[S-Off] Facepalm S-Off for HTC Devices - Droid DNA
- Thread starter beaups
- Start date
-
- Tags
- development
Re: [S-Off] Facepalm S-Off for HTC Devices
Lol and I believe this is why beaups titled the post that. For the love of god, s-off has NOTHING to do with aosp. Nothing.
Sent from my HTC6435LVW using Tapatalk HD
Lol and I believe this is why beaups titled the post that. For the love of god, s-off has NOTHING to do with aosp. Nothing.
Sent from my HTC6435LVW using Tapatalk HD
Re: [S-Off] Facepalm S-Off for HTC Devices
Wow and I just had to sell my laptop....
Sent from my HTC One X using xda app-developers app
Wow and I just had to sell my laptop....
Sent from my HTC One X using xda app-developers app
No Go here
Code:
C:\Users\Ryan\DNA S-OFF>fastboot oem rebootRUU
...
(bootloader) Start Verify: 3
OKAY [ 0.042s]
finished. total time: 0.044s
C:\Users\Ryan\DNA S-OFF>fastboot flash zip PL8320000-DNA.zip
sending 'zip' (36905 KB)...
OKAY [ 2.543s]
writing 'zip'...
(bootloader) adopting the signature contained in this image...
(bootloader) zip header checking...
(bootloader) zip info parsing...
FAILED (remote: 99 unknown fail)
finished. total time: 2.765s
C:\Users\Ryan\DNA S-OFF>fastboot oem boot
...
(bootloader) monarudo_vibrate_device_time(): vibrate 200(ms)...
(bootloader) Boot/Recovery signature checking...
(bootloader) TZ_HTC_SVC_HASH ret = 0
(bootloader) setup_tag addr=0x80600100 cmdline add=0x00315568
(bootloader) TAG:Ramdisk OK
(bootloader) TAG:skuid 0x32401
(bootloader) TAG:hero panel = 0x94005B
(bootloader) TAG:engineerid = 0x0
(bootloader) TAG: PS ID = 0x0
(bootloader) TAG: Gyro ID = 0x1
(bootloader) Device CID is super CID
(bootloader) CID is super CID
(bootloader) Backup CID is VZW__001
(bootloader) setting->cid::VZW__001
(bootloader) serial number: FA2BDS500315
(bootloader) commandline from head: console=ttyHSL0,115200,n8 androidboot
(bootloader) .hardware=dlx user_debug=31
(bootloader) command line length =803
(bootloader) active commandline: poweron_status=1 reset_status=0 board_mo
(bootloader) narudo.disable_uart3=0 diag.enabled=0 board_monarudo.debug_u
(bootloader) art=0 userdata_sel=0 androidboot.emmc=true androidboot.pages
(bootloader) ize=2048 skuid=0 ddt=20 ats=0 androidboot.lb=1 uif=?000 td.
