[Guide] Root US OnePlus 8T KB2005 Unlocked

Search This thread

g96818

Senior Member
Dec 27, 2014
1,206
550
i followed Wykillin post using the broken TWRP on both OS11 0918 build and OS11045 update and i used magisk patched boot a on the first one, then i flashed original boot.img so i can update and then after update i had to use magisk patched boot b. when i used patched a it just boot looped. when i used patched b it booted right away. hope this helps clarify things a little or helps someone. thank you for all your hard work guys!

$$$Who can i compensate thats responsible to make this happen on the 8T????$$$

@SAKO4444GODZ pulled the first boot image that made this possible. You can compensate him
https://xdaforums.com/showpost.php?p=83762735&postcount=12
 

Flapjack

Senior Member
Aug 17, 2007
1,273
110
Samsung Galaxy S23 Ultra
I'm pretty confused... hopefully someone can clarify. Do the instructions in the OP work if you already on are the latest release (11.0.5.6)? Given the date of the first post, and how it doesn't look like it's been updated, I can't see this working.

I'm coming from an OP8P. The only thing keeping me from using the 8T is I can't seem to find any clear advice on how to root this thing. I'm still reading a few threads, but I can't seem to find what makes the 8T so different.
 
  • Like
Reactions: merbst
Flapjack, I too share your situation. I have generally been able to force other phones to downgrade, because fastboot provides a good backup command, if you remember to make a backup.
I would greatly prefer if one of the wise men in this forum could provide us careful instructions that I could follow to extract the image, then inject Magisk, then make it work with fastboot.
 

northmendo

Senior Member
Dec 4, 2007
359
158
California
If you guys are trying to get root on 11.0.5.6 here is my pre rooted boot image. You need to have magisk canary installed - Download

Then download my boot image - Download

Then reboot to the bootloader and run the following command.

Code:
fastboot boot \path-to-bootimage\boot_a1.img
(replace path-to-bootimage with your file path)

Your device should boot to a rooted state. You will then need to go in to magisk manager and install magisk (the top option) and choose direct install.

If all goes well, you will be rooted after a reboot.
 

northmendo

Senior Member
Dec 4, 2007
359
158
California
Flapjack, I too share your situation. I have generally been able to force other phones to downgrade, because fastboot provides a good backup command, if you remember to make a backup.
I would greatly prefer if one of the wise men in this forum could provide us careful instructions that I could follow to extract the image, then inject Magisk, then make it work with fastboot.

Please see my above post. I forgot to mention you the first time.
 

anasrocks

Member
Jul 16, 2013
44
5
Please see my above post. I forgot to mention you the first time.

After using your patched boot image i lost sound in phone (playback, notitications, etc), only the vibrate is active.
I reverted back to stock and the sound came back. Tried it multiple times back and forth with the same result. I'm on 11.0.5.6 Global. Thanks for the effort
 

northmendo

Senior Member
Dec 4, 2007
359
158
California
After using your patched boot image i lost sound in phone (playback, notitications, etc), only the vibrate is active.
I reverted back to stock and the sound came back. Tried it multiple times back and forth with the same result. I'm on 11.0.5.6 Global. Thanks for the effort

Did you just boot mine or flash it? If you just boot it and do a direct install of magisk, you'll be patching your stock boot images in the end.
 

llin

Member
Oct 11, 2010
25
5
Trying to upgrade to 10.0.5.6 from KB2005_15_200918. Restore Images in Magisk fails with "stock backup does not exist". Tried booting from the stock boot image (MD5: D6615931724D901956C8D855AF75C1C0) but system upgrade throws a "installation problem" error.
 

hacktron

Member
Mar 5, 2013
11
1
Thanks to posts from @northmendo @TheUnkn0wn @FullOfHell @Keinta15 I have managed to get root.

