Honor Watch GS Pro update to 11.0.4.20 (iOS) - Other SmartWatches

Hello,
If anyone stuck on 10.1.3.52 you can update to 11.0.4.20 from iOS device.
Just connect to proxy (in wi-fi settings) 52.15.244.171:3128
login: 4pda
password: 4pda
Then tap update button in huawei health, you'll get update notification, disconnect from proxy (1mbps limitation, sorry) and press "Update"
Be sure that watches have more than 30% of battery, coz update will burn around 17-25%
GL
Also can update on rooted android

LokotoAI said:
Doesn’t work for me.
Click to expand...
Click to collapse

Any errors?
Somtimes not working on ios lower than 12

LokotoAI said:
Any errors?
Somtimes not working on ios lower than 12
Click to expand...
Click to collapse
Server error

Riddick99999 said:
Server error
Click to expand...
Click to collapse
Also you can do it with Charles:
- Download Charles https://www.charlesproxy.com/
- Open Help-SSL Proxying-Install Charles Root Certificate
- Then in iPhone wi-fi settings enter proxy with your pc local ip and port 8888
- In Charles press Tools->Rewrite->Import
-And choose 11.0.4.20.xml im attached
Now you need to press update button in Health
It's working method, i've got many positive feedback
Spoiler

I am having some problems, even though i do all the steps on charles the Health app says that there is no updates available. Could you please help me with some pictures of every step so i could check if i am doing something wrong, sorry if my english is not good enough, hope you can understand me.

Jlmend1310 said:
I am having some problems, even though i do all the steps on charles the Health app says that there is no updates available. Could you please help me with some pictures of every step so i could check if i am doing something wrong, sorry if my english is not good enough, hope you can understand me.
Click to expand...
Click to collapse
Sure
Charles config:
Spoiler
Then you can get your PC's local ip in Help-Local IP address and connect to proxy using 8888 port
Spoiler
Rewrite vaules:
Spoiler: For 11.0.4.6
Code:
{
"status": "0",
"components": [{
"name": "com.huawei.KAN-B19.firmware",
"version": "11.0.4.6",
"versionID": "508111",
"description": "",
"ruleAttr": "",
"createTime": "2020-12-29T12:12:31+0000",
"url": "https://update.hicloud.com/download/data/pub_13/HWHOTA_hotaMigrate_900_9/33/v3/8077cfe1a0c34c4b9c5388033fb8c47b/",
"size": "203232264"
}]
}
Spoiler: For 11.0.4.20
Code:
{
"status": "0",
"components": [{
"name": "com.huawei.KAN-B19.firmware",
"version": "11.0.4.20",
"versionID": "522947",
"description": "",
"ruleAttr": "",
"createTime": "2021-02-22T07:02:24+0000",
"url": "http://update.dbankcdn.com/download/data/pub_13/HWHOTA_hota_900_9/66/v3/FxtqoIeNR0O9BPFdmXXpDA/",
"size": "194453487"
}]
}
Then you can update
Spoiler: Just for eg

http://update.dbankcdn.com/download/data/pub_13/HWHOTA_hota_900_9/66/v3/FxtqoIeNR0O9BPFdmXXpDA/
that give :
{"code":400,"message":"File id is invalid"}

pepe DPH said:
http://update.dbankcdn.com/download/data/pub_13/HWHOTA_hota_900_9/66/v3/FxtqoIeNR0O9BPFdmXXpDA/
that give :
{"code":400,"message":"File id is invalid"}
Click to expand...
Click to collapse
You don't need any files, all firmware is signed by HuHo
Anyway you can get requested files via links:
filelist: https://update.dbankcdn.com/downloa...6/v3/FxtqoIeNR0O9BPFdmXXpDA/full/filelist.xml
changelog: https://update.dbankcdn.com/downloa.../v3/FxtqoIeNR0O9BPFdmXXpDA/full/changelog.xml
firmware: https://update.dbankcdn.com/downloa...A/full/Kanon_mcu_bt_dsp_app_11.0.4.20.bin.apk

Hi everyone,
is there any possibility to download this update for the non-rooted android smartphone (S21 Ultra)?

xhubbiex said:
Hi everyone,
is there any possibility to download this update for the non-rooted android smartphone (S21 Ultra)?
Click to expand...
Click to collapse
Non-rooted still no way. Health apk must be patched for ssl unpinning, I can’t build patched version, maybe someone will do

LokotoAI said:
Non-rooted still no way. Health apk must be patched for ssl unpinning, I can’t build patched version, maybe someone will do
Click to expand...
Click to collapse
Really a pity.
This is a great Smartwatch but Honor/Huawei since they split up have abandoned it.
Unfortunately I do not have the Root on my Android, I hope that someone can make a version of Heath Mod For updates!
This watch no longer receives 1 update for a year!
Another idea would be a custom rom! With Emoji etc
I would also open a Telegram channel with this topic of yours.

I just tried following (well) the guide for Android with Charles (proxy tel is ok perfect, the program recognizes the connected phone), when I open Health does not find any update. The operation was carried out to perfection, double-checked everything several times. Not working

@LokotoAI But this file (fw with apk extension?) Kanon_mcu_bt_dsp_app_11.0.4.20.bin.apk
What should we do with this file?

