This is for the Sprint HTC One Max, not sure how other devices will react. rumrunner is for more than just the Sprint version though.
I TAKE NO CREDIT. IM JUST PUTTING A GUIDE TOGETHER. ALL CREDIT GOES TO PEOPLE WHOM MADE THIS HAPPEN.
Credit: (In no order) Please donate to them! They deserve it.
rumrunner: SOFF program.
scotty1223: Unlocking/removing tampered flag
Flyhalf205: Custom recoveries
carl1961: Unsecure kernel
HTC for an awesome phone
If I forgot anyone, let me know! Everyone that made this happen is awesome!
DISCLAIMER: IT IS NOT MY FAULT IF YOUR PHONE YELLS AT YOU AND RUNS AWAY BECAUSE YOU DID SOMETHING WRONG.
Step One: Unlock your bootloader at htcdev.com. Create an account and follow their instructions. When it asks you for your device put "all other support devices"
Step Two: Make sure your ADB/Fastboot prompts are working. Here's how we check that:
a. Make sure USB debugging is on.
b. Plug in your phone, then open your adb prompt.
c. Issue the command adb devices. If your serial number is shown, adb is working.
d. While still in the adb prompt, issue the command adb reboot bootloader. Your phone will reboot in to your bootloader
e. Now issue the command fastboot devices. If your serial number is shown, fastboot is working.
f. Reboot your device so it's on and fully boot up. It's time to get set up!
Step Three, Getting all the files needed on your craptop. (Computer, just kidding)
a. Download your choice of recovery from flyhalf205's thread (TWRP didn't play nice with my phone, so I used CWM, but your results my vary).
b.Then download this superuser.zip. :http://www.mediafire.com/download/v2.../superuser.zip Place it on your phone somewhere.
c. Then download rumrunner from beaups' thread: http://forum.xda-developers.com/show....php?t=2525375
d. Then download carl1961's unsecure kernel : http://www.mediafire.com/download/rr...ure_kernel.zip
Step Four: Lets do this thing!
a. First, we flash a custom recovery. Place the recovery you downloaded from flyhalf205 into the same directory as your adb/fastboot stuff.
b. Plug in your phone, issue the command adb devices just to make sure there is a connection. (can never be too careful now.)
c. If all is good and a serial number is shown, issue the command adb reboot bootloader.
d. You should see a string of words on your phone's bootloader saying "fastboot usb". Issue the command fastboot flash recovery "NAME OF RECOVERYFILEHERE".img. If all goes well. You now have a custom recovery, woop!
BOOT INTO THE RECOVERY AND MAKE A NAND. NOT OPTIONAL.
While in recovery, go ahead and flash the superuser.zip as you would do any other zip.
e. Now open the kernel and extract the boot.img file, place it in the adb/fastboot place.
f. Boot back into the bootloader, and make sure you're in fastboot. Issue the command fastboot flash boot boot.img. If all is well, the unsecure kernel is now on your phone! Now delete the boot.img from that directory (It'll mess with rumrunner).
g. Unzip the rumrunner contents into the adb/fastboot directory and run the soju.exe. Follow the prompt. If all goes well, you should now have an SOFF television in your hand .
HOW-TO Re-enable your fingerprint scanner!
You have to relock (after SOFFing it) the bootloader.
All credit goes to scotty1223.
a. Follow this OP to lock your bootloader. : http://forum.xda-developers.com/show....php?t=2540004
b. Follow this OP to remove the tampered flag on your bootloader : http://forum.xda-developers.com/show....php?t=2540024
I tested all of this on my own Sprint HTC One Max, and it has all worked with no side effects. After relocking and removing the tampered flag my fingerprint reader was 100% working again.
I'll help if I can. Have fun everyone!