Related
UPDATE Thanks to @thjubeck for testing this, it seems that this userdebug kernel actually works on all devices running antirollback v0 and running Marshmallow! I only have the Sprint variant, so be careful!!! Enjoy root guys
A bit of a disclaimer is that this is root through adb. dm-verity is off and system is rw, so you can install apps as root, get a hotspot hack to work, and anything through a shell but I am having trouble installing SuperSU. Please try yourself though as I am probably doing something wrong! If there are any bugs you have found please post them, as this phone is my backup and not my daily driver.
So okay, here is the guide:
PLEASE MAKE SURE YOU HAVE A WAY TO GO BACK INCASE THINGS GO WRONG. DO NOT ATTEMPT TO ROOT THIS WITHOUT HAVING A KDZ/TOT FOR YOUR DEVICE THAT YOU KNOW YOU CAN FLASH BACK TO. I AM NOT RESPONSIBLE FOR THINGS GOING WRONG.
1. Download this zip
2. Install Terminal Emulator from the Play Store
(This is modified from the V20 bootloader unlock, HUGE thanks to all of those devs for sharing their dirtysanta code with me and allowing me to modify it!)
3. Copy all the files from inside the "dirtysanta-boot" and paste it into your active ADB directory
4. Plug your device into the computer and verify ADB is working. Then;
On Windows, double-click "RUNMEFIRST.bat, DO NOT CLOSE THE LOG WINDOW THAT OPENS, then double-click "Step1.bat"
On Linux/MacOS ("#" Signifies a comment below)
Code:
./RUNMEFIRST.sh
# OR
bash ./RUNMEFIRST.sh
Open a Separate Terminal next to the RUNMEFIRST terminal, then type:
Code:
./Step1.sh
# OR
bash ./Step1.sh
(When you run The sh or Bat files there may be a Permission denied error on 2 files: Flatland and Flatland64. This is normal and nothing to worry about.)
5. Wait for a shell prompt, then type (or copy):
Code:
run-as con
chmod 0777 /storage/emulated/0/*
6. Open Up Terminal Emulator on your phone
Type:
Code:
id
Check if context is "Untrusted_app". If it is then we're good to go!
7. Type into Terminal Emulator:
Code:
applypatch /system/bin/atd /storage/emulated/0/dirtysanta
8. Watch the RUNMEFIRST dialog for when it tells you to run Step2 (we don't have a step 2)
9. Reboot the phone into recovery mode and wipe data again
BOOM! Now the you have a userdebug kernel running on a userdebug system Time to turn off dm-verity, otherwise you will have a red triangle on reboot (Your device is corrupt. It cannot be trusted and may not boot) and cannot edit /system.
1. Finish setting up the phone and enable USB Debugging in developer options (you should know how to do this)
2. Plug the phone into your computer, and run these commands
Code:
adb root
adb disable-verity
3. Reboot the phone
4. Run
Code:
adb root
adb shell
mount -o rw,remount,rw /system
Bam. Enjoy your FULL UNLIMITED root shell with system set to rw and dm-verity off!!! Just make sure to type "adb root" before "adb shell"
If you ever want to go back, just flash your stock TOT/KDZ with UPPERCUT and you'll be all good!
BUY ME A PIZZA FOR THE HARD WORK: BTC 197ct1uti4zutJu76bYAW51H8NZ6zXeoEV PayPal: [email protected]
THANKS:
@tungkick for the userdebug boot and helping me with the ZV4 TOTs
@autoprime for UPPERCUT
@me2151 @glitschi667 @EMSpilot @elliwigy for their AMAZING work on the V20 and sharing their code!
Thanks for the mention. Since you didnt say anything else i thought you bricked. Glad it works for you guys
I'm assuming this won't work if I'm on nougat, is that right?
fenguepay said:
I'm assuming this won't work if I'm on nougat, is that right?
Click to expand...
Click to collapse
Nougat is the latest update (ZV8 I think), this only works on ZV4.
Glad I stayed on ZV3 since July.
Happy this is out now. There was some sass going on in another thread but it seems there's still some civility among us. I'll check this out and report anything of note. I'm most interested in a viable hotspot mod, so if I can figure out how to modify the APN settings I'll be quite happy. Will donate as soon as I figure out how.
SilverZero said:
Nougat is the latest update (ZV8 I think), this only works on ZV4.