LokotoAI said:
Hello,
If anyone stuck on 10.1.3.52 you can update to 11.0.4.20 from iOS device.
Just connect to proxy (in wi-fi settings) 52.15.244.171:3128
login: 4pda
password: 4pda
Then tap update button in huawei health, you'll get update notification, disconnect from proxy (1mbps limitation, sorry) and press "Update"
Be sure that watches have more than 30% of battery, coz update will burn around 17-25%
GL
Also can update on rooted android
Click to expand...
Click to collapse
hello I have an iphone with ios 15, I have tried to do the steps, but the update does not appear in huawei health, if you would be so kind and put the most detailed step by step to try to update my honor gs pro to 11.0.4.20. I apologize for my bad English

donatod87 said:
@LokotoAI But this file (fw with apk extension?) Kanon_mcu_bt_dsp_app_11.0.4.20.bin.apk
What should we do with this file?
Click to expand...
Click to collapse
Encrypted binary fw, idk why .apk, nothing interesting inside

LokotoAI said:
Encrypted binary fw, idk why .apk, nothing interesting inside
Click to expand...
Click to collapse
I'm also trying again on Mac but no update appears. What do you intern for "work only frida ssl unpinning" ? can you enter an explanation for this step?

LokotoAI said:
Encrypted binary fw, idk why .apk, nothing interesting inside
Click to expand...
Click to collapse
LokotoAI said:
Sure
Charles config:
Spoiler
View attachment 5524179
Then you can get your PC's local ip in Help-Local IP address and connect to proxy using 8888 port
Spoiler
View attachment 5524181
Rewrite vaules:
Spoiler: For 11.0.4.6
Code:
{
"status": "0",
"components": [{
"name": "com.huawei.KAN-B19.firmware",
"version": "11.0.4.6",
"versionID": "508111",
"description": "",
"ruleAttr": "",
"createTime": "2020-12-29T12:12:31+0000",
"url": "https://update.hicloud.com/download/data/pub_13/HWHOTA_hotaMigrate_900_9/33/v3/8077cfe1a0c34c4b9c5388033fb8c47b/",
"size": "203232264"
}]
}
Spoiler: For 11.0.4.20
Code:
{
"status": "0",
"components": [{
"name": "com.huawei.KAN-B19.firmware",
"version": "11.0.4.20",
"versionID": "522947",
"description": "",
"ruleAttr": "",
"createTime": "2021-02-22T07:02:24+0000",
"url": "http://update.dbankcdn.com/download/data/pub_13/HWHOTA_hota_900_9/66/v3/FxtqoIeNR0O9BPFdmXXpDA/",
"size": "194453487"
}]
}
Then you can update
Spoiler: Just for eg
View attachment 5524231
Click to expand...
Click to collapse
Could you prepare step-by-step instruction for the Android rooted devices?
I did everything as suggested, but I still have no update available.
What I did was:
1. Installed the Charles app.
2. Configured it as suggested.
3. Configured proxy for my Wi-Fi network – laptop recognized the attempt of connection.
4. Turned on the newest version of health app and checked for the update.
5. Got back message that I have the newest version.
Why would I need the root for these steps (I think could do the same steps for the phone without root)? Is there any specific version of health app that I should be using? What is your region?

xhubbiex said:
Could you prepare step-by-step instruction for the Android rooted devices?
I did everything as suggested, but I still have no update available.
What I did was:
1. Installed the Charles app.
2. Configured it as suggested.
3. Configured proxy for my Wi-Fi network – laptop recognized the attempt of connection.
4. Turned on the newest version of health app and checked for the update.
5. Got back message that I have the newest version.
Why would I need the root for these steps (I think could do the same steps for the phone without root)? Is there any specific version of health app that I should be using? What is your region?
Click to expand...
Click to collapse
Quiet does not work. I tried with Android (with and without Root does not change anything) I also tried Charles on both Windows and MacBook the phone is recognized correctly by Charles (correctly changing the proxy with IP of the pc and port 8888).

Does this software really exist or is it fake?

Related

wpa_supplicant .

Good afternon xda people , I have galaxy note 3 SM-N900 android 5.0 and I rooted it using CF-Auto root , now I want to view the password of the wifi I am connected to , I downloaded many apps from play store and two apps worked for me but they show the password in this format
psk :e3863c4e85250347f1d9a7e31ae79648 I thought the problem was with the apps so I looked for alternate method and I discovered that the passwords of wifi in android are saved in this path data/misc/wifi/wpa_supplicatnt.conf when I opened that file it showed me the password in the same format that the app showed me . This is the Information of one of the networks in the supplicant.conf file
network={
ssid="MO89"
psk=e3863c4e85250347f1d9a7e31ae79648
key_mgmt=WPA-PSK
priority=2
frequency=2462
autojoin=1
usable_internet=0
skip_internet_check=0
}
The psk of the network is [email protected] but note how the supplicant.conf file display it .
I thought it is an md5 encryption so I tried to decrypt it using some online decryption websites but still not result .
there was a Xposed module!
Nasser. 93 said:
Good afternon xda people , I have galaxy note 3 SM-N900 android 5.0 and I rooted it using CF-Auto root , now I want to view the password of the wifi I am connected to , I downloaded many apps from play store and two apps worked for me but they show the password in this format
psk :e3863c4e85250347f1d9a7e31ae79648 I thought the problem was with the apps so I looked for alternate method and I discovered that the passwords of wifi in android are saved in this path data/misc/wifi/wpa_supplicatnt.conf when I opened that file it showed me the password in the same format that the app showed me . This is the Information of one of the networks in the supplicant.conf file
network={
ssid="MO89"
psk=e3863c4e85250347f1d9a7e31ae79648
key_mgmt=WPA-PSK
priority=2
frequency=2462
autojoin=1
usable_internet=0
skip_internet_check=0
}
The psk of the network is [email protected] but note how the supplicant.conf file display it .
I thought it is an md5 encryption so I tried to decrypt it using some online decryption websites but still not result .
Click to expand...
Click to collapse
there was a Xposed module. But not sure its working with Lollipop.