(bootloader) sf=1 td.td=1 td.ofs=328 td.prd=1 td.dly=0 td.tmo=300 hlog.of
(bootloader) s=628 un.ofs=694 imc_online_log=0 androidboot.efuse_info=SF
(bootloader) SH androidboot.baseband=1.01.01.0110 androidboot.cid=VZW__00
(bootloader) 1 androidboot.devicerev=3 androidboot.batt_poweron=good_batt
(bootloader) ery androidboot.carr
(bootloader) aARM_Partion[0].name=misc
(bootloader) aARM_Partion[1].name=recovery
(bootloader) aARM_Partion[2].name=boot
(bootloader) aARM_Partion[3].name=system
(bootloader) aARM_Partion[4].name=local
(bootloader) aARM_Partion[5].name=cache
(bootloader) aARM_Partion[6].name=userdata
(bootloader) aARM_Partion[7].name=devlog
(bootloader) aARM_Partion[8].name=pdata
(bootloader) aARM_Partion[9].name=extra
(bootloader) aARM_Partion[A].name=radio
(bootloader) aARM_Partion[B].name=adsp
(bootloader) aARM_Partion[C].name=dsps
(bootloader) aARM_Partion[D].name=radio_config
(bootloader) aARM_Partion[E].name=modem_st1
(bootloader) aARM_Partion[F].name=modem_st2
(bootloader) aARM_Partion[10].name=cdma_record
(bootloader) aARM_Partion[11].name=reserve
(bootloader) partition number=18
(bootloader) Valid partition num=18
(bootloader) setting_get_bootmode() = 9
(bootloader) smem 8CF04000 (phy 8CF04000): TZ_HTC_SVC_UPDATE_SMEM ret = 0
(bootloader) TZ_HTC_SVC_ENC ret = 0
(bootloader) TZ_HTC_SVC_ENC ret = 0
(bootloader) TZ_HTC_SVC_DISABLE ret = 205643776 (0xC41E000)
(bootloader) Start Verify: 3
(bootloader) jump_to_kernel: machine_id(4060), tags_addr(0x80600100), ker
(bootloader) nel_addr(0x80608000)
(bootloader) -------------------hboot boot time:20899 msec
FAILED (status read failed (Unknown error))
finished. total time: 2.738s
C:\Users\Ryan\DNA S-OFF>adb push soffbin3 /data/local/tmp/
error: device not found
C:\Users\Ryan\DNA S-OFF>adb push soffbin3 /data/local/tmp/
2318 KB/s (9496 bytes in 0.004s)
C:\Users\Ryan\DNA S-OFF>adb shell chmod 744 /data/local/tmp/soffbin3
C:\Users\Ryan\DNA S-OFF>adb shell su -c "/data/local/tmp/soffbin3"
C:\Users\Ryan\DNA S-OFF>adb shell su -c "/data/local/tmp/soffbin3"
C:\Users\Ryan\DNA S-OFF>adb reboot bootloader
Re: [S-Off] Facepalm S-Off for HTC Devices
Nice! Time for all the rezound devs to leave lol.
Sent from my ADR6425LVW using xda premium
Nice! Time for all the rezound devs to leave lol.
Sent from my ADR6425LVW using xda premium
You guys are exceptional.
Great work folks. I followed your instructions, and it worked flawlessly.
"MONARUDO PVT SHIP S-OFF"
Now that you're done kicking ass, go chew some bubble gum.
Great work folks. I followed your instructions, and it worked flawlessly.
"MONARUDO PVT SHIP S-OFF"
Now that you're done kicking ass, go chew some bubble gum.
you didnt follow the instructions.
Code:
C:\Users\Ryan\DNA S-OFF>fastboot flash zip PL8320000-DNA.zip
sending 'zip' (36905 KB)...
OKAY [ 2.543s]
writing 'zip'...
(bootloader) adopting the signature contained in this image...
(bootloader) zip header checking...
(bootloader) zip info parsing...
FAILED (remote: 99 unknown fail)
finished. total time: 2.765safter this fails, flash it one more time then continue.
Perhaps your DL of the zip was corrupt. Mine said:
"C:\HTC Bootloader>fastboot flash zip PL8320000-DNA.zip
sending 'zip' (36905 KB)...
OKAY [ 3.135s]
writing 'zip'...
(bootloader) adopting the signature contained in this image...
