[GUIDE] How to bypass authentication and flash in EDL with NO auth for FREE

[kormoran2022]

Thanks to:
chaosmaster / k4y0z: GitHub / XDA
xyzz / xyz`: GitHub / XDA
Dinolek: GitHub / XDA

• How to install:

1. Download the attached file: VD171_MTK-bypass.zip.

2. Extract the file and open the folder.

3. Run and install python: python-3.9.1-amd64.exe.
Keep atention: You need to select "Add Python to PATH" before starting the installation.

4. Open cmd or powershell and execute this command:
pip install pyusb pyserial json5

5. Go to the Driver folder and right-click on the cdc-acm.inf file, then click Install and then, close window.

6. Run and install filter wizard: libusb-win32-devel-filter-1.2.6.0.exe.

7. Launch filter wizard.

8. Select Install a device filter and click Next.

9. Connect powered off phone with volume- button to boot in EDL mode.

10. Once you see new MediaTek USB Port in the list, select it and click Install.

Now, you are ready for bypassing EDL !

• How to bypass:

1. Go to the Bypass folder. Run the script: bypass.bat.

2. Connect powered off phone with volume- button to boot in EDL mode.

3. Once you get "Protection disabled" at the end, without disconnecting phone and usb, run SP Flash Tool.

4. Once the SP Flash Tool opens, click Options > Options > Connection.

5. Select UART mode and select Baud rate to 921600.

Now, you are ready for flashing !

• How to update:

1. Download latest release of the tool: https://github.com/MTK-bypass/bypass_utility/releases/latest

2. Download latest release of payloads: https://github.com/MTK-bypass/exploits_collection/releases/latest

3. Extract the content of both files to the Bypass folder.

Now, you are updated !

• How does the bypass work?

Dissecting a MediaTek BootROM exploit

A bricked Xiaomi phone led me to discover a project in Github that uses a MediaTek BootROM exploit that was undocumented. The exploit was found by Xyz, and implemented by Chaosmaster. The initial exploit was already available for quite a while. Since I have managed to revive my phone, I am documenti

tinyhack.com

All Credits To:
chaosmaster / k4y0z: GitHub / XDA
xyzz / xyz`: GitHub / XDA
Dinolek: GitHub / XDA



Do you need help with your MERLIN device ?
Read this FAQ: https://forum.xda-developers.com/t/...for-merlin-redmi-note-9-redmi-10x-4g.4225163/


#NoAuth #NoAuthentication #No-Auth #No-Authentication #MediaTek #Xiaomi
#MiAuth #MiAuthentication #Mi-Auth #Mi-Authentication #XiaoMiAuth #free
#XiaoMiAuthentication #XiaoMi-Auth #XiaoMi-Authentication #unbricking
#unbricked #unbrick
#MTK #MT6572 #MT6735 #MT6737 #MT6739 #MT6750 #MT6765 #MT6762
#MT6761 #MT6768 #MT6771 #MT6785 #MT8127 #MT8163 #MT8173 #MT8695

is it good for qualcomm devices too?

 

[VD171]

is it good for qualcomm devices too?

No.
This is for mediatek devices only.

 

[kormoran2022]

No.
This is for mediatek devices only.

do you have any solution for qualcomm? i dont want to pay somebody to login to flash

 

[VD171]

do you have any solution for qualcomm? i dont want to pay somebody to login to flash

I have no ideia. I'm sorry.

 

[sturzerblitz]

Thanks for this I kinda have hope for unbricking my hardbricked Redmi 9 that keeps bootlooping everytime it is connected.

Just like to ask, I've tried this but everytime I try to connect, the phone keeps bootlooping and I can't achieve the state where the bypass has been succesful and leave the phone connected while opening the SP Flash tool to download my specified stock firmware because my Redmi 9(lancelot) keeps on reconnecting because of the bootloop. In this case do I really need to open the back case of my phone to manually remove the battery inside? Is there a method where I do not?

 

[xMidnite]

Try to flash using the firmware upgrade mode.

Sir i hope ur still active on this forum , i have device 11T mt6893 , no recovery and fastboot i used every corners of google gave me but nothing happens , device still bootloops

 

[xMidnite]

Thanks to:
chaosmaster / k4y0z: GitHub / XDA
xyzz / xyz`: GitHub / XDA
Dinolek: GitHub / XDA

• How to install:

1. Download the attached file: VD171_MTK-bypass.zip.

2. Extract the file and open the folder.

3. Run and install python: python-3.9.1-amd64.exe.
Keep atention: You need to select "Add Python to PATH" before starting the installation.