Glad I stayed on ZV3 since July.
Happy this is out now. There was some sass going on in another thread but it seems there's still some civility among us. I'll check this out and report anything of note. I'm most interested in a viable hotspot mod, so if I can figure out how to modify the APN settings I'll be quite happy. Will donate as soon as I figure out how.
Click to expand...
Click to collapse
Lucky you! Make sure you flash the stock ZV4 TOT before trying this
An unlimited Hotspot is definitely possible. I'm on mobile right now but I'll see what I can do when I get home.
Honestly Annoying said:
Lucky you! Make sure you flash the stock ZV4 TOT before trying this
An unlimited Hotspot is definitely possible. I'm on mobile right now but I'll see what I can do when I get home.
Click to expand...
Click to collapse
I'd be first in line to give this a whirl in the real world but I'm leaving in the morning for a week or so on the road. Maybe I'll be able to do some playing around at the hotel. Hotspot is the brass ring, adblock is a close second. I've survived this long, so hopefully a few days of testing and squashing bugs won't kill me. I do want to be of service to the community if possible. It will be interesting to see how these new developments affect the development of the various G5 variants.
My apologies if I insinuated that I'm at all peeved with anybody working on this device or just offering encouragement. I know there are some conflicting personalities in the mix right now, so I hope everybody benefits and sees the value in what you're potentially onto with this.
SilverZero said:
I'd be first in line to give this a whirl in the real world but I'm leaving in the morning for a week or so on the road. Maybe I'll be able to do some playing around at the hotel. Hotspot is the brass ring, adblock is a close second. I've survived this long, so hopefully a few days of testing and squashing bugs won't kill me. I do want to be of service to the community if possible. It will be interesting to see how these new developments affect the development of the various G5 variants.
My apologies if I insinuated that I'm at all peeved with anybody working on this device or just offering encouragement. I know there are some conflicting personalities in the mix right now, so I hope everybody benefits and sees the value in what you're potentially onto with this.
Click to expand...
Click to collapse
I will absolutely be in touch with you for an adblock and hotspot hack, PM me your Skype
I think I found a way to get the hotspot hack, waiting for a tester...
I'm on z5, can I still follow this guide on the dot and flash z4?
btw, gratz and great job on your achievement!
bigid said:
I'm on z5, can I still follow this guide on the dot and flash z4?
btw, gratz and great job on your achievement!
Click to expand...
Click to collapse
Thank you!
Unfortunately ZV5 has antirollback enabled, so you can't downgrade to ZV4. If you really want to try it you can attempt to flash the ZV4 userdebug boot without the userdebug system (just follow the guide past the TOT steps) but I believe it will bootloop. I have not personally tried this so I have no way of saying for sure, but it'll probably bootloop.
Honestly your name does you justice! Thanks for your hard work
So bummed that I updated...
Sent from my LGLS992 using XDA-Developers mobile app
Honestly Annoying said:
Thank you!
Unfortunately ZV5 has antirollback enabled, so you can't downgrade to ZV4. If you really want to try it you can attempt to flash the ZV4 userdebug boot without the userdebug system (just follow the guide past the TOT steps) but I believe it will bootloop. I have not personally tried this so I have no way of saying for sure, but it'll probably bootloop.
Click to expand...
Click to collapse
so should i just update to nougat now?
EDIT: No items in the Google Drive folder? Am I missing something?
I'm definitely hoping to spend some time testing this out, but it's bad timing that I just got the family out on vacation. Hopefully I'll spend some time tonight or tomorrow, and quite likely after the 25th I'll have some time.
Meanwhile, I've got to figure out a solution to getting ADB working on my MacBook. It's EFI locked so I can't install the full SDK, and my windows VM isn't working either. Since I'm pretty sure I need a windows environment that will be my first hurdle. I wish I could sit down right now and just try it out for the community's benefit, but hopefully we'll get there soon.
Man I feel like buying a G5 just to try this on nougat! Does this also unlock the boot loader or allow twrp to be flashed?
chippinganimal said:
Man I feel like buying a G5 just to try this on nougat! Does this also unlock the boot loader or allow twrp to be flashed?
Click to expand...
Click to collapse
It only works if you still have version ZV4 or lower, so forget about nougat. At best you'll be rooted on ZV4 forever with a wonky system.
