How To Guide March 13, 2023 TQ2A.230305.008.C1 Global | .A3 WINDTRE/Canada - Unlock bootloader / Root Pixel 7 Pro [Cheetah] / SafetyNet

[wr3cckl3ss1]

@wr3cckl3ss1 is working very hard on it...
I'm unsure how far he's gotten, although I have high major doubts it will ever be achievable...
but he acknowledges how seemingly impossible it is and is still willing to keep going at it...
you can see a bit of how he's progressing HERE and HERE

Sorry I've been kind of quiet around here but I'm still at it....trying various things and also working with a few guys. But....i have reached a little bit of progress but on a different scale. As you know...magisk patches init_boot.....and you can only flash with an unlocked bootloader.....but there's one option that doesn't require it.....OTA (sideload OTA)....so far...I've been able to unpack alot of the firmware and even have a patched init_boot inside the payload folder.....if I can find a way to correctly repack that payload folder into payload.bin....then altogether repack and get an update.zip....then I can try to see if it would work....sounds kind of far fetched but I'm trying to stay positive. I feel close in a way but still far....I'll keep pushing until a solution is solved by me or someone else. It's only a matter of time before this cracks or DirtyCred Android PoC comes out and hopefully covers this kernel...and here we go....at least root....then the real fun can start trying to reverse the packages and crack the two java packages that are responsible for maintaining that OEM toggle off. Another thing.....i know talking about certain apps....are against the rules but LuckyPatcher. Does anyone here have an idea of who makes it or develops it. Reason Im asking is because LP patches Play Services...well on VZW Pixel 7 Pro...the only package that has OEM perms to manage or set OEM is "com.google.android.gms"....that's another road i would like to drive down and see how maybe patching Play services and/or modifying Play services to a vulnerable state where a shell user can ultimately use "run-as" or maybe change context to one of play services.....just a few things I'm working on right now. As well as this S22 Ultra US Version. Big things coming soon. No root yet but at least I can say...I can modify things inside /data/system....like make an app a system-trusted app and it persist. Stay tuned folks. I'm still working....

 

[sensation4gking]

Glad to know you are working on it!

 

[jmac052002]

so does anyone know if theres any possibilty at all to unlock the bootloader on my pixel 7 pro bootloader on my t-mobile variant that im about to be receiving from UPS in about a day or so from now even though i wont have it completely paid off when i receive the device? Actually nevermind I spoke with T mobile and all they did was ask me to pay 48 bucks which is two more payments on the device and there going to unlock me in 48 to 72 hours!

 

[jmac052002]

My HTC 10 and Galaxy S10 both got Verizon unlocked. It took around a year+ but it did get bootloader unlocked. Might be very hard but I wouldn't say never.

yeah i have the snapdragon s21 ultra verizon and afaneh who is awesome can unlock it and so i thought i wouldve been screwed but they get unlock tokens through samsung and they can unlock verizons and many other carriers...sorry just thought id throw that in there. there is hope more than we realize sometimes even with the asshole policies at verizon.

 

[Hondroid]

I'm currently rooted/magidkd on the original firmware that came on my 7 Pro. What's the best method to update to the recent firmware update?

 

[Sib64]

I'm currently rooted/magidkd on the original firmware that came on my 7 Pro. What's the best method to update to the recent firmware update?

Follow this process that I have used to update my P7 Pro : it's from this post writing by @roirraW "edor" ehT

1. • need a new version of Magisk Stable, Beta, or Canary from GitHub to work correctly. XDA forum for Magisk is here.
     • Launch the Magisk app.
     • Beside "Magisk", click "Install".
     • Click "Select and Patch a File", and choose the init_boot.img that you just copied to the phone's storage.
2. Copy the Magisk'd init_boot.img (filename similar to magisk_patched-25200_1a2B3c.img)back over to the computer.
3. Open a Command Prompt and navigate to the platform-tools folder.
4. Run command:
   Code:
   adb reboot bootloader
5. After phone has rebooted into Bootloader (Fastboot) mode, run command:
   Code:
   fastboot flash init_boot magisk_patched-25200_1a2B3c.img
   fastboot reboot
6. Confirm that the phone boots completely normally.
7. Cautiously re-enable Magisk Modules.
8. Reboot.
9. Confirm everything worked fine.

 

[Lughnasadh]

I'm currently rooted/magidkd on the original firmware that came on my 7 Pro. What's the best method to update to the recent firmware update?

If you want to keep root instead of re-rooting, Pixel Flasher is probably the easiest way to update your firmware.

 

[Neuken6969]

Question to all, I use a custom kernel. It has ad blocking baked in. I don't need that or want that ( yes should have read the kernel description better ) to get back to stick kernel I can just reflash my magisk patched init_boot?

 

[w9909989]

IF SOMEONE HAVE ROOT PROBLEM WITH (init_boot) not found)
LOOK AT THIS.
fastboot flash init_boot_X XXXX.IMG (X mean ur active solt）
ITS WORK FOR ME
again falsh to solt A or slot B。

 

[Loustsoul]

How do I know which image to use for my T-Mobile branded Pixel 7 pro?

 

[xdrc45]

How do I know which image to use for my T-Mobile branded Pixel 7 pro?

The most current is the November .001 it's a global OTA. Which is what you should use on T-Mobile network. The other two OTA's for November are network specific for Verizon and Telia.

 

[roirraW "edor" ehT]

Added to Post #2 - Unlocking Bootloader / Rooting / Updating | SafetyNet | ADB/Fastboot & Windows USB Drivers:

• SafetyNet
  

  See @V0latyle's [DISCUSSION] Play Integrity API regarding why SafetyNet, per se, is actually defunct and replaced with Play Integrity - and @Displax new Universal SafetyNet Fix referenced in the steps above takes care of the latter.

Thanks!

 

[Loustsoul]

The most current is the November .001 it's a global OTA. Which is what you should use on T-Mobile network. The other two OTA's for November are network specific for Verizon and Telia.

TMobile said they sim unlocked me but the phone won't show it until I try another providers sim. Is that a fact and is there a way around that? I don't have another provider sim.

 

[xdrc45]

TMobile said they sim unlocked me but the phone won't show it until I try another providers sim. Is that a fact and is there a way around that? I don't have another provider sim.

It's not guaranteed to work from my understanding. I'm pretty sure you need another providers SIM in it and then factory reset the phone and cross your fingers. You could try borrowing a friend's or get one from a local retail store. I purchased my P7P straight from Google so I didn't have to do the SIM stuff. Take a look at this discussion here

 

[EtherealRemnant]

TMobile said they sim unlocked me but the phone won't show it until I try another providers sim. Is that a fact and is there a way around that? I don't have another provider sim.

It won't show the SIM unlock but it should show in the now toggleable bootloader switch.

 

[Loustsoul]

Oem unlock?

 

[EtherealRemnant]

Oem unlock?

Yeah. You should be able to toggle it once the SIM lock is gone.

 

[Loustsoul]

Yeah. You should be able to toggle it once the SIM lock is gone.

Yes, I can toggle. In fastboot still says locked. Does that matter?

 

[EtherealRemnant]

Yes, I can toggle. In fastboot still says locked. Does that matter?

Fastboot is going to say locked until you do fastboot flashing unlock (which once done will of course wipe your phone so take a backup if you choose to go through with it).

 

[Loustsoul]

What backup tool do we use before root? I have always used titanium backup but it only works for rooted devices.