[GUIDE] Two ways to root oppo a5s (CPH1909)+ Unlock bootloader after security update ( without downgrading )

[ZG089]

Hello !
I've discovered 2 new ways to root oppo a5s ( CPH1909) after the new security update which removed the mtk-easy-su root (last edit : 15/9/2023)


(EDIT : THE 2ND WAY IS RECOMMENDED AS U CAN INSTALL THE LATEST MAGISK (26.3) THERE ! but the 1st way will be updated so u can get rooted by magisk 26.3 through boot.img)

NOTE : guide on how to unbrick / solve & prevent bootloop is here : https://forum.xda-developers.com/t/...nt-fix-bootloop-for-oppo-a5s-cph1909.4623727/

Let's start with the first way !


YOU WILL REQUIRE :-

1- THE LATEST FLASHABLE OFFICIAL ROM (OPTIONAL) + UPDATE OPPO A5S TO THE LATEST VERSION (Madantory) + BOOT.IMG FILE OF THE LATEST UPDATE (if u want to patch the file by yourself, btw i uploaded a patched one )

2- A PC / Laptop runs Windows 10 or older (for win11 users you can use this guide but do not open MTK CLIENT TOOL (Gui Version) it won't work , instead, see the edit in the STAGE 3 (the few lines between STAGE 3 and STAGE 4)

3- MTK Client Tool (link will be sent here in comments) <uploaded by me>

4 - mediatek driver auto installer <link is provided>

5 - SP flash tool <link is provided>

6 - a usb cable (of course there is no download link for this )

7 - Scatter File (WILL BE UPLOADED HERE IN COMMENTS)

8 - Magisk Manager for your phone. (v.26.1) <from Github> (NOTE: ONLY DOWNLOAD & INSTALL 26.1, NOT 26.2, IT CAUSES BOOTLOOP! , But you can still use 26.2 if you will use the second method)

9 - UNLOCK BOOTLOADER USING MTK CLIENT TOOL (No data wipe needed + STEPS WILL BE PROVIDED HERE TOO)

10 - (IMPORTANT) MCT MTK BYPASS REV4/REV3 + <link is provided>

11 - The preloader file : Here

NOTE BEFORE STARTING : If links have problems or it is inaccessible , please tell me to send new links in comments .
also , MAKE SURE YOUR DEVICE IS UPDATED TO THE LATEST VERSION (A.46) BECAUSE IF YOU FLASHED THE BOOT.IMG (you will know what does this file do here later ) WHICH IT IS FOR THE LATEST UPDATE AND YOUR DEVICE IS OLDER THAN IT , YOUR DEVICE MAY BRICK , AND I AM NOT RESPONSIBLE FOR ANY DAMAGES FOR YOUR DEVICE

but , if anything happens , tell me , I will help you .

BIG ULTRA NOTE BEFORE STARTING : If you will share these guide/method or even your results in rooting this device in your website, your youtube video, or anything else , please DO NOT FORGET TO MENTION THE SOURCE !!!

Also , before doing these steps , keep an eye on the new edits in the last / beginning of this thread.


Let's start

STAGE 1: PATCHING BOOT.IMG
(skip this stage if you have preloader.bin file already and downloaded the boot.img that I patched), but download the ROM if you face a brick or any problem in your phone system

1 - Download the latest frimware here

2 - Choose the latest version (a.46)

3 - After downloading and extracting the file , you will find many folders > Enter the folder (frimware) , find and copy the boot.img file to your phone

4- patch it by magisk manager

5 - copy the patched boot.img ( usually located in Downloads folder in your phone)to your pc
( note : you will need it later )

6 - replace the patched boot.img with the original one in the folder you have extracted the rom in ( but before it, please backup the original one in an external folder , and also change the patched boot.img to ( "boot.img")

Note : I uploaded the boot.img file if you want to save time instead of downloading the whole rom !

