• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

[Guide] Root US OnePlus 8T KB2005 Unlocked

Search This thread

northmendo

Senior Member
Dec 4, 2007
326
134
California
We have root!
All you have to do is follow these few steps and have a working adb / fastboot installation
1 Download this patched boot image -
https://www.androidfilehost.com/?fid=10763459528675569219
2. Reboot your phone to the bootloader
Code:
adb reboot bootloader
3. Boot from the patched image
Code:
fastboot boot magisk_patched.img
4. Make sure you have the latest Magisk Manager Canary and do a direct install to patch your internal boot image on both slots.
Latest Magisk Manager -> https://raw.githubusercontent.com/topjohnwu/magisk_files/canary/app-debug.apk
Done!

It seems like a lot of people are still having issues. If this doesn't work for you, then my boot image is slightly different than yours. You can follow the steps from this post to pull your stock boot image. After you do that you can just patch your stock image with Magisk Canary. Pull the patched image from your phone and use it in step 3 above.

Special thanks to SAKO4444GODZ for pulling the stock boot img first
 
Last edited:
S

SAKO4444GODZ

Guest
I started this to share information and files in order to get root on the KB2005 US Unlocked 8T. I have tried the boot images from the other variations with no luck. So, lets discuss and get this thing rooted.

Maybe we can flash an older firmware? I currently can't because the system update app doesn't have the local update option.
 
S

SAKO4444GODZ

Guest
Possible Extraction method from phone

When I boot from the 2001 boot.img, it doesn't get to the system ui, but I do have ADB access and su is available. Normally it would say that su could not be found, but now it waits for authorization (which I can't give because system UI won't display and the screen is blank). If we can make magisk auto accept su from shell we can get the 2005 boot.img. Difficult but worth a shot.
 

MNoisy

Senior Member
Oct 15, 2013
204
58
Chicago
www.brightbrain.com
I got a download from OnePlus Updater. They just updated to support the 8T. I haven't got my payload dumper working yet. Heres the download if anyone wants to try it.

https://www.androidfilehost.com/?fid=10763459528675568207

Downloaded it and got the boot.img but it says Unsupported/Unkown img format when I try to patch the boot.img

This is my first time using the unloader but it extracted everything fine from what I can tell. It's just the boot img that fails in Magisk when trying to patch.

Anyone else seeing this?
 

zellleonhart

Senior Member
Jan 19, 2013
579
184
Downloaded it and got the boot.img but it says Unsupported/Unkown img format when I try to patch the boot.img

This is my first time using the unloader but it extracted everything fine from what I can tell. It's just the boot img that fails in Magisk when trying to patch.

Anyone else seeing this?
That zip is only 350MB so it won't contain a proper boot.img. You need to extract it from a full sized OTA zip which is around 3GB. So far there's no link to KB2005 full OTA zip yet.
 
D

Deleted member 11043203

Guest
I have done a full msm tool readback of the device, patched boot img, flashed and there is am encryption issue. Booted or flashed after a long boot up, it starts up plays the boot animation, then as it completes, the screen goes black. Only way out of it if it was flashed and not booted is flash unpatched boot, format and then reboot. It cannot be rooted at this time. I am compiling a kernel with kernel assisted root built in to see if that will circumvent the issue for root at least while on stock.

My device is kebab 2005 model too
 

SAKO4444GODZ

Member
Oct 21, 2020
9
0
Just flashed patched recovery - success

I decided to take the risk and flashed the patched recovery from the EU 2003 version, it worked and I have root adb shell. I'm about to extract the 'boot.img'.

---------- Post added at 11:54 PM ---------- Previous post was at 11:32 PM ----------

I decided to take the risk and flashed the patched recovery from the EU 2003 version, it worked and I have root adb shell. I'm about to extract the 'boot.img'.

Stock boot.img should be attached in a zip file

checksums for the .img (after extraction, not the zip)

MD5: d6615931724d901956c8d855af75c1c0

SHA1: 01e699edec71dea408420b1aaed6e5bbdf6a9eb3

SHA256: 2f58564817ff189177e135fcee92a5070100aaa26529bbfafbdcf34e149ee998

SHA512: 2a579411ca054488b6114d9efb5f36e2a52bc6114775f33913b33a8ff0a29af71dbf5e8bb8d632a359cb489ebb146764e515e73c8140007791f42bdfc4c3a07b
 
S

SAKO4444GODZ

Guest
Uploaded the zip correctly, it didn't upload last time, sorry.

I decided to take the risk and flashed the patched recovery from the EU 2003 version, it worked and I have root adb shell. I'm about to extract the 'boot.img'.