FAILED (remote: 92 supercid! please flush image again immediately)
finished. total time: 3.219s"
This is out standing My HTC ONE XL is now shiped s-off
You guys are the bomb and will be getting some payola
Time to pay up people
beaups - m7forsoff@gmail.com - http://xdaforums.com/donatetome.php?u=711482
jcase - jcase@cunninglogic.com - http://xdaforums.com/dona....php?u=2376614
dsb9938 - cubedrom@hotmail.com - http://xdaforums.com/dona....php?u=2963256
dr_drache - biomatrix@gmail.com - https://www.paypal.com/cgi-bin/websc...=6LRSY8MT8P3A6
You guys are the bomb and will be getting some payola
Time to pay up people
beaups - m7forsoff@gmail.com - http://xdaforums.com/donatetome.php?u=711482
jcase - jcase@cunninglogic.com - http://xdaforums.com/dona....php?u=2376614
dsb9938 - cubedrom@hotmail.com - http://xdaforums.com/dona....php?u=2963256
dr_drache - biomatrix@gmail.com - https://www.paypal.com/cgi-bin/websc...=6LRSY8MT8P3A6
Last edited:
Thanks guys!!!! Worked great here. My DNA had SuperCID of 1111111 from following JCase's unlock in December. I was running Viper ROM w/ elkay's kernel.
Will be making some donations!!
Does beaups need a new phone? (I thought I read his got bricked during the creation of this s-off exploit?)
Will be making some donations!!
Does beaups need a new phone? (I thought I read his got bricked during the creation of this s-off exploit?)
Worked perfectly. Thanks 
For those having trouble, this is what I did...hopefully to make it easier seeing from another user.
For those having trouble, this is what I did...hopefully to make it easier seeing from another user.
- I downloaded and unzipped the soffbin3 file into the same folder where adb.exe and fastboot.exe is located on my PC (in my case, C:\android\platform-tools)
- I downloaded the PL8320000-DNA.zip and placed it in that same folder (I did not extract it. I left it as a .zip file)
- I navigated my PC to the C:\android\platform-tools folder.
- I held down the SHIFT key and right clicked in the folder and chose, Open command window here
- Then I entered the following...
Code:
[B]C:\android\platform-tools>[/B]adb shell getprop ro.aa.modelid
* daemon not running. starting it now on port 5037 *
* daemon started successfully *
PL8320000
[B]C:\android\platform-tools>[/B]adb reboot bootloader
[B]C:\android\platform-tools>[/B]fastboot oem rebootRUU
...
(bootloader) Start Verify: 3
OKAY [ 0.045s]
finished. total time: 0.045s
[B]C:\android\platform-tools>[/B]fastboot flash zip PL8320000-DNA.zip
sending 'zip' (36905 KB)...
OKAY [ 2.795s]
writing 'zip'...
(bootloader) adopting the signature contained in this image...
FAILED (remote: 92 supercid! please flush image again immediately)
finished. total time: 2.862s
[B]C:\android\platform-tools>[/B]fastboot oem boot
...
(bootloader) monarudo_vibrate_device_time(): vibrate 200(ms)...
(bootloader) Boot/Recovery signature checking...
(bootloader) TZ_HTC_SVC_HASH ret = 0
(bootloader) setup_tag addr=0x80600100 cmdline add=0x003147C8
(bootloader) TAG:Ramdisk OK
(bootloader) TAG:skuid 0x32401
(bootloader) TAG:hero panel = 0x94005B
(bootloader) TAG:engineerid = 0x0
(bootloader) TAG: PS ID = 0x0
(bootloader) TAG: Gyro ID = 0x1
(bootloader) Device CID is super CID
(bootloader) CID is super CID
(bootloader) Backup CID is empty
(bootloader) setting->cid::11111111
(bootloader) serial number: FA2B9S502189
(bootloader) commandline from head: console=ttyHSL0,115200,n8 androidboot
(bootloader) .hardware=dlx user_debug=31
(bootloader) command line length =793
(bootloader) active commandline: poweron_status=1 reset_status=0 board_mo
(bootloader) narudo.disable_uart3=0 diag.enabled=0 board_monarudo.debug_u
(bootloader) art=0 userdata_sel=0 androidboot.emmc=true androidboot.pages
(bootloader) ize=2048 skuid=0 ddt=20 ats=0 androidboot.lb=1 td.td=1 td.s
(bootloader) f=1 td.ofs=328 td.prd=1 td.dly=0 td.tmo=300 hlog.ofs=628 un.