STAGE 2 : Installing MEDIATEK usb Drivers

7- Open Mediatek driver auto installer

8 - While the program is opening , a window appears which asks yo if you allow the installer to make changes ... blabla , just click allow (ok) and let the program do the trick, after it finishes, reboot your pc / laptop

STAGE 3 : UNLOCKING BOOTLOADER

(NOTE BEFORE STARTING : THERE IS NO DATA WILL BE LOST , AND DO NOT ENABLE THE OEM UNLOCK IN DEVELOPER OPTIONS , THE MTK CLIENT TOOL WILL GIVE AN ERROR DURING UNLOCKING , JUST KEEP IT DISABLED !!!!)


8 - After the program installed the drivers , go to MTK CLIENT TOOL , choose the device name ("OPPO A5S") , choose "UNLOCK BOOTLOADER"

*Edit : install usbDK drivers , choose your arch (64 or 86=32) < to know it simply go to settings, system and a screen will show up with your pc info. ignore the X i made

9 - turn your phone off , and then press these keys (" VOLUME UP + VOLUME DOWN <<in the same time>> ") and plug your phone in using the usb cable , once you hear a sound from your pc ( the usb connection sound) , you can stop pressing , because the phone is in BROM mode ( the mode which u can flash a file/rom )

10 - click "Start" button in MTK CLIENT TOOL in your pc , when you see messages appear on the right in the Mtk Client Tool , DON'T UNPLUG YOUR PHONE !!!!

When the progress bar achieves 100% in the program and u see bootloader unlock = OK, unplug your phone and press power button , if you found a warning message while booting , so , unfortunately....

YOU SUCCESSFULLY UNLOCKED YOUR BOOTLOADER !!!!! XD
So , do not panic if it appears !
The message will say (" your device is unlocked and cannot be trusted , rebooting in 5 seconds")

<Note : It can be solved, check in replies for lk.img file and flash it as u were flashing a boot image>

btw there is a guide for this : HERE

and then another message appears (" dm-verity error,
Your android system / device is corrupted, please select whether you want to boot in E10 mode or RESTART mode ")
It will give you two choices , you SHOULD choose the RESTART mode by pressing VOLUME DOWN , and tadaaaa your phone is booting normally and the data DIDN'T LOST AT ALL!

BIG ULTRA NOTE : IF THE WARNING MESSAGE DIDN'T APPEAR , SO YOUR BOOTLOADER ISN'T UNLOCKED Successfully , I ADVICE YOU TO DO THE STAGE 3 STEPS AGAIN AND KEEP AN EYE ON THE MESSAGES APPEARANCE ON THE RIGHT OF THE MTK CLIENT TOOOOL ( IF IT SHOWS THE DEVICE MODEL , THE PROCESSOR , etc ) after connection , let it do the magic (as the dm-verity message appears usually after unlocking bootloader)

***NEW EDIT : it seems that mtk client tool doesn't work with win 11 and some users of win10 for some reason...
So I brought another method to unlock the bootloader using the terminal version

1- open the folder mtkclient-main ( if it is not available, go to download mtk client for terminal from GitHub)

2- open the cmd in the same directory of the mtk client-main folder (hint : type in the bar that shows the folder directories (cmd) and tadaaaaaaa

2- type in the cmd pip3 install -r requirements.txt

3- type again in the cmdpython setup.py install or python setup.py

4- install usbDK from Here

5- after mtk client has been installed, type this python mtk da seccfg unlock

6- it will say waiting for device .. power off your phone and press vol up + vol down + release when connected, then let it do the magic
When finishes, unplug it and continue these steps
(tell me if there is an error)

STAGE 4 (IMPOOOOORTANNNNT):
How to Bypass the next error message

1- open MCT MTK BYPASS (dowload link is in replies) , choose the chipset (MT6765 )

2 - REBOOT your phone into brom mode ( vol up + vol down)

3 - connect your device and click start , and done !
Note : KEEEEEEEEEEEEEP YOUR DEVICE CONNECTED AND DO NOT DISCONNECT IT FROM YOUR PC

Stage 5 ( the last stage) : Flashing

1- open SP FLASH TOOL

2 - locate the scatter file that I'll provide it in comments here !

