Added a stock recovery image generated with install-recovery.sh and boot.img(Generated from A1601EX_11_OTA_002_all_201704120142_wipe.zip) for those who don't have stock recovery image
Download Stock recovery of 20170412 : https://drive.google.com/open?id=0B1...3g5V3BuTlNYdlU
In short, It seems like the process was done by a tool from phone repair services. The tool itself did try to connect to an oppo server when it's opened. Anyway, lets start
Benefits in comparison with other known old root method:
1.No modification to system.img, no red status bar "root detected", no need to replace SystemUI.
SOMETHING YOU HAVE TO KNOW BEFORE DOING
*NOTE:This method uses meta mode*
1.You need a clean install 6.0 stock rom(factory reset)(6.0 Stock firmware installed by stock recovery not twrp, all the twrp for F1s are buggy).
*why buggy? take a look at /cache/recovery/xxx.log, you'll find out the ported recovery was compiled with different PixelFormat and also many different specifications, that's why the twrp recovery often give you a black screen.
2.The twrp automatically did some modifications with your system.img to prevent stock recovery being recovered at boot, that might be the reason everyone see the read status bar "root detected"(modification detected).
3.The flash tool will only work when you have mtk driver installed properly on your PC.
4.The new added dm-varity in oppo 6.0 rom will cause /data become unreadable with recovery, thus a format of /data is required (systemless root needs /data readable with recovery because they put su.img in /data).
5.Until now, I think this CTR recovery is the most stable recovery for oppo F1s
Preparations : Installation & Downloads before rooting process
1.Install mtk driver:
If you haven't have mtk drivers installed, you can follow this tutorial to install it on your PC
2.Download DownloadTool_1612.8.exe here
3.Download a Flashtool flashable stock rom here(Any build number version is okay, but need to match your phone's hardware specifications. 3GB ram = mt6750, 4GB ram= mt6755. Even you just want to flash a single partition, the FlashTool still need you to load a full firmware,so you have to download it.)
4.Download newest 6.0 stock firmware zip( You can use your own or here is a 20170412 6.0 build)
5.Download newest Magisk flashable zip here
6.Download a little modified CTR here with "ro.product.device=A1601" which can open all the stock firmware package. (modified from this CTR recovery (original CTR credits @BouyaPK) )
Good! Now you are ready to root your device !
Here's the steps:
1. Copy magisk, 6.0 stock firmware zip to your external sd card( internal storage may had been encrypted sometimes)
2.If you've flashed TWRP on this device before, you have to revert it back to stock recovery(otherwise you can skip this step)[if you don't have stock recovery, you can use this 6.0 stock recovery i generated here here]
3.Wipe all data and install stock firmware zip by stock recovery, after the installation, choose power-off option in recovery, don't boot the device
4.Video Demonstration for this step:
Open DownloadTool_1612.8.exe, choose "Developement Mode", enter password "oppodeve", then uncheck all partitions, leave only recovery checked, then select CTR recovery image as target. ==>Press start ==>Hold phone's volume up(when your phone is off) and connect it to PC with usb cable ==> the PC detected it ==> release volume up button.
5.After flashing recovery, don't boot up the system, hold Volume down key+ power key boot into CTR recovery, you have to wipe /data first
6.Click "Mounts/Storage" ==> Click "Format /data" ==> back to main menu ==> Click "Install zip" ==> select the magisk zip and install
7.reboot ==> select no when ask fix stock recovery
8. you have root with SafetyNet passed.
Proof Of SafetyNet On A1601 Marshmallow Rooted Rom