Block IP address for kingroot updates for Verizon actiontec router

tested on MI424WR-GEN3I
I'm not sure if this inhibits the rooting process of future rooting using kingroot but here is something you can do after rooting with kingroot.
before doing this test that the rule is not in effect by going to a command prompt and typing "ping 183.61.38.246"
you should get a reply.
Setting the rule:
In the Firewall section go to the Advanced Filtering section (Network (Home/Office) Rules) > and select add.
SourceAddress = any
destination address= click down arrow and select "user defined". Change "Network Object" to "IPaddress183.61.38.246" and then select "add" button below and set Network object to "iPaddress" then enter the ip address in the 4 block sections of 183 61 38 246.
hit the apply button till you are back at the advanced filtering menu of the object with the settings below.
Protocol = any
Operation = Drop
hit apply
test your new rule by going to a command prompt and typing "ping 183.61.38.246"
you should not get a reply.
credits to santamanga for pointing out address
http://forum.xda-developers.com/showpost.php?p=65706167&postcount=85
Why?
ldeveraux said:
Why?
Click to expand...
Click to collapse
I enjoy a static environment, paranoia, or possibly I was getting bored and I needed a new site to block along with barneys playhouse webpage.
rp201 said:
I enjoy a static environment, paranoia, or possibly I was getting bored and I needed a new site to block along with barneys playhouse webpage.
Click to expand...
Click to collapse
haha, it was a serious question though. Why are you blocking the ip? What does kingroot do with it, if anything?
Does anyone knows how to block an IP in an Asus RT-AC68U, tried last night and could not stop it. Maybe did not do it correctly.
ldeveraux said:
haha, it was a serious question though. Why are you blocking the ip? What does kingroot do with it, if anything?
Click to expand...
Click to collapse
That's exactly the problem: NOBODY KNOWS. Since Kingroot is closed-sourced, there's no way of telling what data it sends throughout the internet. I haven't rooted my 5.0.5 Gen1 FireTV yet (waiting for a trusted method, rbox, for example), but if I had I probably would've done something similar as the OP. I don't appreciate rogue unknown traffic going through my router.
What Kingroot beyond question does is check for updates and when available install it without asking.
---------- Post added at 01:34 PM ---------- Previous post was at 01:22 PM ----------
bula1ca said:
Does anyone knows how to block an IP in an Asus RT-AC68U, tried last night and could not stop it. Maybe did not do it correctly.
Click to expand...
Click to collapse
I´m not at home to check, but since we have root, I guess, it might also be possible to block unwanted IPs in the host file on the fire tv (if it understands allow+deny).
santamanga said:
What Kingroot beyond question does is check for updates and when available install it without asking.
---------- Post added at 01:34 PM ---------- Previous post was at 01:22 PM ----------
I´m not at home to check, but since we have root, I guess, it might also be possible to block unwanted IPs in the host file on the fire tv (if it understands allow+deny).
Click to expand...
Click to collapse
Could not managed to block it. Would you be able to post your settings later on? Thank you
Was searching for a way to block it on mine as well. I'm running the FiOS-G1100 router and for the life of me can't find the appropriate section. Maybe I need to root it for SU rights!
So I am not a 100% sure, but i think this ip corresponds with pmir.3g.qq.com
So what you can do: connect with adbFire and open an adbshell. In adbFire remount system partition as rw.
[Root functions] [FS R/W]
in the terminal become root: $su
look at your hosts file:
#cat /system/etc/hosts
maybe make a backup (for example to folder Download):
#cp /system/etc/hosts /storage/sdcard0/Download/hosts.orig
Add the url to be redirected to localhost
#echo "127.0.0.1 pmir.3g.qq.com" >> /system/etc/hosts
see if the line was added:
#cat /system/etc/hosts
In adbFire remount system partition as read only.
[Root functions] [FS R/O]
#exit
#exit
In adbFire select [File] and [Reboot device]
I googled the url and found scary topics, but maybe this is completely unrelated to kingroot:
http://forum.xda-developers.com/general/security/xiaomi-firmware-multiple-backdoords-t2847069
http://en.miui.com/thread-33464-1-1.html
Has no one decompiled the dex?
I had a quick poke at it a couple of weeks ago, quite a few URL's in the code.
Some code snippets:
localStringBuilder.append("http://www.kingroot.net/feedback/kinguser"); // Seems to be posting details of the device to here.
a(localStringBuilder, localbvb, Build.BRAND, true);
a(localStringBuilder, localbvb, Build.MODEL, true);
a(localStringBuilder, localbvb, String.valueOf(Build.VERSION.RELEASE), true);
a(localStringBuilder, localbvb, Build.ID, true);
return a(this.axp.getAttributeValue("http://schemas.android.com/apk/res/android", paramString), this.axq);
super(af.do.value(), af.do.toString(), 245, "817984CA83A508FE", aru.XF, "http://pmir.3g.qq.com", "", false, coc.gl(), coc.JL(), false);
localStringBuilder.append("http://openmobile.qq.com/oauth2.0/m_jump_by_version?");
str4 = String.format("http://fusion.qq.com/cgi-bin/qzapps/unified_jump?appid=%1$s&from=%2$s&isOpenAppID=1", arrayOfObject);
StringBuffer localStringBuffer = new StringBuffer("http://c.isdspeed.qq.com/code.cgi");
localStringBuffer.append("?domain=mobile.opensdk.com&cgi=opensdk&type=").append(paramInt1).append("&code=").append(paramInt2).append("&time=").append(l2).append("&rate=").append(paramInt3).append("&uin=").append(paramString2).append("&data=");
localHttpPost = new HttpPost("http://wspeed.qq.com/w.cgi");
localcob = cnl.a(cnk.getContext(), "http://appsupport.qq.com/cgi-bin/appstage/mstats_batch_report", "POST", localBundle);
JSONObject localJSONObject = coa.iA(cnl.a(cns.a(this.aGQ), "http://cgi.connect.qq.com/qqconnectopen/openapi/policy_conf", "GET", this.aBF).response);
u = "http://pingma.qq.com:80/mstat/report";
private String a = "http://monitor.uu.qq.com/analytics/rqdsync";
Mick