It will not unlock the bootloader since it's just a user-debug upgrade for tinkerers, but nonetheless useful to some.
Wait. Where did you get the userdebug build for G5?
Plug your device into the computer and verify ADB is working
Could this be a means for (or a step closer to) getting full root, or is that basically off the table?
Sent from my LGLS992 using XDA-Developers mobile app
Error: Error Code = 0x2000 when trying to flash.
So Ive been trying to root v20 for some time now. Ive followed instructions up to point of step 4. I type in terminal emulator applypatch /system/bin/atd /storage/emulated/0/dirtysanta. Nothing happens
Next it reads
Filenames may be of the form
MTD:<partition>:<len_1>:<sha1_1>:<len_2>:<sha1_2>:...
to specify reading from or writing to an MTD partition.
Have I done something wrong? Has something changed? any help would be greatly appreciated.
You are patched. No root for you.
ZV5 or earlier only.
Lg v20 vs995
So I"ve been trying to root v20 for some time now. I've followed instructions up to point of step 4. I type in terminal emulator applypatch /system/bin/atd /storage/emulated/0/dirtysanta. Nothing happens
Next it reads
Filenames may be of the form
MTD:<partition>:<len_1>:<sha1_1>:<len_2>:<sha1_2>: ...
to specify reading from or writing to an MTD partition.
I've tried it alot of times again and again but it says same all the time
Please help me
Roll back to a version that has the December 2016 security patch or earlier. There are several threads around here that tell you what version you need to be on (heck I wrote one of them) -- search is your friend.
-- Brian
runningnak3d said:
Roll back to a version that has the December 2016 security patch or earlier. There are several threads around here that tell you what version you need to be on (heck I wrote one of them) -- search is your friend.
-- Brian
Click to expand...
Click to collapse
Can I roll back from ZVD? I SEARCHE AND COULDN'T FIND ANYTHING. Multiple sources have told me its impossible.
rayulove69 said:
Can I roll back from ZVD? I SEARCHE AND COULDN'T FIND ANYTHING. Multiple sources have told me its impossible.
Click to expand...
Click to collapse
No you can't roll back and if you try anyway you will brick. Theres basically no hope of post zv7 ls997 getting rooted ever
runningnak3d said:
It has been confirmed that If you have the engineering bootloader, AND have a fusing device (which AFAIK all LS997 are), AND install firmware that is ARB 1 or greater, it will brick your phone.
If you are ARB 1 or greater, and install the eng. bootloader -- brick.
When I was doing testing on ARB and the engineering bootloader, I was doing it on a non-fusing device, so my results are null and void.
So, we need a method of unlocking the production bootloader -- and there is, just not the LS997 aboot. It would require flashing either the H915 or US996 aboot, and you can't do that due to ARB.
Unless an engineering aboot leaks that is ARB 1 or an engineering boot leaks that has dm-verity disabled, or a flaw is found in the current aboot, I do not see the LS997 getting root.
EDIT: not trying to keep too much hope alive, but if when Oreo is released, they increment ARB on either the H915 or US996 and DON'T increment it on the LS997, then you would be able to flash either aboot and root....
-- Brian
Click to expand...
Click to collapse
Trying with ADB but i'm not able to even get passed the first step, here's my cli:
C:\adb>fastboot devices
C:\adb>adb reboot bootloader
* daemon not running. starting it now on port 5037 *
* daemon started successfully *
C:\adb>fastboot devices
LGH9189ef6091f fastboot
C:\adb>adb push dirtycow /data/local/tmp
error: device '(null)' not found
C:\adb>
C:\adb>adb push twrp.img /sd/twrp.img
error: device '(null)' not found
C:\adb>fastboot devices
LGH9189ef6091f fastboot
C:\adb>adb devices
List of devices attached
C:\adb>fastboot devices
LGH9189ef6091f fastboot
C:\adb>adb push dirtycow /data/local/tmp
error: device '(null)' not found
C:\adb>
Anyone have any thoughts? Any easier way to install twrp?
Yeah.... Don't!!! Read forums.
emeianoite said:
Trying with ADB but i'm not able to even get passed the first step,
...
Anyone have any thoughts? Any easier way to install twrp?
Click to expand...
Click to collapse
You're lucky you didn't brick your phone. Last version able to successfully install a recovery/root was update 10p IIRC.