I will post everything I did thoroughly along with the output to help any others who might have trouble

This is my current configuration:
About Phone > Build Number: Oxygen OS 11.0.1.2.KB05AA
About Phone > Android Version > Build Number: KB2005_15_201015

1. download the latest canary build for magisk here
2. download this "semi-broken" TWRP here
3. hook your phone to your PC and issue the following commands (adb devices & fastboot devices to make sure your PC recognizes your device each time)
- adb devices​
- adb reboot bootloader​
- fastboot devices​
Code:
[/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>adb devices[/INDENT]
[INDENT]List of devices attached[/INDENT]
[INDENT]********        device[/INDENT]
[INDENT][/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>adb reboot bootloader[/INDENT]
[INDENT][/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>fastboot devices[/INDENT]
[INDENT]********       fastboot[/INDENT]
[INDENT]
- fastboot boot recovery.img​
Code:
[/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>fastboot boot recovery.img[/INDENT]
[INDENT]Sending 'boot.img' (64964 KB)                      OKAY [  1.411s][/INDENT]
[INDENT]Booting                                            OKAY [  0.080s][/INDENT]
[INDENT]Finished. Total time: 1.559s[/INDENT]
[INDENT]

4. at this point your phone will have TWRP flickering\flashing every 2-3 secnonds
5. issue the following commands (adb devices to make sure the PC sees your device)
- adb devices​
- adb shell​
- dd if=/dev/block/by-name/boot_a of=/sdcard/boot_a.img​
- dd if=/dev/block/by-name/boot_b of=/sdcard/boot_b.img​
- exit​
Code:
[/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>adb devices[/INDENT]
[INDENT]List of devices attached[/INDENT]
[INDENT]********        recovery[/INDENT]
[INDENT][/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>adb shell[/INDENT]
[INDENT]OnePlus8T:/ # dd if=/dev/block/by-name/boot_a of=/sdcard/boot_a.img[/INDENT]
[INDENT]196608+0 records in[/INDENT]
[INDENT]196608+0 records out[/INDENT]
[INDENT]100663296 bytes (96 M) copied, 0.197168 s, 487 M/s[/INDENT]
[INDENT]OnePlus8T:/ # dd if=/dev/block/by-name/boot_b of=/sdcard/boot_b.img[/INDENT]
[INDENT]196608+0 records in[/INDENT]
[INDENT]196608+0 records out[/INDENT]
[INDENT]100663296 bytes (96 M) copied, 0.189132 s, 508 M/s[/INDENT]
[INDENT]OnePlus8T:/ # exit[/INDENT]
[INDENT]

6. pull the boot images from your phone to your PC and then reboot with these commands
- adb pull /sdcard/boot_a.img boot_a.img​
- adb pull /sdcard/boot_b.img boot_b.img​
Code:
[/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>adb pull /sdcard/boot_a.img boot_a.img[/INDENT]
[INDENT]/sdcard/boot_a.img: 1 file pulled, 0 skipped. 41.3 MB/s (100663296 bytes in 2.325s)[/INDENT]
[INDENT][/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>adb pull /sdcard/boot_b.img boot_b.img[/INDENT]
[INDENT]/sdcard/boot_b.img: 1 file pulled, 0 skipped. 41.5 MB/s (100663296 bytes in 2.314s)[/INDENT]
[INDENT][/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>adb reboot[/INDENT]
[INDENT]

7. copy the boot_a.img from your PC (same folder as fastboot) to the phone
8. install magisk and launch magisk
9. select Magisk Install > Select and Patch a File
- navigate to the boot_a.img on your phone and click Let'g Go​
10. magisk will patch your boot_a.img and place the patched boot image in your downloads folder
11. copy the magisk_patched.img to your PC (fastbot location)
- I renamed mine to magisk_patched_a.img becuase I patched both boot_a.img and boot_b.img just in case​
12. issue the following commands (adb devices & fastboot devices to make sure your PC recognizes your device each time)
- adb devices​
- adb reboot bootloader​
- fastboot devices​
- fastboot boot magisk_patched_a.img​
Code:
[/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>adb devices[/INDENT]
[INDENT]List of devices attached[/INDENT]
[INDENT]********        device[/INDENT]
[INDENT][/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>adb reboot bootloader[/INDENT]
[INDENT][/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>fastboot devices[/INDENT]
[INDENT]********       fastboot[/INDENT]
[INDENT][/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>fastboot boot magisk_patched_a.img[/INDENT]
[INDENT]Sending 'boot.img' (98304 KB)                      OKAY [  2.122s][/INDENT]
[INDENT]Booting                                            OKAY [  0.079s][/INDENT]
[INDENT]Finished. Total time: 2.289s[/INDENT]
[INDENT]

13. your phone will now boot temporarily running the patched magisk booted image
- this boot will take longer than normal​
- this boot will also stay on a black screen after the bootanimation (give this some time and it will bring up your lock screen)​
14. once booted this will be your temporary root
15. launch magisk and select Magisk Install > Direct Install (recommended)
16. reboot and enjoy

Thanks! Always appreciate a sp00nf33d version.