[Tutorial] Manage System Permissions in Android Marshmallow

Hello,
I create that thread to offer you a new tutorial aiming to learn how to manage System Permissions in Android Marshmallow. You can discover the tutorial in video also :
Manage System Permissions on Android 6 Marshmallow
Beginning in Android 6 Marshmallow, users grand permissions to apps while the app is running, not when they install the app. This approach gives the user more control over the app's functionality. Thus, he can choose to give the access to read contacts but not to the device location. Furthermore, users can revoke the permissions at any time, by going to the app's Settings screen.
Note that system permissions are divided into two categories : normal and dangerous. Normal permissions are granted automatically. For dangerous permissions, the user has to give approval to your application at runtime. So, developers must manage permissions at runtime before using some dangerous features.
To manage permissions inside an application, we're going to imagine we want to read contacts. This feature will use the READ_CONTACTS permission that is marked as dangerous. So, the first step is to check for READ_CONTACTS permission. If the permission has already been granted, you can use the feature that read contacts. If not, you have to request for permissions with a custom request code that will be named MY_PERMISSIONS_REQUEST_READ_CONTACTS in our example.
Code:
if (ActivityCompat.checkSelfPermission(this, Manifest.permission.READ_CONTACTS)
!= PackageManager.PERMISSION_GRANTED) {
ActivityCompat.requestPermissions(this,
new String[] { Manifest.permission.READ_CONTACTS },
MY_PERMISSIONS_REQUEST_READ_CONTACTS);
} else {
readContacts();
}
Note that when your application requests for permissions, the system shows a standard dialog box to user that cannot be customized. Now, you need to handle the permissions request response by overriding the onRequestPermissionsResult method :
Code:
@Override
public void onRequestPermissionsResult(int requestCode,
@NonNull String[] permissions, @NonNull int[] grantResults) {
switch (requestCode) {
case MY_PERMISSIONS_REQUEST_READ_CONTACTS :
if (grantResults.length > 0
&& grantResults[0] == PackageManager.PERMISSION_GRANTED) {
readContacts();
} else {
if(ActivityCompat.shouldShowRequestPermissionRationale(this,
Manifest.permission.READ_CONTACTS)) {
new AlertDialog.Builder(this).
setTitle("Read Contacts permission").
setMessage("You need to grant read contacts permission to use read" +
" contacts feature. Retry and grant it !").show();
} else {
new AlertDialog.Builder(this).
setTitle("Read Contacts permission denied").
setMessage("You denied read contacts permission." +
" So, the feature will be disabled. To enable it" +
", go on settings and " +
"grant read contacts for the application").show();
}
}
break;
}
}
Like you can see, managing permissions in your Android application is not really hard.
Don't hesitate to give me your feedbacks or ideas for new tutorials.
Thanks.
Sylvain
Nice Tutorial.
Keep them coming
Black_Eyes said:
Nice Tutorial.
Keep them coming
Click to expand...
Click to collapse
Thanks
Hello,
The tutorial is now also available on my blog : http://www.ssaurel.com/blog/manage-permissions-on-android-6-marshmallow/ .
Don't hesitate to give me your advice and ideas for future tutorials.
Thanks.
Sylvain
They were intimidating at first but once you do it once, you've pretty much got the hang of it.
Jay Rock said:
They were intimidating at first but once you do it once, you've pretty much got the hang of it.
Click to expand...
Click to collapse
True. When you understand the mechanism, it becomes simple to use permissions in your Android code.
Christie37 said:
As I'm new mobile developer this tutorial helped me lot. Thanks keep going!!
Click to expand...
Click to collapse
Great . I made some other tutorials that could be interesting for you. Don't hesitate to look at them
Thanks man awsome
nice bro
@DSttr said:
nice bro
Click to expand...
Click to collapse
Thanks
@sylsau Thanks..
BTW, does this work properly on Android 5.1.1 and below?
I mean, what does this below code do for 5.1.1 and below? :
Code:
ActivityCompat.checkSelfPermission(this, Manifest.permission.WRITE_EXTERNAL_STORAGE) != PackageManager.PERMISSION_GRANTED)
Does it always return true, or is there a chance of exceptions or errors?
I'm asking this because I don't have Android Device below 5.1 to test it..
Or should I wrap it up like this:
Code:
if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.M) {
requestPermissions();
}