Keep an eye on this thread and keep your fingers crossed. It's the most promising work I'm aware of to crack a V20. It also happens to be a fascinating read - so I'd recommend starting at the beginning.
:good:
Cheers!
Actually 10j was the last version that was rootable with DirtySanta, and 10k was last version that was ARB 0 so you could roll back to 10j. 10p was the first version that was ARB 1 so you can't roll back to 10j on 10p or higher.
-- Brian
I'll check the thread, is there a way to roll back or am i stuck? I guess I can re oem lock the phone. I have the message about not being able to verify bootloader but it boots just fine.
I tend to have good luck not bricking devices.
storm68 said:
Yeah.... Don't!!! Read forums.
Click to expand...
Click to collapse
Lol I know. Reading is hard these days
Sent from my LG V20 using XDA Labs
BROKEN1981 said:
Lol I know. Reading is hard these days
Sent from my LG V20 using XDA Labs
Click to expand...
Click to collapse
That's a little condescending. Beating a dead horse there, bud.
SMTB1963 said:
You're lucky you didn't brick your phone. Last version able to successfully install a recovery/root was update 10p IIRC.
Keep an eye on this thread and keep your fingers crossed. It's the most promising work I'm aware of to crack a V20. It also happens to be a fascinating read - so I'd recommend starting at the beginning.
:good:
Cheers!
Click to expand...
Click to collapse
Wait, i am so confused on the LG V20 side of things, so i would love it if someone took the time to reply back, but right now i am on H91810q (T-Mobile), does that mean i can successfully install TWRP with no issues ? (I have not done the Dirty Cow Exploit nor have i rooted yet, Still waiting for it to possibly happen on the update i am on.
Another thing i am confused on is finding the right answer as to whether or not the update that i have currently on my phone (H91810q, T-Mobile) has ARB implemented ( AKA Anti-Roll Back)
Thank you if you have replied, if not it doesn't matter.
Take Care : )
ROOT67 said:
Wait, i am so confused on the LG V20 side of things, so i would love it if someone took the time to reply back, but right now i am on H91810q (T-Mobile), does that mean i can successfully install TWRP with no issues ? (I have not done the Dirty Cow Exploit nor have i rooted yet, Still waiting for it to possibly happen on the update i am on.
Click to expand...
Click to collapse
I think runningnak3d summed up the situation pretty succinctly a couple of posts ago, but I'll try once again.
There is no known way to install twrp or gain root on any H918 running update 10p or later.
(hope I didn't screw that up this time lol)
ROOT67 said:
Another thing i am confused on is finding the right answer as to whether or not the update that i have currently on my phone (H91810q, T-Mobile) has ARB implemented ( AKA Anti-Roll Back)
Click to expand...
Click to collapse
I believe 10q has ARB implemented.
runningnak3d is working on a method that looks pretty promising, AFAICT. Watch his thread and hope he's successful!
MY KID UPDATED MY PHOEN THIS WEEK.... I'm in 10t, do I remove her from this world now or later?
Planning to get a refurbed V20 H910.
Can this phone be rooted and bootloader unlocked and TWRP installed??
I read something that this ARB will prevent some or all of these things.
Even having read every thing I am still VERY confused. Thanks.
boowho said:
Planning to get a refurbed V20 H910.
Can this phone be rooted and bootloader unlocked and TWRP installed??
I read something that this ARB will prevent some or all of these things.
Even having read every thing I am still VERY confused. Thanks.
Click to expand...
Click to collapse
Start here - https://r.tapatalk.com/shareLink?ur...share_tid=3664500&share_fid=3793&share_type=t
All H910 are ARB - 0
Sent from my PH-1 using Tapatalk
ARB is LG's implementation of Anti-rollback protection. At a low level, it involves blowing a fuse on the SoC (not as violent as it sounds) when x software version is installed, preventing rollback to an earlier version.
For one or two variants, going past stock v10p (I think) triggers ARB to be incremented to 1 from 0, meaning they can't go back to any stock version earlier than said 10p or a custom ROM that's aware of ARB being tripped.
The linked thread above is a good place to start.
clsA said:
Start here - https://r.tapatalk.com/shareLink?ur...share_tid=3664500&share_fid=3793&share_type=t
All H910 are ARB - 0
Sent from my PH-1 using Tapatalk
Click to expand...