- Rooted OP8T , software 11.1.0.2.KB09CB , model KB2007
 

Mpolo87

Member
Dec 16, 2017
20
66
If anybody is still having issues, I wrote a quick guide here that should work for every variant and every rom release, and only requires adb and fastboot. It uses your existing boot.img so you don't have to go hunting for any packages.
 

Binx75075

New member
Jan 5, 2022
2
0
OnePlus Nord
Thanks to posts from @northmendo @TheUnkn0wn @FullOfHell @Keinta15 I have managed to get root.

I will post everything I did thoroughly along with the output to help any others who might have trouble

This is my current configuration:
About Phone > Build Number: Oxygen OS 11.0.1.2.KB05AA
About Phone > Android Version > Build Number: KB2005_15_201015

1. download the latest canary build for magisk here
2. download this "semi-broken" TWRP here
3. hook your phone to your PC and issue the following commands (adb devices & fastboot devices to make sure your PC recognizes your device each time)
- adb devices​
- adb reboot bootloader​
- fastboot devices​
Code:
[/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>adb devices[/INDENT]
[INDENT]List of devices attached[/INDENT]
[INDENT]********        device[/INDENT]
[INDENT][/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>adb reboot bootloader[/INDENT]
[INDENT][/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>fastboot devices[/INDENT]
[INDENT]********       fastboot[/INDENT]
[INDENT]
- fastboot boot recovery.img​
Code:
[/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>fastboot boot recovery.img[/INDENT]
[INDENT]Sending 'boot.img' (64964 KB)                      OKAY [  1.411s][/INDENT]
[INDENT]Booting                                            OKAY [  0.080s][/INDENT]
[INDENT]Finished. Total time: 1.559s[/INDENT]
[INDENT]

4. at this point your phone will have TWRP flickering\flashing every 2-3 secnonds
5. issue the following commands (adb devices to make sure the PC sees your device)
- adb devices​
- adb shell​
- dd if=/dev/block/by-name/boot_a of=/sdcard/boot_a.img​
- dd if=/dev/block/by-name/boot_b of=/sdcard/boot_b.img​
- exit​
Code:
[/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>adb devices[/INDENT]
[INDENT]List of devices attached[/INDENT]
[INDENT]********        recovery[/INDENT]
[INDENT][/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>adb shell[/INDENT]
[INDENT]OnePlus8T:/ # dd if=/dev/block/by-name/boot_a of=/sdcard/boot_a.img[/INDENT]
[INDENT]196608+0 records in[/INDENT]
[INDENT]196608+0 records out[/INDENT]
[INDENT]100663296 bytes (96 M) copied, 0.197168 s, 487 M/s[/INDENT]
[INDENT]OnePlus8T:/ # dd if=/dev/block/by-name/boot_b of=/sdcard/boot_b.img[/INDENT]
[INDENT]196608+0 records in[/INDENT]
[INDENT]196608+0 records out[/INDENT]
[INDENT]100663296 bytes (96 M) copied, 0.189132 s, 508 M/s[/INDENT]
[INDENT]OnePlus8T:/ # exit[/INDENT]
[INDENT]

6. pull the boot images from your phone to your PC and then reboot with these commands
- adb pull /sdcard/boot_a.img boot_a.img​
- adb pull /sdcard/boot_b.img boot_b.img​
Code:
[/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>adb pull /sdcard/boot_a.img boot_a.img[/INDENT]
[INDENT]/sdcard/boot_a.img: 1 file pulled, 0 skipped. 41.3 MB/s (100663296 bytes in 2.325s)[/INDENT]
[INDENT][/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>adb pull /sdcard/boot_b.img boot_b.img[/INDENT]
[INDENT]/sdcard/boot_b.img: 1 file pulled, 0 skipped. 41.5 MB/s (100663296 bytes in 2.314s)[/INDENT]
[INDENT][/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>adb reboot[/INDENT]
[INDENT]