Sympathic way to upgrade to Nougat

Hi ,
I think found to upgrade to Beta nougat very naturally. No need to unlock , no need to root.
it's a four step procedure and even probably only step 4 is mandatory but it requires some good network skills.
--------------
-step one if you are on L04 you need to start from L04C567B162 version if on L09 from L09C432B131 (not sure about 432)
-step two you locate and download the appropriate ROM (there is at least 2 files maybe more) for your version. you may use Firmware Finder by Team MT for that .
First you get filelist.xml and you download ALL the zip files specified in it
For L04 links are :
http://update.hicloud.com:8180/TDS/data/files/p3/s15/G1278/g104/v66891/f1/full/filelist.xml
http://update.hicloud.com:8180/TDS/data/files/p3/s15/G1278/g104/v66891/f1/full/update.zip
http://update.hicloud.com:8180/TDS/...91/f1/full/hw/usa/update_data_full_hw_usa.zip
-step three you create on your internal storage folder HwOUC/66891 (note the number is the one that is on the URL) and put all the zip file in it
you should get HwOUC/66891/update.zip and HwOUC/66891/update_data_full_hw_usa.zip
- from there I am pretty sure that you could run some adb command like adb reboot recovery and some option to run the upgrade but I did not find it. So I did step 4.
Step 4 .
Step 4 is complex and requires good network capacity.
-Run Settings->updater on your Device and connect it to a special wifi network where you can play with HTTP packet.
-Check for updates and you will see that the device sends 4 packets.
When you receive 3rd packet (third http get that update ) below :
POST /sp_ard_common/v2/Check.action?latest=true&ruleAttr=true&verType=true HTTP/1.1
Content-Length: 896
Content-Type: application/json
Host: query.hicloud.com:80
Connection: Keep-Alive
User-Agent: Apache-HttpClient/UNAVAILABLE (java 1.4)
{"rules":{"FingerPrint":"HONOR\/FRD-L04\/HWFRD:6.0\/HUAWEIFRD-L04\/C567B162:user\/release-keys","DeviceName":"FRD-L04","FirmWare":"FRD-L04C567B162","IMEI":"","IMSI":"","Language":"en-us","OS":"Android 6.0","HotaVersion":"17.4.16","saleinfo":"blue|usa|hw|N|EmotionUI_4.1|4.0 GB|32.00 GB|8_2.3GHz|Y|","C_version":"C567","D_version":"D000","devicetoken":"","PackageType":"increment","ControlFlag":"0","extra_info":""}}
then you need to answer this :
HTTP/1.1 200 OK
Content-Type: application/json;charset=utf8
Date: Wed, 30 Nov 2016 16:32:12 GMT
Server: nginx
Content-Length: 354
Connection: keep-alive
{"status":"0","autoPollingCycle":"1","components":[{"name":"FRD-L04C567B317-OTA","version":"FRD-L04C567B317","versionID":"66891","description":"商用发布: [全量包] FRD-L04C567B162 至 FRD-L04C567B317 (2016/11/14)","createTime":"2016-11-14T03:18:12+0000","url":"http://update.hicloud.com:8180/TDS/data/files/p3/s15/G1278/g104/v66891/f1/"}]}
Then Updater will propose you to upgrade.
Last step took me several hours to perform with the help of my macbook pro , Internet Sharing , dnsmasq , and burp.
schluk said:
Hi ,
I think found to upgrade to Beta nougat very naturally. No need to unlock , no need to root.
it's a four step procedure and even probably only step 4 is mandatory but it requires some good network skills.
--------------
-step one if you are on L04 you need to start from L04C567B162 version if on L09 from L09C432B131 (not sure about 432)
-step two you locate and download the appropriate ROM (there is at least 2 files maybe more) for your version. you may use Firmware Finder by Team MT for that .
First you get filelist.xml and you download ALL the zip files specified in it
For L04 links are :
http://update.hicloud.com:8180/TDS/data/files/p3/s15/G1278/g104/v66891/f1/full/filelist.xml
http://update.hicloud.com:8180/TDS/data/files/p3/s15/G1278/g104/v66891/f1/full/update.zip
http://update.hicloud.com:8180/TDS/...91/f1/full/hw/usa/update_data_full_hw_usa.zip
-step three you create on your internal storage folder HwOUC/66891 (note the number is the one that is on the URL) and put all the zip file in it
you should get HwOUC/66891/update.zip and HwOUC/66891/update_data_full_hw_usa.zip
- from there I am pretty sure that you could run some adb command like adb reboot recovery and some option to run the upgrade but I did not find it. So I did step 4.
Step 4 .
Step 4 is complex and requires good network capacity.
-Run Settings->updater on your Device and connect it to a special wifi network where you can play with HTTP packet.
-Check for updates and you will see that the device sends 4 packets.
When you receive 3rd packet (third http get that update ) below :
POST /sp_ard_common/v2/Check.action?latest=true&ruleAttr=true&verType=true HTTP/1.1
Content-Length: 896
Content-Type: application/json
Host: query.hicloud.com:80
Connection: Keep-Alive
User-Agent: Apache-HttpClient/UNAVAILABLE (java 1.4)
