Axon 7 root without bootloader unlocked

djona12

Senior Member
Aug 25, 2012
297
96
48
Liège
@tenfar
Great work for those who don't want to / can't unlock the bootloader (Chinese and European version :().
I understand this changes the recovery to TWRP, right ? So does it permit to flash things like xposed frameworks or the locked bootloader still prevents that ?
Also, i read about someone asking for an European version of this root method, any news on that ? thanks !

EDIT : if an European version shows up, i'd be happy to try it out once i get my Axon 7 !
 
Last edited:

tenfar

Retired Recognized Developer
Jul 16, 2007
299
717
0
33
Beijing
www.tenfar.com
@tenfar
Great work for those who don't want to / can't unlock the bootloader (Chinese and European version :().
I understand this changes the recovery to TWRP, right ? So does it permit to flash things like xposed frameworks or the locked bootloader still prevents that ?
Also, i read about someone asking for an European version of this root method, any news on that ? thanks !

EDIT : if an European version shows up, i'd be happy to try it out once i get my Axon 7 !
this can change the recovery to TWRP, and the boot image i provide already verity off ,so ,we can modify system partition as we want, which means xposed framework can be install to system partition. and this is not involve bootloader unlocked. so this will not void warranty .
but we still need someone to confirm if this works on us model or not.
 

tdgillihan

Senior Member
Jul 10, 2012
1,535
1,849
113
62
Fallbrook, CA
this can change the recovery to TWRP, and the boot image i provide already verity off ,so ,we can modify system partition as we want, which means xposed framework can be install to system partition. and this is not involve bootloader unlocked. so this will not void warranty .
but we still need someone to confirm if this works on us model or not.
I can't believe that nobody has tried this yet.
 

tdgillihan

Senior Member
Jul 10, 2012
1,535
1,849
113
62
Fallbrook, CA
The Chinese users have a full flash image they can fall back on if they screw up -- US users don't have that yet.
Yeah, I know. I figured this would make people hesitant. There is a twrp backup image uploaded, but you'd probably have to unlock the bl and flash twrp to use it if you had a problem with your process. I'd do it if had one but mine hasn't shown up yet.

Sent from my Nexus 6 using Tapatalk
 

mischa_martin

Senior Member
Apr 12, 2011
311
112
43
Frankfurt
Could you explain further how you get a unsigned (or signed by yourself) kernel booted on a bootloader locked device (which should prevent exactly that).

Because if you have done nothing but flashing the boot and recovery to the device without altering anything else on the device it could mean that it doesn't check its kernel and we could flash CM on locked bootloader using that method. :confused:

Regards,
mischa_martin
 

rczrider

Senior Member
May 20, 2015
680
511
0
Markarth
I can't believe that nobody has tried this yet.
More folks (including myself!) should get their grays tomorrow, so there should be a bigger group of guinea pigs very soon :p

I'm willing to try it, but it depends on when the phone is delivered. I will probably be at work when it's delivered and I'm supposed to leave in the afternoon for a trip out of town. Not sure if I'll be able to do it before I leave (or if I'll do it while I'm gone). Monday for sure, but that's DAYS from now.
 
Last edited:

rikin93

Senior Member
Jun 28, 2016
368
277
0
Going to do this tonight on my EU version! hope for root!

---------- Post added at 03:54 PM ---------- Previous post was at 03:53 PM ----------

By attempting any of the processes listed this thread you accept full responsibility for your actions. I will not be held responsible if your device stops working, catches on fire, or turns into a hipster and claims to have been modified before it was cool.


Download the zip file and extract to your local disk.
for us :[STRIKE]http://d-h.st/Ykxd[/STRIKE] (not tested) this is base on B20 new version:http://d-h.st/KaaQ
for cn:http://d-h.st/ztXw the chinese version is base on B06
CN B07:http://d-h.st/VVlf
CN B08: http://d-h.st/bT6r
for hk & eu (a12017g) B02 :http://d-h.st/aPiC i test it on mine device, booted success.

by the test .so we can confirm that all model have same hardware. but i still don't know if this works on the real devices. what i did is flash them to my a2017 ,all boot success.

new tool:View attachment 3845893 with this you can only flash boot or only recovery .thus you can flash twrp recovery to boot partition,then you can dump stock recovery with twrp.just replace boot.img or recovery.img with the real image you want to flash to phone.
Code:
Usage: axon7root.exe -p COM4 -b -r
       Options:
       -p                             Port number eg:COM8 or 8
       -b                             write boot.img only
       -r                             write recovery.img only
       -d                             dump boot.img and recovery.img from phone(not impl yet)
Shut down your phone and press volume down + volume up the plug your phone with USB cable.

install the Qualcomm's driver .
qual comm driver :http://d-h.st/35tx when install choose WWAN the first option.

open device manager to find out the com port number which your phone is .

