General [Camellia/Camellian/Any other MTK devices] Bootloader Unlock Exploit Tool

[Gio1906]

[READ BEFORE USE]

1st Disclaimer: This tool is exploring a known security flaw to unlock the device. THEREFORE IT IS NOT CONSIDERED SAFE TO USE, IF YOU USE IT, YOU'RE DOING AT YOUR OWN RISK. Nor me or the tool's creator are responsible for what you do with this tool or it's consequences. Your warranty is null and void.

You've been warned.

2nd Disclaimer: I'm not this tool's creator. All credits goes to them, I'm just posting it here for convenience.

We usually have to wait 7 days to unlock the bootloader of Xiaomi devices, right? Well, with this tool, you can cut off that timer on MTK devices, such as Poco M3 Pro/Redmi Note 10 5G.



How to Use:

1st: Download and unpack the 7zip file.
2nd: Install the drivers inside, both mtk drivers AND USB DK (x86 for 32-bit OS and x64 for 64-bit OS)
3rd: Reboot PC and turn off the device to be unlocked.
4th: Run UnlockBootloader.bat, it'll keep attempting to link, that's normal
5th: Connect your device. Either on pre-loader mode (completely off) or BROM mode (Hold Vol- while connecting the cable)
6th: Upon estabilishing a successful link, the tool will unlock your phone.

And voila, quick-unlocked.


In case of dm-verity corruption, just do this:

fastboot reboot fastboot

fastboot --disable-verity --disable-verification flash vbmeta_a [insert the vbmeta's path here]\vbmeta.img

fastboot --disable-verity --disable-verification flash vbmeta_b [insert the vbmeta's path here]\vbmeta.img

 

[nanchilanto]

Unlock bootloader.bat is just opens and closes immediately....anything I'm missing here ?

 

[Gio1906]

Unlock bootloader.bat is just opens and closes immediately....anything I'm missing here ?

Have you installed usbdk for your PC?

 

[nanchilanto]

Have you installed usbdk for your PC?

Yep , I installed the drivers , restarted the laptop. Tat unlock.bat is just opening and closing.

 

[Gio1906]

Yep , I installed the drivers , restarted the laptop. Tat unlock.bat is just opening and closing.

Phyton installed as well?

 

[nanchilanto]

Phyton installed as well?

Yep I tried tat too.... But no luck , anyways thanks mate. I appreciate it

 

[asen26]

Hi, I' ve just tested it now and here what I have :

Anyone know how to solve that ?
Thank in advance

 

[Gio1906]

Hi, I' ve just tested it now and here what I have :
View attachment 5624033

Anyone know how to solve that ?
Thank in advance

I should have added: Phyton is needed as well.

 

[Gio1906]

Yep I tried tat too.... But no luck , anyways thanks mate. I appreciate it

As for you, I forgot to reply, my apologies... So, let's recap: mtk drivers, usbdk, phyton... I suppose libusb libraries and device hook are installed as well, right?

 

[Gio1906]

Yep I tried tat too.... But no luck , anyways thanks mate. I appreciate it

As for you, I forgot to reply, my apologies... let's recap: mtk drivers, usbdk, phyton... I suppose libusb libraries and device hook are installed as well, right?

 

[nanchilanto]

As for you, I forgot to reply, my apologies... let's recap: mtk drivers, usbdk, phyton... I suppose libusb libraries and device hook are installed as well, right?

Everything installed , i read another article about unblocking mtk devices and followed the detailed steps by installing python etc.. Problem from my side is tat .bat file just opens and closes it's not stable at all... Anyways thanks again I have already unblocked my device through miui unlock ..

 

[wetito]

How to unlock Mediatek bootloader using mtkclient

www.hovatek.com

 

[acid_shivers_hickoxx]

How to unlock Mediatek bootloader using mtkclient

www.hovatek.com

MY HERO!!! thank you so much!!!!

 

[Saracawalk]

Here, i also using this tools when unlock or locked back bootloader

 

[berttest123123]

Hi everyone, so is it possible to unlock the bootleader without ereasing personal data using this method?

 

[Saracawalk]

Yes, no need erase personal data.

 

[berttest123123]

But i see in the guide linked by @wetito that one of the steps is
python mtk e metadata,userdata,md_udc
Isn't this going to delete user data? Can i just skip thiis step?

 

[Saracawalk]

use the tools I pinned above.

 

[Saracawalk]

Here, i also using this tools when unlock or locked back bootloader

Requirements :
• pc/laptop
• Windows 10/11 (8/8.1 possible but not tested) 64bit
• Internet connection

Material :
• mtkclient-gui + driver (fix all errors)

Steps:
1. Download the material above
2. Extract the driver
3. Go to the extracted driver folder
4. Right click android_winusb.inf and select install, then restart your pc
5. After restarting extract mtclient-gui
6. Go to the extracted folder mtkclient-gui
7. Double click on start.bat
8. turn off the cellphone
9. back to the laptop, select Unlock bootloader
10. Type y, then enter
11. press and hold vol up + vol down (approximately 5 seconds then connect to pc (still hold down the volume button)
12. release if the cellphone has been detected in cmd
13. wait for it to finish

 

[Gio1906]

But i see in the guide linked by @wetito that one of the steps is
python mtk e metadata,userdata,md_udc
Isn't this going to delete user data? Can i just skip thiis step?

Both the tools I and wetito posted require userdata wipe. Saracawalk's one doesn't require it.