{"rules":{"FingerPrint":"HONOR\/FRD-L04\/HWFRD:6.0\/HUAWEIFRD-L04\/C567B162:user\/release-keys","DeviceName":"FRD-L04","FirmWare":"FRD-L04C567B162","IMEI":"","IMSI":"","Language":"en-us","OS":"Android 6.0","HotaVersion":"17.4.16","saleinfo":"blue|usa|hw|N|EmotionUI_4.1|4.0 GB|32.00 GB|8_2.3GHz|Y|","C_version":"C567","D_version":"D000","devicetoken":"","PackageType":"increment","ControlFlag":"0","extra_info":""}}
then you need to answer this :
HTTP/1.1 200 OK
Content-Type: application/json;charset=utf8
Date: Wed, 30 Nov 2016 16:32:12 GMT
Server: nginx
Content-Length: 354
Connection: keep-alive
{"status":"0","autoPollingCycle":"1","components":[{"name":"FRD-L04C567B317-OTA","version":"FRD-L04C567B317","versionID":"66891","description":"商用发布: [å¨é‡åŒ] FRD-L04C567B162 至 FRD-L04C567B317 (2016/11/14)","createTime":"2016-11-14T03:18:12+0000","url":"http://update.hicloud.com:8180/TDS/data/files/p3/s15/G1278/g104/v66891/f1/"}]}
Then Updater will propose you to upgrade.
Last step took me several hours to perform with the help of my macbook pro , Internet Sharing , dnsmasq , and burp.
Click to expand...
Click to collapse
Attached screenshot with Bluetooth activated
"Very naturally"...[emoji23] [emoji23] Not for noobs like me.
Thanks for the info any way.
Enviado desde mi FRD-L09 mediante Tapatalk
What about the FRD-L09? Do you have any link?
movizdb said:
What about the FRD-L09? Do you have any link?
Click to expand...
Click to collapse
L09 is not enough , what is Cxxx after
Below l09c10
http://update.hicloud.com:8180/TDS/data/files/p3/s15/G1278/g104/v68133/f1/full/update.zip
http://update.hicloud.com:8180/TDS/data/files/p3/s15/G1278/g104/v68133/f1/full/filelist.xml
schluk said:
L09 is not enough , what is Cxxx after
Below l09c10
http://update.hicloud.com:8180/TDS/data/files/p3/s15/G1278/g104/v68133/f1/full/update.zip
http://update.hicloud.com:8180/TDS/data/files/p3/s15/G1278/g104/v68133/f1/full/filelist.xml
Click to expand...
Click to collapse
It is FRD-L09C432B131. Do you have the files please?
movizdb said:
It is FRD-L09C432B131. Do you have the files please?
Click to expand...
Click to collapse
http://update.hicloud.com:8180/TDS/data/files/p3/s15/G753/g104/v66464/f2/full/update.zip
http://update.hicloud.com:8180/TDS/data/files/p3/s15/G753/g104/v66464/f2/full/filelist.xml
nougat
can you post maybe a step by step? i have the L04 version honor 8 and would like to use this thread but i dont know how to intercept the http packets.
tfitznerr said:
can you post maybe a step by step? i have the L04 version honor 8 and would like to use this thread but i dont know how to intercept the http packets.
Click to expand...
Click to collapse
Yes, I guess a video tutorial will be helpful
So it isnt possible to update via the updater app?
I was able to repeat the process with the help of Charles app on macOS for FRD-L09C432 and at the moment I am downloading the update.
You do not have to manually download the update packages. The update packages will be downloaded automatically.
Info
The guide applies to any FRD variant and any update version (needs confirm though). Just be sure to use the correct values where required.
Your PC / Mac and the smartphone must use the same WiFi network
Your smartphone's IP address can be found at Settings > About phone > Status > IP address (It should be something like 192.168.XXX.XXX)
I do not own Windows, but there is a possibility that you have to allow Charles app to listen for network traffic from Firewall settings. Maybe try to disable it while you are going through the guide.
Setup Charles app
Download and install Charles app (30-day trial)
Open Charles app
Select the "Sequence" option
At the bottom, in the "Filter" enter the IP (check info at the top of the post to locate your smartphone's IP address) of your FRD-L09 device (this will help you to isolate requests only from your FRD-L09)
At the top bar, hit the "Start recording", "Start throttling", "Enable breakpoints"
From the menu "Tools", select the "Rewrite" and check the "Enable Rewrite"
Setup FRD-L09
At Settings > WiFi, locate your WiFi network, long tap it and choose "Modify network"
Display the advanced settings and for Proxy check the Manual option
For Proxy hostname enter the IP of your PC / Mac
For Proxy port enter 8888 (this is the default port for Charles app)
Apply network changes
Test the connection
From FRD-L09 go to Settings > Update and hit the button to search for updates.
If everything is setup correctly, back in Charles app you'll see the desired requests. If you are on Windows, there is a chance you'll have to disable temporally your Firewall or whitelist the Charles app to allow it listen for network traffic.
Hijack the request
Notes
Be prepared for the next step: 'Rewrite the response', because It has to be completed relatively fast.
If you delay then the update check at the smartphone will timeout and you'll have to repeat the update check.
So, copy the response from the next step to have it ready for quick paste.
