Zzz Stuff
153 subscribers
27 photos
4 videos
32 files
21 links
Some useful stuff
So called discussion group: https://t.me/zzzstuffchat
Download Telegram
🔥7
lk-rui2-menu.img
1.2 MB
🔥7
lk-rui2-menu.zip
1.5 MB
5
Minor change
Can also boot into recovery (up + power)
5
𝙰𝚗𝚝𝚊𝚐𝚘𝚗𝚒𝚣𝚣𝚣𝚝
lk-rui2.img
How to flash .img files without recovery flashable?
Go to your existing fastboot and enter the following command

fastboot flash lk lk-rui2.img


Or make recovery flashable by replacing the lk.img in this zip with this (rename lk-rui2.img to lk.img)
🔥4
This media is not supported in your browser
VIEW IN TELEGRAM
Finally 🥳
🔥111🥰1🙏1
𝙰𝚗𝚝𝚊𝚐𝚘𝚗𝚒𝚣𝚣𝚣𝚝
Finally 🥳
Patched LK will be released after some minor patches

Release
3🔥1
RUI3 - Bin | Zip

RUI2 - Bin | Zip

Sadly both LK works only in stock rom for now and custom roms didn't boot becuz of in-rom spoofs. If you can find a signed custom rom without these spoofs your device may also pass strong.

What works?
Both RUI3 & RUI2 patches actually spoofs "bootloader locked" state.


What doesn't work?
RUI3 patch passes strong (as expected) but,
RUI2 patch passes only basic (Even in locked bootloader it passes basic. Most probably becuz of downgrade protection mechanism that prevents users from using older versions after updating to the latest one)


How to flash?
Flash LK using custom recovery or mtk client as your wish (fastboot mode is not preferred). And you MUST wipe personal data else it won't boot.
Wipe md_udc, metadata, userdata if you use mtk client.

Precautions:
Before flashing this LK you must backup all the fw partitions (except userdata, super and cache) for safety purpose. As it may lock your device if done wrong.
You must be aware that if you flash any other LK after flashing this lock spoofed LK, you must do format data and you can't decrypt the existing data (RPMB hash mismatch). Becuz it works in such a way similar to that of real locked device.


How it works?
Normal LK: preloader > reads seccfg (unlocked) > normal LK > pushes unlocked status to RPMB > skips TEE and other security firmware > no root of trust
This lock spoofed LK: preloader > reads seccfg (unlocked) > lock spoofed LK > pushes locked status to RPMB > loads TEE and other security firmware > device gets root of trust


Any issues/bugs:
DM me @antagonizzzt with logs (dump expdb, opporeserve1 and seccfg partitions, put them in a zip and share) You may try at your own risk in custom roms (won't boot btw) if it boots by any miracle tell me.


Last but not least: Thanks @R0rt1z2 for the inspiration
🔥104
lk_rui3_locked.bin
1.3 MB
lk_rui3_locked.zip
1.5 MB
lk_rui2_locked.bin
1.2 MB
lk_rui2_locked.zip
1.5 MB
❤‍🔥11🤣41😁1
Notes:
69% of people never read the notes. If you're from the remaining 31% I appreciate that and you may read the notes here.
🔥62🤷‍♂2💩1
Splash maker kit.zip
36.2 MB
Note: Never flash the autogenerated update.zip file. Edit the updater-script and point out the logo partition properly
lk_rui3_locked_gui.zip
3.3 MB
TLDR; flash the zip from recovery


Yep. It's a "nobody asked" kinda feature. But I like messing up with the LK and so I made it. I just utilised an unused logo show function that is responsible for charger high voltage warning and replaced that particular image (img62.png for rui3 and img4.png for rui2) using logo builder v.1.6 to show Fastboot (GUI - like) menu. You can flash the zip (contains LK and logo) directly from recovery and make use of it. If you're using a custom splash already, make sure to replace that splash manually and flash the new logo. I've added the full kit plus some custom splashes [click to download] required for making your own splash logo or even make your own fastboot splash.

If you're using the lock spoof LK, you must flash this (rui3 only for now cuz nobody is using lock spoof rui2 version so far).

Any suggestions/feedback - dm me @antagonizzzt