Click to collapse
ALL H910 ARB = 0 Does that mean I don't have to be concerned with it? I may want to UN-root and relock the BL in the future?
clsA said:
Start here - https://r.tapatalk.com/shareLink?ur...share_tid=3664500&share_fid=3793&share_type=t
All H910 are ARB - 0
Sent from my PH-1 using Tapatalk
Click to expand...
Click to collapse
Redline said:
ARB is LG's implementation of Anti-rollback protection. At a low level, it involves blowing a fuse on the SoC (not as violent as it sounds) when x software version is installed, preventing rollback to an earlier version.
For one or two variants, going past stock v10p (I think) triggers ARB to be incremented to 1 from 0, meaning they can't go back to any stock version earlier than said 10p or a custom ROM that's aware of ARB being tripped.
The linked thread above is a good place to start.
Click to expand...
Click to collapse
Thanks.
boowho said:
ALL H910 ARB = 0 Does that mean I don't have to be concerned with it? I may want to UN-root and relock the BL in the future?
Click to expand...
Click to collapse
No problems.
Correct. No need to worry about it on any ARB = 0 variants.
Redline said:
No problems.
Correct. No need to worry about it on any ARB = 0 variants.
Click to expand...
Click to collapse
Thanks.
Still issues.
The phone arrived today and though it was advertised as UNLOCKED, it is AT&T branded.
As a result of AT&T fooling further with their mods I cannot get into recovery mode using the normal VOL DN + POWER button combination.
Any way to get past the AT&T crap so as to unlock BL, install TWRP and root this phone??
Or am I just screwed??
Boowho??
boowho said:
The phone arrived today and though it was advertised as UNLOCKED, it is AT&T branded.
As a result of AT&T fooling further with their mods I cannot get into recovery mode using the normal VOL DN + POWER button combination.
Any way to get past the AT&T crap so as to unlock BL, install TWRP and root this phone??
Or am I just screwed??
Boowho??
Click to expand...
Click to collapse
Doing a quick search online would tell you the H910 is an AT&T branded V20 variant. You'd want something like the H990DS or the US996 which is unlocked for the US market (someone correct me if I'm wrong with this one).
Doing a quick search on the V20 forums will show you multiple guides to get started if you intend to stick with the H910.
Specifically, the DirtySanta bootloader unlock & root guide is what I'd recommend.
Following that will get you on the road to a custom ROM.
If ADB Debugging is enabled and you have ADB installed on your PC, you can plug the phone in and do 'adb reboot recovery' from your computer which will reboot the phone to recovery.
Redline said:
Doing a quick search online would tell you the H910 is an AT&T branded V20 variant. You'd want something like the H990DS or the US996 which is unlocked for the US market (someone correct me if I'm wrong with this one).
Doing a quick search on the V20 forums will show you multiple guides to get started if you intend to stick with the H910.
Specifically, the DirtySanta bootloader unlock & root guide is what I'd recommend.
Following that will get you on the road to a custom ROM.
If ADB Debugging is enabled and you have ADB installed on your PC, you can plug the phone in and do 'adb reboot recovery' from your computer which will reboot the phone to recovery.
Click to expand...
Click to collapse
Dirty santa will only work if his security patch level is prior to Dec 2016, which is doubtful, and you can't downgrade as there are no kdz for the 910
Sent from my LG-H910 using XDA Labs
Well, even though I thought I did, I apparently didn't do my homework well enough.
I can get it into Download mode, but then it just sits there expecting an update. I assume LGUP or something similar needs to be on my PC, right??
Maybe I can salvage this thing yet.
But maybe the EBay seller may be willing for a return; hopefully. Either way I'd be happy.
Changed to US996
I've been able to swap the H910 for a US996. I found it interesting that the bootloader and download screens were exactly the same, since I thought this lock out was done by AT&T.
But I have the same question as before. Will the US996 phone have the ARB = 0 or otherwise??
Then, assuming I decide to unlock BL, install TWRP and root are any certain methods better than others? I't appears to me that there have been more than one technique posted here.
The phone is used so has no warranty from LG, so I figured on using LG's own procedure to unlock BL. Good idea -Bad idea??
Obviously, I don't want to brick this device. I've hacked my old Zenfone 2 until it was "exhaused" and I'd know my way around that phone in the dark.
But I'm breaking all new ground with the V20
Thanks.
Boowho??