From the logged requests, expand the "sp_ard_common", right click the request and select the "Breakpoints" option. This will pause the next identical request and will allow to edit the response.
From FRD-L09, hit again the update button
If everything is correct, the Charles app will focus to desired request. At the bottom, hit the "Execute" button.
The response is executed and you should now be able to edit the response. At the top select the "Edit Response".
At the bottom select the "JSON Text" and proceed quickly to the next step before the request timeouts.
Rewrite the response
Notes
The below response is only for FRD-L09C432B316 update version.
You can set the response for any version of update and maybe variant of FRD. You just have to configure all the properties with the correct values. The pattern is easy to follow.
Select the response and replace it with:
Code:
{
"status": "0",
"autoPollingCycle": "1",
"components": [{
"name": "FRD-L09C432B316-OTA",
"version": "FRD-L09C432B316",
"versionID": "66464",
"description": "�? ?�?���?��?: [�?��?��??] FRD-L09C432B316 �?� FRD-L09C432B316 (2016/11/19)",
"createTime": "2016-11-19T03:18:12+0000",
"url": "http://update.hicloud.com:8180/TDS/data/files/p3/s15/G753/g104/v66464/f2/"
}]
}
Hit the "Execute" button.
If everything is correct then back at your FRD-L09 you should be able to view the update and the changelog. Before proceed to download the update read the next section.
Download the update
Before proceed to download the update, you have to disable the Proxy at your smartphone. So:
At Settings > WiFi, locate your WiFi network, long tap it and choose "Modify network"
Display the advanced settings and for Proxy check the None option
Apply changes and now your smartphone should be able to connect to Internet again
Now, go back to Updater and hit the "Quick Update" button to apply the update
A huge thanks to @schluk for providing this method!
Please hit the Thanks button at the first post to show your appreciation to @schluk
This is great! Downloading update as I write. Nice find schluk and nice tutorial cvkef! You guys are awesome! :good:
Now we need a Windows tutorial lol
Charles is available for Windows and Linux as well.
Sent from my FRD-L09 using Tapatalk
can you post a update on this with a l04 version? unfortunatly i followed your L09 steps and replaced with the L04 settings from above and cannot pull update. used his version with charles. cannot pull update. getting annoying....
tfitznerr said:
can you post a update on this with a l04 version? unfortunatly i followed your L09 steps and replaced with the L04 settings from above and cannot pull update. used his version with charles. cannot pull update. getting annoying....
Click to expand...
Click to collapse
Can you try the following?
Code:
{
"status": "0",
"autoPollingCycle": "1",
"components": [{
"name": "FRD-L04C567B317-OTA",
"version": "FRD-L04C567B317",
"versionID": "66891",
"description": "å??ç?¨å?å¸?: [å?¨é?å??] FRD-L04C567B162 è?³ FRD-L04C567B317 (2016/11/14)",
"createTime": "2016-11-14T03:18:12+0000",
"url": "http://update.hicloud.com:8180/TDS/data/files/p3/s15/G1278/g104/v66891/f1/"
}]
}
youre the best
znender said:
Can you try the following?
Code:
{
"status": "0",
"autoPollingCycle": "1",
"components": [{
"name": "FRD-L04C567B317-OTA",
"version": "FRD-L04C567B317",
"versionID": "66891",
"description": "å??ç?¨å?å¸?: [å?¨é?å??] FRD-L04C567B162 è?³ FRD-L04C567B317 (2016/11/14)",
"createTime": "2016-11-14T03:18:12+0000",
"url": "http://update.hicloud.com:8180/TDS/data/files/p3/s15/G1278/g104/v66891/f1/"
}]
}
Click to expand...
Click to collapse
you sir are a damn life saver. ive been working on this for the last 2 hours and now its working after you posted. thank you so much. you deserve the metal of honor. pun intended
znender said:
Can you try the following?
Code:
{
"status": "0",
"autoPollingCycle": "1",
"components": [{
"name": "FRD-L04C567B317-OTA",
"version": "FRD-L04C567B317",
"versionID": "66891",
"description": "å??ç?¨å?å¸?: [å?¨é?å??] FRD-L04C567B162 è?³ FRD-L04C567B317 (2016/11/14)",
"createTime": "2016-11-14T03:18:12+0000",
"url": "http://update.hicloud.com:8180/TDS/data/files/p3/s15/G1278/g104/v66891/f1/"
}]
}
Click to expand...
Click to collapse
Is it possible to make it receive the B320 update instead of the B317 one?
Gus194 said:
Is it possible to make it receive the B320 update instead of the B317 one?
Click to expand...
Click to collapse
Try this:
Code:
{
"status": "0",
"autoPollingCycle": "1",
"components": [{
"name": "FRD-L04C567B320-OTA",
"version": "FRD-L04C567B320",
"versionID": "68366",
"description": "å• †ç”¨å‘布: [全量包] FRD-L04C567B162 至 FRD-L04C567B320 (2016/11/22)",
"createTime": "2016-11-22T03:18:12+0000",
"url": "http://update.hicloud.com:8180/TDS/data/files/p3/s15/G1278/g104/v68366/f1/"
}]
}
I did everything but i cant get to make appear the request into Charles even when i filter it