View attachment 3844965

right click in Explorer with SHIFT key press, open a Command Window.

in the command window, input

axon7root.exe -p 4

the 4 is my com port number in my system. change it to your's
View attachment 3844954

then follow the instructions . after the program exit, press volume up+ power to boot into TWRP recovery. do a backup is recommended.
when your boot into your system. you will need to install a superuser manager.
you should install https://play.google.com/store/apps/details?id=me.phh.superuser&hl=en

Thank Pierre-Hugues Husson for his superboot for the hink on root this without unlock bootloader

I don't have a2017u ,so i took the boot.img and twrp recovery image form idlekernel.org.thanks the owner.
and since i dont't have a2017u ,i didn't test this on a2017u. use at your own risk.
but i test this on a2017 Chinese version. it works very well. also i tested that flash the us version boot.img to my chinese version phone, the recovery works as it should.but the system boot froze. another test is success boot into system.

if you have and unlocked bootloader and you have brave souls to test this on us version, if it works ,please let us know.
@tenfar Will this erase my data if i do it using these steps for EU version
 

tenfar

Retired Recognized Developer
Jul 16, 2007
299
717
0
33
Beijing
www.tenfar.com
Going to do this tonight on my EU version! hope for root!

---------- Post added at 03:54 PM ---------- Previous post was at 03:53 PM ----------


Will this erase my data if i do it?


maybe if something goes wrong,backup your data before doing this。and you'd better use the-b option to flash boot only.so that if any thing wrong you can flash back to stock using stock recovery.


从我的 iPhone 发送,使用 Tapatalk
 

KyJelly69

Senior Member
Apr 26, 2010
828
208
0
Indianapolis
maybe if something goes wrong,backup your data before doing this。and you'd better use the-b option to flash boot only.so that if any thing wrong you can flash back to stock using stock recovery.


从我的 iPhone 发送,使用 Tapatalk
I'm confused. If he does -b only then how is he going to make a backup without twrp being installed?
should you do -r first then boot to recovery and make a backup? Then do -b
 

tdgillihan

Senior Member
Jul 10, 2012
1,535
1,849
113
62
Fallbrook, CA
I'm confused. If he does -b only then how is he going to make a backup without twrp being installed?
should you do -r first then boot to recovery and make a backup? Then do -b
I think you can backup just data without having to have twrp by just copying everything to the sd card or pc can't you? I'm more wondering what he's supposed to use in order to flash back to stock as we don't have anything yet in US. Have the EU sources been released?
 

tenfar

Retired Recognized Developer
Jul 16, 2007
299
717
0
33
Beijing
www.tenfar.com
What if twrp can't boot?so the best way is flash boot partition first or to flash twrp to boot partition, see if rooted boot image booted or twrp booted or not.if it can't boot,boot into stock recovery flash official firmware. For backing up data,you can use pc or other tools,when use pc you can use adb backup or other gui tools.the most important data are photos taken with the phone . You can find other method to backup data if you really want to test this.and thanks for those whom take the first bite of crab


从我的 iPhone 发送,使用 Tapatalk
 

tenfar

Retired Recognized Developer
Jul 16, 2007
299
717
0
33
Beijing
www.tenfar.com
I think you can backup just data without having to have twrp by just copying everything to the sd card or pc can't you? I'm more wondering what he's supposed to use in order to flash back to stock as we don't have anything yet in US. Have the EU sources been released?


You are right about the backup method,and Read all the threads,there's a full firmware for a2017g which can be flash from stock recovery.
 

r3xx3r

Senior Member
Jan 26, 2011
346
76
48
Okay, slight problem here. After following your instructions I rebooted to Android and I get a message that says "To start Android, enter your password" I have never set a password and I don't know what this message is. I have not seen it before. I have been using my fingerprint and a pin to unlock my phone but neither seem to work. Any ideas on how to get passed this??

I have the US version with a locked bootloader.
I can get into TWRP just fine.
 
Last edited:

tenfar

Retired Recognized Developer
Jul 16, 2007
299
717
0
33
Beijing
www.tenfar.com
Okay, slight problem here. After following your instructions I rebooted to Android and I get a message that says "To start Android, enter your password" I have never set a password and I don't know what this message is. I have not seen it before. I have been using my fingerprint and a pin to unlock my phone but neither seem to work. Any ideas on how to get passed this??


Have you backup your data. What model you have? This shows it works on your model. And what you need to do is format data.the password required is because the devices's data is a encrypted file system. So maybe the boot is newly flashed so the private key is different. If you didn't backup your data,flash back to stock boot image,if you have backed up your data,boot into stock recovery do a factory reset.