[BOOTLOADER][SCH-I705] VZW Galaxy Tab 2 7.0 LTE bootloader UNLOCKED!

nutpn said:

Thanks, we appreciate this.
I hope the note2 gets some unlocked love also

Click to expand...

Click to collapse

MrHyde03 said:

There you go bricking again haha. It's saying it can't find the image at /sdcard/aboot.img
Verify it's actually located at /sdcard/aboot.img

Code:

ls /sdcard/ 
[I]and check to see if you see aboot.img listed[/I]

. Did you put it on the external sd card? /mnt/extSdCard/aboot.img

Click to expand...

Click to collapse

MrHyde03 said:

The Verizon Galaxy Tab 2 7.0 LTE now has an unlocked bootloader!

READ FIRST
*** *** *** *** Disclaimer *** *** *** ***
I am not responsible if you break your stuff. READ READ READ
If you DO NOT own a VERIZON Galaxy Tab 2 7.0 SCH-I705 then DO NOT flash this! If you have not verified and flash this on a p3xxx tab, something will break and I will not help you!
Verizon MAY find a way to block this in the future. But for now, it works.
​

We have gained access to an insecure bootloader (aboot.img) from a "prototype" VZW Galaxy Tab 2 7.0 obtained by XDA user id_ram.

How to unlock:
1. Root your device using my guide How to root your VZW G Tab 2 7.0 LTE
2. Download this insecure aboot.img to the root of your SD Card Insecure aboot.img
3. Make sure the MD5 of the above image matches this: f4fbc4c5056f62498b378873bf8e3dca
4. Turn ON USB Debugging: settings > developer options > USB Debugging (checked) [Should have already been done when you rooted!]
5. From Terminal emulator or ADB do the following:
6. MAKE SURE TO VERIFY BOOT LOADER STATE BEFORE FLASHING ANYTHING ELSE!
-Download mode will appear landscape
-SAMSUNG boot screen will flash very quickly

Don't confuse the L with a 1 !!!
CORRECT: mmcb l k0p5
INCORRECT: mmcb 1 k0p5​

If you want to verify p5 is your bootloader (aboot), run the following command as root

Code:

cat /sys/block/mmcblk0/mmcblk0p5/uevent

If you see this: PARTNAME=aboot, listed in the output you can continue.
If it does not say PARTNAME=aboot, STOP HERE
​

From ADB

Code:

adb shell
su
cd /sdcard/
dd if=aboot.img of=/dev/block/mmcblk0p5
reboot download

From Terminal Emulator

Code:

su
cd /sdcard/
dd if=aboot.img of=/dev/block/mmcblk0p5
reboot download

Congratulations, you now have an insecure bootloader!

NOTE: Download mode will always display QUALCOMM SECURE BOOT: ENABLE regardless of bootloader state. Don't know why, but my VZW GS3 is the same way.
NOTE2: #1 way you can tell your bootloader is unlocked is that you can dump your stock recovery.img, repackage into ODIN flashable tar (unsigned tar) and flash it with ODIN. #2 way you can tell your bootloader is unlocked is that the initial SAMSUNG splash screen display time is reduced to less than 1 second.

Once you got custom, NEVER accept an OTA!. Verizon released an OTA for the SCH-I705 that makes changes to recovery, boot, and aboot, THIS WILL MOST LIKELY BREAK YOUR ROOT AND UNLOCKED BOOTLOADER! DO NOT ACCEPT!

TO RETURN TO STOCK BOOTLOADER
PLEASE NOTE THIS WILL PROBABLY RENDER YOUR TAB USELESS AS WE DO NOT HAVE ANY SIGNED ODIN IMAGES
Follow the same procedures above, except flash this aboot instead of the insecure aboot.
Secure aboot.img (stock)
Match MD5 to this: 80f702bbdbd9928532e864d5cc441a29

Thanks to:
id_ram - for his "prototype" tab and his insecure bootloader!
AdamOutler - for SGS3 bootloader unlock method, which is where I got the information needed to flash this one
​

Click to expand...

Click to collapse