---------- Post added at 11:54 PM ---------- Previous post was at 11:32 PM ----------



Stock boot.img should be attached in a zip file

checksums for the .img (after extraction, not the zip)

MD5: d6615931724d901956c8d855af75c1c0

SHA1: 01e699edec71dea408420b1aaed6e5bbdf6a9eb3

SHA256: 2f58564817ff189177e135fcee92a5070100aaa26529bbfafbdcf34e149ee998

SHA512: 2a579411ca054488b6114d9efb5f36e2a52bc6114775f33913b33a8ff0a29af71dbf5e8bb8d632a359cb489ebb146764e515e73c8140007791f42bdfc4c3a07b



Uploaded the zip correctly, it didn't upload last time, sorry.
 

TheUnkn0wn

Senior Member
Nov 27, 2011
256
875
Here's a semi-broken TWRP that allows su access through adb: https://drive.google.com/file/d/1dRXJj7HZcqlNsHlVcNH0qR3sNx_uBA__
DO NOT FLASH, ONLY USE WITH BOOT COMMAND!
Code:
fastboot boot recovery.img
adb shell
dd if=/dev/block/by-name/boot_a of=/sdcard/boot_a.img
dd if=/dev/block/by-name/boot_b of=/sdcard/boot_b.img
exit
adb pull /sdcard/boot_a.img boot_a.img
adb pull /sdcard/boot_b.img boot_b.img

I borked my boot_a by flashing it with boot_b (boot_b was broken on my device), so I was unable to obtain a working boot_a.img. If someone could kindly share their KB2005 boot_a.img that would be nice.
 
  • Like
Reactions: IJoxer

Top Liked Posts

  • There are no posts matching your filters.
  • 2
    We have root!
    All you have to do is follow these few steps and have a working adb / fastboot installation
    1 Download this patched boot image -
    https://www.androidfilehost.com/?fid=10763459528675569219
    2. Reboot your phone to the bootloader
    Code:
    adb reboot bootloader
    3. Boot from the patched image
    Code:
    fastboot boot magisk_patched.img
    4. Make sure you have the latest Magisk Manager Canary and do a direct install to patch your internal boot image on both slots.
    Latest Magisk Manager -> https://raw.githubusercontent.com/topjohnwu/magisk_files/canary/app-debug.apk
    Done!

    It seems like a lot of people are still having issues. If this doesn't work for you, then my boot image is slightly different than yours. You can follow the steps from this post to pull your stock boot image. After you do that you can just patch your stock image with Magisk Canary. Pull the patched image from your phone and use it in step 3 above.

    Special thanks to SAKO4444GODZ for pulling the stock boot img first
    2
    Thanks to posts from @northmendo @TheUnkn0wn @FullOfHell @Keinta15 I have managed to get root.

    I will post everything I did thoroughly along with the output to help any others who might have trouble

    This is my current configuration:
    About Phone > Build Number: Oxygen OS 11.0.1.2.KB05AA
    About Phone > Android Version > Build Number: KB2005_15_201015

    1. download the latest canary build for magisk here
    2. download this "semi-broken" TWRP here
    3. hook your phone to your PC and issue the following commands (adb devices & fastboot devices to make sure your PC recognizes your device each time)
    - adb devices
    - adb reboot bootloader
    - fastboot devices
    Code:
    D:\android\OnePlus8T\platform-tools>adb devices
    List of devices attached
    ********        device
    
    D:\android\OnePlus8T\platform-tools>adb reboot bootloader
    
    D:\android\OnePlus8T\platform-tools>fastboot devices
    ********       fastboot
    - fastboot boot recovery.img
    Code:
    D:\android\OnePlus8T\platform-tools>fastboot boot recovery.img
    Sending 'boot.img' (64964 KB)                      OKAY [  1.411s]
    Booting                                            OKAY [  0.080s]
    Finished. Total time: 1.559s

    4. at this point your phone will have TWRP flickering\flashing every 2-3 secnonds
    5. issue the following commands (adb devices to make sure the PC sees your device)
    - adb devices
    - adb shell
    - dd if=/dev/block/by-name/boot_a of=/sdcard/boot_a.img
    - dd if=/dev/block/by-name/boot_b of=/sdcard/boot_b.img
    - exit
    Code:
    D:\android\OnePlus8T\platform-tools>adb devices
    List of devices attached
    ********        recovery
    