(bootloader) ofs=694 imc_online_log=0 androidboot.efuse_info=NNSL androi
(bootloader) dboot.baseband=1.00.00.1023_3 androidboot.cid=11111111 andro
(bootloader) idboot.devicerev=3 androidboot.batt_poweron=good_battery and
(bootloader) roidboot.carrier=ALL
(bootloader) aARM_Partion[0].name=misc
(bootloader) aARM_Partion[1].name=recovery
(bootloader) aARM_Partion[2].name=boot
(bootloader) aARM_Partion[3].name=system
(bootloader) aARM_Partion[4].name=local
(bootloader) aARM_Partion[5].name=cache
(bootloader) aARM_Partion[6].name=userdata
(bootloader) aARM_Partion[7].name=devlog
(bootloader) aARM_Partion[8].name=pdata
(bootloader) aARM_Partion[9].name=extra
(bootloader) aARM_Partion[A].name=radio
(bootloader) aARM_Partion[B].name=adsp
(bootloader) aARM_Partion[C].name=dsps
(bootloader) aARM_Partion[D].name=radio_config
(bootloader) aARM_Partion[E].name=modem_st1
(bootloader) aARM_Partion[F].name=modem_st2
(bootloader) aARM_Partion[10].name=cdma_record
(bootloader) aARM_Partion[11].name=reserve
(bootloader) partition number=18
(bootloader) Valid partition num=18
(bootloader) setting_get_bootmode() = 9
(bootloader) smem 8CF04000 (phy 8CF04000): TZ_HTC_SVC_UPDATE_SMEM ret = 0
(bootloader) TZ_HTC_SVC_ENC ret = 0
(bootloader) TZ_HTC_SVC_ENC ret = 0
(bootloader) TZ_HTC_SVC_DISABLE ret = 205643776 (0xC41E000)
(bootloader) jump_to_kernel: machine_id(4060), tags_addr(0x80600100), ker
(bootloader) nel_addr(0x80608000)
(bootloader) -------------------hboot boot time:25308 msec
FAILED (status read failed (Too many links))
finished. total time: 4.691s
[B]C:\android\platform-tools>[/B]adb push soffbin3 /data/local/tmp/
2318 KB/s (9496 bytes in 0.004s)
[B]C:\android\platform-tools>[/B]adb shell chmod 744 /data/local/tmp/soffbin3
[B]C:\android\platform-tools>[/B]adb shell su -c "/data/local/tmp/soffbin3"
[B]C:\android\platform-tools>[/B]adb reboot bootloader
[B]C:\android\platform-tools>[/B]Gentlemen,
One thing i noticed is i too got the "device not found" try doing an "adb devices". Mine didn't show. I disabled and re-enabled debugging, all is good now. S-Off, woot! Now i can actually flash the new radios w/o having to RUU.
One thing i noticed is i too got the "device not found" try doing an "adb devices". Mine didn't show. I disabled and re-enabled debugging, all is good now. S-Off, woot! Now i can actually flash the new radios w/o having to RUU.
Hey guys. Last night I RUUed and installed the recent OTA. I still ahve my unlock_code.bin file. I haven't attempted to re-unlock it with said file, previously no time to do so. Now that I have time, can I unlock it with the previous unlock_code.bin and then obtain S-Off?
Similar threads
Top Liked Posts
-
There are no posts matching your filters.
-
358Welcome to Facepalm S-Off for the HTC Droid DNA
Credits and terms:
Exploit by beaups, full guide, testing, and concept by jcase and beaups. Thanks to dsb9938 and dr_drache for support and testing. Thanks also to all of the regulars at teamandirc. Thanks to jcase for recently modifiying the process to make it even easier and more reliable.
Both beaups and jcase will collect the applicable active bounties. Further donations are greatly appreciated and can be sent to:
beaups - Donate to beaups
jcase - Donate to jcase
dsb9938 - Donate to dsb9938
dr_drache - Donate to dr_drache
You can also come by irc for support or just to say thanks: #FacePalm http://chat.andirc.net:8080/?channels=facepalm
While this process shouldn’t be too risky, bricks can happen. None of us will be accountable. If you are worried, don’t do it.