NOTE ABOUT THE SCATTER FILE : the scatter file which comes with the frimware is CORRUPTED , I've tried to fix it and it worked !
because when I worked with this corrupted scatter file , it gave me an error while flashing !! , just editing it on my way has solved it anyway

3 - you will see a list of many files , just untick EVERY THING EXCEPT FOR THE BOOT.IMG (Make sure it is the patched one) (+please locate the preloader.bin file but untick it)

4 - BOOT your phone into brom mode (turn it off , press volume up + volume down , connect it with your pc)

5- once you hear the usb connection sound from your pc , click on "DOWNLOAD" button , and wait until a correct sign (√) appears in a window

6 - REBOOOOT
7 - let's Celebrate!

(*new edit : if sp flash tool shows you an error your device storage reached the end of life, bruuuuuuuh, just uncheck (checking the device status) from settings and retry flashing!



Second way to Root oppo a5s :-

I've just known that there is an unofficial twrp for this phone. We will use this to flash magisk.zip file to get root access if you don't want / flash a patched boot.img

All we need are :

• Some main requirements from the 1st way (SP flash tool + MCT MTK BYPASS REV4 + installation of Drivers + unlocked bootloader of your phone + preloader.bin) ((methods of unlocking bootloader is in the 1st way, go unlock your bootloader then flash twrp in the 2nd way here)

• And new requirements :-

-Twrp recovery 3.6.x(uploaded by Unofficial twrp website) : Here

-Magisk 26.3.zip file *

(NOTE : after downloading, copy this zip file into your SD card)

STAGE 1 : FLASHING TWRP

1- Open Sp Flash Tool and MCT MTK BYPASS REV4

2- in SP flash tool, locate recovery.img file that you downloaded + preloader.bin (NOTE: UNTICK preloader.bin)

3- in MCT MTK BYPASS REV4, select the chipset (MT6765)

4- boot your phone into BROM mode (vol.up + vol.down + release when connected)

5- in MCT MTK BYPASS REV4, Click "bypass"

6- after it succeeds, Go to SP flash tool and click download

7- after it shows a correct sign (✓), disconnect your phone and boot into recovery (vol.down + power button)

8- TWRP splash screen shows up !

STAGE 2 : FLASH MAGISK 26.3 * !

1- click "install" button

2- locate the zip file place

3- disable zip verification (if needed)

4- after it succeeds, boot your phone normally and you have got root access!!

NOTE : ISSUES THAT YOU MAY FACE IN TWRP

1- there is no MTP
2- it doesn't detect your internal storage
3- it may not mount some partitions like /data and /odm
4- you tell me




--thanks to the user @Anonymous V for being online when i applied these steps , he was answering every question i ask.

-- if you want anything , or need some help , type in comments here , I and Anonymous V will be available (note that I won't be online for every day ...)


** Please support me to continue my work here. I love you : Buy me a coffee

(First time typing a thread)


IMPORTANT NOTE : Please put the boot.img + preloader.bin + the scatter file in a folder/ recovery.img + preloade.bin + scatter file, then locate the scatter file using SP Flash Tool, Untick the preloader.bin to avoid bricking the device

ALSO , PLEASE DO NOT PUT THE BOOT.IMG AND THE SCATTER FILE
/ RECOVERY.IMG AND FLASH THE BOOT.IMG/RECOVERY WHILE PRELOADER.BIN IS NOT AVAILABLE IN THE SAME FOLDER/NOT LOCATED , AN ERROR WILL APPEAR ( ERROR_INVALID_PRELOADER)
REPEAT : DO NOT FLASH PRELOADER.BIN , ONLY PUT IT IN THE SAME FOLDER WITH THE PATCHED BOOT.IMG/ TWRP RECOVERY.IMG AND SCATTER FILE, LOCATE THE PRELOADER FILE , UNTICK IT AND FLASH ONLY BOOT.IMG/RECOVERY.IMG AS YOU LIKE


Thanks for @jimenezshown for providing this info !