    D:\android\OnePlus8T\platform-tools>adb shell
    OnePlus8T:/ # dd if=/dev/block/by-name/boot_a of=/sdcard/boot_a.img
    196608+0 records in
    196608+0 records out
    100663296 bytes (96 M) copied, 0.197168 s, 487 M/s
    OnePlus8T:/ # dd if=/dev/block/by-name/boot_b of=/sdcard/boot_b.img
    196608+0 records in
    196608+0 records out
    100663296 bytes (96 M) copied, 0.189132 s, 508 M/s
    OnePlus8T:/ # exit

    6. pull the boot images from your phone to your PC and then reboot with these commands
    - adb pull /sdcard/boot_a.img boot_a.img
    - adb pull /sdcard/boot_b.img boot_b.img
    Code:
    D:\android\OnePlus8T\platform-tools>adb pull /sdcard/boot_a.img boot_a.img
    /sdcard/boot_a.img: 1 file pulled, 0 skipped. 41.3 MB/s (100663296 bytes in 2.325s)
    
    D:\android\OnePlus8T\platform-tools>adb pull /sdcard/boot_b.img boot_b.img
    /sdcard/boot_b.img: 1 file pulled, 0 skipped. 41.5 MB/s (100663296 bytes in 2.314s)
    
    D:\android\OnePlus8T\platform-tools>adb reboot

    7. copy the boot_a.img from your PC (same folder as fastboot) to the phone
    8. install magisk and launch magisk
    9. select Magisk Install > Select and Patch a File
    - navigate to the boot_a.img on your phone and click Let'g Go
    10. magisk will patch your boot_a.img and place the patched boot image in your downloads folder
    11. copy the magisk_patched.img to your PC (fastbot location)
    - I renamed mine to magisk_patched_a.img becuase I patched both boot_a.img and boot_b.img just in case
    12. issue the following commands (adb devices & fastboot devices to make sure your PC recognizes your device each time)
    - adb devices
    - adb reboot bootloader
    - fastboot devices
    - fastboot boot magisk_patched_a.img
    Code:
    D:\android\OnePlus8T\platform-tools>adb devices
    List of devices attached
    ********        device
    
    D:\android\OnePlus8T\platform-tools>adb reboot bootloader
    
    D:\android\OnePlus8T\platform-tools>fastboot devices
    ********       fastboot
    
    D:\android\OnePlus8T\platform-tools>fastboot boot magisk_patched_a.img
    Sending 'boot.img' (98304 KB)                      OKAY [  2.122s]
    Booting                                            OKAY [  0.079s]
    Finished. Total time: 2.289s

    13. your phone will now boot temporarily running the patched magisk booted image
    - this boot will take longer than normal
    - this boot will also stay on a black screen after the bootanimation (give this some time and it will bring up your lock screen)
    14. once booted this will be your temporary root
    15. launch magisk and select Magisk Install > Direct Install (recommended)
    16. reboot and enjoy
    2
    If anybody is still having issues, I wrote a quick guide here that should work for every variant and every rom release, and only requires adb and fastboot. It uses your existing boot.img so you don't have to go hunting for any packages.
    1
    Here's a semi-broken TWRP that allows su access through adb: https://drive.google.com/file/d/1dRXJj7HZcqlNsHlVcNH0qR3sNx_uBA__
    DO NOT FLASH, ONLY USE WITH BOOT COMMAND!
    Code:
    fastboot boot recovery.img
    adb shell
    dd if=/dev/block/by-name/boot_a of=/sdcard/boot_a.img
    dd if=/dev/block/by-name/boot_b of=/sdcard/boot_b.img
    exit
    adb pull /sdcard/boot_a.img boot_a.img
    adb pull /sdcard/boot_b.img boot_b.img

    I borked my boot_a by flashing it with boot_b (boot_b was broken on my device), so I was unable to obtain a working boot_a.img. If someone could kindly share their KB2005 boot_a.img that would be nice.
    1
    D
    Deleted member 11043203
    Thanks to @TheUnkn0wn:

    His info. His quote. Xda can't figure out the quote w/code scenario, my apologies:

    "Here's a semi-broken TWRP that allows su access through adb:[/QUOTE https://drive.google.com/file/d/1dRXJj7HZcqlNsHlVcNH0qR3sNx_uBA__
    DO NOT FLASH, ONLY USE WITH BOOT COMMAND!"
    Code:
    fastboot boot recovery.img
    adb shell
    dd if=/dev/block/by-name/boot_a of=/sdcard/boot_a.img
    dd if=/dev/block/by-name/boot_b of=/sdcard/boot_b.img
    exit
    adb pull /sdcard/boot_a.img boot_a.img
    adb pull /sdcard/boot_b.img boot_b.img


    You are the man! thank you!

    Edit. Xda ruined the reply. I did not.