This is a pretty simple method, however, you will need to have a working adb and fastboot environment. This method will work on any operating system that supports adb and fastboot. You should understand how to use a terminal window in your O/S. If you don’t understand adb and fastboot, you probably don’t need S-off.
Lastly, the work herein should not be stolen, repackaged, one clicked, bat’d, etc. The binary contained in DNA-rescue.img is not GPL and may not be reused, integrated into other work, reposted, or redistributed without our permission. The kernel portion of DNA-rescue.img is derived from unmodified HTC source. That source code can be obtained from htcdev.
For this to work, you must be HTCdev unlocked and have superCID (custom recovery/root is optional), see the thread below for help and information regarding obtaining superCID, unlock, etc. If you have taken the OTA for the DNA (sw version 2.xx) without FIRST obtaining superCID, there is no superCID nor s-off method for you currently. Note this thread is provided for convenience only. Please look for support for superCID/unlock in it's proper thread, do NOT clutter this thread with support requests regarding obtaining superCID and/or unlock! If you try this process without superCID, it will not work, and you may have issues:
SuperCID for HTC Droid DNA:
http://xdaforums.com/showthread.php?t=2109862
Download modified boot.img:
http://d-h.st/pQy
Download signed firmware:
http://d-h.st/nOo 8fa1cf193559d34279d2b1c1aa8c29
1)Code:adb reboot bootloader
2)(wait for black HTC Screen)Code:fastboot oem rebootRUU
3)After a while, You should see the following error “FAILED (remote: 92 supercid! please flush image again immediately)”Code:fastboot flash zip PL8320000-DNA.zip
4) Immediately issue the following command:
Code:fastboot boot DNA-rescue.img
5) After android is FULLY booted
Code:adb reboot bootloader
6) You should see what you are looking for!
If you need help or just care to say thanks, join us on IRC: #FacePalm http://chat.andirc.net:8080/?channels=facepalm
Enjoy.
Getting an error 99 instead of error 92 after step 3?
Perform a few FULL power-downs and boots. Also, others have reported clearing caches in recovery helps as well.13rainabba,
This is not an OPEN DEVELOPMENT community, this is a public development community. We made decisions not to obfuscate what is going on, so the community could learn, but choose to keep the rights and source to the project. It is free for personal use, but not opensource and not free to distribute.
Hell I remember you flipping out over someone distributing a GPL licensed binary you compiled, you have no room to talk here.
You like to cause problems with any AndIRC related project (time and time again), you have issues with us it is very clear, but I'm going to ask you nicely to just go away. If you don't like how we handle our projects, go create your own instead of complaining.
Every instance so far where someone has had this issue AND succeeded seems to require AT LEAST wiping data, but sometimes as much as an RUU flash to stock, and at worst, a complete RUU, re-lock, and start from scratch as if the phone was fresh out of the box.
---------- Post added at 03:43 PM ---------- Previous post was at 03:40 PM ----------
Why do you people keep insisting this? Because the OP "demanded" that nobody do it? That won't hold water and so far I can't see any reason a one-click can't be made. It might not be safe and since only the noobs would "need" it, it's likely a bad idea, but there are those like myself who will often create such scripts because they end up being useful for any number of reasons and I'll be damned if someone things that in an OPEN DEVELOPMENT community, that something like a SCRIPT won't be released because someone said so.
Your reply to this person is offensive on so many levels. You could at least take time to explain yourself (or link to such an explanation).8Now that you guys have S-OFF, you can use my RegawMOD Bootloader Customizer!
Just have someone make a plugin for the HTC One <insert model here> and then customize away!
http://xdaforums.com/showthread.php?t=17864988
It does work, just because you didn't get it working doesnt mean it doesnt work, please edit you post