H910, H915, VS995 and US996 are identical devices and fully cross-flashable. Use the patched LGUP to flash a US996 KDZ onto the phone, and you'll have an unlocked phone
boowho said:
I've been able to swap the H910 for a US996. I found it interesting that the bootloader and download screens were exactly the same, since I thought this lock out was done by AT&T.
But I have the same question as before. Will the US996 phone have the ARB = 0 or otherwise??
Then, assuming I decide to unlock BL, install TWRP and root are any certain methods better than others? I't appears to me that there have been more than one technique posted here.
The phone is used so has no warranty from LG, so I figured on using LG's own procedure to unlock BL. Good idea -Bad idea??
Obviously, I don't want to brick this device. I've hacked my old Zenfone 2 until it was "exhaused" and I'd know my way around that phone in the dark.
But I'm breaking all new ground with the V20
Thanks.
Boowho??
Click to expand...
Click to collapse
The 996 is arb0
Sent from my LG-H910 using XDA Labs
boowho said:
I've been able to swap the H910 for a US996. I found it interesting that the bootloader and download screens were exactly the same, since I thought this lock out was done by AT&T.
But I have the same question as before. Will the US996 phone have the ARB = 0 or otherwise??
Then, assuming I decide to unlock BL, install TWRP and root are any certain methods better than others? I't appears to me that there have been more than one technique posted here.
The phone is used so has no warranty from LG, so I figured on using LG's own procedure to unlock BL. Good idea -Bad idea??
Obviously, I don't want to brick this device. I've hacked my old Zenfone 2 until it was "exhaused" and I'd know my way around that phone in the dark.
But I'm breaking all new ground with the V20
Thanks.
Boowho??
Click to expand...
Click to collapse
995,996 and 910 does not have arb 1 now,and even you brick your v20, in most case you can unbrick it in 9008 mode
IntroductionSo... I was genuinely thinking of selling my Note 20 Ultra after the numerous headaches that OneUI 4 gave me, and then I thought "Would a reset fix my issues? What if I could go back to 3.1?"
And my venture began. I referred to the OTA/firmware thread in this forum along with flashing a U to a U1 (which I did, because carrier bloatware sickens me...) and I went to download the latest version of Android 11 they made... which luckily still flashes since we're still on Bootloader version 2. So I'm putting together this hastily made guide so you can downgrade to Android 11, AND prevent software updates.
Precautions1. Make sure you back up everything. Don't put the blame on me if you lose your baby shower photos simply because you forgot to back up. Also back up your call logs, messages, app data, etc etc. This step is optional if you don't care about whatever you possibly even have on your phone. I am also not responsible for anyone who damages, bricks, or outright fries their glass slate (aka the Note20 Ultra in this case) during the process. Your phone, your decisions. The only thing I did was write this guide.
2. Be sure you're on bootloader 2, which you'll be able to identify through download mode. I think it's BL or something, I forgot. But it has a 2 in it.
3. Be sure your stuff works well enough to the point where nothing bad happens during the flashing process. You don't want to be using an unstable computer for this kind of stuff... trust me.
4. Speaking of computers... you need a windows machine (Windows 7 or later) with a patched version of Odin, and samsung's USB drivers. Oh, and how could I forget... a USB cable! More specifically, a USB-C or a USB-C to A cable.
5. For firmware, refer to this thread. Some links might not work because AFH can't find a suitable mirror, so google the firmware version and you might be able to find another download for it somewhere. In this case, here is the latest Android 11 for the XAA CSC (US unlocked). galaxyfirmware.com has other CSCs for the latest patch, just use the direct link.
6. Be sure you find the right firmware for your CSC, unless you want to flash unlocked or another carrier's firmware. This thread goes into good detail about it. I was able to flash my N986U to an N986U1 and it works perfectly.
7. Follow directions and don't skip any of them.
Alright... let's get to it.First things first, reset your phone through settings to clear any locks and to be able to set it up offline. This also lets odin do its thing. Odin will NOT work on FRP locked devices, and I am not allowed to share how FRP locks can be bypassed. Don't steal devices, kids.
Now... the rest is actually fairly straightforward! It's almost like this post was absolutely pointless, right? Well, sorta. You still need the Patched Odin (and I mean patched, regular odin won't work) to do the rest. You also need to find the right firmware for your CSC (which is simple if you have a snapdragon, because you most likely live in the states if you do) and the links in the precautions section talk about a lot of this already. Examples... TMB is T-Mobile, ATT is AT&T (in which I feel sorry for you), VZW is Verizon Wireless, SPR is Sprint, XAA is US unlocked, and so on...