7. copy the boot_a.img from your PC (same folder as fastboot) to the phone
8. install magisk and launch magisk
9. select Magisk Install > Select and Patch a File
- navigate to the boot_a.img on your phone and click Let'g Go​
10. magisk will patch your boot_a.img and place the patched boot image in your downloads folder
11. copy the magisk_patched.img to your PC (fastbot location)
- I renamed mine to magisk_patched_a.img becuase I patched both boot_a.img and boot_b.img just in case​
12. issue the following commands (adb devices & fastboot devices to make sure your PC recognizes your device each time)
- adb devices​
- adb reboot bootloader​
- fastboot devices​
- fastboot boot magisk_patched_a.img​
Code:
[/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>adb devices[/INDENT]
[INDENT]List of devices attached[/INDENT]
[INDENT]********        device[/INDENT]
[INDENT][/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>adb reboot bootloader[/INDENT]
[INDENT][/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>fastboot devices[/INDENT]
[INDENT]********       fastboot[/INDENT]
[INDENT][/INDENT]
[INDENT]D:\android\OnePlus8T\platform-tools>fastboot boot magisk_patched_a.img[/INDENT]
[INDENT]Sending 'boot.img' (98304 KB)                      OKAY [  2.122s][/INDENT]
[INDENT]Booting                                            OKAY [  0.079s][/INDENT]
[INDENT]Finished. Total time: 2.289s[/INDENT]
[INDENT]

13. your phone will now boot temporarily running the patched magisk booted image
- this boot will take longer than normal​
- this boot will also stay on a black screen after the bootanimation (give this some time and it will bring up your lock screen)​
14. once booted this will be your temporary root
15. launch magisk and select Magisk Install > Direct Install (recommended)
16. reboot and enjoy
I cannot get any of this to work. I am TOTAL novice,
 

aTrashPanda

New member
Jun 12, 2022
2
0
Stuck at this step in Rooting guide.
I am on KB2007 will have to look up the software/firmware version i am on, but i have my bootloader unlocked. Just get stuck in a boot loop at this step. So i cannot extract my own boot image, or get TWRP to work.

Edit: i am on version 11.0.17.19.KB09CB
 
Last edited:

Top Liked Posts

  • There are no posts matching your filters.
  • 3
    Thanks to posts from @northmendo @TheUnkn0wn @FullOfHell @Keinta15 I have managed to get root.

    I will post everything I did thoroughly along with the output to help any others who might have trouble

    This is my current configuration:
    About Phone > Build Number: Oxygen OS 11.0.1.2.KB05AA
    About Phone > Android Version > Build Number: KB2005_15_201015

    1. download the latest canary build for magisk here
    2. download this "semi-broken" TWRP here
    3. hook your phone to your PC and issue the following commands (adb devices & fastboot devices to make sure your PC recognizes your device each time)
    - adb devices
    - adb reboot bootloader
    - fastboot devices
    Code:
    D:\android\OnePlus8T\platform-tools>adb devices
    List of devices attached
    ********        device
    
    D:\android\OnePlus8T\platform-tools>adb reboot bootloader
    
    D:\android\OnePlus8T\platform-tools>fastboot devices
    ********       fastboot
    - fastboot boot recovery.img
    Code:
    D:\android\OnePlus8T\platform-tools>fastboot boot recovery.img
    Sending 'boot.img' (64964 KB)                      OKAY [  1.411s]
    Booting                                            OKAY [  0.080s]
    Finished. Total time: 1.559s

    4. at this point your phone will have TWRP flickering\flashing every 2-3 secnonds
    5. issue the following commands (adb devices to make sure the PC sees your device)
    - adb devices
    - adb shell
    - dd if=/dev/block/by-name/boot_a of=/sdcard/boot_a.img
    - dd if=/dev/block/by-name/boot_b of=/sdcard/boot_b.img
    - exit
    Code:
    D:\android\OnePlus8T\platform-tools>adb devices
    List of devices attached
    ********        recovery
    
    D:\android\OnePlus8T\platform-tools>adb shell
    OnePlus8T:/ # dd if=/dev/block/by-name/boot_a of=/sdcard/boot_a.img
    196608+0 records in
    196608+0 records out
    100663296 bytes (96 M) copied, 0.197168 s, 487 M/s
    OnePlus8T:/ # dd if=/dev/block/by-name/boot_b of=/sdcard/boot_b.img
    196608+0 records in
    196608+0 records out
    100663296 bytes (96 M) copied, 0.189132 s, 508 M/s
    OnePlus8T:/ # exit