NEW edit :

Guys, if u read this, i want to announce that *25K people saw this thread!
and because of this, wait for a new custom rom for this device after some months (I will be back to school )
**I need a team to work on this, if u want to join, just tell me Here in this thread and i will ask u some questions)

check this thread, there i will send the link of the ROM thread !

(EDIT) Also, if you want to be mentioned after the ROM is built successfully, send a post there !

but actually, i am too sad ):

because I said if u will share this to your YouTube video, blog, or website,
YOU SHOULD MENTION THE SOURCE
i spotted someone on youtube called jpservicell got the full way to root this device from my thread, and he did not even mention the source in the video,a comment, or a description


****** ANNOUNCEMENT: Guys, I won't be active as I was on XDA after September 1st, so please if you have a question/problem, tell me before this day comes !
=============================================
Thank you,
╭━━━━┳━━━┳━━━┳━━━┳━━━╮
╰━━╮━┃╭━╮┃╭━╮┃╭━╮┃╭━╮┃
╱╱╭╯╭┫┃╱╰┫┃┃┃┃╰━╯┃╰━╯┃
╱╭╯╭╯┃┃╭━┫┃┃┃┃╭━╮┣━━╮┃
╭╯━╰━┫╰┻━┃╰━╯┃╰━╯┣━━╯┃
╰━━━━┻━━━┻━━━┻━━━┻━━━╯

 

[ZG089]

MTK DRIVER AUTO INSTALLER : here

 

[ZG089]

Scatter File : here

 

[ZG089]

MTK CLIENT TOOL : here

 

[ZG089]

MCT MTK AUTH BYPASS TOOL (uploaded by Mobile RTX website ) :here

 

[ZG089]

SP FLASH TOOL : here

 

[ZG089]

the patched boot.img file ( to save your time instead of getting the original file from the frimware (rom) and patch it , i thought that providing a patched boot.img by magisk app may help !) : here

 

[ZG089]

note : it is patched by the latest magisk manager app (v.26)

 

[fb.hikmawan]

Thank you for creating the thread @Zezo 089 , I am using Oppo A5s and now I found a way to root the phone.
I've already download all the requirements first to prepare.

But, I could not run the "MTK CLIENT TOOL V5.2".
It was just nothing appear when I double click the application.
I use Windows 11. Did it caused by the Windows?

Other question is what step is the boot.img file needed?

 

[ZG089]

Thank you for creating the thread @Zezo 089 , I am using Oppo A5s and now I found a way to root the phone.
I've already download all the requirements first to prepare.

But, I could not run the "MTK CLIENT TOOL V5.2".
It was just nothing appear when I double click the application.
I use Windows 11. Did it caused by the Windows?

Other question is what step is the boot.img file needed?

Bruh
Just turn off your Windows Defender Real-Time protection and it will work

 

[ZG089]

Just , patch it using Magisk Manager (v.26)

Thank you for creating the thread @Zezo 089 , I am using Oppo A5s and now I found a way to root the phone.
I've already download all the requirements first to prepare.

But, I could not run the "MTK CLIENT TOOL V5.2".
It was just nothing appear when I double click the application.
I use Windows 11. Did it caused by the Windows?

Other question is what step is the boot.img file needed?

 

[ZG089]

Thank you for creating the thread @Zezo 089 , I am using Oppo A5s and now I found a way to root the phone.
I've already download all the requirements first to prepare.

But, I could not run the "MTK CLIENT TOOL V5.2".
It was just nothing appear when I double click the application.
I use Windows 11. Did it caused by the Windows?

Other question is what step is the boot.img file needed?

Get it from the rom file ( link is provided in replies) and patch it yourself from magisk manager , or you can get the patched boot.img file ( link in replies, too) and continue these steps as nothing happened

 

[ZG089]

Thank you for creating the thread @Zezo 089 , I am using Oppo A5s and now I found a way to root the phone.
I've already download all the requirements first to prepare.

But, I could not run the "MTK CLIENT TOOL V5.2".
It was just nothing appear when I double click the application.
I use Windows 11. Did it caused by the Windows?

Other question is what step is the boot.img file needed?