Can we install Nougat like Honor and Nova users?

I saw this tutorial on their subforums, can we make it work without twrp too?
cvkef said:
I was able to repeat the process with the help of Charles app on macOS for FRD-L09C432 and at the moment I am downloading the update.
You do not have to manually download the update packages. The update packages will be downloaded automatically.
Info
The guide applies to any FRD variant and any update version (needs confirm though). Just be sure to use the correct values where required.
Your PC / Mac and the smartphone must use the same WiFi network
Your smartphone's IP address can be found at Settings > About phone > Status > IP address (It should be something like 192.168.XXX.XXX)
I do not own Windows, but there is a possibility that you have to allow Charles app to listen for network traffic from Firewall settings. Maybe try to disable it while you are going through the guide.
Setup Charles app
Download and install Charles app (30-day trial)
Open Charles app
Select the "Sequence" option
At the bottom, in the "Filter" enter the IP (check info at the top of the post to locate your smartphone's IP address) of your FRD-L09 device (this will help you to isolate requests only from your FRD-L09)
At the top bar, hit the "Start recording", "Start throttling", "Enable breakpoints"
From the menu "Tools", select the "Rewrite" and check the "Enable Rewrite"
Setup FRD-L09
At Settings > WiFi, locate your WiFi network, long tap it and choose "Modify network"
Display the advanced settings and for Proxy check the Manual option
For Proxy hostname enter the IP of your PC / Mac
For Proxy port enter 8888 (this is the default port for Charles app)
Apply network changes
Test the connection
From FRD-L09 go to Settings > Update and hit the button to search for updates.
If everything is setup correctly, back in Charles app you'll see the desired requests. If you are on Windows, there is a chance you'll have to disable temporally your Firewall or whitelist the Charles app to allow it listen for network traffic.
Hijack the request
Notes
Be prepared for the next step: 'Rewrite the response', because It has to be completed relatively fast.
If you delay then the update check at the smartphone will timeout and you'll have to repeat the update check.
So, copy the response from the next step to have it ready for quick paste.
From the logged requests, expand the "sp_ard_common", right click the request and select the "Breakpoints" option. This will pause the next identical request and will allow to edit the response.
From FRD-L09, hit again the update button
If everything is correct, the Charles app will focus to desired request. At the bottom, hit the "Execute" button.
The response is executed and you should now be able to edit the response. At the top select the "Edit Response".
At the bottom select the "JSON Text" and proceed quickly to the next step before the request timeouts.
Rewrite the response
Notes
The below response is only for FRD-L09C432B316 update version.
You can set the response for any version of update and maybe variant of FRD. You just have to configure all the properties with the correct values. The pattern is easy to follow.
Select the response and replace it with:
Code:
{
"status": "0",
"autoPollingCycle": "1",
"components": [{
"name": "FRD-L09C432B316-OTA",
"version": "FRD-L09C432B316",
"versionID": "66464",
"description": "�? ?�?���?��?: [�?��?��??] FRD-L09C432B316 �?� FRD-L09C432B316 (2016/11/19)",
"createTime": "2016-11-19T03:18:12+0000",
"url": "http://update.hicloud.com:8180/TDS/data/files/p3/s15/G753/g104/v66464/f2/"
}]
}
Hit the "Execute" button.
If everything is correct then back at your FRD-L09 you should be able to view the update and the changelog. Before proceed to download the update read the next section.
Download the update
Before proceed to download the update, you have to disable the Proxy at your smartphone. So:
At Settings > WiFi, locate your WiFi network, long tap it and choose "Modify network"
Display the advanced settings and for Proxy check the None option
Apply changes and now your smartphone should be able to connect to Internet again
Now, go back to Updater and hit the "Quick Update" button to apply the update
Screenshot https://imgur.com/MLKRMzM
A huge thanks to @schluk for providing this method!
Please hit the Thanks button at the first post to show your appreciation to @schluk
Click to expand...
Click to collapse
Just use the 3 button method.
Johnny TDN said:
Just use the 3 button method.
Click to expand...
Click to collapse
So if someone is on MM. 3button method will work without unlocking bootloader and flashing with twrp?
Coolyou said:
So if someone is on MM. 3button method will work without unlocking bootloader and flashing with twrp?
Click to expand...
Click to collapse
yes
Johnny TDN said:
yes
Click to expand...
Click to collapse
Are u sure man? I don't want to ruin my phone again...
robi10101298 said:
Are u sure man? I don't want to ruin my phone again...
Click to expand...
Click to collapse
Yes i am.
Johnny TDN said:
Yes i am.
Click to expand...
Click to collapse
I think I can wait one or 2 weeks more for the official update
robi10101298 said:
Are u sure man? I don't want to ruin my phone again...
Click to expand...
Click to collapse
Did someone tried to install b336 with dload and 3 buttons from MM ?
ismaadu78 said:
Did someone tried to install b336 with dload and 3 buttons from MM ?
Click to expand...
Click to collapse
I did. No problems after the 3 buttons method
Johnny TDN said:
I did. No problems after the 3 buttons method
Click to expand...
Click to collapse
Alright thanks you did this with which file ?
ismaadu78 said:
Alright thanks you did this with which file ?
Click to expand...
Click to collapse
With the files required for my VNS-L21
Johnny TDN said:
With the files required for my VNS-L21
Click to expand...
Click to collapse
Thanks,
I will try this tomorrow or friday.
So you flashed update.zip and after the update_data.zip
ismaadu78 said:
Thanks,
I will try this tomorrow or friday.
So you flashed update.zip and after the update_data.zip
Click to expand...
Click to collapse
yes ;D
make sure you make a backup of your oeminfo.img using meticulus TWRP in case you want to downgrade to MM.
AND PLEASE DO THAT! MAKE A BACKUP OF YOUR OEMINFO.IMG BEFORE FLASHING
Johnny TDN said:
yes ;D
make sure you make a backup of your oeminfo.img using meticulus TWRP in case you want to downgrade to MM.
AND PLEASE DO THAT! MAKE A BACKUP OF YOUR OEMINFO.IMG BEFORE FLASHING
Click to expand...
Click to collapse
Alright thanks

Categories

Resources