So now you want to download the correct firmware file after you've done your research, and in this case it will either be the November or December 2021 security patch. January 2022 patches are Android 12, and that's not what we're here for. Of course, you could downgrade to an older Android 12 firmware, but we're focusing on 11 here. Long story short, anything still on bootloader 2 will work. Down the line they're probably gonna update it, but luckily the latest Android 12 still runs BL 2.
Alright, now is when I'll shut up about firmware files and bootloaders. Once your device has been factory reset through the phone and NOT through recovery mode... restart your phone and enter download mode (hold both volume buttons after you press "restart") and you'll see a screen that says that loading a custom ROM will damage your phone blablabla, ignore that and go ahead. We're flashing official firmware, and official firmware only. No, this will not trip knox.
You want to start loading your BL, AP, CP, and CSC files into Odin. Now is the time where you make sure everything you did beforehand worked, and you have a proper backup of your phone's data. Hit start, and let the magic begin.
And that's about it! for the most part... you still need to disable updates.
Set your phone up OFFLINE (so sammy doesn't shove an update prompt into your face, also remove your SIM card) and enable Developer options. Disable auto-updates and enable USB debugging. Assuming you have the 15-second ADB package or other ADB environment already installed, open up an adb shell by literally typing "adb shell" into an admin command prompt. If you don't see an authorization prompt on your device, set your USB connection mode to "transferring images" on your phone. Then it should pop up.
Now, type in this string of commands:
pm uninstall --user 0 com.wssyncml
pm uninstall --user 0 com.sec.android.soagent
exit
and Voila! Now you're back on Android 11, and you won't have to deal with updates.
If by chance you do want to embrace masochism I mean, re-enable updates...
adb shell cmd package install-existing com.wssyncml
adb shell cmd package install-existing com.sec.android.soagent
Now you'll start having OTA updates again.
Potential issuesBackups made through Smart Switch or Samsung cloud might not work with Android 12. I usually back up to my computer by copying the contents of my internal storage+SD card, and I just start anew. Personally, my Android 12 install was pretty trashed.
Things that rely on Android 12 obviously won't work on 11, but I know of NOTHING that requires Android 12 at the moment... yet.
Again, we only have so much time before Samsung updates the bootloader again. Inform me if they do... I usually don't keep up with all of that.
Other than that, everything still works great. No tethered crap too, we're not dealing with iPhones.... although I wish they could allow us to downgrade THOSE.
Questions you may or may not haveQ: That's cool, ma'am, but can you downgrade to Android 10?
A: Unfortunately not... that's what I was initially going for. Android 10 doesn't have the same bootloader version.
Q: Will this make my device faster, and will it remove that god-awful scroll stretch effect?
A: Yep.
Q: Will this break anything on the phone?
A: No, not even Knox. It's completely safe.
Q: What if the bootloader does get updated?
A: Any firmware you'll be able to flash now would need to have the same BL version as the latest firmware.
Q: My computer does not detect the device, even with drivers installed.
A: Your USB cord might be bad, or the port you're using is either bad or potentially unsupported.
Q: Does this work on Linux?
A: I'm sure it will but I have no idea how to work a damn thing on Linux without it breaking.
Q: Will this work on Exynos devices?
A: Yes, provided you have the right firmware. This should work on all Note 20s.
Q: What if my device was produced after 2021?
A: This may or may not work for you, then...
Any other questions go in the replies. I'll shut up now.
Reserved, just in case.
No need this,with latest firmware,we have all bootloader v4 ,can't downgrade anymore
maxpaynezm said:
No need this,with latest firmware,we have all bootloader v4 ,can't downgrade anymore
Click to expand...
Click to collapse
Well that was fast. I guess if you're lucky enough to have BL 2 then this will still work for you.
How can you check your boot loader version?
I have a note20 ultra U1 unlocked One UI 4.1 Android 12.
Can I downgrade so I can root?
Normally you would want to check your firmware version and it should indicate somewhere with a "2" which means you can go back to 11. Honestly I'm not too sure as I'm switching back to iOS soon... which I know will set off some fuses.... lol