Also , try to open this program in windows 10
Because it did these steps using windows 10 , not 11

 

[Khalyl22]

bro this guide is so long and boring and not safe
the best way to root this phone is through mtk client (github)
with that tool you can
1.backup the whole firmware in case of an error or a malfunction
2. unlock bootloader of any mediatek phone including oppo a5s
3. rooting this device without any risk
4. you can flash any partition if something happened within this tool without the use of SP Flash tool
the link: https://github.com/bkerler/mtkclient

 

[ZG089]

bro this guide is so long and boring and not safe
the best way to root this phone is through mtk client (github)
with that tool you can
1.backup the whole firmware in case of an error or a malfunction
2. unlock bootloader of any mediatek phone including oppo a5s
3. rooting this device without any risk
4. you can flash any partition if something happened within this tool without the use of SP Flash tool
the link: https://github.com/bkerler/mtkclient

Bro
I made this guide with all of its details to help advanced people , especially The Beginners
+ Bro, i concerned using MTK Client Tool to unlock bootloader , Warned people to backup the WHOLE DATA and flash the boot.img after patching (using SP flash tool)
But it is also a good point to flash any partitions if a brick happened or something else using SP flash tool

 

[ZG089]

bro this guide is so long and boring and not safe
the best way to root this phone is through mtk client (github)
with that tool you can
1.backup the whole firmware in case of an error or a malfunction
2. unlock bootloader of any mediatek phone including oppo a5s
3. rooting this device without any risk
4. you can flash any partition if something happened within this tool without the use of SP Flash tool
the link: https://github.com/bkerler/mtkclient

NOTE THAT I WARNED PEOPLE BEFORE DOING THIS

 

[ZG089]

bro this guide is so long and boring and not safe
the best way to root this phone is through mtk client (github)
with that tool you can
1.backup the whole firmware in case of an error or a malfunction
2. unlock bootloader of any mediatek phone including oppo a5s
3. rooting this device without any risk
4. you can flash any partition if something happened within this tool without the use of SP Flash tool
the link: https://github.com/bkerler/mtkclient

+ Why tf they backup the rom ?
as they can download the Flashable Official rom , and flash it using SP FLASH TOOL ( consider that you should untick preloader before flashing to avoid bricking your device)

 

[ZG089]

bro this guide is so long and boring and not safe
the best way to root this phone is through mtk client (github)
with that tool you can
1.backup the whole firmware in case of an error or a malfunction
2. unlock bootloader of any mediatek phone including oppo a5s
3. rooting this device without any risk
4. you can flash any partition if something happened within this tool without the use of SP Flash tool
the link: https://github.com/bkerler/mtkclient

@Anonymous V What are your comments about that ?

 

[Anonymous V]

@Anonymous V What are your comments about that ?

actually he is just saying about what can you do using the MTK client tool not "what to do about it " and i dont know if he really read your tutorial because this guy " @Khalyl22 "
sounds that he just wants to sounds smart and also boring? i dont know why he said that but its better to give a long and detailed tutorial to give people more info and understanding about what to do to avoid error and to give comfort to people while doing it and i dont fcking know why he said that its not safe although you give all the necessary steps to avoid error while doing it including the warning " Please Backup you Phone before Doing This " and also i think his not aware about the MTK client Gui version which you used in your tutorial i recommend the Gui version for the people who cant handle the terminal version because they are afraid in getting error i think he is pointing about the MTK client terminal version which i often used, also bro there is a reason why he said backup your whole firmware before doing it and actually his right about that when you backup your whole firmware in your phone you can backup all the data,apps,system preferences,imei and other things which you can restore if the phone fcked up where as the stock flashable rom is different its because its already set by default or factory default by the manufacturer which means its back to old state when you bought the phone well it depends though if you dont care about the data in your phone you can just reflash the stock flashable rom and if you care about the data in your phone you can backup your phones firmware and use that later to restore your phone.

 

[jimenezshown]

Mine doesn't want to let me enter in BROM mode, I can only hear a plug and unplug loop sound when I try to hold Vol UP + Vol down.