4. Open cmd or powershell and execute this command:
pip install pyusb pyserial json5

5. Go to the Driver folder and right-click on the cdc-acm.inf file, then click Install and then, close window.

6. Run and install filter wizard: libusb-win32-devel-filter-1.2.6.0.exe.

7. Launch filter wizard.

8. Select Install a device filter and click Next.

9. Connect powered off phone with volume- button to boot in EDL mode.

10. Once you see new MediaTek USB Port in the list, select it and click Install.

Now, you are ready for bypassing EDL !

• How to bypass:

1. Go to the Bypass folder. Run the script: bypass.bat.

2. Connect powered off phone with volume- button to boot in EDL mode.

3. Once you get "Protection disabled" at the end, without disconnecting phone and usb, run SP Flash Tool.

4. Once the SP Flash Tool opens, click Options > Options > Connection.

5. Select UART mode and select Baud rate to 921600.

Now, you are ready for flashing !

• How to update:

1. Download latest release of the tool: https://github.com/MTK-bypass/bypass_utility/releases/latest

2. Download latest release of payloads: https://github.com/MTK-bypass/exploits_collection/releases/latest

3. Extract the content of both files to the Bypass folder.

Now, you are updated !

• How does the bypass work?

Dissecting a MediaTek BootROM exploit

A bricked Xiaomi phone led me to discover a project in Github that uses a MediaTek BootROM exploit that was undocumented. The exploit was found by Xyz, and implemented by Chaosmaster. The initial exploit was already available for quite a while. Since I have managed to revive my phone, I am documenti

tinyhack.com

All Credits To:
chaosmaster / k4y0z: GitHub / XDA
xyzz / xyz`: GitHub / XDA
Dinolek: GitHub / XDA



Do you need help with your MERLIN device ?
Read this FAQ: https://forum.xda-developers.com/t/...for-merlin-redmi-note-9-redmi-10x-4g.4225163/


#NoAuth #NoAuthentication #No-Auth #No-Authentication #MediaTek #Xiaomi
#MiAuth #MiAuthentication #Mi-Auth #Mi-Authentication #XiaoMiAuth #free
#XiaoMiAuthentication #XiaoMi-Auth #XiaoMi-Authentication #unbricking
#unbricked #unbrick
#MTK #MT6572 #MT6735 #MT6737 #MT6739 #MT6750 #MT6765 #MT6762
#MT6761 #MT6768 #MT6771 #MT6785 #MT8127 #MT8163 #MT8173 #MT8695

Thanks for this guide now my phone is okay , i message you but i did read all the comments , Xiaomi 11T device fix thank you again a lot

 

[VD171]

Thanks for this guide now my phone is okay , i message you but i did read all the comments , Xiaomi 11T device fix thank you again a lot

Good work, my friend.
You are welcome

 

[xMidnite]

Good work, my friend.
You are welcome

btw i had a problem , im on subscription of Miuivs but i tried miui global 13.0.3 and 13.0.5 then flash MIUIvs device will bootloop even got unlock bootloader.

 

[Jazzda]

After flashing miui V12.5.6.0.RJOEUXM during booting I get an error message stating:
dm-verity is corrupted, with a few more lines
and the phone enters in bootloop

Can I use SP tool with EDL to solve it?

 

[Rose3007]

I'm running bypass.bat and it shows error like this

Any solution?

Device : RN9 (merlin)

 

[VD171]

I'm running bypass.bat and it shows error like this

Any solution?

Device : RN9 (merlin)

Try running as administrator.

 

[dngr.fun]

Hi, men i can´t get your tool running, tried all the versions, updated payloads, reinstalled python and so, what can I do?

 

[luridphantom]

Hi, men i can´t get your tool running, tried all the versions, updated payloads, reinstalled python and so, what can I do?View attachment 5839717

pip install pyserial

your python env doesn't have that package

 

[VD171]

Hi, men i can´t get your tool running, tried all the versions, updated payloads, reinstalled python and so, what can I do?View attachment 5839717

As @luridphantom said, you need install python modules before running the tool.

 

[kuunars26]

Good work, my friend.
You are welcome

Hi, does this mean that there is a working bypass for mt6893??? I have a nord 2 5G that I would love to try this on.

 

[issah12]

i deleted all my redmi 9 partitions using mtk client can any one help me save the phone .the phone was stuck in a boot loop when i tried to down grade from miui 13 to 12