing app, but I don't know what exactly localhost I need to set. I've tried to set 127.0.0.1:8080, but nothing happened. Thanks in advance

Realme Pad 2

Everything succeeded after submitting application when i run deep test it says
use the new struct
the model name is not match
the model name is not match
verify partition data fail, status = %r
fastboot_unlock_verify fail

Can you make a similar script for pulling OTA updates ?

I have realme 11 4G RMX3636.
I got an android 14 RUI 5 update but I'm afraid that if I installed it I might not be able to find the firmware on the internet for rooting or backup purposes.
So is there a way to download the firmware from realme servers to the laptop using a script like this ?

how do i even do this!

how do i even run the script, do i download all this on my pc or phone!?
and where do i even run it and how!??
sorry im not familiar with this type of stuff mate so its really confusing for me!

Realme 11 Pro+ / RMX3741

The app works and submits everything works
But after taping on start testing link it restart the phone to an unknown state for a fraction of seconds showing some gibberish codes and messages and then reboots to the normal state and won't allow me to unlock the bootloader I attached the only thing I could catch from those messages it was very fast sorry in advance.

IMG_20231104_023501_BURST62

WORKING FOR REALME NARZO 50 PRO

Just did that and got success after 1 min applylkunlock checkapprovl it came success and I checked on deeptest its giving me star deep testing 😃.
Screenshot_2023-10-01-13-04-53-72_5461cd6783b6e8d9f5be0980ff5227f9

Realme 9 5G not unlocking

adb shell pm has-feature oppo.version.exp - true
adb shell getprop ro.product.name - RMX3474RU
adb shell getprop ro.product.model - RMX3474
adb shell getprop ro.build.version.ota - RMX3474_11.C.14_1140_202304031900

Still waiting for 2 days already...

Signature question

Hello again. 😅

This might be a silly question, but...

While I was messing around with the lk. server, I noticed that changing the model also changed the signature part of the key. I assume that the same thing happens on the lkf. server.

Does this mean that if I edit the serial and model encoded in the key and somehow write the key to reserve1, the fastboot test will pass?

Weird output message

it just gave me: "{"resultCode":-1002,"msg":"Ŕ»ąŠť║ň×őńŞŹŠö»Šîüšö│Ŕ»Ě"}"
What the hell??

Contact

Hi turistu i wanted to ask if you have XDA, discord... account for chatting
Have a question about your script for OPPO

Working Realme GT Neo 3

with this working Realme GT Neo 3 :
perl deeptesting-junk.pl pcb 0xHHHHHHHH imei DDDDDDDDDDDDDDD cmd applyLkUnlock

and

perl deeptesting-junk.pl pcb 0xHHHHHHHH imei DDDDDDDDDDDDDDD cmd checkApproveResult \
model RMX3474EEA otaVersion RMX3474_XX.L.XX_XXXX_YYYYMMDDHHMM

Screenshot 2023-12-06 010430-UBL
photo_2023-12-06_01-07-44

"domain is not configured"

Hi, I just wanted to notify you that realmemobile.com has been shut down (permanently?), as it now returns a 'domain is not configured' error and 404 for any request. This includes lk. and lkf. subdomains.

realmemobile.com is back online

RMX3700 (GT Neo 5 SE China ROM)

I get {"resultCode":0,"msg":"SUCCESS","data":{"unlockCode":"adf21d....."}
WARNING!!! dubious reply -- the deeptesting app may not work!!!

adb shell pm has-feature oppo.version.exp
false

adb shell getprop ro.product.name
RMX3700

adb shell getprop ro.product.model
RMX3700

adb shell getprop ro.build.version.ota
RMX3700_11.A.25_0250_202311061652

It might work on RMX 2155? (realme 7 eu)

Hey, i tested this script on realme 7 (rmx2155). In result that no work. The deep testing has worked, but on entering fastboot is showing some text and rebooting. That information on my model: `C:\Users\krolk\Downloads\Oppo_Free_Unlock_v1.0\Oppo_Free_Unlock_v1.0>adb shell pm has-feature oppo.version.exp
true

C:\Users\krolk\Downloads\Oppo_Free_Unlock_v1.0\Oppo_Free_Unlock_v1.0>adb shell getprop ro.product.name
RMX2155EEA

C:\Users\krolk\Downloads\Oppo_Free_Unlock_v1.0\Oppo_Free_Unlock_v1.0>adb shell getprop ro.product.model
RMX2155

C:\Users\krolk\Downloads\Oppo_Free_Unlock_v1.0\Oppo_Free_Unlock_v1.0>
C:\Users\krolk\Downloads\Oppo_Free_Unlock_v1.0\Oppo_Free_Unlock_v1.0>adb shell getprop ro.build.version.ota
RMX2155_11.F.11_3110_202211171628`
Is the any chance to adjust this script to this model? It not a stock soft(i extracted from ofs and flashed from flash tool. That stock rom but idk it a really good made.)

API v2?

Hi, I know it's been a while, but I'm wondering if you could update this script to v2? https://lkf.realmemobile.com/api/v2/ (even the endpoints are the same...).

Realme updated their app, once even with debuggable set to true (I even re-unlocked again. Thanks, realme), and is now using OPPO's system with account tokens. It seems that you've made some progress with oppo.pl, but I'm not sure how complete this is.

its not even applying

D:\Desktop\rmx3474-rooting-main>perl deeptesting-junk.pl pcb 0xSERIAL imei IMEI applyLKUnlock
{"resultCode":0,"msg":"SUCCESS","data":{"applyStatus":0,"lkLockStatus":1}}
Realme 9 pro rmx3472

Are there any other ways?

Since this doesn't work anymore, are there any other ways to unlock the bootloader for the models that get "This phone model does not support deep testing." on the official unlock app?

Realme 9 pro plus not worked

After updates on their server, the script no longer works for our smartphones.

pm has-feature oppo.version.exp: true
ro.product.name: RMX3393RU
ro.product.model: RMX3393
ro.build.version.ota: RMX3393_11.C.12_1120_202305050653

I managed to unlock the bootloader before their updates, but others fail. Deeptest writes "This phone model does not support deep testing." If flash the phone to the Taiwan region where unlocking is supported, then the deeptest passes, but fastboot in bootloader does not unlock. When click "Start the in-depth test," the phone reboot, writes an unlock error and boots back to the system.
The request
perl deeptesting-junk.pl pcb 0xHHHHHHHH imei DDDDDDDDDDDDDDD cmd checkApproveResult
returns this
{"resultCode":-1006,"msg":"已成功提交审核,正在审核..."}

http://videopro.ru/unlock_fail.jpg

use the new struct
the model name is not match
the model name is not match
verify partition data fail, status = %r
fastboot_unlock_verify fail

[ALT] CN Server

@turistu
What if we just change the servers based out on CN? Like Mostly, all phones gets the bootloader unlock in CN Region, and they will have a wait time of 7-10 days. Here, we should submit the request with Region Based Model Code like (eg. RMX3740 - realme 11 Pro Plus CN & RMX3741 - realme 11 Pro Plus IN) So, Submitting the request with just RMX3740, and later on flashing the CN Version will make the job done ig, as we can't use the CN Version for 7-10 days.
IMG_20231025_082246

Got this in CN Bootloader Apk, they are using different one with (/api/v2).

Have a look on it please ; )

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.