    6. pull the boot images from your phone to your PC and then reboot with these commands
    - adb pull /sdcard/boot_a.img boot_a.img
    - adb pull /sdcard/boot_b.img boot_b.img
    Code:
    D:\android\OnePlus8T\platform-tools>adb pull /sdcard/boot_a.img boot_a.img
    /sdcard/boot_a.img: 1 file pulled, 0 skipped. 41.3 MB/s (100663296 bytes in 2.325s)
    
    D:\android\OnePlus8T\platform-tools>adb pull /sdcard/boot_b.img boot_b.img
    /sdcard/boot_b.img: 1 file pulled, 0 skipped. 41.5 MB/s (100663296 bytes in 2.314s)
    
    D:\android\OnePlus8T\platform-tools>adb reboot

    7. copy the boot_a.img from your PC (same folder as fastboot) to the phone
    8. install magisk and launch magisk
    9. select Magisk Install > Select and Patch a File
    - navigate to the boot_a.img on your phone and click Let'g Go
    10. magisk will patch your boot_a.img and place the patched boot image in your downloads folder
    11. copy the magisk_patched.img to your PC (fastbot location)
    - I renamed mine to magisk_patched_a.img becuase I patched both boot_a.img and boot_b.img just in case
    12. issue the following commands (adb devices & fastboot devices to make sure your PC recognizes your device each time)
    - adb devices
    - adb reboot bootloader
    - fastboot devices
    - fastboot boot magisk_patched_a.img
    Code:
    D:\android\OnePlus8T\platform-tools>adb devices
    List of devices attached
    ********        device
    
    D:\android\OnePlus8T\platform-tools>adb reboot bootloader
    
    D:\android\OnePlus8T\platform-tools>fastboot devices
    ********       fastboot
    
    D:\android\OnePlus8T\platform-tools>fastboot boot magisk_patched_a.img
    Sending 'boot.img' (98304 KB)                      OKAY [  2.122s]
    Booting                                            OKAY [  0.079s]
    Finished. Total time: 2.289s

    13. your phone will now boot temporarily running the patched magisk booted image
    - this boot will take longer than normal
    - this boot will also stay on a black screen after the bootanimation (give this some time and it will bring up your lock screen)
    14. once booted this will be your temporary root
    15. launch magisk and select Magisk Install > Direct Install (recommended)
    16. reboot and enjoy
    2
    We have root!
    All you have to do is follow these few steps and have a working adb / fastboot installation
    1 Download this patched boot image -
    https://www.androidfilehost.com/?fid=10763459528675569219
    2. Reboot your phone to the bootloader
    Code:
    adb reboot bootloader
    3. Boot from the patched image
    Code:
    fastboot boot magisk_patched.img
    4. Make sure you have the latest Magisk Manager Canary and do a direct install to patch your internal boot image on both slots.
    Latest Magisk Manager -> https://raw.githubusercontent.com/topjohnwu/magisk_files/canary/app-debug.apk
    Done!

    It seems like a lot of people are still having issues. If this doesn't work for you, then my boot image is slightly different than yours. You can follow the steps from this post to pull your stock boot image. After you do that you can just patch your stock image with Magisk Canary. Pull the patched image from your phone and use it in step 3 above.

    Special thanks to SAKO4444GODZ for pulling the stock boot img first
    2
    Here's a semi-broken TWRP that allows su access through adb: https://drive.google.com/file/d/1dRXJj7HZcqlNsHlVcNH0qR3sNx_uBA__
    DO NOT FLASH, ONLY USE WITH BOOT COMMAND!
    Code:
    fastboot boot recovery.img
    adb shell
    dd if=/dev/block/by-name/boot_a of=/sdcard/boot_a.img
    dd if=/dev/block/by-name/boot_b of=/sdcard/boot_b.img
    exit
    adb pull /sdcard/boot_a.img boot_a.img
    adb pull /sdcard/boot_b.img boot_b.img

    I borked my boot_a by flashing it with boot_b (boot_b was broken on my device), so I was unable to obtain a working boot_a.img. If someone could kindly share their KB2005 boot_a.img that would be nice.
    2
    If anybody is still having issues, I wrote a quick guide here that should work for every variant and every rom release, and only requires adb and fastboot. It uses your existing boot.img so you don't have to go hunting for any packages.
    1
    D
    Deleted member 11043203
    I decided to take the risk and flashed the patched recovery from the EU 2003 version, it worked and I have root adb shell. I'm about to extract the 'boot.img'.
    Funny I tried this too

    Didn't work